PROCESSING METHOD, SYSTEM AND DEVICE FOR VIRUS FILE

摘要

A processing method, system and device for a virus file. The method comprises: collecting, by a cloud data platform, virus statistical information, and screening out a virus family file according to the collected virus statistical information (S1); receiving, by a client, the virus family file sent by the cloud data platform, and performing behaviour feature analysis on the virus family file to obtain virus family behaviour information (S2); according to the virus family behaviour information, performing, by the client, virus checking and killing processing on files of the client, and reporting a log which records the virus checking and killing processing to the cloud data platform (S3); analysing, by the cloud data platform, the received log and obtaining update behaviour information (S4); and updating, by the client, the virus family behaviour information according to the update behaviour information (S5). A virus file can be precisely detected and thoroughly removed, and the checking and killing success rate of the virus file can be improved.