Disclosed are a method and device for processing messages. The method includes: determining, when a message sent by software is intercepted, whether the message is a spam message; when the message is not a spam message, having the message displayed in a notification toolbar; and when the message is a spam message, prompting a user in the notification toolbar that the software may be implanted with a malicious plug-in, and providing an option label for the user to judge and select whether to inhibit displaying all messages sent by the software, including the message.