CN102736978B - A kind of method and device detecting the installment state of application program - Google Patents

A kind of method and device detecting the installment state of application program Download PDF

Info

Publication number
CN102736978B
CN102736978B CN201210215997.3A CN201210215997A CN102736978B CN 102736978 B CN102736978 B CN 102736978B CN 201210215997 A CN201210215997 A CN 201210215997A CN 102736978 B CN102736978 B CN 102736978B
Authority
CN
China
Prior art keywords
application program
described terminal
detected
file
configuration list
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201210215997.3A
Other languages
Chinese (zh)
Other versions
CN102736978A (en
Inventor
申朝辉
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Hongxiang Technical Service Co Ltd
Original Assignee
Beijing Qihoo Technology Co Ltd
Qizhi Software Beijing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Qihoo Technology Co Ltd, Qizhi Software Beijing Co Ltd filed Critical Beijing Qihoo Technology Co Ltd
Priority to CN201210215997.3A priority Critical patent/CN102736978B/en
Publication of CN102736978A publication Critical patent/CN102736978A/en
Application granted granted Critical
Publication of CN102736978B publication Critical patent/CN102736978B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Abstract

The invention discloses a kind of detect the installment state of application program method and the wherein said method of device comprise: set up cloud database, wherein preserve the fixed reference feature code for the All Files collected by each application program; Maintenance terminal configured list, the condition code of all files that each application program wherein record the installation path of each application program that described terminal is installed, obtaining according to described installation path is installed and each file; The condition code extracting each file of application program to be detected according to described terminal configuration list is compared in database beyond the clouds, judges whether described application program to be detected is properly installed and feeds back to described terminal in described terminal according to comparison result.The present invention can carry out thorough, careful inspection in conjunction with the installation of multiple angles application programs.

Description

A kind of method and device detecting the installment state of application program
Technical field
The invention belongs to computer realm, specifically, relate to a kind of method and the device that detect the installment state of application program.
Background technology
Now, detect the mode whether application program is properly installed, mainly realized by the detection version of file of application program and the version of the registry file of application program.But, truly can not detect whether application program is properly installed in this way.
First, the FileVersion only detecting application program is inadequate.Because the version of the file of application program is correct, the content of representation file is not tampered, such as current viral wooden horse or play and plug-in etc. the content of file can be accomplished to carry out distorting even replace, but do not change the version of file, now whether the version number of file just really can not reflect application program and be properly installed.In addition, except PE file (the transplantable execute file of Portable Execute), other file of application program does not have version, now by checking that version number just cannot complete detection, just cannot detect whether application program is properly installed yet.
Moreover the version only detecting the registry file of application program is also inadequate.Registry file is static, it may be completely not corresponding with the true version of the file of application program, the file of such as certain application program has been revised, the version of file also there occurs change, but can't correspondingly revise registry file and version thereof, now the registry file of application program and the true version of the file of application program are just inconsistent, by checking that the version number of registry file just really can not detect whether application program is properly installed.
Summary of the invention
In view of this, technical matters to be solved by this invention there is provided a kind of method and the device that detect the installment state of application program, can carry out thorough, careful inspection in conjunction with the installation of multiple angles application programs.
In order to solve the problems of the technologies described above, the invention discloses a kind of method detecting the installment state of application program, comprising: set up cloud database, wherein preserve the fixed reference feature code for the All Files collected by each application program; Maintenance terminal configured list, the condition code of all files that each application program wherein record the installation path of each application program that described terminal is installed, obtaining according to described installation path is installed and each file; The condition code extracting each file of application program to be detected according to described terminal configuration list is compared in database beyond the clouds, judges whether described application program to be detected is properly installed and feeds back to described terminal in described terminal according to comparison result.
Further, described condition code, for the condition code of file described in unique identification and file content, comprise one or more combination following: the MD5 identifying code drawn via message digest algorithm MD5 computing, Secure Hash Algorithm check code and cyclic redundancy check (CRC) code.
Further, described maintenance terminal configured list, also comprises: each application program increase newly file and/or deleted file and/or amendment file content and/or amendment file deposit path time, also in described terminal configuration list, upgrade corresponding record.
Further, the reference key assignments for the write registry entry collected by each application program is also preserved in described cloud database; The path also recording the registry entry that each application program that described terminal is installed creates in described terminal configuration list and the key assignments of each application program write registry entry obtained according to the path of described registry entry; The key assignments also extracting the write registry entry of application program to be detected according to described terminal configuration list is compared in database beyond the clouds, judges be set correctly in the registration table of described application program to be detected whether in described terminal and feed back to described terminal according to comparison result.
Further, described maintenance terminal configured list, also comprise: at the path of each application modification registry entry and/or newly-increased registry entry and/or delete registry entry and/or edit the registry item content and/or amendment system registry list item content time, also in described terminal configuration list, upgrade corresponding record.
Further, reference the host process created when collected each application program is run and supporting process and/or whole dynamic link library and/or service is also preserved in described cloud database; Process and/or dynamic link library and/or service that operationally the created host process of each application program that described terminal is installed and described host process call also is recorded in described terminal configuration list; Extract according to described terminal configuration list process and/or dynamic link library that operationally the created host process of application program to be detected and described host process call and/or serve and compare in database beyond the clouds, judge the whether true(-)running feed back to described terminal in described terminal of described application program to be detected according to comparison result.
Further, described maintenance terminal configured list, also comprise: when each application program increases process and/or newly-increased supporting process and/or newly-increased dynamic link library newly and/or increases service and/or deletion process newly, also in described terminal configuration list, upgrade corresponding record.
Further, judge to comprise the feedback that described application program to be detected sends to described terminal when being properly installed in described terminal: point out described application program to be detected to be properly installed in described terminal according to comparison result; Judge the feedback sent to described terminal when being set correctly in the registration table of described application program to be detected in described terminal according to comparison result, comprising: point out in the registration table of described application program to be detected in described terminal and be set correctly; According to comparison result judge described application program to be detected in described terminal during true(-)running to the feedback that described terminal sends, comprising: point out the true(-)running in described terminal of described application program to be detected; When not being set correctly when judging that described application program to be detected is not properly installed in described terminal according to comparison result and/or in registration table in described terminal and/or when there is no a true(-)running in described terminal, to the feedback that described terminal sends, comprise following one or more combination: point out the operation of the incorrect information of described application program to be detected, the described application program to be detected of prompting reparation, the described application program to be detected of prompting termination, the described application program to be detected of prompting cleaning, point out and reinstall described application program to be detected.
In order to solve the problems of the technologies described above, the invention also discloses a kind of device detecting the installment state of application program, comprising: cloud database, cloud database administration module, terminal configuration list, terminal configuration list maintenance module and compare of analysis module; Described cloud database administration module, for setting up cloud database; Described cloud database, for preserving the fixed reference feature code for the All Files collected by each application program; Described terminal configuration list maintenance module, for maintenance terminal configured list; Described terminal configuration list, all files installed for the installation path recording each application program that described terminal is installed, each application program that obtains according to described installation path and the condition code of each file; Described compare of analysis module, condition code for extracting each file of application program to be detected according to described terminal configuration list is compared in database beyond the clouds, judges whether described application program to be detected is properly installed and feeds back to described terminal in described terminal according to comparison result.
Further, described compare of analysis module, the described condition code extracted, for the condition code of file described in unique identification and file content, comprise one or more combination following: the MD5 identifying code drawn via message digest algorithm MD5 computing, Secure Hash Algorithm check code and cyclic redundancy check (CRC) code.
Further, described terminal configuration list maintenance module, when maintenance terminal configured list, also for increase newly in each application program file and/or deleted file and/or amendment file content and/or amendment file deposit path time, in described terminal configuration list, upgrade corresponding record.
Further, described cloud database, also for preserving the reference key assignments for the write registry entry collected by each application program; Described terminal configuration list, also for the path of recording the registry entry that each application program that described terminal is installed creates and the key assignments of each application program write registry entry obtained according to the path of described registry entry; Described compare of analysis module, key assignments also for extracting the write registry entry of application program to be detected according to described terminal configuration list is compared in database beyond the clouds, judges be set correctly in the registration table of described application program to be detected whether in described terminal and feed back to described terminal according to comparison result.
Further, described terminal configuration list maintenance module, when maintenance terminal configured list, also at the path of each application modification registry entry and/or newly-increased registry entry and/or when deleting registry entry and/or edit the registry item content and/or revise system registry list item content, in described terminal configuration list, upgrade corresponding record.
Further, described cloud database, also for preserving the reference host process and supporting process and/or all dynamic link library and/or services that create when collected each application program is run; Described terminal configuration list, also for recording the process and/or dynamic link library and/or service that operationally the created host process of each application program that described terminal is installed and described host process call; Described compare of analysis module, also compare in database beyond the clouds for extracting process and/or dynamic link library that operationally the created host process of application program to be detected and described host process call according to described terminal configuration list and/or serving, judge the whether true(-)running feed back to described terminal in described terminal of described application program to be detected according to comparison result.
Further, described terminal configuration list maintenance module, when maintenance terminal configured list, time also for increasing process and/or newly-increased supporting process and/or newly-increased dynamic link library in each application program newly and/or increasing service and/or deletion process newly, in described terminal configuration list, upgrade corresponding record.
Further, described compare of analysis module, judges to comprise the feedback that described application program to be detected sends to described terminal when being properly installed in described terminal: point out described application program to be detected to be properly installed in described terminal according to comparison result; Described compare of analysis module, judge the feedback sent to described terminal when being set correctly in the registration table of described application program to be detected in described terminal according to comparison result, comprising: point out in the registration table of described application program to be detected in described terminal and be set correctly; Described compare of analysis module, according to comparison result judge described application program to be detected in described terminal during true(-)running to the feedback that described terminal sends, comprising: point out the true(-)running in described terminal of described application program to be detected; Described compare of analysis module, when not being set correctly when judging that described application program to be detected is not properly installed in described terminal according to comparison result and/or in registration table in described terminal and/or when there is no a true(-)running in described terminal, to the feedback that described terminal sends, comprise following one or more combination: the operation of described application program to be detected of pointing out the incorrect information of described application program to be detected, repair described application program to be detected, stop, clear up described application program to be detected, reinstall described application program to be detected.
Compared with existing scheme, the technique effect that the present invention obtains:
1) poor fault tolerance of viral wooden horse infection destruction and application program itself all can cause application program to be destroyed, comprise the data file of non-PE as dat file, lib file etc., even system file, all may be destroyed at any time or lose, the present invention can identify the damage of file content, and intelligent quick easily detection mode just seem especially necessary.
2) registry entry is destroyed, revises, or self problem causes failing correctly to write registry entry when application program is installed, now all cannot normally start and use application program, the present invention can identify the damage of registry entry, by this detection mode, correct startup whether can be basic after just thoroughly can running down software installation.
3) file and this static information of registry entry of supposing application program are all correct, but in certain specific environment, as under 64 systems, 32 processes and the supporting dll of process and service cannot be loaded, this situation also can think the installation of failure, the present invention can identify the damage of internal memory add-in, thus the reason that can not correctly start after thoroughly running down installation.
Accompanying drawing explanation
Fig. 1 is the method flow diagram of the embodiment of the present invention;
Fig. 2 is the process flow diagram of embodiment of the present invention step S10;
Fig. 3 is the process flow diagram of embodiment of the present invention step S20;
Fig. 4 is the process flow diagram of embodiment of the present invention step S30;
Fig. 5 is the structure drawing of device of the embodiment of the present invention.
Embodiment
Graphic and embodiment below will be coordinated to describe embodiments of the present invention in detail, by this to the present invention how application technology means solve technical matters and the implementation procedure reaching technology effect can fully understand and implement according to this.
The main thought of the application
Detect key assignments, the internal memory add-in operationally of the condition code of each file of application program to be detected, write registry entry respectively;
The condition code of any file has uniqueness, after application program is installed, if the file content of amendment application program replaced by other viral wooden horses or hook, or the fault-tolerance of application program own is very poor, cause the file of application program corrupted or deleted or replace, then can verify out by condition code.
Application program can create different registry entries at registration table after installing, comprise and item, service entry, starting up's item, user's registration information etc. are installed, such as, can load the high service entry of priority before antivirus software logs in after powering, described service entry must get the jump on before viral wooden horse starts and start, the normal operation of such guarantee antivirus software, so also need the key assignments detecting write registry entry.
After application program is installed, host process can be started, host process also can call other supporting processes, dynamic link library (dll), service voluntarily afterwards, in some environments, application program cannot normally start process and load supporting process, dll and service, if be filled with the incorrect module application program of other third party's processes or dll or other in addition also can make mistakes, so also need the internal memory add-in detected operationally, described internal memory add-in comprises: the process that the host process created and described host process are called and/or dynamic link library and/or service.
the application scenarios of the application
1), after application program is completed by user installation, the problem that can run in a series of use even cannot start software; Now user usually seeks help from contact staff, but reviews reason as contact staff long-range being difficult to, and such as application program is not properly installed and is still destroyed, or the functional issues of application program itself; Now be suitable for application the present invention intelligence and check whether file is mounted, and whether registry entry (as mount message, service entry, the items such as user profile) is write, whether start process under specific user environment, load dll module, start service.
2) tester of application program is when testing, test application is often first wanted whether to be properly installed, then could whether the function of inspection software own be correct further, such as install the large-scale office software reaching 1G, the inside has several ten thousand files, also needs to write thousand registry entries, after installing, middle there is any link, be all whether be difficult to trace software be mounted makeing mistakes or the BUG of software itself, be now suitable for applying the present invention and investigate intelligently.
3) Develop Application System personnel are when developing large software, each developer can not be responsible for the exploitation of all modules, just be responsible for exploitation and the integrated debugging of part of module, in order to ensure the integrality of debugging, be now suitable for application the present invention intelligence and check whether file is mounted.
Certainly, the application is not limited to above application scenarios, also there are other and is applicable to relate to mass data and browses and the scene of data layout editor.
embodiment describes
With an embodiment, method of the present invention is described below.As shown in Figure 1, be the method flow diagram of the installment state of the detection application program of the embodiment of the present invention, perform and operate as follows:
Step S10, detects the condition code of each file of application program to be detected, judges whether described application program to be detected correctly installs in described terminal according to testing result.
Step S20, detects the key assignments of application program to be detected write registry entry, judges whether described application program to be detected is correctly arranged in described terminal according to testing result.
Step S30, detects application program to be detected internal memory add-in operationally, judges the whether true(-)running in described terminal of described application program to be detected according to testing result.
The installment state of application program comprises: whether application program to be detected correctly installs in described terminal, correctly setting and/or true(-)running.Above-mentioned steps S10, S20, S30 there is no execution order, can perform simultaneously, also successively can perform by any order, from the situation of the detection application program to be detected of above three parallel angle solids.
With an embodiment, above-mentioned steps S10 is described below.As shown in Figure 2, be the process flow diagram of embodiment of the present invention step S10, perform and operate as follows:
Step S102, sets up cloud database, wherein preserves the fixed reference feature code for the All Files collected by each application program;
Described condition code is the condition code of file described in unique identification and file content, comprises one or more combination following: the MD5 identifying code drawn via message digest algorithm MD5 computing, Secure Hash Algorithm SHA1 check code and cyclic redundancy CRC check code.
Described fixed reference feature code can be reference value that is correct, that be judged to be correct installation, is realized by white list; Described fixed reference feature code also can be reference value that is wrong, that be judged to be correct installation, is realized by blacklist.
Step S104, maintenance terminal configured list, the condition code of all files that each application program wherein record the installation path of each application program that described terminal is installed, obtaining according to described installation path is installed and each file;
By having the API(application programming interface of the function whether file or catalogue exist) function obtains the installation path of each application program that described terminal is installed, such as PathFileExists function, PathFileExists function is for determining whether the path of the file system object of a file or catalogue is effective; According to described installation path, the all files of each application program installation is obtained by the api function of the function with enumerate file or file, such as FindFirstFile function and FindNextFile function, FindFirstFile function is used for according to filename locating file, and the filename that FindNextFile function is used for according to specifying when calling FindFirstFile function searches next file.
Each application program increase newly file and/or deleted file and/or amendment file content (comprising system file) and/or amendment file deposit path time, also in described terminal configuration list, upgrade corresponding record.
Step S106, the condition code extracting each file of application program to be detected according to described terminal configuration list is compared in database beyond the clouds, judges whether described application program to be detected is properly installed and feeds back to described terminal in described terminal according to comparison result.
When fixed reference feature code is kept at the white list of described cloud database, if find after comparison condition code in terminal configuration list all hit by the fixed reference feature code in cloud database, now can judge that described application program to be detected is properly installed in described terminal; As long as if having after comparison the condition code in a terminal configuration list not hit by the fixed reference feature code in cloud database, now can judge that described application program to be detected is not properly installed in described terminal.
When fixed reference feature code is kept at the blacklist of described cloud database, as long as if find after comparison in terminal configuration list have a condition code all hit by the fixed reference feature code in cloud database, now can judge that described application program to be detected is not properly installed in described terminal; If the condition code after comparison in terminal configuration list all not hit by the fixed reference feature code in cloud database, now can judge that described application program to be detected is properly installed in described terminal.
Judge to comprise the feedback that described application program to be detected sends to described terminal when being properly installed in described terminal: point out described application program to be detected to be properly installed in described terminal according to comparison result;
Judge the feedback that described application program to be detected sends to described terminal when not being properly installed in described terminal to comprise following one or more combination according to comparison result: point out the operation of the incorrect information of described application program to be detected, the described application program to be detected of prompting reparation, the described application program to be detected of prompting termination, the described application program to be detected of prompting cleaning, point out and reinstall described application program to be detected.
With an application example, above-mentioned steps S10 is described below.Application program to be detected is for Fetion, and condition code can be obtained by hash algorithm for MD5, MD5 value.
Preserve the reference MD5 value for the All Files collected by each application program in cloud database, described is correct reference value with reference to MD5 value, such as, wherein at least comprise:
Fetion.exe&8af829e342a6b15696af9650ad5f805c
fxWebBrowser.exe&8af829e342a6b15696af9650ad5f8051
Fetion.lib&8af829e342a6b15696af9650ad5f8052
Wherein, Fetion.exe, fxWebBrowser.exe, Fetion.lib are files, 8af829e342a6b15696af9650ad5f805c is the MD5 value that Fetion.exe is corresponding, 8af829e342a6b15696af9650ad5f8051 is the MD5 value that fxWebBrowser.exe is corresponding, and 8af829e342a6b15696af9650ad5f8052 is the MD5 value that Fetion.lib is corresponding.
The MD5 value of log file path in terminal configuration list, file and file, such as:
File1="C:\ProgramFiles\ChinaMobile\Fetion\Fetion.exe"&8af829e342a6b15696af9650ad5f805c
File1="C:\ProgramFiles\ChinaMobile\Fetion\fxWebBrowser.exe"&8af829e342a6b15696af9650ad5f8051
File1="C:\ProgramFiles\ChinaMobile\Fetion\Fetion.lib"&8af829e342a6b15696af9650ad5f8052
In above form, Fetion.exe, fxWebBrowser.exe, Fetion.lib are files, C: ProgramFiles ChinaMobile Fetion be file path, 8af829e342a6b15696af9650ad5f805c is the MD5 value that Fetion.exe is corresponding, 8af829e342a6b15696af9650ad5f8051 is the MD5 value that fxWebBrowser.exe is corresponding, 8af829e342a6b1596af9650ad5f8052 is the MD5 value that Fetion.lib is corresponding, and Fetion.lib is non-PE file.
Increase file (comprise interim generate file) newly at application program Fetion, path that deleted file, amendment file content (comprising amendment windows system file), file store time, the parameter recorded in terminal configuration list can upgrade adjustment automatically.
The MD5 value extracting Fetion.exe, fxWebBrowser.exe, Fetion.lib of Fetion according to described terminal configuration list is compared in database beyond the clouds, if find after comparison MD5 in terminal configuration list all hit by the reference MD5 value in cloud database, now can judge that described application program to be detected is properly installed in described terminal; As long as if having in terminal configuration list after comparison a MD5 not hit by the reference MD5 value in cloud database, now can judge that described application program to be detected is not properly installed in described terminal.
With an embodiment, above-mentioned steps S20 is described below.As shown in Figure 3, be the process flow diagram of embodiment of the present invention step S20, perform and operate as follows:
Step S202, sets up cloud database, wherein preserves the reference key assignments for the write registry entry collected by each application program;
Described can be reference value that is correct, that be judged to be correct installation with reference to key assignments, is realized by white list; Described also can be reference value that is wrong, that be judged to be correct installation with reference to key assignments, is realized by blacklist.
Step S204, maintenance terminal configured list, the path wherein recording the registry entry that each application program that described terminal is installed creates and the key assignments of each application program write registry entry obtained according to the path of described registry entry;
The path of the registry entry that each application program creates and the key assignments of write registry entry is obtained by the api function with the function of carrying out read-write operation under the registry entry of specifying, such as SHGetValue function and RegCreateKeyEx function, SHGetValue function is used for carrying out read-write operation under the registry entry of specifying; RegCreateKeyEx function is used for, specifying the complex way creating new item under registry entry, using in Win32 environment.
At the path of each application modification registry entry and/or newly-increased registry entry and/or when deleting registry entry and/or edit the registry item content and/or revise system registry list item content, also in described terminal configuration list, upgrade corresponding record.
Step S206, the key assignments extracting the write registry entry of application program to be detected according to described terminal configuration list is compared in database beyond the clouds, judges be set correctly in the registration table of described application program to be detected whether in described terminal and feed back to described terminal according to comparison result;
When being kept at the white list of described cloud database with reference to key assignments, if find after comparison key assignments in terminal configuration list all hit by the reference key assignments in cloud database, now can judge that described application program to be detected is set correctly in described terminal; As long as if having in terminal configuration list after comparison a key assignments not hit by the reference key assignments in cloud database, now can judge that described application program to be detected is not set correctly in described terminal.
When being kept at the blacklist of described cloud database with reference to key assignments, as long as if find after comparison to have in terminal configuration list a key assignments all hit by the reference key assignments in cloud database, now can judge that described application program to be detected is not set correctly in described terminal; If the key assignments after comparison in terminal configuration list all not hit by the reference key assignments in cloud database, now can judge that described application program to be detected is set correctly in described terminal.
Judge the feedback sent to described terminal when being set correctly in the registration table of described application program to be detected in described terminal according to comparison result, comprising: point out in the registration table of described application program to be detected in described terminal and be set correctly;
Judge the feedback sent to described terminal when not being set correctly in the registration table of described application program to be detected in described terminal according to comparison result, comprise following one or more combination: point out the operation of the incorrect information of described application program to be detected, the described application program to be detected of prompting reparation, the described application program to be detected of prompting termination, the described application program to be detected of prompting cleaning, point out and reinstall described application program to be detected.
With an application example, above-mentioned steps S20 is described below.Application program to be detected is for Fetion.
Preserve the reference key assignments for the write registry entry collected by each application program in cloud database, described is correct reference value with reference to key assignments, such as, wherein at least comprise:
″\″C:\\Program Files\\China Mobile\\Fetion\\Fetion.exe\″\″%1\″″。
The path of registry entry and the key assignments of write registry entry is recorded in terminal configuration list, such as:
[HKEY_CLASSES_ROOT\Applications\Fetion.exe\shell\open\command]@="\"C:\\Program Files\\China Mobile\\Fetion\\Fetion.exe\″\″%1\″″
In above form, [HKEY_CLASSES_ROOT Applications Fetion.exe shell open command] be the path of registry entry, " " C: Program Files China Mobile Fetion Fetion.exe " " %1 " " be the key assignments of the registry entry of write.
Application program Fetion is in the path of edit the registry, when newly-increased registry entry (comprising the interim registry entry generated), deletion registry entry, edit the registry item content (comprising amendment windows registry entry), the parameter recorded in terminal configuration list can upgrade adjustment automatically.
The key assignments extracting the registry entry of Fetion write according to described terminal configuration list is compared in database beyond the clouds, if find after comparison key assignments in terminal configuration list all hit by the reference key assignments in cloud database, now can judge that described application program to be detected is set correctly in described terminal; As long as if having in terminal configuration list after comparison a key assignments not hit by the reference key assignments in cloud database, now can judge that described application program to be detected is not set correctly in described terminal.
With an embodiment, above-mentioned steps S30 is described below.As shown in Figure 4, be the process flow diagram of embodiment of the present invention step S30, perform and operate as follows:
Step S302, sets up cloud database, wherein preserves the reference host process and supporting process and/or all dynamic link library and/or services that create when collected each application program is run;
Described with reference to host process and supporting process and/or all dynamic link library and/or service can be reference value that is correct, that be judged to be correct installation, realized by white list; Described with reference to host process and supporting process and/or all dynamic link library and/or service also can be wrong, be judged to be correct reference value of installing, realized by blacklist.
Step S304, maintenance terminal configured list, wherein records process and/or dynamic link library and/or service that operationally the created host process of each application program that described terminal is installed and described host process call;
The api function setting up the function of snapshot by the heap having process for specifying, process uses, module, thread obtains the process and/or dynamic link library and/or service that operationally the created host process of each application program and described host process call, such as CreateToolhelp32Snapshot function, the heap [HEAP] that CreateToolhelp32Snapshot function uses for the process for specifying, process, module [MODULE], thread [THREAD] set up a snapshot.
When each application program increases process and/or newly-increased supporting process and/or newly-increased dynamic link library newly and/or increases service and/or deletion process newly, also in described terminal configuration list, upgrade corresponding record.
Step S306, extract according to described terminal configuration list process and/or dynamic link library that operationally the created host process of application program to be detected and described host process call and/or serve and compare in database beyond the clouds, judge the whether true(-)running feed back to described terminal in described terminal of described application program to be detected according to comparison result;
When reference value is kept at the white list of described cloud database, if find after comparison the process that host process in terminal configuration list and described host process are called and/or dynamic link library and/or service all hit by the reference value in cloud database, now can judge that described application program to be detected is set correctly in described terminal; As long as if the process having a host process and described host process to call after comparison in terminal configuration list and/or dynamic link library and/or service not hit by the reference value in cloud database, now can judge that described application program to be detected is not set correctly in described terminal.
When reference value is kept at the blacklist of described cloud database, as long as if the process finding after comparison to have a host process and described host process to call in terminal configuration list and/or dynamic link library and/or service all hit by the reference key assignments in cloud database, now can judge that described application program to be detected is not set correctly in described terminal; If the process that the host process after comparison in terminal configuration list and described host process are called and/or dynamic link library and/or service all not hit by the reference key assignments in cloud database, now can judge that described application program to be detected is set correctly in described terminal.
According to comparison result judge described application program to be detected in described terminal during true(-)running to the feedback that described terminal sends, comprising: point out the true(-)running in described terminal of described application program to be detected;
Judge that described application program to be detected does not have the feedback sent to described terminal during true(-)running in described terminal according to comparison result, comprise following one or more combination: point out the operation of the incorrect information of described application program to be detected, the described application program to be detected of prompting reparation, the described application program to be detected of prompting termination, the described application program to be detected of prompting cleaning, point out and reinstall described application program to be detected.
With an application example, above-mentioned steps S30 is described below.Application program to be detected is for Fetion.
The reference host process and supporting process and/or all dynamic link library and/or services that create when collected each application program is run is preserved in cloud database, described with reference to host process and supporting process and/or all dynamic link library and/or service be correct reference value, such as wherein at least comprise:
Host process Fetion.exe, supporting dynamic link library ADVAPI32.dll and AvatarX.dll.
Process and/or dynamic link library and/or service that operationally the created host process of each application program and described host process call is recorded in terminal configuration list, such as:
Exe1=Fetion.exe&ADVAPI32.dll&AvatarX.dll
Exe2=…
In above form, Fetion.exe is host process, and ADVAPI32.dll is the supporting dynamic link library of host process Fetion.exe, and AvatarX.dll is also the supporting dynamic link library of host process Fetion.exe.
Application program Fetion in newly-increased process (comprise interim load process), newly-increased supporting dll(comprises needs to inject windows system process or dll), newly-increased supporting service, deletion process time, the parameter recorded in terminal configuration list can upgrade adjustment automatically.
Extract according to described terminal configuration list reference the host process and supporting process and/or whole dynamic link library that create when Fetion runs and/or serve and compare in database beyond the clouds, if find after comparison host process in terminal configuration list and supporting process and/or all dynamic link library and/or service all hit by the reference value in cloud database, now can judge described application program to be detected in described terminal by true(-)running; As long as if the host process after comparison in terminal configuration list and supporting process and/or all dynamic link library and/or service have one not hit by the reference value in cloud database, now can judge described application program to be detected in described terminal not by true(-)running.
Below be described device of the present invention with three device embodiments, described device is corresponding with said method flow process again, and weak point can with reference to said method part.As shown in Figure 5, for detecting the device of the installment state of application program, comprising: cloud database 1, cloud database administration module 2, terminal configuration list 3, terminal configuration list maintenance module 4 and compare of analysis module 5.
first device embodiment
Described cloud database administration module 2, for setting up cloud database 1;
Described cloud database 1, for preserving the fixed reference feature code for the All Files collected by each application program;
Described terminal configuration list maintenance module 4, for maintenance terminal configured list 3;
Described terminal configuration list 3, all files installed for the installation path recording each application program that described terminal is installed, each application program that obtains according to described installation path and the condition code of each file;
Described compare of analysis module 5, condition code for extracting each file of application program to be detected according to described terminal configuration list 3 is compared in database 1 beyond the clouds, judges whether described application program to be detected is properly installed and feeds back to described terminal in described terminal according to comparison result.
Described terminal configuration list maintenance module 4, when maintenance terminal configured list 3, the application programming interface api function be further used for by having the function whether file or catalogue exist obtains the installation path of each application program that described terminal is installed; Be further used for according to described installation path, obtained all files of each application program installation by the api function of the function with enumerate file or file.
Described terminal configuration list maintenance module 4, when maintenance terminal configured list 3, also for increase newly in each application program file and/or deleted file and/or amendment file content (comprising system file) and/or amendment file deposit path time, in described terminal configuration list 3, upgrade corresponding record.
Described condition code is the condition code of file described in unique identification and file content, comprises one or more combination following: the MD5 identifying code drawn via message digest algorithm MD5 computing, Secure Hash Algorithm check code and cyclic redundancy check (CRC) code.
Described compare of analysis module 5, judges to comprise the feedback that described application program to be detected sends to described terminal when being properly installed in described terminal: point out described application program to be detected to be properly installed in described terminal according to comparison result; The feedback that sends to described terminal when judging that described application program to be detected is not properly installed in described terminal according to comparison result, comprises following one or more combination: the operation of described application program to be detected of pointing out the incorrect information of described application program to be detected, repair described application program to be detected, stop, clear up described application program to be detected, reinstall described application program to be detected.
second device embodiment
Described cloud database administration module 2, for setting up cloud database 1;
Described cloud database 1, for preserving the reference key assignments for the write registry entry collected by each application program;
Described terminal configuration list maintenance module 4, for maintenance terminal configured list 3;
Described terminal configuration list 3, for the path of recording the registry entry that each application program that described terminal is installed creates and the key assignments of each application program write registry entry obtained according to the path of described registry entry;
Described compare of analysis module 5, key assignments for extracting the write registry entry of application program to be detected according to described terminal configuration list 3 is compared in database 1 beyond the clouds, judges be set correctly in the registration table of described application program to be detected whether in described terminal and feed back to described terminal according to comparison result.
Described terminal configuration list maintenance module 4, when maintenance terminal configured list 3, the api function be further used for by having the function of carrying out read-write operation under the registry entry of specifying obtains the path of the registry entry that each application program creates and the key assignments of write registry entry.
Described terminal configuration list maintenance module 4, when maintenance terminal configured list 3, also at the path of each application modification registry entry and/or newly-increased registry entry and/or when deleting registry entry and/or edit the registry item content and/or revise system registry list item content, in described terminal configuration list 3, upgrade corresponding record.
Described compare of analysis module 5, judge the feedback sent to described terminal when being set correctly in the registration table of described application program to be detected in described terminal according to comparison result, comprising: point out in the registration table of described application program to be detected in described terminal and be set correctly; Judge the feedback sent to described terminal when not being set correctly in the registration table of described application program to be detected in described terminal according to comparison result, comprise following one or more combination: the operation of described application program to be detected of pointing out the incorrect information of described application program to be detected, repair described application program to be detected, stop, clear up described application program to be detected, reinstall described application program to be detected.
3rd device embodiment
Described cloud database administration module 2, for setting up cloud database 1;
Described cloud database 1, for preserving the reference host process and supporting process and/or all dynamic link library and/or services that create when collected each application program is run;
Described terminal configuration list maintenance module 4, for maintenance terminal configured list 3;
Described terminal configuration list 3, also for recording the process and/or dynamic link library and/or service that operationally the created host process of each application program that described terminal is installed and described host process call;
Described compare of analysis module 5, also compare in database 1 beyond the clouds for extracting process and/or dynamic link library that operationally the created host process of application program to be detected and described host process call according to described terminal configuration list 3 and/or serving, judge the whether true(-)running feed back to described terminal in described terminal of described application program to be detected according to comparison result.
Described terminal configuration list maintenance module 4, when maintenance terminal configured list 3, the api function being further used for setting up the function of snapshot by the heap having process for specifying, process uses, module, thread obtains the process and/or dynamic link library and/or service that operationally the created host process of each application program and described host process call.
Described terminal configuration list maintenance module 4, when maintenance terminal configured list 3, time also for increasing process and/or newly-increased supporting process and/or newly-increased dynamic link library in each application program newly and/or increasing service and/or deletion process newly, in described terminal configuration list 3, upgrade corresponding record.
Described compare of analysis module 5, according to comparison result judge described application program to be detected in described terminal during true(-)running to the feedback that described terminal sends, comprising: point out the true(-)running in described terminal of described application program to be detected; Judge that described application program to be detected does not have the feedback that sends to described terminal during true(-)running in described terminal according to comparison result, comprise following one or more combination: the operation of described application program to be detected of pointing out the incorrect information of described application program to be detected, repair described application program to be detected, stop, clear up described application program to be detected, reinstall described application program to be detected.
It should be noted that, when not conflicting, the embodiment in the present invention and the feature in embodiment can combination in any mutually.
Certainly; the present invention also can have other various embodiments; when not deviating from the present invention's spirit and essence thereof; those of ordinary skill in the art can make various corresponding change and distortion according to the present invention, but these change accordingly and are out of shape the protection domain that all should belong to the claim appended by the present invention.
One of ordinary skill in the art will appreciate that in said method all or part of step carrys out instruction by program, related hardware completes, described program can be stored in computer-readable recording medium, as ROM (read-only memory), disk or CD etc.Alternatively, all or part of step of above-described embodiment also can use one or more integrated circuit to realize.Correspondingly, each module/unit in above-described embodiment can adopt the form of hardware to realize, and the form of software function module also can be adopted to realize.The present invention is not restricted to the combination of the hardware and software of any particular form.

Claims (14)

1. detect a method for the installment state of application program, it is characterized in that, comprising:
Set up cloud database, wherein preserve the fixed reference feature code for the All Files collected by each application program;
Maintenance terminal configured list, the condition code of all files that each application program wherein record the installation path of each application program that described terminal is installed, obtaining according to described installation path is installed and each file;
The condition code extracting each file of application program to be detected according to described terminal configuration list is compared in database beyond the clouds, judges whether described application program to be detected is properly installed and feeds back to described terminal in described terminal according to comparison result;
Wherein,
The reference key assignments for the write registry entry collected by each application program is also preserved in described cloud database;
The path also recording the registry entry that each application program that described terminal is installed creates in described terminal configuration list and the key assignments of each application program write registry entry obtained according to the path of described registry entry;
The key assignments also extracting the write registry entry of application program to be detected according to described terminal configuration list is compared in database beyond the clouds, judges be set correctly in the registration table of described application program to be detected whether in described terminal and feed back to described terminal according to comparison result.
2. the method for claim 1, is characterized in that,
Described condition code is the condition code of file described in unique identification and file content, comprises one or more combination following: the MD5 identifying code drawn via message digest algorithm MD5 computing, Secure Hash Algorithm check code and cyclic redundancy check (CRC) code.
3. method as claimed in claim 1 or 2, it is characterized in that, described maintenance terminal configured list, also comprises:
Each application program increase newly file and/or deleted file and/or amendment file content and/or amendment file deposit path time, also in described terminal configuration list, upgrade corresponding record.
4. the method for claim 1, is characterized in that, described maintenance terminal configured list, also comprises:
At the path of each application modification registry entry and/or newly-increased registry entry and/or when deleting registry entry and/or edit the registry item content and/or revise system registry list item content, also in described terminal configuration list, upgrade corresponding record.
5. the method for claim 1, is characterized in that,
The reference host process and supporting process and/or all dynamic link library and/or services that create when collected each application program is run also is preserved in described cloud database;
Process and/or dynamic link library and/or service that operationally the created host process of each application program that described terminal is installed and described host process call also is recorded in described terminal configuration list;
Extract according to described terminal configuration list process and/or dynamic link library that operationally the created host process of application program to be detected and described host process call and/or serve and compare in database beyond the clouds, judge the whether true(-)running feed back to described terminal in described terminal of described application program to be detected according to comparison result.
6. method as claimed in claim 5, it is characterized in that, described maintenance terminal configured list, also comprises:
When each application program increases process and/or newly-increased supporting process and/or newly-increased dynamic link library newly and/or increases service and/or deletion process newly, also in described terminal configuration list, upgrade corresponding record.
7. the method as described in claim 5 or 6, is characterized in that,
Judge to comprise the feedback that described application program to be detected sends to described terminal when being properly installed in described terminal: point out described application program to be detected to be properly installed in described terminal according to comparison result;
Judge the feedback sent to described terminal when being set correctly in the registration table of described application program to be detected in described terminal according to comparison result, comprising: point out in the registration table of described application program to be detected in described terminal and be set correctly;
According to comparison result judge described application program to be detected in described terminal during true(-)running to the feedback that described terminal sends, comprising: point out the true(-)running in described terminal of described application program to be detected;
When not being set correctly when judging that described application program to be detected is not properly installed in described terminal according to comparison result and/or in registration table in described terminal and/or when there is no a true(-)running in described terminal, to the feedback that described terminal sends, comprise following one or more combination: point out the operation of the incorrect information of described application program to be detected, the described application program to be detected of prompting reparation, the described application program to be detected of prompting termination, the described application program to be detected of prompting cleaning, point out and reinstall described application program to be detected.
8. detect a device for the installment state of application program, it is characterized in that, comprising: cloud database, cloud database administration module, terminal configuration list, terminal configuration list maintenance module and compare of analysis module;
Described cloud database administration module, for setting up cloud database;
Described cloud database, for preserving the fixed reference feature code for the All Files collected by each application program;
Described terminal configuration list maintenance module, for maintenance terminal configured list;
Described terminal configuration list, all files installed for the installation path recording each application program that described terminal is installed, each application program that obtains according to described installation path and the condition code of each file;
Described compare of analysis module, condition code for extracting each file of application program to be detected according to described terminal configuration list is compared in database beyond the clouds, judges whether described application program to be detected is properly installed and feeds back to described terminal in described terminal according to comparison result;
Wherein,
Described cloud database, also for preserving the reference key assignments for the write registry entry collected by each application program;
Described terminal configuration list, also for the path of recording the registry entry that each application program that described terminal is installed creates and the key assignments of each application program write registry entry obtained according to the path of described registry entry;
Described compare of analysis module, key assignments also for extracting the write registry entry of application program to be detected according to described terminal configuration list is compared in database beyond the clouds, judges be set correctly in the registration table of described application program to be detected whether in described terminal and feed back to described terminal according to comparison result.
9. device as claimed in claim 8, is characterized in that,
Described compare of analysis module, the described condition code extracted, for the condition code of file described in unique identification and file content, comprise one or more combination following: the MD5 identifying code drawn via message digest algorithm MD5 computing, Secure Hash Algorithm check code and cyclic redundancy check (CRC) code.
10. device as claimed in claim 8 or 9, is characterized in that,
Described terminal configuration list maintenance module, when maintenance terminal configured list, also for increase newly in each application program file and/or deleted file and/or amendment file content and/or amendment file deposit path time, in described terminal configuration list, upgrade corresponding record.
11. devices as claimed in claim 8, is characterized in that,
Described terminal configuration list maintenance module, when maintenance terminal configured list, also at the path of each application modification registry entry and/or newly-increased registry entry and/or when deleting registry entry and/or edit the registry item content and/or revise system registry list item content, in described terminal configuration list, upgrade corresponding record.
12. devices as claimed in claim 8, is characterized in that,
Described cloud database, also for preserving the reference host process and supporting process and/or all dynamic link library and/or services that create when collected each application program is run;
Described terminal configuration list, also for recording the process and/or dynamic link library and/or service that operationally the created host process of each application program that described terminal is installed and described host process call;
Described compare of analysis module, also compare in database beyond the clouds for extracting process and/or dynamic link library that operationally the created host process of application program to be detected and described host process call according to described terminal configuration list and/or serving, judge the whether true(-)running feed back to described terminal in described terminal of described application program to be detected according to comparison result.
13. devices as claimed in claim 12, is characterized in that,
Described terminal configuration list maintenance module, when maintenance terminal configured list, time also for increasing process and/or newly-increased supporting process and/or newly-increased dynamic link library in each application program newly and/or increasing service and/or deletion process newly, in described terminal configuration list, upgrade corresponding record.
14. devices as described in claim 12 or 13, is characterized in that,
Described compare of analysis module, judges to comprise the feedback that described application program to be detected sends to described terminal when being properly installed in described terminal: point out described application program to be detected to be properly installed in described terminal according to comparison result;
Described compare of analysis module, judge the feedback sent to described terminal when being set correctly in the registration table of described application program to be detected in described terminal according to comparison result, comprising: point out in the registration table of described application program to be detected in described terminal and be set correctly;
Described compare of analysis module, according to comparison result judge described application program to be detected in described terminal during true(-)running to the feedback that described terminal sends, comprising: point out the true(-)running in described terminal of described application program to be detected;
Described compare of analysis module, when not being set correctly when judging that described application program to be detected is not properly installed in described terminal according to comparison result and/or in registration table in described terminal and/or when there is no a true(-)running in described terminal, to the feedback that described terminal sends, comprise following one or more combination: the operation of described application program to be detected of pointing out the incorrect information of described application program to be detected, repair described application program to be detected, stop, clear up described application program to be detected, reinstall described application program to be detected.
CN201210215997.3A 2012-06-26 2012-06-26 A kind of method and device detecting the installment state of application program Active CN102736978B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201210215997.3A CN102736978B (en) 2012-06-26 2012-06-26 A kind of method and device detecting the installment state of application program

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201210215997.3A CN102736978B (en) 2012-06-26 2012-06-26 A kind of method and device detecting the installment state of application program

Publications (2)

Publication Number Publication Date
CN102736978A CN102736978A (en) 2012-10-17
CN102736978B true CN102736978B (en) 2015-09-30

Family

ID=46992519

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201210215997.3A Active CN102736978B (en) 2012-06-26 2012-06-26 A kind of method and device detecting the installment state of application program

Country Status (1)

Country Link
CN (1) CN102736978B (en)

Families Citing this family (30)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103001947B (en) * 2012-11-09 2015-09-30 北京奇虎科技有限公司 A kind of program processing method and system
CN102999606B (en) * 2012-11-21 2015-12-23 东莞宇龙通信科技有限公司 Software delet method and device
CN103023885B (en) * 2012-11-26 2015-09-16 北京奇虎科技有限公司 Secure data processing method and system
CN103067364B (en) * 2012-12-21 2015-11-25 华为技术有限公司 Method for detecting virus and equipment
CN103077353B (en) * 2013-01-24 2015-12-02 北京奇虎科技有限公司 The method and apparatus of Initiative Defense rogue program
CN104102539B (en) * 2013-04-09 2019-06-28 腾讯科技(深圳)有限公司 Obtain the method and device in the bottom library that application program for mobile terminal calls
CN104113443B (en) 2013-04-19 2018-10-02 南京中兴新软件有限责任公司 A kind of network device detection methods, device and cloud detection system
CN103235730A (en) * 2013-04-27 2013-08-07 天津长瑞华通科技发展有限公司 Portable management device based on C/S (client/server) client software and implementation method of device
US9591003B2 (en) * 2013-08-28 2017-03-07 Amazon Technologies, Inc. Dynamic application security verification
CN103473163B (en) * 2013-09-11 2016-10-26 腾讯科技(深圳)有限公司 application program detection method and device
CN103645922B (en) * 2013-12-25 2017-12-22 北京奇虎科技有限公司 It is a kind of that the method, apparatus and system for carrying out software cleaning are inquired about based on cloud
CN103701922B (en) * 2013-12-31 2017-06-06 曙光云计算技术有限公司 The method and system of the application security deployment of PAAS platforms
CN103810105B (en) * 2014-03-06 2016-08-31 中国工商银行股份有限公司 application version detection method and device
CN104932965B (en) * 2014-03-18 2019-05-28 北京奇虎科技有限公司 Object method for real-time monitoring and device
CN104317699A (en) * 2014-07-24 2015-01-28 小米科技有限责任公司 Application program verifying method and device
CN104219323A (en) * 2014-09-18 2014-12-17 深圳市中兴移动通信有限公司 Application downloading method and mobile terminal
CN104239215B (en) * 2014-09-30 2018-02-02 北京奇虎科技有限公司 The investigation method and apparatus of garbageware
CN104346206B (en) * 2014-10-30 2018-06-01 北京奇虎科技有限公司 A kind of method and system of unloaded software rejuvenation installation
CN105117644B (en) * 2015-08-26 2018-08-28 福建天晴数码有限公司 Acquire Android plug-in program method and system
US9870215B2 (en) 2015-11-30 2018-01-16 International Business Machines Corporation Tracking an application installation state
CN105487935B (en) * 2015-12-07 2017-06-23 中南大学 A kind of acquisition methods of taking the initiative in offering a hand based on environment sensing
CN105554096A (en) * 2015-12-11 2016-05-04 鹏博士电信传媒集团股份有限公司 Method and system for realizing cloud game cloud service
CN105631318B (en) * 2015-12-23 2019-04-05 珠海豹趣科技有限公司 A kind of acquisition methods and device of registration table key assignments
CN107786527B (en) * 2016-08-31 2021-11-05 阿里巴巴集团控股有限公司 Method and equipment for realizing service discovery
CN109376505A (en) * 2017-08-02 2019-02-22 武汉斗鱼网络科技有限公司 Guard method and device on a kind of andriod platform to so file
CN107766212B (en) * 2017-11-30 2021-06-01 北京小米移动软件有限公司 Method and device for determining installation state of application program
CN108563453A (en) * 2018-04-02 2018-09-21 郑州云海信息技术有限公司 A kind of recognition methods of application program installation and system
TWI730415B (en) * 2019-09-18 2021-06-11 財團法人工業技術研究院 Detection system, detection method, and an update verification method performed by using the detection method
CN112910882B (en) * 2021-01-28 2022-08-12 山东有人物联网股份有限公司 Network management method, device, system and computer readable storage medium
CN113052641A (en) * 2021-04-21 2021-06-29 湖南快乐阳光互动娱乐传媒有限公司 Processing method and device of activity reward data, electronic equipment and storage medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6560776B1 (en) * 2000-02-18 2003-05-06 Avaya Technology Corp. Software installation verification tool
CN1955971A (en) * 2005-10-27 2007-05-02 北京振戎融通通信技术有限公司 Safety installation method suitable for Java application program
CN101017435A (en) * 2006-04-14 2007-08-15 北京瑞星国际软件有限公司 Method and apparatus used for upgrading software
CN101789888A (en) * 2010-01-12 2010-07-28 腾讯科技(深圳)有限公司 Detection method and device for software installation

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6560776B1 (en) * 2000-02-18 2003-05-06 Avaya Technology Corp. Software installation verification tool
CN1955971A (en) * 2005-10-27 2007-05-02 北京振戎融通通信技术有限公司 Safety installation method suitable for Java application program
CN101017435A (en) * 2006-04-14 2007-08-15 北京瑞星国际软件有限公司 Method and apparatus used for upgrading software
CN101789888A (en) * 2010-01-12 2010-07-28 腾讯科技(深圳)有限公司 Detection method and device for software installation

Also Published As

Publication number Publication date
CN102736978A (en) 2012-10-17

Similar Documents

Publication Publication Date Title
CN102736978B (en) A kind of method and device detecting the installment state of application program
US9804933B2 (en) System differential upgrade method, apparatus, and mobile terminal
US9910743B2 (en) Method, system and device for validating repair files and repairing corrupt software
CN106951345B (en) Consistency test method and device for disk data of virtual machine
CN103150231B (en) The method of computer booting and computer system
US20080148399A1 (en) Protection against stack buffer overrun exploitation
US20160378458A1 (en) Method and device for system application installation package, and terminal
CN107783776B (en) Processing method and device of firmware upgrade package and electronic equipment
CN103518191A (en) Upgrade method, intelligent terminal and upgrade system
WO2020224238A1 (en) Blockchain node depolyment method, device and equipment, and storage medium
CN103019722B (en) A kind of method and device extracting Java network application AKU
WO2015131643A1 (en) Software detection method and device
KR101649909B1 (en) Method and apparatus for virtual machine vulnerability analysis and recovery
WO2016082450A1 (en) Method for upgrading user terminal, and user terminal
US11044096B2 (en) Blockchain based digital identity generation and verification
US11188449B2 (en) Automated exception resolution during a software development session based on previous exception encounters
CN106708550B (en) Method and device for loading shared object library
Kröll et al. Aristoteles–dissecting apple’s baseband interface
JPWO2005103909A1 (en) Security maintenance method, data storage device, security maintenance server, and recording medium recording the program
CN112579330A (en) Method, device and equipment for processing abnormal data of operating system
CN116599881A (en) Cloud platform tenant modeling test method, device, equipment and storage medium
CN106933604A (en) A kind of method for upgrading system and device
CN112596750B (en) Application testing method and device, electronic equipment and computer readable storage medium
CN104239112A (en) Device driver installation method and device
CN112631621A (en) Dependency package management method, device, server and storage medium

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
ASS Succession or assignment of patent right

Owner name: QIZHI SOFTWARE (BEIJING) CO., LTD.

Effective date: 20120910

Owner name: BEIJING QIHU TECHNOLOGY CO., LTD.

Free format text: FORMER OWNER: QIZHI SOFTWARE (BEIJING) CO., LTD.

Effective date: 20120910

C41 Transfer of patent application or patent right or utility model
COR Change of bibliographic data

Free format text: CORRECT: ADDRESS; FROM: 100016 CHAOYANG, BEIJING TO: 100088 XICHENG, BEIJING

TA01 Transfer of patent application right

Effective date of registration: 20120910

Address after: 100088 Beijing city Xicheng District xinjiekouwai Street 28, block D room 112 (Desheng Park)

Applicant after: BEIJING QIHOO TECHNOLOGY Co.,Ltd.

Applicant after: Qizhi software (Beijing) Co.,Ltd.

Address before: The 4 layer 100016 unit of Beijing city Chaoyang District Jiuxianqiao Road No. 14 Building C

Applicant before: Qizhi software (Beijing) Co.,Ltd.

C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
TR01 Transfer of patent right

Effective date of registration: 20220720

Address after: 300450 No. 9-3-401, No. 39, Gaoxin 6th Road, Binhai Science Park, Binhai New Area, Tianjin

Patentee after: 3600 Technology Group Co.,Ltd.

Address before: 100088 room 112, block D, 28 new street, new street, Xicheng District, Beijing (Desheng Park)

Patentee before: BEIJING QIHOO TECHNOLOGY Co.,Ltd.

Patentee before: Qizhi software (Beijing) Co.,Ltd.

TR01 Transfer of patent right
TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20230703

Address after: 1765, floor 17, floor 15, building 3, No. 10 Jiuxianqiao Road, Chaoyang District, Beijing 100015

Patentee after: Beijing Hongxiang Technical Service Co.,Ltd.

Address before: 300450 No. 9-3-401, No. 39, Gaoxin 6th Road, Binhai Science Park, Binhai New Area, Tianjin

Patentee before: 3600 Technology Group Co.,Ltd.