JP3533125B2 - Software management method, computer virus removal system, and recording medium - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a software management method for managing computer virus disinfection software for detecting and disinfecting a computer virus that has infected a computer, a computer virus disinfection system using the software management method, and a recording medium. In particular, the present invention relates to a software management method for managing computer virus removal software for a plurality of computers, a system using the software management method, and a recording medium.

[0002]

2. Description of the Related Art A software program called a computer virus that invades a computer by passing a file by a floppy disk or passing a file on a network in the use of a personal computer and destroys data on a hard disk, It has become a social problem because it is made by people with malicious intent.

To counter this, computer virus extermination software (hereinafter referred to as virus extermination software), which is a program for detecting and exterminating the computer virus, has been developed. In addition, new types of computer viruses are occurring one after another, and the anti-virus software is frequently improved so that it can be detected and removed. In order to effectively protect your computer from computer viruses, it is important to always operate the latest version of virus removal software properly.

Further, in order to protect a system placed in a network environment from a computer virus, it is desirable that virus eliminating software is properly operated on all computers in the system. In order to protect a computer connected to a computer line from a computer virus, various systems that deal with the computer virus have been studied.

In the conventional system described in Japanese Patent Laid-Open No. 11-161517, when it is detected that a device is infected with a computer virus, not only the device in which the infection is detected but also other devices in the system are detected. Also automatically runs a virus removal program to protect your system from infection.

Further, the conventional system described in Japanese Patent Laid-Open No. 10-307776 diagnoses whether or not the received data is infected with a computer virus, and when a computer virus is detected, the receiving side device is informed accordingly. The monitoring device for notifying is notified before the device on the receiving side to prevent reception of data including a computer virus.

Further, in the conventional device disclosed in Japanese Patent Laid-Open No. 09-288577, whether or not the virus detection program is executed based on the startup time, the number of startups, and the virus infection flag when the device is started up. Therefore, the virus detection program is surely executed by detecting the above, and the computer virus is detected at an early stage.

[0008]

The above-mentioned conventional system and the like have the following problems.

In the conventional system described in Japanese Patent Laid-Open No. 11-161517, no consideration has been given to early application of the latest virus extermination software and proper operation, so that a new type of computer virus is generated. However, even if the anti-virus software is updated correspondingly, it may not be applied immediately. If a new type of computer virus invades before the latest anti-virus software is applied and the device is infected with it, the data may be destroyed and the system function may be lost. In addition, there is a possibility of infection if the virus removal software is not properly operated so as to detect the computer virus.

Similarly, the conventional system described in Japanese Patent Laid-Open No. 10-307776 does not consider early application of the latest virus removal software and proper operation. Therefore, a new type of computer virus may be received and infected while the latest version is not applied, or the computer virus may not be detected and may be infected due to improper operation.

Further, although the conventional apparatus described in Japanese Patent Laid-Open No. 09-288577 considers the proper operation of the virus removal software, the application of the latest virus removal software at an early stage is considered. Was not considered. Therefore, there is a possibility that a new type of computer virus may be received and infected while the latest version is not applied.

The present invention has been made in order to solve the above-mentioned problems of the prior art, and is a software management method for applying the latest version of virus removal software early and operating it properly, and its software. It is an object to provide a system using a management method and a recording medium.

[0013]

In order to achieve the above object, the software management method of the present invention provides computer virus removal software for detecting and removing a computer virus that has infected at least one computer connected by a computer line. A software management method for managing, wherein a pseudo computer virus, which is a known and harmless computer virus, is stored in advance in the computer, and the computer virus removal software is periodically executed to detect the pseudo computer virus. The computer virus disinfection software is executed by determining whether the computer virus disinfection software is regularly executed based on the date and time when the computer virus disinfection software is executed. Based on the hardware version information,
It is a software management method for determining whether or not the computer virus extermination software is the latest, and for determining whether or not the computer virus extermination software normally operates based on the result of the extermination.

Therefore, by periodically causing the computer to detect the pseudo computer virus, it is possible to always confirm whether or not the latest version of the computer virus removal software is normally operated in the computer.

Further, by using the pseudo computer virus, the computer virus name to be detected when the computer virus extermination software normally operates and the extermination result can be assumed in advance.

If the computer virus removal software is not the latest, the computer virus removal software may be updated.

When the latest computer virus removal software is provided from the outside, the computer virus removal software is sent to the computer,
The computer virus removal software may be applied to all the computers.

Therefore, since the latest version of the virus removal software is applied to all the computers in a batch from the monitoring device, the new version of the virus removal software can be applied to all the computers at an early stage.

On the other hand, the computer virus disinfection system of the present invention is a computer virus disinfection system that detects and disinfects a computer virus that has infected at least one computer connected by a computer line, and receives a notification from the computer. The computer virus removal software is executed based on the version information of the computer virus removal software to determine whether the computer virus removal software is regularly executed based on the date and time when the computer virus removal software is executed. The computer has a monitoring device that determines whether the computer virus removal software operates normally based on the result of the removal, and the computer has a known harmless code. A pseudo computer virus, which is a computer virus, is stored, the computer virus disinfection software is periodically executed to detect and disinfect the pseudo computer virus, and the computer virus disinfection software is executed at the date and time when it was executed. Version information of the computer virus removal software and the result of the removal are notified to the monitoring device.

It should be noted that, when the computer virus extermination software is not the latest, the monitoring device
The latest computer virus removal software program may be transmitted to the computer, and when the computer receives the program, the computer virus removal software that is periodically executed may be updated to the latest version.

When the latest computer virus removal software is registered, the monitoring device sends the computer virus removal software program to the computer, and the computer uses the computer virus detection and removal computer virus. The anti-virus software may be automatically updated with the received one.

Further, the recording medium of the present invention causes a computer storing a pseudo computer virus, which is a known and harmless computer virus, to periodically execute computer virus removal software to detect the pseudo computer virus. Date and time when the anti-virus software was executed, version information of the computer anti-virus software that was executed,
And the program for outputting the removal result is recorded.

Further, another recording medium of the present invention has a processor and a memory, and a monitor connected to at least one computer by a computer line receives a notification from the computer that executes the computer virus removal software. Then, it is determined whether or not the computer virus removal software is regularly executed according to the date and time when the computer virus removal software is executed, and it is determined whether or not the latest version is executed according to the version information of the computer virus removal software. A program is recorded for determining whether or not the computer virus extermination software normally operates for extermination based on the result of virus extermination.

[0024]

BEST MODE FOR CARRYING OUT THE INVENTION Next, an embodiment of the present invention will be described.
A detailed description will be given with reference to the drawings.

FIG. 1 is a system configuration diagram showing a configuration example of a computer virus extermination system of the present invention.

FIG. 2 is a schematic block diagram showing a configuration example of a monitoring device included in the computer virus extermination system of the present invention.

FIG. 3 is a schematic block diagram showing an example of the configuration of an operation information collecting device included in the computer virus extermination system of the present invention.

FIG. 4 is a schematic block diagram showing an example of the configuration of an operation device included in the computer virus extermination system of the present invention.

In FIG. 1, the computer virus extermination system includes at least one operation device 51 _{1 to} 51 _{N in} which computer virus extermination means for detecting and exterminating computer viruses and deleting infected files is operated. Each operating device 51 _{1 to} 51 _N is connected via a computer line to each operating device 51 _{1 to} 5 _N.
The operation information collecting device 12 for collecting the operation status of the computer extermination means in 1 _N, and the operation information collecting device 12 are connected to each other via the computer line.
The monitoring device 1 receives the operation status of the computer virus exterminating means _{11 to} 51 _N from the operation information collecting device 12 and monitors whether the computer virus exterminating means is operating properly.

Here, the system on the monitored side including the operation devices 51 _{1 to} 51 _N and the operation information collecting device 12 is called a monitored system 11.

The connection by the computer line is L
It may be an AN or public line, and the scale of the system is not limited.

As shown in FIG. 2, the operation device 51 has a computer virus exterminating means 52 for detecting and exterminating computer viruses, and a computer virus exterminating means 52.
From the operation information collecting device 12, a computer virus infection information generation means 53 for generating information about a computer virus detected based on the result of the operation of the computer, information indicating an infection state, information on whether or not the virus has been removed, and virus removal software. The configuration includes automatic virus removal software automatic updating means 55 for automatically updating to the latest version received, and computer line communication means 54 for communicating with the operation information collecting device 12.

As shown in FIG. 3, the operation information collecting device 12 also creates a schedule for executing a pseudo virus check for periodically diagnosing that the latest version of the virus removal software is properly operated. Means 13, a pseudo virus check execution means 14 for executing a pseudo virus check at a timing given by the schedule means 13, and a known and harmless given in advance for operation confirmation according to instructions from the pseudo virus check execution means 13. Computer virus disinfecting means 15 for detecting pseudo computer viruses and the like which are various computer viruses, and based on the results of the operations of the computer virus disinfecting means 52, detection date and time, version information indicating the version of the virus disinfecting software, computer virus name Computer virus infection information generation means 16 for generating computer virus infection information such as infected files and the result of the disinfection indicating whether the disinfection has been normally performed, and the computer virus infection information for identifying the monitored system 11. A computer virus detection information generating means 17 for generating computer virus detection information with an identification number and notifying the monitoring device 1, and whether or not the information received from the monitoring device 1 includes the latest version of virus removal software. The latest software determination means 20 for determining whether or not, a response method display means 21 for displaying a response method against a computer virus based on a notification from the operation device 1, and the latest version of the virus removal software received from the monitoring device 1 to its own device. Attachment file registration means 22 to register, and registration For storing anti-virus software, and the attached file storage unit 23 constituted by a memory, the latest software distribution unit 24 for distributing the latest version of the anti-virus software to the operation device 51 ₁ to 51 _N, the monitoring device 1 A first computer line communication means 18 for communicating with the operating device 51.
_{1 to} 51 _N and second computer line communication means 19 for communicating.

Further, as shown in FIG. 4, the monitoring device 1 analyzes the computer virus name, the state of infection, whether the latest version is operated, etc. based on the information notified from the operation information collecting device 12. Information analysis means 3
And a monitored system information updating unit 4 for updating monitored system information, which is information related to the operating state of the virus removal software in the monitored system 11 based on the analysis result of the information analysis unit 3, and the monitored system information. And the monitored system information storage unit 6 for monitoring, and whether there is a problem in the operation of the monitored system 11 based on the monitored system information stored in the monitored system information storage unit 6. A monitored system information monitoring means 5 for notifying the operation information collecting means 12 of warnings and coping methods;
The latest software storage unit 9 composed of a memory for storing the virus removal software, the latest software registration means 8 for registering the latest version of the virus removal software in the latest software storage unit 9, and the latest software storage unit 9 Latest software transmitting means 7 for transmitting the latest version of the virus removal software to the operation information collecting device 12
And a computer line communication means 2 for communicating with the operation information collecting device 12.

Next, the operation of the computer virus removal system of the present invention when diagnosing the operating state of the monitored system will be described in detail with reference to FIGS.

FIG. 5 is a flow chart showing an operation example of the monitored system when diagnosing the operating state of the monitored system.

FIG. 6 is a flow chart showing an operation example of the monitoring device when diagnosing the operating state of the monitored system.

In FIG. 5, first, the operation information collection device 1
2 executes a pseudo virus check at regular time intervals (step A1) (step A2). When a pseudo computer virus is detected (step A3), the detection date and time is obtained (step A4), the computer virus name is obtained (step A5), and the computer virus exterminating means 1 is obtained.
5 is obtained (step A6), the computer virus detection device identification information that displays the device that has detected the computer virus is obtained (step A7), and the virus removal software used in the computer virus removal means 14 is used. The version information is acquired (step A8), and computer virus infection information is generated based on these pieces of information (step A9).

Subsequently, the monitored system identification number is added to the generated computer virus infection information (step A10) to generate computer virus detection information for notifying the monitoring device 1 (step A11). 1 (step A12).

In FIG. 6, when the monitoring device 1 receives the notification (step B1), it first extracts the monitored system identification number from the notified information (step B2) and extracts the version information of the virus removal software. (Step B3), the detection date and time of the computer virus is extracted (Step B4), and the information about the monitored system is updated (Step B5).

Further, the latest version information of the virus removal software registered in itself is extracted (step B6), and whether the version of the virus removal software is the latest version is extracted from the version information extracted in step B3. A determination is made (step B7).

If the result of determination in step B7 is that the virus removal software used in the monitored system 11 is not the latest version, the latest version of the virus removal software program is acquired (step B
8) The address of the target operation information collection device 12 is extracted (step B9), and the program file is transmitted to the operation information collection device 12 (step B10).

If the result of determination in step B7 is that the virus detection software used in the monitored system 11 is the latest version, no related processing is performed.

Further, information on the removal result of the computer virus removal means 15 is extracted from the information received in step B1 (step B11), and it is judged whether or not there is a problem in the removal result (step B12). .

If there is no problem, the address of the target operation information collecting device 12 is extracted (step B13), and it is indicated that there is "no problem" as information for judging the handling method for the operation information collecting device 12. Information is transmitted (step B14).

If there is a problem, the address of the target operation information collecting device 12 is extracted (step B15), and it is indicated that there is a problem as information for judging the handling method for the operation information collecting device 12. Information is transmitted (step B16).

In FIG. 5, the operation information collection device 12 determines whether or not the latest version of the virus removal software is attached to the information received from the monitoring device 1 (step C1). If the latest version virus removal software is not attached, the method for dealing with the problem is displayed on the screen and the process is terminated (step C2). If the latest version of the virus removal software is attached, it is stored in the attached file storage means 23 (step C
After 3), it is delivered to each of the operation devices 51 _{1 to} 51 _N (step C4).

[0048] received the delivery from the operation information collecting device 12 (step D1) each operating device 51 ₁ to 51 _N updates the virus elimination software to the latest version (step D2).

Next, the operation when the computer virus removal system of the present invention detects an abnormal operation of the monitored system will be described in detail with reference to FIG.

FIG. 7 is a flow chart showing an operation example of the computer virus extermination system of the present invention when an abnormal operation of the monitored system is detected.

In FIG. 7, the monitoring device 1 acquires the detection date and time stored in the monitored system information storage unit 6 (step E1), and checks whether the elapsed time from the detection date and time to the present exceeds a predetermined value. A judgment is made (step E2).

If the elapsed time does not exceed the predetermined value, there is no problem, and the related processing is ended.

If the elapsed time exceeds the predetermined value, a warning message indicating that there is some problem and it is necessary to take action is displayed on the screen (step E3), and the address of the target operation information collecting apparatus 12 is further displayed. Is extracted (step E4), and a warning message is transmitted to the operation information collection device 12 (step E5).

Upon receipt of the warning message, the operation information collection device 12 displays the warning message on the screen (step F
1).

Therefore, by periodically causing the monitored system to detect a pseudo computer virus, it is possible to constantly check whether the latest version of the virus removal software is operating normally in the monitored system. It is possible to immediately detect the non-operation status or the operation status of the old version.

Further, by using the pseudo computer virus, the computer virus name to be detected when the computer virus extermination software operates normally and the extermination result can be assumed in advance, and the computer virus extermination software can be normally operated. You can easily and accurately determine whether or not

Next, the operation of the computer virus removal system of the present invention when the latest version of the virus removal software is applied to the operation device will be described in detail with reference to FIG.

FIG. 8 is a flow chart showing an operation example of the computer virus removal system of the present invention when the latest version of the virus removal software is applied to the operation device.

In FIG. 8, the monitoring device 1 is always waiting for the latest version of the virus removal software to be provided (step G1), and when the latest version is provided, the version management information in the latest software storage unit 9 is updated. (Step G2). Then, the latest version of the virus removal software is stored in the latest software storage unit 9 (step G3).

Further, the address of the operation information collection device 12 to which the latest version should be applied is extracted (step G4),
The latest version of virus removal software is transmitted to the operation information collection device 12 (step G5).

[0061] Operation has received the latest version of the anti-virus software information collecting device 12 stores it in the attached file storage section 23 (step H1), further distributed to each operation device 51 ₁ to 51 _N (Step H2 ).

[0062] received the delivery from the operation information collecting device 12 (step I1) each operating device 51 ₁ to 51 _N is automatically updated to the latest version disinfect software (step I2).

[0063] Thus, in a batch from the monitoring device 1, since thereby the latest version of the anti-virus software in all operational device 51 ₁ to 51 _N, the total operating device 51 ₁
It is possible to apply a new version of virus removal software to 51 _N early and effectively remove new types of computer viruses. In addition, all operating devices 51 _{1 to} 51 _N
Since it is applied collectively to, the operation man-hours of the system can be reduced.

Next, the operation of the computer virus exterminating system when the operation device detects a computer virus will be described in detail with reference to FIGS.

FIG. 9 is a flow chart showing an operation example of the monitored system when the operation device 51 detects a computer virus.

FIG. 10 is a flow chart showing an operation example of the monitoring device when the operation device 51 detects a computer virus.

In FIG. 9, when the operating device 51 executes the computer virus exterminating means 52 and detects a computer virus (step J1), it acquires the date and time of detection (step J2) and acquires the detected computer virus name ( In step J3), information regarding the removal result of the computer virus removal means 52 such as the deleted file name is acquired (step J4), and the operation device 51 in which the computer virus is detected is identified, whether the removal has been performed normally. To obtain identification information (step J
5) Obtain the version information of the used virus extermination software (step J6), generate computer virus infection information based on these information (step J7), and send it to the operation information collection device 12.

Upon receipt of the computer virus infection information (step K1), the operation information collecting device 12 adds the monitored system identification number (step K2) and generates computer virus detection information (step K3), and the monitoring device 1 (Step K4).

In FIG. 10, when the monitoring device 1 receives the computer virus detection information (step L1), the monitoring system detection number is extracted (step L2), the version information is extracted (step L3), and the computer virus detection date and time. Is acquired (step L4) and the monitored system information is updated (step L5).

Further, the latest version information of the virus removal software registered in itself is extracted (step L6), and it is determined whether the version of the virus removal software extracted in step L3 is the latest version. (Step L7).

If the result of determination in step B7 is that the virus removal software used in the monitored system 11 is not the latest version, the latest version of the virus removal software program is acquired (step L
8) The address of the target operation information collection device 12 is extracted (step L9), and the program file is transmitted to the operation information collection device 12 (step L10).

If the result of determination in step L7 is that the virus detection software used in the monitored system 11 is the latest version, no related processing is performed.

Further, information on the removal result of the computer virus removal means 15 is extracted from the information received in step L1 (step L11), and it is determined whether or not there is a problem in the removal result (step L12). .

If there is no problem, the address of the target operation information collecting device 12 is extracted (step L13), and it is indicated that there is "no problem" as information for judging the handling method for the operation information collecting device 12. The information is transmitted (step L14).

If there is a problem, the address of the target operation information collecting device 12 is extracted (step L15), and it is indicated that there is a problem as information for judging the handling method for the operation information collecting device 12. The information is transmitted (step L16).

In FIG. 9, the operation information collection device 12 determines whether or not the latest version of the virus removal software is attached to the information received from the monitoring device 1 (step M1). If the latest version of the virus removal software is not attached, the countermeasure method is displayed on the screen and the process is terminated (step M2). If the latest version of the anti-virus software has been appended, after storing the attached file storage unit 23 (step M3), distributed to each operation device 51 ₁ to 51 _N (step M4).

[0077] received a delivery from the operational information collection device 12 (step N1) each operating unit 51 ₁ ~51 _N will automatically update to the latest version of the anti-virus software (step N2).

Therefore, whichever operating device 51 detects the computer virus, the monitoring device 1 is immediately notified, so that the system administrator can recognize it and the system administrator can take appropriate measures.

The functions of the above-described respective devices of the present invention may be realized by software.

FIG. 11 is a schematic block diagram showing a configuration example when the function of the monitoring device is realized by software.

In FIG. 11, a monitoring device 901 is a processor 90 that executes a software program that causes a computer to operate as the above-described monitoring device of the present invention.
2, a memory 903 in which a program is recorded, an input device 904 for an operator to operate the monitoring device 901,
This is a configuration having a display device 905 for displaying the removal result of the monitoring device 901 to the operator.

The program for operating the above-mentioned monitoring device may be recorded in the recording medium 906, in which case the processor 902 can read the program and the like from the recording medium 906 and record it in the memory 903. The recording medium 906 may be a magnetic disk, a semiconductor memory or other recording medium.

The functions of the operation information collection device and the operation device of the present invention may also be realized by software.

In this case, the configuration of the operation information collecting device and the operation device is the same as that of the monitoring device 901, except that each device has a program for controlling each device recorded therein.

A program for causing a device having a processor and a memory to operate as an operation information collecting device and a program for causing a device having a processor and a memory to operate as an operating device are a magnetic disk and a semiconductor. It may be recorded in a memory or other recording medium.

[0086]

As described above, the present invention has the following effects.

By periodically causing the computer to detect the pseudo computer virus, it is possible to always confirm whether or not the latest version of the computer virus removal software is normally operating in the computer.
It is possible to immediately detect that the computer virus removal software is not in operation or the old version is in operation.

Further, by using the pseudo computer virus, the computer virus name that should be detected when the computer virus extermination software normally operates and the extermination result can be assumed in advance, and the computer virus extermination software can be normally operated. You can easily and accurately determine whether or not

Further, since the latest version of the virus removal software is applied to all the computers from the monitoring device at once, the new version of the virus removal software can be applied to all the computers at an early stage, and the new type of computer virus is removed. Is effectively done. In addition, since it is applied collectively to all computers, the number of system operation man-hours is reduced.

[Brief description of drawings]

FIG. 1 is a system configuration diagram showing a configuration example of a computer virus extermination system of the present invention.

FIG. 2 is a schematic block diagram showing a configuration example of a monitoring device included in the computer virus extermination system of the present invention.

FIG. 3 is a schematic block diagram showing a configuration example of an operation information collection device included in the computer virus extermination system of the present invention.

FIG. 4 is a schematic block diagram showing a configuration example of an operation device included in the computer virus extermination system of the present invention.

[Fig. 5] When diagnosing the operating state of the monitored system,
It is a flowchart which shows the operation example of a monitored system.

FIG. 6 is used when diagnosing the operational status of the monitored system,
It is a flowchart which shows the operation example of a monitoring apparatus.

FIG. 7 shows a case where an abnormal operation of a monitored system is detected,
It is a flowchart which shows the operation example of the computer virus extermination system of this invention.

FIG. 8 is a flowchart showing an operation example when the latest version of the virus removal software of the computer virus removal system of the present invention is applied to the operation device.

FIG. 9 is a flowchart showing an operation example of the monitored system when the operation device 51 detects a computer virus.

FIG. 10 is a flowchart showing an operation example of the monitoring device when the operation device 51 detects a computer virus.

FIG. 11 is a schematic block diagram showing a configuration example when the function of the monitoring device is realized by software.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 monitoring device 2 computer line communication means 3 information analysis means 4 monitored system information updating means 5 monitored system information monitoring means 6 monitored system information storage section 7 latest software transmission means 8 latest software registration means 9 latest software storage section 11 Monitoring system 12 Operation information collecting device 13 Scheduling means 14 Pseudo virus check executing means 15 Computer virus exterminating means 16 Computer virus infection information generating means 17 Computer virus detection information generating means 18 First computer line communication means 19 Second computer line communication means 20 latest soft decision unit 21 corresponding method display section 22 attachment registration means 23 attached file storage unit 24 latest software distribution unit 51 ₁ to 51 _N operation device 52 a computer virus elimination means 53 computer viruses sensation Information generating means 54 computer line communication unit 55 disinfect automatic software updating means 101 computer line 102 computer line 901 monitoring device 902 processor 903 memory 904 input device 905 display device 906 a recording medium

Claims (8)

(57) [Claims] 1. A software management method for managing computer virus disinfection software for detecting and disinfecting a computer virus that has infected at least one computer connected by a computer line, which is known and harmless to the computer in advance. A pseudo computer virus that is a computer virus is stored, the computer virus disinfection software is periodically executed to detect and disinfect the pseudo computer virus, and based on the date and time when the computer virus disinfection software is executed, It is determined whether or not the computer virus removal software is regularly executed, and based on the version information of the executed computer virus removal software, the computer virus removal software is executed. E A is equal to or up to date, based on the result of the removal, software management method of determining whether a computer virus elimination software is operating properly. 2. The software management method according to claim 1, wherein if the computer virus removal software is not the latest, the computer virus removal software is updated to the latest. 3. The computer virus removal software according to claim 1, wherein when the latest computer virus removal software is provided from the outside, the computer virus removal software is sent to the computers and the computer virus removal software is applied to all the computers. Software management method. 4. A computer virus disinfection system for detecting and disinfecting a computer virus that has infected at least one computer connected by a computer line, wherein the computer virus disinfection software is executed in response to a notification from the computer. It is determined whether the computer virus removal software is regularly executed based on the date and time, and whether the computer virus removal software executed based on the version information of the computer virus removal software is the latest version. Then, the computer virus disinfection software has a monitoring device that determines whether or not the computer virus disinfection software operates normally based on the disinfection result, and the computer is a pseudo computer virus that is a known and harmless computer virus. The computer virus extermination software is stored and periodically executed to detect and exterminate the pseudo computer virus, the date and time when the computer virus extermination software is executed, and the version information of the computer virus extermination software executed. , And a computer virus disinfection system for notifying the monitoring device of the disinfection result. 5. The monitoring device, when the computer virus removal software is not the latest, sends the latest computer virus removal software program to the computer, and the computer periodically receives the program. The computer virus disinfection system according to claim 4, wherein the computer virus disinfection software that is executed dynamically is updated. 6. The monitoring device, when the latest computer virus removal software is registered, sends the computer virus removal software program to the computer, and the computer uses the computer virus detection and removal computer virus. The computer virus removal system according to claim 4, wherein the virus removal software is automatically updated to the received software. 7. A computer in which a pseudo computer virus, which is a known and harmless computer virus, is stored is caused to periodically execute computer virus removal software to detect the pseudo computer virus, and the computer virus removal software is executed. A recording medium on which a date and time, version information of the executed computer virus removal software, and a program for outputting the removal result are recorded. 8. A monitoring device, which has a processor and a memory and is connected to at least one computer by a computer line, receives a notification from the computer that executed the computer virus removal software, and the computer virus removal software executes the notification. It is made to determine whether or not it is being executed periodically according to the date and time, and it is determined whether or not the latest version has been executed by the version information of the computer virus removal software, and the computer is based on the result of the removal of the computer virus. A recording medium in which a program for determining whether or not the virus removal software has normally performed the removal operation is recorded.