CN103809955A - Method and device for ending process - Google Patents
Method and device for ending process Download PDFInfo
- Publication number
- CN103809955A CN103809955A CN201210460584.1A CN201210460584A CN103809955A CN 103809955 A CN103809955 A CN 103809955A CN 201210460584 A CN201210460584 A CN 201210460584A CN 103809955 A CN103809955 A CN 103809955A
- Authority
- CN
- China
- Prior art keywords
- application program
- tail
- tail process
- process corresponding
- default
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Stored Programmes (AREA)
Abstract
The invention discloses a method and a device for ending a process and belongs to the technical field of communication. The method comprises the steps of detecting whether a tail process corresponding to an application program exists, wherein the tail process is the process, corresponding to the application program, still running after the application program is closed; if yes, ending the tail process corresponding to the application program. The device comprises a detection module and an ending module. According to the method for ending the process, the tail process is automatically ended when the tail process corresponding to the application program still runs according to a preset tail process blacklist, manual operation of a user is not needed, the operation is simple and time is saved.
Description
Technical field
The present invention relates to communication technical field, particularly a kind of method and apparatus that finishes process.
Background technology
Along with the development of the communication technology, the various application programs such as document process, drawing, chat emerge in an endless stream, and the application program that user installs in computing machine is also more and more.In the time that user need to use certain application program, open certain application program, certain application program can realize operation by one or more processes.When user does not use certain application program, to close after certain application program, process corresponding to certain application program also will finish operation.But, close at present after certain application program, can there is the residual situation of process, to close after certain application program, process corresponding to certain application program all do not finish operation, still has the process of part in operation in process corresponding to certain application program.This situation easily causes calculator memory to be taken without reason, expend a large amount of Internet resources.
Existing solution to the problems described above is that user opens system for computer process list, searches the process corresponding with the application program of closing from system process list, and makes process corresponding to application program finding with close finish operation.
But realizing in process of the present invention, inventor finds that prior art at least has following problem:
The method of prior art, needs user to operate by hand, and complicated operation, loses time.
Summary of the invention
In order to solve the problem of prior art, the embodiment of the present invention provides a kind of method and apparatus that finishes process.Described technical scheme is as follows:
On the one hand, provide a kind of method that finishes process, described method comprises:
According to default tail process blacklist, detect the tail process corresponding with application program that whether have; Wherein, described tail process refers to closes after described application program, the process still moved corresponding with described application program;
If had, finish the tail process corresponding with described application program.
On the other hand, provide a kind of device that finishes process, described device comprises:
Detection module, for according to default tail process blacklist, detects the tail process corresponding with application program that whether have; Wherein, described tail process refers to closes after described application program, the process still moved corresponding with described application program;
Finish module, for being to have in the testing result of described detection module, finish the tail process corresponding with described application program.
The beneficial effect that the technical scheme that the embodiment of the present invention provides is brought is:
By according to default tail process blacklist, detect and have the tail process corresponding with application program in the time of operation, automatically finish tail process, do not need user's manual operations, simple to operate, can save time.
Accompanying drawing explanation
In order to be illustrated more clearly in the technical scheme in the embodiment of the present invention, below the accompanying drawing of required use during embodiment is described is briefly described, apparently, accompanying drawing in the following describes is only some embodiments of the present invention, for those of ordinary skills, do not paying under the prerequisite of creative work, can also obtain according to these accompanying drawings other accompanying drawing.
Fig. 1 is a kind of method flow diagram that finishes process that the embodiment of the present invention one provides;
Fig. 2 is a kind of method flow diagram that finishes process that the embodiment of the present invention two provides;
Fig. 3 is a kind of block diagram representation of pointing out end process that the embodiment of the present invention two provides;
Fig. 4 is the block diagram representation that a kind of process that the embodiment of the present invention two provides successfully finishes;
Fig. 5 is the block diagram representation that checking and killing virus is carried out in a kind of prompting that the embodiment of the present invention two provides;
Fig. 6 is the method flow diagram that another kind that the embodiment of the present invention two provides finishes process;
Fig. 7 is the apparatus structure schematic diagram that the first that the embodiment of the present invention three provides finishes process;
Fig. 8 is the apparatus structure schematic diagram that the second that the embodiment of the present invention three provides finishes process;
Fig. 9 be the embodiment of the present invention three provide the third finish the apparatus structure schematic diagram of process;
Figure 10 is the apparatus structure schematic diagram that the embodiment of the present invention three provide the 4th kind finishes process;
Figure 11 is the apparatus structure schematic diagram that the embodiment of the present invention three provide the 5th kind finishes process;
Figure 12 is the apparatus structure schematic diagram that the embodiment of the present invention three provide the 6th kind finishes process.
Embodiment
For making the object, technical solutions and advantages of the present invention clearer, below in conjunction with accompanying drawing, embodiment of the present invention is done preferably to describe in detail.
It should be noted that, for convenience of explanation, will close after application program in the embodiment of the present invention, corresponding with this application program is still called tail process in the process of operation.
Embodiment mono-
The embodiment of the present invention provides a kind of method that finishes process, and referring to Fig. 1, the method comprises:
101: according to default tail process blacklist, detect the tail process corresponding with application program that whether have; Wherein, tail process refers to closes after this application program, the process still moved corresponding with this application program.
102: if had, finish the tail process corresponding with this application program.
Preferably, according to default tail process blacklist, detect whether have the tail process corresponding with this application program, comprising:
Inquire about default tail process blacklist, judge in default tail process blacklist whether have the tail process corresponding with this application program; Wherein, default tail process blacklist comprises the title of the title of the tail process of obtaining in advance and application program corresponding to each tail process;
If had, obtain current system process list;
Inquire about current system process list, judge in current system process list, whether to have the tail process corresponding with this application program;
If had, determine the tail process corresponding with this application program that have.
Preferably, the acquisition methods of the list in default tail process blacklist, comprising:
Monitor the process that each user uses various application programs, collect the application program that has tail process;
Record has the title of application program of tail process, and has the title of tail process corresponding to the application program of tail process;
Statistics has the occurrence number of tail process corresponding to the application program of tail process;
Whether the occurrence number that judgement has tail process corresponding to the application program of tail process is greater than default process occurrence number threshold value;
If be greater than, will have the title of application program of tail process, and have the title of tail process corresponding to the application program of tail process, be recorded in default tail process blacklist.
Preferably, the acquisition methods of the list in default tail process blacklist, comprising:
Monitor the process that each user uses various application programs, collect the application program that has tail process;
Record has the title of application program of tail process, and has the title of tail process corresponding to the application program of tail process;
Statistics has the number of run of application program of tail process, and has the occurrence number of tail process corresponding to the application program of tail process;
Calculating has the occurrence number of tail process corresponding to the application program of tail process and has the ratio between the number of run of application program of tail process;
Judgement has the occurrence number of tail process corresponding to the application program of tail process and has the ratio between the number of run of application program of tail process, whether is greater than default process and occurs ratio threshold value;
If be greater than, will have the title of application program of tail process, and have the title of tail process corresponding to the application program of tail process, be recorded in default tail process blacklist.
Preferably, after finishing tail process, also comprise:
Judge whether successfully to finish tail process;
If successfully do not finish tail process, checking and killing virus is carried out in prompting.
Preferably, if had, finish the tail process corresponding with this application program, comprising:
If had, whether prompting finishes tail process;
Judge whether to receive the instruction that finishes tail process;
If received, finish tail process.
Preferably, according to default tail process blacklist, detection also comprises before whether having the tail process corresponding with application program:
Obtain the message of closing application program.
Particularly, can be to get after the message of closing application program, just carry out according to default tail process blacklist at once, detect the tail process corresponding with this application program that whether have; Also can be, get after the message of closing application program, after default time interval of interval, then carry out according to default tail process blacklist, detect the tail process corresponding with this application program that whether have.Wherein, the default time interval can arrange according to practical application situation, as being 10s, 20s etc.
Preferably, if after having, before finishing the tail process corresponding with application program, also comprise:
Inquire about default process white list, obtain the process corresponding with application program; Wherein, default process white list comprises the title of the title of the application program of obtaining in advance and process corresponding to each application program;
Judge in the process corresponding with application program whether have the tail process not identical process corresponding with application program;
If had, obtain current system process list;
Inquire about current system process list, judge in current system process list, whether to have the tail process not identical process corresponding with application program;
If do not had, carry out the step that finishes the tail process corresponding with application program.
Wherein, the process that the tail process corresponding with application program is not identical specifically refers to the process corresponding but not identical with tail process corresponding to application program with application program.
The method of the end process described in the embodiment of the present invention, by according to default tail process blacklist, detects and has the tail process corresponding with application program in the time of operation, automatically finish tail process, do not need user's manual operations, simple to operate, can save time.
It should be noted that, the method for the end process described in the embodiment of the present invention, can apply separately, also can be applied in various computer antivirus softwares, computer control software, and as computer, house keeper is medium, and this is not specifically limited.
Embodiment bis-
The embodiment of the present invention provides a kind of method that finishes process, and referring to Fig. 2, the method comprises:
201: obtain the message of closing application program.
Particularly, can pass through HOOK(hook) system API(Application Program Interface, application programming interfaces) ExitProcess mode, obtain in the time closing application program, the process exit message that application program is corresponding, thus obtain closing the message of application program.
202: inquire about default tail process blacklist, judge in default tail process blacklist whether have the tail process corresponding with this application program, if had, carry out 203; Otherwise, finish.
Particularly, can be to get after the message of closing application program, just carry out at once the default tail process blacklist of inquiry; Also can be, get after the message of closing application program, after default time interval of interval, then carry out the default tail process blacklist of inquiry.Wherein, the default time interval can arrange according to practical application situation, as being 10s, 20s etc.
Wherein, default tail process blacklist comprises the title of the title of multiple tail processes and application program corresponding to each tail process.Wherein, the name of application program corresponding to the title of each tail process, each tail process is called the list in default tail process blacklist.In the time of inquiry, if can inquire the title of the application program identical with the title of this application program in default tail process blacklist, judge in default tail process blacklist and have the tail process corresponding with this application program.It should be noted that, same application may have multiple tail processes, that is to say multiple tail processes corresponding may be same application.
Particularly, the list in default tail process blacklist can obtain by method below: monitor each user and use the process of various application programs, collect the application program that has tail process; Record has the title of application program of tail process, and the title of tail process corresponding to this application program; Statistics has the occurrence number of tail process corresponding to the application program of tail process; Whether the occurrence number that judges tail process corresponding to this application program is greater than default process occurrence number threshold value; If be greater than, by the title of this application program, and the title of tail process corresponding to this application program, be recorded in default tail process blacklist.Wherein, the application program that has tail process refers to closes after this application program, also has the application program of the process corresponding with this application program in operation.
Specifically can be by tail process, the application program corresponding with tail process, is mapped one by one, preserves with the form of list, forms tail process blacklist list.It should be noted that, be not limited to the form by list, can realize by other any feasible modes, this is not specifically limited.
Wherein, default process occurrence number threshold value can arrange according to practical application situation, and this is not limited.Particularly, default tail process blacklist can be stored in to the position of appointment, in the time carrying out this step, from the position enquiring of specifying.
As: it is 20 that default process occurrence number threshold value is set, and corresponding 3 processes of application A are respectively process A1, process A2 and process A3.Close after application A, process A2 is still that 100(closes after application A in the occurrence number of operation, process A2 is still in operation, so process A2 is tail process), process A3 is still that 10(closes after application A in the occurrence number of operation, process A3 is still in operation, so process A3 is tail process).Judge process A2(or process A3) occurrence number whether be greater than default process occurrence number threshold value; Process A2 is greater than, so the title of the title of application A and process A2 is recorded in to default tail process blacklist.
It should be noted that, be not limited to judge whether the title of the application program of the title of this tail process and correspondence thereof by the occurrence number of tail process, be recorded in default tail process blacklist, can also realize by other any feasible methods, as added up the occurrence number of tail process, and the number of times of application program corresponding to this tail process operation, according to the ratio between the occurrence number of tail process and the number of times of application program corresponding to tail process operation, and there is ratio threshold value in default process, judge whether this tail process to be recorded in default tail process blacklist.Specific as follows:
Monitor the process that each user uses various application programs, collect the application program that has tail process; Record the title of this application program, and the title of tail process corresponding to this application program; Add up the number of run of this application program, and the occurrence number of tail process corresponding to this application program; Calculate the ratio between this application program corresponding occurrence number of tail process and the number of run of this application program; Judge the ratio between the occurrence number of tail process and the number of run of this application program that this application program is corresponding, whether be greater than default process and occur ratio threshold value; If be greater than, by the title of this application program, and the title of tail process corresponding to this application program, be recorded in default tail process blacklist.
It should be noted that, can each user of real-time collecting use the result data of various application programs, default tail process blacklist is carried out to real-time update.Also can be the time interval default every one, collect each user and use the result data of various application programs, every a default time interval, default tail process blacklist be upgraded.
203: obtain current system process list, inquire about current system process list, judge in current system process list whether have the tail process corresponding with this application program, if so, carry out 204; Otherwise, finish.
Wherein, in current system process list, include the current process of moving.Specifically can be by modes such as CreateToolhelp32SnapshotAPI, get current system process list.
Particularly, inquire about current system process list, judge whether to inquire the tail process corresponding with this application program, if can inquire, determine that the tail process corresponding with this application program is in operation; Otherwise, determine that the tail process corresponding with this application program be not in operation.
204: whether prompting finishes the tail process corresponding with this application program, judge whether to receive the instruction that finishes the tail process corresponding with this application program, if received, carry out 205, otherwise, finish.
Particularly, referring to Fig. 3, can point out the tail process that whether finishes by the mode that ejects dialog box.
205: finish the tail process corresponding with this application program, judge whether successfully to finish the tail process corresponding with this application program, if success carries out 206; Otherwise, carry out 207.
Particularly, inquire about current system process list, judge whether to inquire the tail process corresponding with this application program, if can not inquire, determine and successfully finish tail process; Otherwise, determine the tail process that successfully do not finish.
206: prompting finishes the tail process success corresponding with this application program, then finishes.
Particularly, referring to Fig. 4, can point out the success of end tail process by ejecting the mode of dialog box.
207: checking and killing virus is carried out in prompting, judges whether to receive the instruction of carrying out checking and killing virus, if received, carries out 208; Otherwise, finish.
Particularly, referring to Fig. 5, can point out and carry out checking and killing virus by the mode of ejection dialog box.
208: carry out checking and killing virus, then finish.
It should be noted that, above-mentioned steps 201-208 is getting after the message of closing application program, and whether this application program of detection trigger has tail process, thereby finishes the tail process of this application program.But be not limited to said method, can also judge whether application program has closed by additive method, thereby judge whether to finish the tail process of this application program, as referring to Fig. 6, can adopt in the following method:
20a: according to default tail process blacklist, detect whether have the tail process corresponding with application program, if had, carry out 20b; Otherwise, finish.
Wherein, default tail process blacklist comprises the title of the title of the tail process of obtaining in advance and application program corresponding to each tail process.
20b: inquire about default process white list, obtain the process corresponding with application program.
Wherein, default process white list comprises the title of the title of the application program of obtaining in advance and process corresponding to each application program.
Wherein, the process corresponding with application program refers to that this application program needs the process of operation in normal course of operation.Can be by the title of application program, and this application program in normal course of operation, need operation process title one by one corresponding record in default process white list.
Wherein, the program process setting that default process white list can comprise according to default tail process blacklist, all application programs that default tail process blacklist comprises all have corresponding setting in default process white list.
It should be noted that, the program process setting that default process white list comprises according to default tail process blacklist, generally in the time carrying out this step, all can obtain the process corresponding with application program, if but in the time that this step of execution does not get the process corresponding with application program, can report an error, then finish.
20c: judge in the process corresponding with application program whether have the tail process not identical process corresponding with application program, if had, carry out 20d; Otherwise, carry out 20e.
It should be noted that, because tail process is also the process that application program needs operation in normal course of operation, in the time that this application program is normally moved, according to default tail process blacklist, this tail process corresponding with application program also can be detected.So, also need to determine further that this application program is closed condition or normal operating condition.If this application program is closed condition, can finish according to default tail process blacklist the tail process corresponding with application program detecting; If this application program is normal operating condition, cannot finish according to default tail process blacklist the tail process corresponding with application program detecting.
20d: obtain current system process list, inquire about current system process list, judge in current system process list whether have the tail process not identical process corresponding with application program, if do not had, carry out 20f; Otherwise, carry out 20g.
Wherein, the process that the tail process corresponding with application program is not identical specifically refers to the process corresponding but not identical with tail process corresponding to application program with application program.
For example: application A, the process corresponding with application A is respectively process A1, process A2 and process A3.Wherein, the tail process that process A3 is application A.Default process white list comprises application A, and the process A1 corresponding with application A, process A2 and process A3.Default tail process blacklist comprises application A, and the process A3 corresponding with application A.According to default tail process blacklist, detect and have the process A3 corresponding with application A.Inquire about default process white list, get the process A1 corresponding with application A, process A2 and process A3.Judge in the process corresponding with application A, have the process (being respectively process A1 and A2) that the tail process (process A3) corresponding with application program is not identical.Obtain current system process list, inquire about current system process list, judge and in current system process list, have the process that the tail process corresponding with application program is not identical (being respectively process A1 and A2), thereby prove that process A1 and A2 are also in operation, thereby determine that application A is normal operating condition.
20e: prompting detects mistake, then finishes.
It should be noted that, if in the process corresponding with application program, do not have the tail process not identical process corresponding with application program, all processes corresponding to this application program are all considered to tail process, thereby cannot judge that this application program is closed condition or normal operating condition by the process of moving, so cannot determine it is to carry out the tail process corresponding with application program that finish, or carry out this application program of prompting and move.
20f: finish the tail process corresponding with application program, then finish.
20g: point out this application program to move, then finish.
The method of the end process described in the embodiment of the present invention, by according to default tail process blacklist, detects and has the tail process corresponding with application program in the time of operation, automatically finish tail process, do not need user's manual operations, simple to operate, can save time.
Embodiment tri-
Referring to Fig. 7, the embodiment of the present invention provides a kind of device that finishes process, and this device comprises:
Preferably, detection module 301 comprises:
The first query unit, for inquiring about default tail process blacklist, judges in default tail process blacklist whether have the tail process corresponding with application program; Wherein, default tail process blacklist comprises the title of the title of the tail process of obtaining in advance and application program corresponding to each tail process;
Acquiring unit, for being to have in the result of the first query unit, obtains current system process list;
The second query unit, for obtaining at acquiring unit after current system process list, inquires about current system process list, judges in current system process list, whether to have the tail process corresponding with application program;
Determining unit, for being to have in the result of the second query unit, determining and has the tail process corresponding with application program in operation.
Preferably, referring to Fig. 8, this device also comprises: the first list acquisition module 303; Wherein, the first list acquisition module 303 comprises:
The first monitoring unit, uses the process of various application programs for monitoring each user, collect the application program that has tail process;
The first record cell, for collecting and have after the application program of tail process at the first monitoring unit, record has the title of application program of tail process, and has the title of tail process corresponding to the application program of tail process;
The first statistic unit, for have the title of the application program of tail process in the first recording unit records, and after the title of tail process corresponding to the application program that has tail process, statistics has the occurrence number of tail process corresponding to the application program of tail process;
The first judging unit, for having in the first statistic unit statistics after the occurrence number of tail process corresponding to the application program of tail process, whether the occurrence number that judgement has tail process corresponding to the application program of tail process is greater than default process occurrence number threshold value;
The first list acquiring unit, being used for is to be greater than in the judged result of the first judging unit, will have the title of application program of tail process, and have the title of tail process corresponding to the application program of tail process, be recorded in default tail process blacklist;
Or preferably, referring to Fig. 9, this device also comprises: the second list acquisition module 304; Wherein, the second list acquisition module 304 comprises:
The second monitoring unit, uses the process of various application programs for monitoring each user, collect the application program that has tail process;
The second record cell, for collecting and have after the application program of tail process at the second monitoring unit, record has the title of application program of tail process, and has the title of tail process corresponding to the application program of tail process;
The second statistic unit, for have the title of the application program of tail process in the second recording unit records, and after the title of tail process corresponding to the application program that has tail process, statistics has the number of run of application program of tail process, and has the occurrence number of tail process corresponding to the application program of tail process;
Computing unit, for have the number of run of the application program of tail process in the second statistic unit statistics, and after the occurrence number of tail process corresponding to the application program that has tail process, calculate the ratio between the number of run of the application program that has the occurrence number of tail process corresponding to the application program of tail process and have tail process;
The second judging unit, for calculating after ratio at computing unit, judgement has the occurrence number of tail process corresponding to the application program of tail process and has the ratio between the number of run of application program of tail process, whether is greater than default process and occurs ratio threshold value;
The second list acquiring unit, being used for is to be greater than in the judged result of the second judging unit, will have the title of application program of tail process, and have the title of tail process corresponding to the application program of tail process, be recorded in default tail process blacklist.
Preferably, referring to Figure 10, this device also comprises:
The first judge module 305, for finishing, after the module 302 end tail process corresponding with application program, to judge whether successfully to finish the tail process corresponding with application program;
Reminding module 306, for being successfully not finish the tail process corresponding with application program in the judged result of the first judge module 305, checking and killing virus is carried out in prompting.
Preferably, finishing module 302 comprises:
Tip element, for being to have in the testing result of detection module 301, whether prompting finishes the tail process corresponding with application program;
The 3rd judging unit, for whether finishing after the tail process corresponding with application program in Tip element prompting, judges whether to receive the instruction that finishes the tail process corresponding with application program;
End unit, for being to receive in the judged result of the first judging unit, finishes the tail process corresponding with application program.
Preferably, referring to Figure 11, this device also comprises:
Correspondingly, detection module 301, specifically for obtaining at acquisition module 307 after the message of closing application program, according to default tail process blacklist, detects the tail process corresponding with application program that whether have.
Preferably, referring to Figure 12, this device also comprises:
The first enquiry module 308, for being to have in the testing result of detection module 301, inquires about default process white list, obtains the process corresponding with application program; Wherein, default process white list comprises the title of the title of the application program of obtaining in advance and process corresponding to each application program;
Whether the second judge module 309, for judging the process corresponding with application program, have the tail process not identical process corresponding with application program;
Processing module 310, for being to have in the judged result of the second judge module 309, obtains current system process list;
The second enquiry module 311, for inquiring about current system process list, judges in current system process list, whether to have the tail process not identical process corresponding with application program;
Notification module 312, is not have for the judged result when the second enquiry module 311, and notice finishes the step of the module 302 execution end tail process corresponding with application program.
The device of the end process described in the embodiment of the present invention, by according to default tail process blacklist, detects and has the tail process corresponding with application program in the time of operation, automatically finish tail process, do not need user's manual operations, simple to operate, can save time.
It should be noted that: the device of the end process that above-described embodiment provides, only be illustrated with the division of above-mentioned each functional module, in practical application, can above-mentioned functions be distributed and completed by different functional modules as required, be divided into different functional modules by the inner structure of equipment, to complete all or part of function described above.In addition, the device of the end process that above-described embodiment provides belongs to same design with the embodiment of the method for the process of end, and its specific implementation process refers to embodiment of the method, repeats no more here.
The invention described above embodiment sequence number, just to describing, does not represent the quality of embodiment.
One of ordinary skill in the art will appreciate that all or part of step that realizes above-described embodiment can complete by hardware, also can carry out the hardware that instruction is relevant by program completes, described program can be stored in a kind of computer-readable recording medium, the above-mentioned storage medium of mentioning can be ROM (read-only memory), disk or CD etc.
The foregoing is only preferred embodiment of the present invention, in order to limit the present invention, within the spirit and principles in the present invention not all, any modification of doing, be equal to replacement, improvement etc., within all should being included in protection scope of the present invention.
Claims (16)
1. a method that finishes process, is characterized in that, described method comprises:
According to default tail process blacklist, detect the tail process corresponding with application program that whether have; Wherein, described tail process refers to closes after described application program, the process still moved corresponding with described application program;
If had, finish the tail process corresponding with described application program.
2. method according to claim 1, is characterized in that, the tail process blacklist that described basis is default detects whether have the tail process corresponding with described application program, comprising:
Inquire about default tail process blacklist, judge in default tail process blacklist whether have the tail process corresponding with described application program; Wherein, default tail process blacklist comprises the title of the title of the tail process of obtaining in advance and application program corresponding to each tail process;
If had, obtain current system process list;
Inquire about current system process list, judge in current system process list, whether to have the tail process corresponding with described application program;
If had, determine the tail process corresponding with described application program that have.
3. method according to claim 1, is characterized in that, the acquisition methods of the list in described default tail process blacklist, comprising:
Monitor the process that each user uses various application programs, collect the application program that has tail process;
Record has the title of application program of tail process, and has the title of tail process corresponding to the application program of tail process;
Statistics has the occurrence number of tail process corresponding to the application program of tail process;
Whether the occurrence number that judgement has tail process corresponding to the application program of tail process is greater than default process occurrence number threshold value;
If be greater than, will have the title of application program of tail process, and have the title of tail process corresponding to the application program of tail process, be recorded in default tail process blacklist.
4. method according to claim 1, is characterized in that, the acquisition methods of the list in described default tail process blacklist, comprising:
Monitor the process that each user uses various application programs, collect the application program that has tail process;
Record has the title of application program of tail process, and has the title of tail process corresponding to the application program of tail process;
Statistics has the number of run of application program of tail process, and has the occurrence number of tail process corresponding to the application program of tail process;
Calculating has the occurrence number of tail process corresponding to the application program of tail process and has the ratio between the number of run of application program of tail process;
Judgement has the occurrence number of tail process corresponding to the application program of tail process and has the ratio between the number of run of application program of tail process, whether is greater than default process and occurs ratio threshold value;
If be greater than, will have the title of application program of tail process, and have the title of tail process corresponding to the application program of tail process, be recorded in default tail process blacklist.
5. method according to claim 1, is characterized in that, after the described end tail process corresponding with described application program, also comprises:
Judge whether successfully to finish the tail process corresponding with described application program;
If successfully do not finish the tail process corresponding with described application program, checking and killing virus is carried out in prompting.
6. method according to claim 1, is characterized in that, has if described, finishes the tail process corresponding with described application program, comprising:
If had, whether prompting finishes the tail process corresponding with described application program;
Judge whether to receive the instruction that finishes the tail process corresponding with described application program;
If received, finish the tail process corresponding with described application program.
7. according to the method described in claim 1-6 any one claim, it is characterized in that, the tail process blacklist that described basis is default, detection also comprises before whether having the tail process corresponding with application program:
Obtain the message of closing described application program.
8. according to the method described in claim 1-5 any one claim, it is characterized in that, after having if described, before finishing the tail process corresponding with described application program, also comprise:
Inquire about default process white list, obtain the process corresponding with described application program; Wherein, default process white list comprises the title of the title of the application program of obtaining in advance and process corresponding to each application program;
Judge in the process corresponding with described application program, whether have the process that the tail process corresponding with described application program is not identical;
If had, obtain current system process list;
Inquire about current system process list, judge in current system process list, whether to have the described tail process not identical process corresponding with described application program;
If do not had, carry out the step that finishes the tail process corresponding with described application program.
9. a device that finishes process, is characterized in that, described device comprises:
Detection module, for according to default tail process blacklist, detects the tail process corresponding with application program that whether have; Wherein, described tail process refers to closes after described application program, the process still moved corresponding with described application program;
Finish module, for being to have in the testing result of described detection module, finish the tail process corresponding with described application program.
10. device according to claim 9, is characterized in that, described detection module comprises:
The first query unit, for inquiring about default tail process blacklist, judges in default tail process blacklist whether have the tail process corresponding with described application program; Wherein, default tail process blacklist comprises the title of the title of the tail process of obtaining in advance and application program corresponding to each tail process;
Acquiring unit, for being to have in the result of described the first query unit, obtains current system process list;
The second query unit, for obtaining after current system process list at described acquiring unit, inquires about current system process list, judges in current system process list, whether to have the tail process corresponding with described application program;
Determining unit, for being to have in the result of described the second query unit, determines the tail process corresponding with described application program that have.
11. devices according to claim 9, is characterized in that, described device also comprises: the first list acquisition module; Wherein, described the first list acquisition module comprises:
The first monitoring unit, uses the process of various application programs for monitoring each user, collect the application program that has tail process;
The first record cell, for collecting and have after the application program of tail process at described the first monitoring unit, record has the title of application program of tail process, and has the title of tail process corresponding to the application program of tail process;
The first statistic unit, for have the title of the application program of tail process in described the first recording unit records, and after the title of tail process corresponding to the application program that has tail process, statistics has the occurrence number of tail process corresponding to the application program of tail process;
The first judging unit, after occurrence number for tail process corresponding to the application program that has tail process in described the first statistic unit statistics, whether the occurrence number that judgement has tail process corresponding to the application program of tail process is greater than default process occurrence number threshold value;
The first list acquiring unit, being used for is to be greater than in the judged result of described the first judging unit, will have the title of application program of tail process, and have the title of tail process corresponding to the application program of tail process, be recorded in default tail process blacklist.
12. devices according to claim 9, is characterized in that, described device also comprises: the second list acquisition module; Wherein, described the second list acquisition module comprises:
The second monitoring unit, uses the process of various application programs for monitoring each user, collect the application program that has tail process;
The second record cell, for collecting and have after the application program of tail process at described the second monitoring unit, record has the title of application program of tail process, and has the title of tail process corresponding to the application program of tail process;
The second statistic unit, for have the title of the application program of tail process in described the second recording unit records, and after the title of tail process corresponding to the application program that has tail process, statistics has the number of run of application program of tail process, and has the occurrence number of tail process corresponding to the application program of tail process;
Computing unit, for have the number of run of the application program of tail process in described the second statistic unit statistics, and after the occurrence number of tail process corresponding to the application program that has tail process, calculate the ratio between the number of run of the application program that has the occurrence number of tail process corresponding to the application program of tail process and have tail process;
The second judging unit, for calculating after ratio at described computing unit, judgement has the occurrence number of tail process corresponding to the application program of tail process and has the ratio between the number of run of application program of tail process, whether is greater than default process and occurs ratio threshold value;
The second list acquiring unit, being used for is to be greater than in the judged result of described the second judging unit, will have the title of application program of tail process, and have the title of tail process corresponding to the application program of tail process, be recorded in default tail process blacklist.
13. devices according to claim 9, is characterized in that, described device also comprises:
The first judge module, for finishing after the tail process corresponding with described application program in described end module, judges whether successfully to finish the tail process corresponding with described application program;
Reminding module, for being successfully not finish the tail process corresponding with described application program in the judged result of described the first judge module, checking and killing virus is carried out in prompting.
14. devices according to claim 9, is characterized in that, described end module comprises:
Tip element, for being to have in the testing result of described detection module, whether prompting finishes the tail process corresponding with described application program;
The 3rd judging unit, for whether finishing after the tail process corresponding with described application program in described Tip element prompting, judges whether to receive the instruction that finishes the tail process corresponding with described application program;
End unit, for being to receive in the judged result of described the first judging unit, finishes the tail process corresponding with described application program.
15. according to the device described in claim 9-14, it is characterized in that, described device also comprises:
Acquisition module, for obtaining the message of closing application program;
Correspondingly, described detection module, specifically for obtaining at described acquisition module after the message of closing application program, according to default tail process blacklist, detects the tail process corresponding with application program that whether have.
16. according to the device described in claim 9-13, it is characterized in that, described device also comprises:
The first enquiry module, for being to have in the testing result of described detection module, inquires about default process white list, obtains the process corresponding with described application program; Wherein, default process white list comprises the title of the title of the application program of obtaining in advance and process corresponding to each application program;
Whether the second judge module, for judging the process corresponding with described application program, have the process that the tail process corresponding with described application program is not identical;
Processing module, for being to have in the judged result of described the second judge module, obtains current system process list;
The second enquiry module, for inquiring about current system process list, judges in current system process list, whether to have the described tail process not identical process corresponding with described application program;
Notification module, is not have for the judged result when described the second enquiry module, notifies described end module to carry out the step that finishes the tail process corresponding with described application program.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210460584.1A CN103809955B (en) | 2012-11-15 | 2012-11-15 | The method and apparatus of end process |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210460584.1A CN103809955B (en) | 2012-11-15 | 2012-11-15 | The method and apparatus of end process |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103809955A true CN103809955A (en) | 2014-05-21 |
| CN103809955B CN103809955B (en) | 2018-10-09 |
Family
ID=50706791
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210460584.1A Active CN103809955B (en) | 2012-11-15 | 2012-11-15 | The method and apparatus of end process |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103809955B (en) |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104503841A (en) * | 2014-12-15 | 2015-04-08 | 北京奇虎科技有限公司 | Process clearing method and process clearing device |
| CN104958899A (en) * | 2015-05-29 | 2015-10-07 | 深圳市腾讯计算机系统有限公司 | Data processing method and device |
| CN105590060A (en) * | 2015-12-21 | 2016-05-18 | 北京金山安全软件有限公司 | Target application program protection method and device |
| CN108984212A (en) * | 2017-05-31 | 2018-12-11 | 腾讯科技（深圳）有限公司 | A kind of method and electronic equipment of closing process |
| CN109032770A (en) * | 2018-05-30 | 2018-12-18 | 珠海市君天电子科技有限公司 | A kind of progress recognizing method, apparatus and electronic equipment |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1489049A (en) * | 2002-10-11 | 2004-04-14 | 华为技术有限公司 | Method for monitoring background programme |
| CN102163161A (en) * | 2011-04-01 | 2011-08-24 | 奇智软件（北京）有限公司 | Process management method and device thereof |
| CN102542196A (en) * | 2011-11-23 | 2012-07-04 | 北京安天电子设备有限公司 | Method for finding and preventing malicious codes |
-
2012
- 2012-11-15 CN CN201210460584.1A patent/CN103809955B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1489049A (en) * | 2002-10-11 | 2004-04-14 | 华为技术有限公司 | Method for monitoring background programme |
| CN102163161A (en) * | 2011-04-01 | 2011-08-24 | 奇智软件（北京）有限公司 | Process management method and device thereof |
| CN102542196A (en) * | 2011-11-23 | 2012-07-04 | 北京安天电子设备有限公司 | Method for finding and preventing malicious codes |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104503841A (en) * | 2014-12-15 | 2015-04-08 | 北京奇虎科技有限公司 | Process clearing method and process clearing device |
| CN104958899A (en) * | 2015-05-29 | 2015-10-07 | 深圳市腾讯计算机系统有限公司 | Data processing method and device |
| CN104958899B (en) * | 2015-05-29 | 2018-09-18 | 深圳市腾讯计算机系统有限公司 | A kind of data processing method and device |
| CN105590060A (en) * | 2015-12-21 | 2016-05-18 | 北京金山安全软件有限公司 | Target application program protection method and device |
| CN108984212A (en) * | 2017-05-31 | 2018-12-11 | 腾讯科技（深圳）有限公司 | A kind of method and electronic equipment of closing process |
| CN108984212B (en) * | 2017-05-31 | 2021-06-25 | 腾讯科技（深圳）有限公司 | Method for closing process and electronic equipment |
| CN109032770A (en) * | 2018-05-30 | 2018-12-18 | 珠海市君天电子科技有限公司 | A kind of progress recognizing method, apparatus and electronic equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103809955B (en) | 2018-10-09 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108419279B (en) | Network switching system | |
| CN108446222B (en) | Application testing method, device and equipment | |
| CN103809955A (en) | Method and device for ending process | |
| KR101519845B1 (en) | Method For Anti-Debugging | |
| CN109408338B (en) | Method, device, equipment and system for grabbing trace of NVME (network video management entity) hard disk | |
| US8473789B2 (en) | Memory leak monitoring system and associated methods | |
| CN105426310B (en) | A kind of method and apparatus for the performance for detecting target process | |
| WO2014153273A1 (en) | Application testing and analysis | |
| CN103927255A (en) | Software testing method based on cloud testing system, cloud testing system and client side of cloud testing system | |
| CN104932963B (en) | The method and device of management terminal | |
| CN110209559B (en) | Non-invasive monitoring method, control equipment and storage medium | |
| CN107589951A (en) | A kind of cluster upgrade method and device | |
| CN103268183A (en) | Processing method and device for information report | |
| CN104581671A (en) | Prompting method and device for data traffic | |
| CN105468674A (en) | Window interception method and device and terminal equipment | |
| CN103139307A (en) | Recovery method for network resource downloading after interruption and downloading system | |
| CN106452941A (en) | Network anomaly detection method and device | |
| CN104426945A (en) | Method and system for acquiring application performance data, and device | |
| CN104991866B (en) | The adjustment method and device of JS programs | |
| CN107329914A (en) | It is a kind of that the out of order method and device of hard disk is detected based on linux system | |
| CN105843675B (en) | Thread exit method and device | |
| US20170109258A1 (en) | Smart logging of trace data for storage systems | |
| CN103942493B (en) | Intelligent active defensive system and method under Window | |
| CN105677689B (en) | Log recording method and device | |
| CN113672918A (en) | Malicious code detection method and device, storage medium and electronic equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |