METHOD AND DEVICE FOR DETERMINING PROPAGATION RELATIONSHIP OF TROJAN HORSE FILES

摘要

A method for determining a propagation relationship of Trojan horse files and a device there of are disclosed according to an embodiment of the invention, the method may includes: step S1, adding an current Trojan horse file into a corresponding level of a propagation relationship tree; step S2, determining whether a preset condition is met by the current Trojan horse file, proceeding with step S3 when the preset condition is not met, or proceeding with step S4 when the preset condition is met; step S3, searching parent Trojan horse files of a Trojan horse file, setting one of the parent Trojan horse files as an current Trojan horse file and proceeding with steps S1 to S3; step S4, showing the propagation relationship tree in a preset manner. The technical solution according to an embodiment of the invention is advantageous to improve a probability of finding a Trojan horse propagation source.