The invention discloses an information processing method and a server. The information processing method comprises the steps of acquiring at least one executable file with a specified type, extracting at least one first operation instruction from the at least one executable file with the specified type, determining whether the first operation instruction feature satisfies a preset strategy or not, if so, determining the first operation instruction as a feature instruction; extracting a feature value of the feature instruction, and adopting the feature value of the feature instruction for configuring a virus classifying model, and performing analysis to obtain virus structural feature parameters; in recognition of at least one to-be-detected file according to the virus classifying model, extracting at least one second operation instruction from the at least one to-be-detected file, determining whether the feature value of the second operation instruction satisfies the virus structural feature parameters or not, if so, recognizing that the to-be-detected file is a virus file.