Apparatus and method for on-line searching virus

The invention relates to an on-line killing virus device and method based on the network. An on-line killing virus device is used for the user's terminal and the server terminal through the checking and killing for the local computer system of the network. The invention is characterized in that the user's terminal contains a user's terminal program module, and the server terminal contains a server terminal program module. Among these, the user's terminal program module uploads the document waiting for checking virus or a calibration valve of the virus document, and receives the checking result returned from the server terminal program module; the server terminal program terminal checks and kills the virus for the virus documents according to the information from the calibration valve checking the virus document or using virus engine, and returns the checking result to the user's terminal program module. The invention makes the on-line killing virus deploy simply without installing a big volume virus library at the user's terminal and without updating the virus data at the user's terminal, which provides with a quick checking virus service.