公开(公告)号：US08171552B1

公开(公告)日：2012-05-01

申请号：US11353328

申请日：2006-02-14

Applicant: Penner Chang

Inventor： Penner Chang

IPC: G06F21/00

CPC classification number: G06F21/56

Abstract: An anti-virus program executes simultaneously with another anti-virus program by accessing a function (target) driver in the driver model directly instead of traversing each filter driver in the driver model as is conventionally done. The filter driver component of the anti-virus program avoids deadlock and infinite execution loops by bypassing filter drivers of other executing anti-virus programs and other filter drivers and going straight to the driver that will be performing the specific function, such as opening a file for scanning. This is done by having the filter driver component of the anti-virus program obtain directly the handle of the function driver that will perform the function needed by the anti-virus program and thereby avoiding the filter drivers of other programs, specifically other anti-virus programs, that can prevent completion of the required function.

Abstract translation: 通过直接访问驱动程序模型中的功能（目标）驱动程序，而不是像以往那样遍历驱动程序模型中的每个过滤器驱动程序，与另一个防病毒程序同时执行反病毒程序。 防病毒程序的过滤器驱动程序组件通过绕过其他执行的反病毒程序和其他过滤器驱动程序的过滤器驱动程序，直接执行将执行特定功能的驱动程序（例如打开文件）来避免死锁和无限执行循环 用于扫描。 这是通过使反病毒程序的过滤器驱动程序组件直接获取将执行防病毒程序所需功能的功能驱动程序的句柄，从而避免其他程序的过滤器驱动程序，特别是其他防病毒 程序，可以防止完成所需的功能。