The embodiment of the invention provides a virus detection method and device, and the method comprises the steps: carrying out the search from a preset virus analysis website according to the annotation of a preset virus classification keyword of a ransovirus, and obtaining the suspected virus information of the ransovirus; acquiring characteristic parameters in the suspected virus information; and detecting whether the suspected virus information is ransovirus type virus information according to the characteristic parameters. According to the embodiment of the invention, the timeliness of virus detection is improved.