A virus signature matching method, comprising: generating a virus signature database; wherein the virus signature database comprises signature function identifiers and virus signature type identifiers corresponding to the signature function identifiers; wherein each signature function identifier is identification information of a signature function used to check whether a target file matches a virus signature; each virus signature type identifier identifies a type of computer virus; obtaining signature function attribute values corresponding to the signature function identifiers, wherein each signature function attribute value comprises an offset parameter about a location of data read by the signature function in the target file when the target file is checked; and sorting the signature function identifiers according to the signature function attribute values; obtaining (S102) the target file; loading (S104) the virus signature database, and successively extracting the signature function identifiers from the virus signature database, obtaining (S106) signature functions corresponding to the signature function identifiers, and checking the target file by invoking the signature functions, to obtain a check result corresponding to respective signature function; wherein the check result comprises a value indicating whether the target file matches the virus signature; and for each virus signature type identifier in the virus signature database, obtaining signature function identifiers corresponding to the virus signature type identifier; obtaining check results of the signature functions corresponding to the signature function identifiers, if each of the check results indicates that the target file matches the virus signature, determining that target file is infected with the computer virus identified by the virus signature type identifier. generating a virus signature database; wherein the virus signature database comprises signature function identifiers and virus signature type identifiers corresponding to the signature function identifiers; wherein each signature function identifier is identification information of a signature function used to check whether a target file matches a virus signature; each virus signature type identifier identifies a type of computer virus; obtaining signature function attribute values corresponding to the signature function identifiers, wherein each signature function attribute value comprises an offset parameter about a location of data read by the signature function in the target file when the target file is checked; and sorting the signature function identifiers according to the signature function attribute values; obtaining (S102) the target file; loading (S104) the virus signature database, and successively extracting the signature function identifiers from the virus signature database, obtaining (S106) signature functions corresponding to the signature function identifiers, and checking the target file by invoking the signature functions, to obtain a check result corresponding to respective signature function; wherein the check result comprises a value indicating whether the target file matches the virus signature; and for each virus signature type identifier in the virus signature database, obtaining signature function identifiers corresponding to the virus signature type identifier; obtaining check results of the signature functions corresponding to the signature function identifiers, if each of the check results indicates that the target file matches the virus signature, determining that target file is infected with the computer virus identified by the virus signature type identifier. <EOS>