| 摘要 |
A recording medium storing a program for detecting a harmful program and a method of detecting the harmful program are provided to remove time interval of spyware detection by detecting the harmful program in real time. A harmful program detecting program(100) comprises a trap management module(110), a virtual event producing module(120) and a decision module(130). The trap management module installs a trap to an API function which is used by an unknown process, and provides a factor value, trap execution information are processing information, which is caught by the trap, to the decision module. The virtual event producing module leads the harmful program to be caught by the trap. The decision module recognizes the existence of the harmful program.
|
