Malware removal method and system, and computer storage medium

A malware removal device, comprising:

• non-transitory computer readable storage medium to store registry(ies), files and program(s), and
• computer hardware configured, including configured by the program(s), to implement modules to:
• during start up of an operating system program, start a core file and build kernel driver environment in a kernel layer for the operating system , then load a driver in the built kernel driver environment;
• read, by the driver in the kernel layer, a configuration file to obtain a registry and file path of a malware;
• and
• delete, by the driver in the kernel layer, a registry and file of the malware according to the obtained registry and file path of the malware.

A malware removal device, comprising:

• non-transitory computer readable storage medium to store registry(ies), files and program(s), and
• computer hardware configured, including configured by the program(s), to implement modules to:
• read by a driver in a kernel layer for an operating system program to obtain a registry path of a malware, when the operating system shutting down and releasing a registry system for the operating system;
• and
• call a registry uninstall function to delete a registry of the malware according to the registry path of the malware.

A non-transitory computer storage medium for storing computer-executable instructions used for controlling a method of removing malware in a computer that executes an operating system, wherein the method comprises:

• during start up of the operating system, starting a core file and building a kernel driver environment in a kernel layer for the operating system, then loading a driver in the built kernel driver environment;
• reading, by the driver in the kernel layer, a configuration file to obtain a registry and file path of a malware;
• and
• deleting, by the driver in the kernel layer, a registry and file of the malware according to the obtained registry and file path of the malware.