CN103809955B - The method and apparatus of end process - Google Patents
The method and apparatus of end process Download PDFInfo
- Publication number
- CN103809955B CN103809955B CN201210460584.1A CN201210460584A CN103809955B CN 103809955 B CN103809955 B CN 103809955B CN 201210460584 A CN201210460584 A CN 201210460584A CN 103809955 B CN103809955 B CN 103809955B
- Authority
- CN
- China
- Prior art keywords
- application program
- tail
- tail process
- title
- preset
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Abstract
The invention discloses a kind of method and apparatus of end process, belong to field of communication technology.The method includes：Detect whether that there are tail processes corresponding with application program；Wherein, the tail process refers to after closing the application program, corresponding with the application program still in the process of operation；If there is having, then terminate tail process corresponding with the application program.Described device includes：Detection module and terminate module.The method of end process described in the embodiment of the present invention, by according to preset tail process blacklist, having detected the presence of tail process corresponding with application program at runtime, end automatically tail process, user's manual operations is not needed, it is easy to operate, it can save the time.
Description
Technical field
The present invention relates to field of communication technology, more particularly to a kind of method and apparatus of end process.
Background technology
With the development of the communication technology, the various application programs such as document process, drawing, chat emerge one after another, and user is counting
The application program installed in calculation machine is also more and more.When user needs using certain application program, certain application program is opened, certain is answered
It can be realized and be run by one or more processes with program.When user do not use certain application program, after closing certain application program, certain
The corresponding process of application program will also terminate to run.However, after closing certain application program at present, there can be the remaining feelings of process
Condition, that is, after closing certain application program, for the corresponding process of certain application program there is no all terminating to run, certain application program is corresponding
Still the process of part is running in process.Such case is easy to cause calculator memory and is occupied, expended largely without reason
Internet resources.
Existing solution to the problems described above is that user opens system for computer process list, from system process list
It is middle to search process corresponding with the application program closed, and process corresponding with closing application program that is finding is made to terminate to transport
Row.
However, in the implementation of the present invention, inventor has found the prior art, and at least there are problems with：
The method of the prior art, needs user to operate by hand, complicated for operation, wastes time.
Invention content
In order to solve problems in the prior art, an embodiment of the present invention provides a kind of method and apparatus of end process.Institute
It is as follows to state technical solution：
On the one hand, a kind of method of end process is provided, the method includes：
According to preset tail process blacklist, detect whether that there are tail processes corresponding with application program；Wherein,
The tail process refers to after closing the application program, corresponding with the application program still in the process of operation；
If there is having, then terminate tail process corresponding with the application program.
On the other hand, a kind of device of end process is provided, described device includes：
Detection module, for according to preset tail process blacklist, detecting whether that there are corresponding with application program
Tail process；Wherein, the tail process refers to after closing the application program, corresponding with the application program still to transport
Capable process；
Terminate module, for being that there are then terminate and the application program pair in the testing result of the detection module
The tail process answered.
The advantageous effect that technical solution provided in an embodiment of the present invention is brought is：
By according to preset tail process blacklist, having detected the presence of tail process corresponding with application program and having transported
When row, tail process is ended automatically, does not need user's manual operations, it is easy to operate, it can save the time.
Description of the drawings
To describe the technical solutions in the embodiments of the present invention more clearly, make required in being described below to embodiment
Attached drawing is briefly described, it should be apparent that, drawings in the following description are only some embodiments of the invention, for
For those of ordinary skill in the art, without creative efforts, other are can also be obtained according to these attached drawings
Attached drawing.
Fig. 1 is a kind of method flow diagram for end process that the embodiment of the present invention one provides；
Fig. 2 is a kind of method flow diagram of end process provided by Embodiment 2 of the present invention；
Fig. 3 is a kind of block diagram representation of prompt end process provided by Embodiment 2 of the present invention；
Fig. 4 is the block diagram representation that a kind of process provided by Embodiment 2 of the present invention has successfully terminated；
Fig. 5 is the block diagram representation that a kind of prompt provided by Embodiment 2 of the present invention carries out checking and killing virus；
Fig. 6 is the method flow diagram of another end process provided by Embodiment 2 of the present invention；
Fig. 7 be the embodiment of the present invention three provide the first terminate the apparatus structure schematic diagram of process；
Fig. 8 is the apparatus structure schematic diagram for second of end process that the embodiment of the present invention three provides；
Fig. 9 be the embodiment of the present invention three provide the third terminate the apparatus structure schematic diagram of process；
Figure 10 is the apparatus structure schematic diagram for the 4th kind of end process that the embodiment of the present invention three provides；
Figure 11 is the apparatus structure schematic diagram for the 5th kind of end process that the embodiment of the present invention three provides；
Figure 12 is the apparatus structure schematic diagram for the 6th kind of end process that the embodiment of the present invention three provides.
Specific implementation mode
To make the object, technical solutions and advantages of the present invention clearer, below in conjunction with attached drawing to embodiment party of the present invention
Formula is preferably described in detail.
It should be noted that for convenience of description, after closing application program in the embodiment of the present invention, with the application program
It is corresponding to be still known as tail process in the process of operation.
Embodiment one
An embodiment of the present invention provides a kind of methods of end process, and referring to Fig. 1, this method includes：
101：According to preset tail process blacklist, detect whether that there are tail processes corresponding with application program；
Wherein, tail process refer to close the application program after, it is corresponding with the application program still in the process of operation.
102：If there is having, then terminate tail process corresponding with the application program.
Preferably, according to preset tail process blacklist, detect whether that there are tails corresponding with the application program
Process, including：
Preset tail process blacklist is inquired, judging to whether there is in preset tail process blacklist has and the application
The corresponding tail process of program；Wherein, preset tail process blacklist include the tail process obtained in advance title and
Each title of the corresponding application program of tail process；
If there is having, then current system process list is obtained；
Current system process list is inquired, judging to whether there is in current system process list has and the application program
Corresponding tail process；
If there is having, it is determined that there are tail processes corresponding with the application program.
Preferably, the acquisition methods of the list in preset tail process blacklist, including：
The process that each user uses various application programs is monitored, there are the application programs of tail process for collection；
There are the titles of the application program of tail process for record, and there are the application program of tail process is corresponding
The title of tail process；
There are the occurrence numbers of the corresponding tail process of the application program of tail process for statistics；
Judge there are the occurrence number of the corresponding tail process of the application program of tail process whether be more than it is preset into
Journey occurrence number threshold value；
If it is greater, then there will be the titles for the application program for having tail process, and there are the applications of tail process
The title of the corresponding tail process of program, is recorded in preset tail process blacklist.
Preferably, the acquisition methods of the list in preset tail process blacklist, including：
The process that each user uses various application programs is monitored, there are the application programs of tail process for collection；
There are the titles of the application program of tail process for record, and there are the application program of tail process is corresponding
The title of tail process；
There are the number of run of the application program of tail process for statistics, and there are the application programs pair of tail process
The occurrence number for the tail process answered；
It calculates there are the occurrence number of the corresponding tail process of the application program of tail process and there are tail processes
Application program number of run between ratio；
Judge there are the occurrence number of the corresponding tail process of the application program of tail process and there are tail processes
Application program number of run between ratio, if there is fractional threshold more than preset process；
If it is greater, then there will be the titles for the application program for having tail process, and there are the applications of tail process
The title of the corresponding tail process of program, is recorded in preset tail process blacklist.
Preferably, after terminating tail process, further include：
Judge whether successfully to terminate tail process；
If not terminating tail process successfully, prompt to carry out checking and killing virus.
Preferably, if there is having, then terminate tail process corresponding with the application program, including：
If there is having, then prompt whether to terminate tail process；
Judge whether to receive the instruction for terminating tail process；
If received, terminate tail process.
Preferably, according to preset tail process blacklist, detect whether there are tail corresponding with application program into
Before journey, further include：
Obtain the message for closing application program.
Specifically, can be get close application program message after, just execute at once according to preset tail into
Journey blacklist detects whether that there are tail processes corresponding with the application program；Can also be to apply journey getting to close
After the message of sequence, after being spaced preset time interval, then execute according to preset tail process blacklist, detect whether there are
Tail process corresponding with the application program.Wherein, preset time interval can be configured according to practical application situation, such as
Can be 10s, 20s etc..
Preferably, after if there is having, before terminating tail process corresponding with application program, further include then：
Preset process white list is inquired, process corresponding with application program is obtained；Wherein, in preset process white list
The title of title and the corresponding process of each application program including the application program obtained in advance；
Judge in process corresponding with application program, if there are tail process corresponding with application program is different
Process；
If there is having, then current system process list is obtained；
Current system process list is inquired, judging to whether there is in current system process list has and application program pair
The different process of tail process answered；
If there are the step of executing end corresponding with application program tail process.
Wherein, the different process of tail process corresponding with application program specifically refer to it is corresponding with application program but with answer
With the corresponding different process of tail process of program.
The method of end process described in the embodiment of the present invention, by according to preset tail process blacklist, detecting
There are tail processes corresponding with application program at runtime, ends automatically tail process, does not need user's manual operations, behaviour
Make simply, to save the time.
It should be noted that the method for the end process described in the embodiment of the present invention, can be used alone, can also apply
In various computer antivirus softwares, computer control software, such as computer, house keeper is medium, is not specifically limited to this.
Embodiment two
An embodiment of the present invention provides a kind of methods of end process, and referring to Fig. 2, this method includes：
201：Obtain the message for closing application program.
Specifically, HOOK can be passed through（Hook）System API（Application Program Interface, using journey
Sequence interface）ExitProcess modes, obtain when closing application program, the corresponding process exit message of application program, to
Obtain closing the message of application program.
202：Preset tail process blacklist is inquired, judging to whether there is in preset tail process blacklist has and be somebody's turn to do
The corresponding tail process of application program then executes 203 if there is having；Otherwise, terminate.
Specifically, can be after getting and closing the message of application program, just execute at once inquire preset tail into
Journey blacklist；Can also be after the message for getting closing application program, after being spaced preset time interval, then to execute and look into
Ask preset tail process blacklist.Wherein, preset time interval can be configured according to practical application situation, such as can be with
For 10s, 20s etc..
Wherein, preset tail process blacklist include multiple tail processes title and each tail process it is corresponding
The title of application program.Wherein, the title of each tail process, the entitled of the corresponding application program of each tail process are preset
Tail process blacklist in list.In inquiry, if can inquire and be somebody's turn to do in preset tail process blacklist
The title of the identical application program of title of application program, then judge in preset tail process blacklist there are with the application
The corresponding tail process of program.It should be noted that same application may have multiple tail processes, that is to say, that multiple tails
Ba Jincheng corresponding may be same application.
Specifically, the list in preset tail process blacklist can be obtained by the following method：Monitor each use
Family uses the process of various application programs, and there are the application programs of tail process for collection；Record answering there are tail process
With the title of program and the title of the corresponding tail process of the application program；There are the application programs of tail process for statistics
The occurrence number of corresponding tail process；It is preset to judge whether the occurrence number of the corresponding tail process of the application program is more than
Process occurrence number threshold value；If it is greater, then by the title of the application program and the corresponding tail process of the application program
Title is recorded in preset tail process blacklist.Wherein, refer to closing the application there are the application program of tail process
After program, there is also have application program of the process corresponding with the application program in operation.
Specifically can be by tail process, application program corresponding with tail process, one-to-one correspondence gets up, in the form of a list
It preserves, forms tail process blacklist list.It should be noted that being not limited to the form by list, other can be passed through
Any feasible mode is realized, is not specifically limited to this.
Wherein, preset process occurrence number threshold value can be configured according to practical application situation, not limited this.
Specifically, preset tail process blacklist can be stored in specified position, when this step is performed, from specified position
Inquiry.
Such as：It is 20 that preset process occurrence number threshold value, which is arranged, application program A correspond to 3 processes be respectively process A1, into
Journey A2 and process A3.After closing application program A, process A2 is still 100 in the occurrence number of operation（After closing application program A,
Process A2 is still being run, so process A2 is tail process）, process A3 is still 10 in the occurrence number of operation（Closing is answered
After program A, process A3 is still being run, so process A3 is tail process）.Judgement process A2（Or process A3）Go out occurrence
Whether number is more than preset process occurrence number threshold value；Process A2 is more than, so by the name of the title of application program A and process A2
Title is recorded in preset tail process blacklist.
It should be noted that being not limited to the occurrence number by tail process to determine whether by the name of the tail process
Claim and its corresponding application program title, be recorded in preset tail process blacklist, can also by other it is any can
Capable method is realized, as the corresponding application program of the occurrence number and the tail process that can count tail process is run
Number, according to the ratio between the number of the occurrence number of tail process application program operation corresponding with tail process, and
There is fractional threshold in preset process, to determine whether the tail process is recorded in preset tail process blacklist.Tool
Body is as follows：
The process that each user uses various application programs is monitored, there are the application programs of tail process for collection；Record
The title of the title of the application program and the corresponding tail process of the application program；The number of run of the application program is counted,
And the occurrence number of the corresponding tail process of the application program；Calculate the occurrence number of the corresponding tail process of the application program
Ratio between the number of run of the application program；Judge that the occurrence number of the corresponding tail process of the application program is answered with this
With the ratio between the number of run of program, if fractional threshold occur more than preset process；If it is greater, then by the application
The title of the title of program and the corresponding tail process of the application program, is recorded in preset tail process blacklist.
It should be noted that the result data of various application programs can be used with each user of real-time collecting, to preset
Tail process blacklist carries out real-time update.Can also be to collect each user using various every a preset time interval
The result data of application program is updated preset tail process blacklist every a preset time interval.
203：Current system process list is obtained, current system process list is inquired, judges current system process
With the presence or absence of there is tail process corresponding with the application program in list, if it is, executing 204；Otherwise, terminate.
Wherein, include the process being currently running in current system process list.Can specifically it pass through
The modes such as CreateToolhelp32SnapshotAPI get current system process list.
Specifically, current system process list is inquired, judges whether that tail corresponding with the application program can be inquired
Ba Jincheng, if it is possible to inquire, it is determined that tail process corresponding with the application program is being run；Otherwise, it determines being answered with this
It is not being run with the corresponding tail process of program.
204：Whether prompt terminates tail process corresponding with the application program, judges whether to receive end and the application
The instruction of the corresponding tail process of program executes 205 if received, and otherwise, terminates.
Specifically, referring to Fig. 3, can prompt whether terminate tail process by way of popping up dialog box.
205：Terminate tail process corresponding with the application program, judges whether successfully to terminate corresponding with the application program
Tail process, if it succeeds, executing 206；Otherwise, 207 are executed.
Specifically, current system process list is inquired, judges whether to inquire corresponding with the application program
Tail process, if can not inquire, it is determined that successfully terminate tail process；Otherwise, it determines do not terminate successfully tail into
Journey.
206：Prompt terminates tail process success corresponding with the application program, then terminates.
Specifically, it referring to Fig. 4, can prompt to terminate the success of tail process by way of popping up dialog box.
207：Prompt carries out checking and killing virus, judges whether that receive the instruction for carrying out checking and killing virus holds if received
Row 208；Otherwise, terminate.
Specifically, it referring to Fig. 5, can prompt to carry out checking and killing virus by way of popping up dialog box.
208：Checking and killing virus is carried out, is then terminated.
It should be noted that above-mentioned steps 201-208 is after the message for getting closing application program, detection trigger should
Application program is with the presence or absence of there is tail process, to terminate the tail process of the application program.But it is not limited to the above method, also
It can judge whether application program closes by other methods, to judge whether to terminate the tail process of the application program,
Such as referring to Fig. 6, following method may be used：
20a：According to preset tail process blacklist, detect whether there are tail process corresponding with application program,
If there is having, then 20b is executed；Otherwise, terminate.
Wherein, preset tail process blacklist includes the title of the tail process obtained in advance and each tail process
The title of corresponding application program.
20b：Preset process white list is inquired, process corresponding with application program is obtained.
Wherein, preset process white list includes that the title of the application program obtained in advance and each application program correspond to
Process title.
Wherein, process corresponding with application program refer to the application program need to run in normal course of operation into
Journey.The title of application program and the application program can be needed to the title one of the process run in normal course of operation
One correspondence is recorded in preset process white list.
Wherein, the program process that preset process white list can include according to preset tail process blacklist
Setting, i.e., all application programs that preset tail process blacklist includes have accordingly in preset process white list
Setting.
It should be noted that the application program that preset process white list includes according to preset tail process blacklist
Process is arranged, and generally when executing the step, can obtain process corresponding with application program, but if executing the step
When not getting process corresponding with application program, then it can report an error, then terminate.
20c：Judge in corresponding with application program process, if there are tail process corresponding with application program not phases
Same process then executes 20d if there is having；Otherwise, 20e is executed.
It should be noted that since tail process is also that application program needs the process run in normal course of operation,
In the application program normal operation, according to preset tail process blacklist, may also detect that corresponding with application program
The tail process.So, it is also necessary to further determine that the application program is closed state or normal operating condition.If should
Application program is closed state, then can terminate according to preset tail process blacklist, what is detected is corresponding with application program
Tail process；If the application program is up state, cannot terminate according to preset tail process blacklist,
The tail process corresponding with application program detected.
20d：Current system process list is obtained, current system process list is inquired, judges current system process
With the presence or absence of there is the different process of tail process corresponding with application program in list, if there are do not execute
20f；Otherwise, 20g is executed.
Wherein, the different process of tail process corresponding with application program specifically refer to it is corresponding with application program but with answer
With the corresponding different process of tail process of program.
Such as：Application program A, process corresponding with application program A are respectively process A1, process A2 and process A3.Wherein,
Process A3 is the tail process of application program A.Preset process white list includes application program A, and with A pairs of application program
Process A1, process A2 and the process A3 answered.Preset tail process blacklist includes application program A, and with application program A
Corresponding process A3.According to preset tail process blacklist, process A3 corresponding with application program A has been detected the presence of.It looks into
Preset process white list is ask, process A1 corresponding with application program A, process A2 and process A3 are got.Judge and applies journey
In the corresponding processes of sequence A, there are tail processes corresponding with application program（Process A3）Different process（Respectively process
A1 and A2）.Current system process list is obtained, current system process list is inquired, judges current system process list
In there are the different processes of tail process corresponding with application program（Respectively process A1 and A2）, to prove process A1
It is also being run with A2, so that it is determined that application program A is up state.
20e：Prompt detection mistake, then terminates.
It should be noted that if in process corresponding with application program, there are tails corresponding with application program
The different processes of Ba Jincheng, then the corresponding all processes of the application program are regarded as tail process, to can not pass through
The process being currently running judges that the application program is closed state or normal operating condition, so it is to execute to terminate that can not determine
Tail process corresponding with application program, or execute and the application program is prompted to be currently running.
20f：Terminate tail process corresponding with application program, then terminates.
20g：It prompts the application program to be currently running, then terminates.
The method of end process described in the embodiment of the present invention, by according to preset tail process blacklist, detecting
There are tail processes corresponding with application program at runtime, ends automatically tail process, does not need user's manual operations, behaviour
Make simply, to save the time.
Embodiment three
Referring to Fig. 7, an embodiment of the present invention provides a kind of device of end process, which includes：
Detection module 301 is used for after acquisition module 301 obtains and closes the message of application program, according to preset tail
Process blacklist detects whether that there are tail processes corresponding with application program to run；Wherein, tail process refers to closing
It is corresponding with application program still in the process of operation after application program；
Terminate module 302, for being that there are then terminate corresponding with application program in the testing result of detection module 301
Tail process.
Preferably, detection module 301 includes：
First query unit judges for inquiring preset tail process blacklist in preset tail process blacklist
With the presence or absence of there is tail process corresponding with application program；Wherein, preset tail process blacklist includes obtaining in advance
The title of the title of tail process and the corresponding application program of each tail process；
Acquiring unit is used in the first query unit the result is that there are then obtain current system process list；
Second query unit, after obtaining current system process list in acquiring unit, inquire current system into
Cheng Liebiao, judging to whether there is in current system process list has tail process corresponding with application program；
Determination unit, for the second query unit the result is that there are, it is determined that there are corresponding with application program
Tail process running.
Preferably, referring to Fig. 8, which further includes：First list acquisition module 303；Wherein, the first list acquisition module
303 include：
First monitoring unit, for monitor each user use various application programs process, collect there are tail into
The application program of journey；
First recording unit, for after the first monitoring unit is collected there are the application program of tail process, record to be deposited
In the title for the application program for having tail process, and there are the names of the corresponding tail process of the application program of tail process
Claim；
First statistic unit, in the first recording unit records there are the title of the application program of tail process, with
And there are the title of the corresponding tail process of the application program of tail process after, statistics there are the application programs of tail process
The occurrence number of corresponding tail process；
First judging unit, for there are the corresponding tails of the application program of tail process in the first statistic unit statistics
After the occurrence number of process, judge whether the occurrence number there are the corresponding tail process of the application program of tail process is more than
Preset process occurrence number threshold value；
First list acquiring unit, for being greater than in the judging result of the first judging unit, then there will be have tail into
The title of the application program of journey, and there are the title of the corresponding tail process of the application program of tail process, be recorded in pre-
If tail process blacklist in；
Or, it is preferable that referring to Fig. 9, which further includes：Second list acquisition module 304；Wherein, the second list obtains
Module 304 includes：
Second monitoring unit, for monitor each user use various application programs process, collect there are tail into
The application program of journey；
Second recording unit, for after the second monitoring unit is collected there are the application program of tail process, record to be deposited
In the title for the application program for having tail process, and there are the names of the corresponding tail process of the application program of tail process
Claim；
Second statistic unit, in the second recording unit records there are the title of the application program of tail process, with
And there are the title of the corresponding tail process of the application program of tail process after, statistics there are the application programs of tail process
Number of run, and there are the occurrence numbers of the corresponding tail process of the application program of tail process；
Computing unit, in the second statistic unit statistics there are the number of run of the application program of tail process, with
And there are the occurrence number of the corresponding tail process of the application program of tail process after, calculate there are the applications of tail process
The occurrence number of the corresponding tail process of program and there are the ratios between the number of run of the application program of tail process；
Second judgment unit, for after ratio is calculated in computing unit, judging the application journey there are tail process
The occurrence number of the corresponding tail process of sequence and there are the ratios between the number of run of the application program of tail process, if
There is fractional threshold more than preset process；
Second list acquiring unit, is greater than for the judging result in second judgment unit, then there will be have tail into
The title of the application program of journey, and there are the title of the corresponding tail process of the application program of tail process, be recorded in pre-
If tail process blacklist in.
Preferably, referring to Figure 10, which further includes：
First judgment module 305, for after terminate module 302 terminates tail process corresponding with application program, judging
Whether with application program corresponding tail process is successfully terminated；
Reminding module 306, for being not terminate successfully and application program pair in the judging result of the first judgment module 305
The tail process answered then prompts to carry out checking and killing virus.
Preferably, terminate module 302 includes：
Prompt unit, for being whether there are then prompt to terminate and application program in the testing result of detection module 301
Corresponding tail process；
Third judging unit, for after whether prompt unit prompt terminates tail process corresponding with application program, sentencing
The disconnected instruction for whether receiving end tail process corresponding with application program；
End unit then terminates corresponding with application program for being to receive in the judging result of the first judging unit
Tail process.
Preferably, referring to Figure 11, which further includes：
Acquisition module 307, for obtaining the message for closing application program；
Correspondingly, detection module 301 are specifically used for after acquisition module 307 obtains and closes the message of application program, according to
Preset tail process blacklist detects whether that there are tail processes corresponding with application program.
Preferably, referring to Figure 12, which further includes：
First enquiry module 308, for being that there are then inquire preset process in the testing result of detection module 301
White list obtains process corresponding with application program；Wherein, preset process white list includes the application program obtained in advance
Title and the corresponding process of each application program title；
Second judgment module 309, for judging in corresponding with application program process, if there are with application program pair
The different process of tail process answered；
Processing module 310, for being that there are then obtain current system in the judging result of the second judgment module 309
Process list；
Second enquiry module 311, for inquiring current system process list, judge be in current system process list
It is no that there are the different processes of tail process corresponding with application program；
Notification module 312, for being that there are do not notify then to terminate mould when the judging result of the second enquiry module 311
Block 302 executes the step of terminating tail process corresponding with application program.
The device of end process described in the embodiment of the present invention, by according to preset tail process blacklist, detecting
There are tail processes corresponding with application program at runtime, ends automatically tail process, does not need user's manual operations, behaviour
Make simply, to save the time.
It should be noted that：The device for the end process that above-described embodiment provides, only with the division of above-mentioned each function module
It is illustrated, in practical application, can be completed, i.e., will by different function modules as needed and by above-mentioned function distribution
The internal structure of equipment is divided into different function modules, to complete all or part of the functions described above.In addition, above-mentioned
The embodiment of the method for the device for the end process that embodiment provides and the process of end belongs to same design, and specific implementation process is detailed
See embodiment of the method, which is not described herein again.
The embodiments of the present invention are for illustration only, can not represent the quality of embodiment.
One of ordinary skill in the art will appreciate that realizing that all or part of step of above-described embodiment can pass through hardware
It completes, relevant hardware can also be instructed to complete by program, the program can be stored in a kind of computer-readable
In storage medium, storage medium mentioned above can be read-only memory, disk or CD etc..
The foregoing is merely presently preferred embodiments of the present invention, is not intended to limit the invention, it is all the present invention spirit and
Within principle, any modification, equivalent replacement, improvement and so on should all be included in the protection scope of the present invention.
Claims (14)
1. a kind of method of end process, which is characterized in that the method includes：
Preset tail process blacklist is inquired, judging to whether there is in the preset tail process blacklist has and wait closing
Application program the identical application program of title title；
Wherein, the preset tail process blacklist includes the title of multiple tail processes obtained in advance and each tail
The title of the corresponding application program of process, the tail process refer to after closing the application program, with the application program pair
Answer still in the process of operation；
If there is having, it is determined that there is tail process corresponding with the application program in the tail process blacklist, and
Obtain current system process list；
The current system process list is inquired, judges to whether there is to have in the current system process list to answer with described
With the corresponding tail process of program；
If there is having, it is determined that there are tail processes corresponding with the application program；
Terminate tail process corresponding with the application program.
2. according to the method described in claim 1, it is characterized in that, list in the preset tail process blacklist obtains
Method is taken, including：
The process that each user uses various application programs is monitored, there are the application programs of tail process for collection；
There are the titles of the application program of tail process for record, and there are the corresponding tails of the application program of tail process
The title of process；
There are the occurrence numbers of the corresponding tail process of the application program of tail process for statistics；
Judge that there are the occurrence numbers of the corresponding tail process of the application program of tail process whether to go out more than preset process
Existing frequency threshold value；
If it is greater, then there will be the titles for the application program for having tail process, and there are the application programs of tail process
The title of corresponding tail process is recorded in preset tail process blacklist.
3. according to the method described in claim 1, it is characterized in that, list in the preset tail process blacklist obtains
Method is taken, including：
The process that each user uses various application programs is monitored, there are the application programs of tail process for collection；
There are the titles of the application program of tail process for record, and there are the corresponding tails of the application program of tail process
The title of process；
There are the number of run of the application program of tail process for statistics, and there are the application program of tail process is corresponding
The occurrence number of tail process；
There are the occurrence number of the corresponding tail process of the application program of tail process and answering there are tail process for calculating
With the ratio between the number of run of program；
Judge that there are the occurrence number of the corresponding tail process of the application program of tail process and answering there are tail process
With the ratio between the number of run of program, if fractional threshold occur more than preset process；
If it is greater, then there will be the titles for the application program for having tail process, and there are the application programs of tail process
The title of corresponding tail process is recorded in preset tail process blacklist.
4. according to the method described in claim 1, it is characterized in that, described terminate tail process corresponding with the application program
Later, further include：
Judge whether successfully to terminate tail process corresponding with the application program；
If not terminating tail process corresponding with the application program successfully, prompt to carry out checking and killing virus.
5. according to the method described in claim 1, it is characterized in that, it is described terminate corresponding with application program tail into
Journey, including：
Whether prompt terminates tail process corresponding with the application program；
Judge whether to receive the instruction for terminating tail process corresponding with the application program；
If received, terminate tail process corresponding with the application program.
6. according to the method described in claim 1-5 any one claims, which is characterized in that described according to preset tail
Process blacklist, detect whether there are before tail process corresponding with application program, further include：
Obtain the message for closing the application program.
7. according to the method described in claim 1-4 any one claims, which is characterized in that described if there is there is it
Afterwards, then before terminating tail process corresponding with the application program, further include：
Preset process white list is inquired, process corresponding with the application program is obtained；Wherein, in preset process white list
The title of title and the corresponding process of each application program including the application program obtained in advance；
Judge in corresponding with application program process, if there are tail process corresponding with the application program not phases
Same process；
If there is having, then current system process list is obtained；
Current system process list is inquired, is judged described and described using journey with the presence or absence of having in current system process list
The corresponding different process of tail process of sequence；
If there are do not execute the step of terminating tail process corresponding with the application program.
8. a kind of device of end process, which is characterized in that described device includes：
Detection module, for inquiring preset tail process blacklist, judge in the preset tail process blacklist whether
There are the titles of application program identical with the title of application program to be closed, wherein the preset tail process is black
List includes the title of the title and the corresponding application program of each tail process of the multiple tail processes obtained in advance, described
Tail process refers to after closing the application program, it is corresponding with the application program still operation into, if there is having,
Then determine the tail process blacklist in exist tail process corresponding with the application program, and obtain current system into
Cheng Liebiao inquires the current system process list, and judging to whether there is in the current system process list has and institute
The corresponding tail process of application program is stated, if there is having, it is determined that there are tail processes corresponding with the application program；
Terminate module, for being that there are then terminate corresponding with the application program in the testing result of the detection module
Tail process.
9. device according to claim 8, which is characterized in that described device further includes：First list acquisition module；Its
In, the first list acquisition module includes：
First monitoring unit uses the process of various application programs for monitoring each user, and there are tail processes for collection
Application program；
First recording unit, for after first monitoring unit is collected there are the application program of tail process, record to be deposited
In the title for the application program for having tail process, and there are the names of the corresponding tail process of the application program of tail process
Claim；
First statistic unit, in first recording unit records there are the title of the application program of tail process, with
And there are the title of the corresponding tail process of the application program of tail process after, statistics there are the application programs of tail process
The occurrence number of corresponding tail process；
First judging unit, for there are the corresponding tails of the application program of tail process in first statistic unit statistics
After the occurrence number of process, judge whether the occurrence number there are the corresponding tail process of the application program of tail process is more than
Preset process occurrence number threshold value；
First list acquiring unit, for being greater than in the judging result of first judging unit, then there will be have tail into
The title of the application program of journey, and there are the title of the corresponding tail process of the application program of tail process, be recorded in pre-
If tail process blacklist in.
10. device according to claim 8, which is characterized in that described device further includes：Second list acquisition module；Its
In, the second list acquisition module includes：
Second monitoring unit uses the process of various application programs for monitoring each user, and there are tail processes for collection
Application program；
Second recording unit, for after second monitoring unit is collected there are the application program of tail process, record to be deposited
In the title for the application program for having tail process, and there are the names of the corresponding tail process of the application program of tail process
Claim；
Second statistic unit, in second recording unit records there are the title of the application program of tail process, with
And there are the title of the corresponding tail process of the application program of tail process after, statistics there are the application programs of tail process
Number of run, and there are the occurrence numbers of the corresponding tail process of the application program of tail process；
Computing unit, in second statistic unit statistics there are the number of run of the application program of tail process, with
And there are the occurrence number of the corresponding tail process of the application program of tail process after, calculate there are the applications of tail process
The occurrence number of the corresponding tail process of program and there are the ratios between the number of run of the application program of tail process；
Second judgment unit, for after ratio is calculated in the computing unit, judging the application journey there are tail process
The occurrence number of the corresponding tail process of sequence and there are the ratios between the number of run of the application program of tail process, if
There is fractional threshold more than preset process；
Second list acquiring unit, for being greater than in the judging result of the second judgment unit, then there will be have tail into
The title of the application program of journey, and there are the title of the corresponding tail process of the application program of tail process, be recorded in pre-
If tail process blacklist in.
11. device according to claim 8, which is characterized in that described device further includes：
First judgment module, for after the terminate module terminates tail process corresponding with the application program, judgement to be
It is no successfully to terminate tail process corresponding with the application program；
Reminding module, for the judging result of first judgment module be do not terminate successfully it is corresponding with the application program
Tail process, then prompt carry out checking and killing virus.
12. device according to claim 8, which is characterized in that the terminate module includes：
Prompt unit, for being whether there are then prompt to terminate to apply journey with described in the testing result of the detection module
The corresponding tail process of sequence；
Third judging unit, for whether terminating tail process corresponding with the application program in prompt unit prompt
Afterwards, judge whether to receive the instruction for terminating tail process corresponding with the application program；
End unit is to receive for the judging result in the third judging unit, then terminates and the application program pair
The tail process answered.
13. according to the device described in claim 8-12 any one claims, which is characterized in that described device further includes：
Acquisition module, for obtaining the message for closing application program；
Correspondingly, the detection module is specifically used for after the acquisition module obtains and closes the message of application program, according to pre-
If tail process blacklist, detect whether that there are tail processes corresponding with application program.
14. according to the device described in claim 8-11 any one claims, which is characterized in that described device further includes：
First enquiry module, for the testing result of the detection module be there are, then inquire preset process white list,
Obtain process corresponding with the application program；Wherein, preset process white list includes the application program obtained in advance
The title of title and the corresponding process of each application program；
Second judgment module, for judging in corresponding with application program process, if there are with the application program
The corresponding different process of tail process；
Processing module, for being that there are then obtain current system process row in the judging result of second judgment module
Table；
Second enquiry module judges to whether there is in current system process list for inquiring current system process list
There is the different process of tail process corresponding with the application program；
Notification module, for being that there are do not notify the terminate module then when the judging result of second enquiry module
Execute the step of terminating tail process corresponding with the application program.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210460584.1A CN103809955B (en) | 2012-11-15 | 2012-11-15 | The method and apparatus of end process |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210460584.1A CN103809955B (en) | 2012-11-15 | 2012-11-15 | The method and apparatus of end process |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103809955A CN103809955A (en) | 2014-05-21 |
| CN103809955B true CN103809955B (en) | 2018-10-09 |
Family
ID=50706791
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210460584.1A Active CN103809955B (en) | 2012-11-15 | 2012-11-15 | The method and apparatus of end process |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103809955B (en) |
Families Citing this family (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104503841A (en) * | 2014-12-15 | 2015-04-08 | 北京奇虎科技有限公司 | Process clearing method and process clearing device |
| CN104958899B (en) * | 2015-05-29 | 2018-09-18 | 深圳市腾讯计算机系统有限公司 | A kind of data processing method and device |
| CN105590060A (en) * | 2015-12-21 | 2016-05-18 | 北京金山安全软件有限公司 | Target application program protection method and device |
| CN108984212B (en) * | 2017-05-31 | 2021-06-25 | 腾讯科技（深圳）有限公司 | Method for closing process and electronic equipment |
| CN109032770A (en) * | 2018-05-30 | 2018-12-18 | 珠海市君天电子科技有限公司 | A kind of progress recognizing method, apparatus and electronic equipment |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1489049A (en) * | 2002-10-11 | 2004-04-14 | 华为技术有限公司 | Method for monitoring background programme |
| CN102163161A (en) * | 2011-04-01 | 2011-08-24 | 奇智软件（北京）有限公司 | Process management method and device thereof |
| CN102542196A (en) * | 2011-11-23 | 2012-07-04 | 北京安天电子设备有限公司 | Method for finding and preventing malicious codes |
-
2012
- 2012-11-15 CN CN201210460584.1A patent/CN103809955B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1489049A (en) * | 2002-10-11 | 2004-04-14 | 华为技术有限公司 | Method for monitoring background programme |
| CN102163161A (en) * | 2011-04-01 | 2011-08-24 | 奇智软件（北京）有限公司 | Process management method and device thereof |
| CN102542196A (en) * | 2011-11-23 | 2012-07-04 | 北京安天电子设备有限公司 | Method for finding and preventing malicious codes |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103809955A (en) | 2014-05-21 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103809955B (en) | The method and apparatus of end process | |
| JP5978401B2 (en) | Method and system for monitoring the execution of user requests in a distributed system | |
| CN111092852B (en) | Network security monitoring method, device, equipment and storage medium based on big data | |
| CN107832355A (en) | The method and device that a kind of agency of crawlers obtains | |
| CN104899130A (en) | Application program management method and system | |
| CN109471845A (en) | Blog management method, server and computer readable storage medium | |
| CN107832210A (en) | Access method of testing, device and a server are buried in daily record | |
| CN105590063B (en) | A kind of method, apparatus and electronic equipment for excavating loophole | |
| CN110750790B (en) | CAN bus vulnerability detection method and device, terminal equipment and medium | |
| US20180349219A1 (en) | Auto Bug Capture | |
| CN104809046B (en) | A kind of application program networking control method and application program networking control device | |
| CN101820635A (en) | Method and device for acquiring mobile communication data | |
| CN114509283A (en) | System fault monitoring method and device, electronic equipment and storage medium | |
| CN106452941A (en) | Network anomaly detection method and device | |
| CN105094278B (en) | A kind of information processing method and device | |
| CN112671724B (en) | Terminal security detection analysis method, device, equipment and readable storage medium | |
| CN102769607B (en) | Malicious code detecting method and system based on network packet | |
| CN112073396A (en) | Method and device for detecting transverse movement attack behavior of intranet | |
| CN111970151A (en) | Flow fault positioning method and system for virtual and container network | |
| CN111552967A (en) | Application software security vulnerability detection method | |
| CN114244681B (en) | Equipment connection fault early warning method and device, storage medium and electronic equipment | |
| CN106375351B (en) | A kind of method and device of abnormal domain name detection | |
| CN107357703A (en) | A kind of terminal applies power consumption detection method and server | |
| CN106933718B (en) | Method for monitoring performance and device | |
| CN113330716B (en) | Method and device for determining dependency relationship of application service and processor |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |