MALWARE(USELESS PROCESS) DECTECT/BLOCKING AND PREVENT RECRUDESCENCE METHOD

摘要

A harmful process detecting/blocking/recurrence preventing method are provided to remove and block an abnormal process in case the abnormal process is operated after detecting a process operated in a background, thereby using computer resources efficiently. In the background of a computer, a process of which the operation waits is detected(S_200). The process and an abnormal process are compared (S_300). If the working standby process with the list of the abnormal process exist, a coinciding process is blocked and a non-coinciding process is activated(S_400). It is searched whether a new process is generated by a user(S_500). If the new process is generated by the user, the process is inserted into a queue(S_600). It is determined whether the process is normal or abnormal(S_700).