Android殺毒實現原理及實例

一個殺毒軟甲最核心的部分一個是病毒庫一個是殺毒引擎，病毒庫從服務器中獲得，殺毒引擎實際上是判斷程序中的包名和簽名是否匹配病毒庫中的包名和簽名，如果匹配則為病毒，界面使用幀動畫來顯示。

思路：

1.從服務器端把病毒的版本庫信息下載下來將解析的數據存放到List集合中

2.獲取到手機中所有應用程序的包名以及程序的簽名

3.將病毒庫匹配手機應用程序包名及簽名

4.用ScrollView標簽進行自動滾動顯示

關鍵代碼如下：

特洛伊木馬病毒庫的信息：

1. <?xml version="1.0" encoding="utf-8"?>
3. <list>
5. <virus>
6. <name>tory.virus</name>
7. <packname>
8. cn.itcast.virus
9. </packname>
11. <description>
12. 惡意軟件,讀取用戶日志</description>
14. <signature>
15. 3082020730820170a00302010202044ea7598f300d06092a864886f70d010105050030483
16. 10a30080603550406130131310a30080603550408130131310a3008060355040713013131
17. 0a3008060355040a130131310a3008060355040b130131310a30080603550403130131301
18. e170d3131313032363030353132375a170d3231313032333030353132375a3048310a3008
19. 0603550406130131310a30080603550408130131310a30080603550407130131310a30080
20. 60355040a130131310a3008060355040b130131310a3008060355040313013130819f300d
21. 06092a864886f70d010101050003818d0030818902818100d915d7a98cde8bcd69b87ec52
22. 11012ace847de42129a71bf679a059c2c55e893bc0ea886874432ab8b9097724211df6769
23. eacd3381ccac779ab7422d8101320b1e0b14e06ac8ee095b20e52cbe6163e10a87dc410b8
24. a91fb73d53c5bdb4a22d1295c61e04b8f8b68c475e69c1754a1dc35745e7c6ae0275c2620
25. b863b0d9ea8f0203010001300d06092a864886f70d01010505000381810038e1119fbb710
26. 4180fddba4bc8b2c275df63f0df418b7480d8eba2891da20d34d3d083cfed7bb3eb546863
27. c76bc67cc93f2fa0e9377c470881c9a763c99cc035093184bb50f76e74155592eca3566a3
28. 10af55e5fec19d6fdc1a74f226aef485f84389126e8e3f4b59fe2797cbfcac660b9f2cc81
29. e6f3dcaa7cb2001ecc496a7b
31. </signature>
33. </virus>
35. </list>

殺毒引擎：

1. /*
2. * 殺毒引擎（下載病毒庫、獲取程序的包名及簽名並進行匹配）
3. * (non-Javadoc)
4. * @see Android.app.Activity#onTouchEvent(android.view.MotionEvent)
5. */
6. @Override
7. public boolean onTouchEvent(MotionEvent event) {
8. packagenames = new ArrayList<String>();
9. virusResult = new ArrayList<String>();
10. infos = new ArrayList<ApplicationInfo>();
11. animationDrawable.start();//播放掃描病毒的動畫
12. new Thread(){
13. @Override
14. public void run() {
15. try {
16. URL url = new URL("http://192.168.1.168:8080/virus.xml");
17. HttpURLConnection conn = (HttpURLConnection) url.openConnection();
18. InputStream is = conn.getInputStream();
20. //從服務器解析病毒庫並獲取到病毒庫的集合
21. virusbeans = VirusInfo.getVirusInfos(is);
22. TaskInfo taskInfo = new TaskInfo(KillVirusActivity.this); //實例化包資源管理器
24. //獲取到當前手機裡面所有的包名
25. infos = pm.getInstalledApplications(0);
26. for(ApplicationInfo info : infos ){
27. packagenames.add(info.packageName);
28. }
29. int count=0;
31. // 殺毒引擎 根據病毒庫 比對當前系統裡面的程序包名 簽名進行 殺毒
32. StringBuilder sb = new StringBuilder();
33. for(String packname : packagenames){
34. sb.append("正在掃描 "+ packname);
35. sb.append("\n");
36. Message msg = new Message();
37. msg.what = SCANNING;
38. msg.obj = sb;
39. handler.sendMessage(msg);
40. //檢查當前的packname 和對應簽名 http://www.linuxidc.com是不是跟病毒庫裡面的信息一樣
41. for(VirusBean virusbean : virusbeans){
42. if(packname.equals(virusbean.getPackname())&&
43. taskInfo.getAppSignature(packname).equals(virusbean.getSignature()))
44. {
45. virusResult.add(packname);//添加一個病毒
46. }
47. }
48. count ++;//記錄病毒的總數
49. }
50. Message msg = new Message();
51. msg.what = SCANNING_FINISH;
52. msg.obj = count;
53. handler.sendMessage(msg);
54. } catch (Exception e) {
55. e.printStackTrace();
56. }
57. }
58. }.start();
59. return super.onTouchEvent(event);
60. }

顯示病毒掃描信息：

1. Handler handler = new Handler(){
2. @Override
3. public void handleMessage(Message msg) {
4. super.handleMessage(msg);
5. switch (msg.what) {
6. case SCANNING:
7. StringBuilder sb = (StringBuilder) msg.obj;
8. tv_killvirus_info.setText(sb.toString());
9. sv.scrollBy(0, 25);//每次增加都會自動向下移動畫面
10. break;
11. case SCANNING_FINISH:
12. int i = (Integer) msg.obj;
13. StringBuilder sb1 = new StringBuilder();
14. sb1.append("掃描完畢 共掃描 "+ i+ " 個程序");
15. if(virusResult.size()>0){
16. sb1.append("發現病毒 \n");
17. for(String packname : virusResult){
18. sb1.append("病毒名"+ packname);
19. sb1.append("\n");
20. }
21. }
22. tv_killvirus_info.setText(sb1.toString());
23. animationDrawable.stop();
24. break;
25. }
26. }
27. };