Abstract: The present application discloses a method and a device for scanning virus. The method for scanning virus comprises: ascertaining first scanning items in a client based on a determination to perform an intelligent scan; scanning the first scanning items at a first scanning speed; and scanning second scanning items in the client at a second scanning speed based on the client satisfying a first switching condition, the second scanning items are all remaining items except the first scanning items in the client, wherein the first scanning speed is higher than the second scanning speed. According to the scheme of the present application, adverse effects of virus scanning on a user's normal operation on and use of the client can be reduced.

Abstract: The present application discloses a method and a system for detecting malicious code. The method comprises receiving a testing sample; testing the sample with a plurality of malicious code detectors to obtain a plurality of testing results; determining a credibility scale and a reputation value of each of the testing results, wherein the credibility scale indicates whether the testing result is malicious or safe, and the reputation value indicates a quantified trust level corresponding to the credibility scale; and determining a final detection result of the testing sample based on the determined credibility scales and the reputation values of the testing results. According to the technical solution of the present application, the testing results obtained from various malicious code detectors are rationally utilized to improve the testing accuracy for the malicious code.

Abstract: The present invention provides a method, apparatus, system, device and a computer storage medium for treating virus. A client reports a scan log to a cloud service platform, and/or reports virus family information to the cloud service platform after the virus family information is identified based on the scan log. The cloud service platform identifies the scan log to obtain virus family information, and/or issues the virus removal instruction corresponding to the virus family information to the client after receiving the virus family information from the client, for the client to execute the virus removal instruction. Compared with the method of simply performing the behavior analysis and deleting files by the client, it is more advantageous that the method of the present invention issues virus removal instructions regarding the virus family information from the cloud, the virus treating is more personalized and precise, and the security of the machine system is improved.

Abstract: The present application discloses a method and a device for scanning virus. The method for scanning virus comprises: ascertaining first scanning items in a client based on a determination to perform an intelligent scan; scanning the first scanning items at a first scanning speed; and scanning second scanning items in the client at a second scanning speed based on the client satisfying a first switching condition, the second scanning items are all remaining items except the first scanning items in the client, wherein the first scanning speed is higher than the second scanning speed. According to the scheme of the present application, adverse effects of virus scanning on a user's normal operation on and use of the client can be reduced.

Abstract: The present disclosure provides a method and system for detecting a malicious behavior, an apparatus and a computer storage medium. In one aspect, in embodiments of the present disclosure, an internet protocol IP address corresponding to a Uniform Resource Locator URL accessed by a client is acquired as an IP address to be detected; therefore, malicious behavior detection is performed for the IP address to be detected, to obtain a detection result. Hence, technical solutions provided by embodiments of the present disclosure use the IP address to implement malicious behavior detection to solve the problem in the prior art that the attacker eludes the detection of the malicious behaviors by means of constantly changing a domain name or updating content of the malicious files, and can improve a successful detection rate of the malicious behavior.

Abstract: The present invention provides a method, apparatus, system, device and a computer storage medium for treating virus. A client reports a scan log to a cloud service platform, and/or reports virus family information to the cloud service platform after the virus family information is identified based on the scan log. The cloud service platform identifies the scan log to obtain virus family information, and/or issues the virus removal instruction corresponding to the virus family information to the client after receiving the virus family information from the client, for the client to execute the virus removal instruction. Compared with the method of simply performing the behavior analysis and deleting files by the client, it is more advantageous that the method of the present invention issues virus removal instructions regarding the virus family information from the cloud, the virus treating is more personalized and precise, and the security of the machine system is improved.

Abstract: The present application discloses a method and a system for detecting malicious code. The method comprises receiving a testing sample; testing the sample with a plurality of malicious code detectors to obtain a plurality of testing results; determining a credibility scale and a reputation value of each of the testing results, wherein the credibility scale indicates whether the testing result is malicious or safe, and the reputation value indicates a quantified trust level corresponding to the credibility scale; and determining a final detection result of the testing sample based on the determined credibility scales and the reputation values of the testing results. According to the technical solution of the present application, the testing results obtained from various malicious code detectors are rationally utilized to improve the testing accuracy for the malicious code.