| 摘要 |
PURPOSE: A virus detecting device using a white list and a method thereof are provided to reduce time and resources for detecting viruses by omitting a pattern information generation process of a detected normal file. CONSTITUTION: A file/pattern information storage module(S110) stores pattern information for a file, and file information including the date and time of production or correction for the detected file. A detected file selection module(S120) selects one file in which capacity is smaller than predetermined small capacity. A file information extraction/comparison module(S130) extracts the file information of the selected file, and compares the date and time of production or correction with the file information stored in the file/pattern information storage module. When the file information matches to each other, a detected file pattern extraction module(S140) extracts file or pattern information of the file from the file/pattern information storage module. A file processing module(S150) deletes the file or pattern information stored in the file/pattern information storage module by selecting the file including the matched pattern information. [Reference numerals] (S110) File/pattern information storage module; (S120) Detected file selection module; (S130) File information extraction/comparison module; (S140) Detected file pattern extraction module; (S150) File processing module; |
