| 摘要 |
<p>A method, a device and a system for identifying script virus are provided to improve identification rate of the script virus. The method includes: loading a script file runtime environment；setting, in the script file runtime environment, a characteristic function capturing function, correspondence between the characteristic function capturing function and a characteristic function,and a virus characteristic, by loading and running a characteristic script in the script file runtime environment；searching for the characteristic function in a script to be searched by loading and running the script to be searched in the script file runtime environment,replacing the characteristic function with the corresponding characteristic function capturing function,and obtaining executable codes in the characteristic function；determining whether the executable codes meet the virus characteristic；and reporting that the script to be searched is script virus if the executable codes meet the virus characteristic.</p> |
