An output control apparatus comprising: an output section configured to output data to outside; a condition storage section configured to store an abnormal condition showing at least one of a characteristic of data to be outputted from the output section by means of malicious software and a characteristic of an operational pattern of the output section that results when the malicious software outputs data and to store a normal condition showing at least one of a characteristic of data to be outputted from the output section by means of software other than the malicious software and a characteristic of an operational pattern of the output section that results when software other than the malicious software outputs data; and an output control section configured to prohibit output of data when at least one of a characteristic of data to be outputted from the output section and a characteristic of an operational pattern of the output section satisfies the abnormal condition, to permit output of the data when at least one of the characteristic of the data to be outputted from the output section and the characteristic of the operational pattern of the output section satisfies the normal condition, and to inquire a user whether to output the data when the characteristic of the data to be outputted from the output section does not satisfy either the abnormal condition or the normal condition or when the characteristic of the operational pattern of the output section does not satisfy either the abnormal condition or the normal condition, wherein the output control section is configured to: receive from the user an instruction to prohibit or to permit output of the data; to display a screen showing a deformed character string and prompting the user to input the character string or to display a screen showing a figure and prompting the user to input the noun representing the figure; to confirm a character string or a noun inputted by the user to confirm the validity of the user's instruction; and to permit output of the data when the user's instruction is to output the data and the validity of the user's instruction is confirmed an output section configured to output data to outside; a condition storage section configured to store an abnormal condition showing at least one of a characteristic of data to be outputted from the output section by means of malicious software and a characteristic of an operational pattern of the output section that results when the malicious software outputs data and to store a normal condition showing at least one of a characteristic of data to be outputted from the output section by means of software other than the malicious software and a characteristic of an operational pattern of the output section that results when software other than the malicious software outputs data; and an output control section configured to prohibit output of data when at least one of a characteristic of data to be outputted from the output section and a characteristic of an operational pattern of the output section satisfies the abnormal condition, to permit output of the data when at least one of the characteristic of the data to be outputted from the output section and the characteristic of the operational pattern of the output section satisfies the normal condition, and to inquire a user whether to output the data when the characteristic of the data to be outputted from the output section does not satisfy either the abnormal condition or the normal condition or when the characteristic of the operational pattern of the output section does not satisfy either the abnormal condition or the normal condition, wherein the output control section is configured to: receive from the user an instruction to prohibit or to permit output of the data; to display a screen showing a deformed character string and prompting the user to input the character string or to display a screen showing a figure and prompting the user to input the noun representing the figure; to confirm a character string or a noun inputted by the user to confirm the validity of the user's instruction; and to permit output of the data when the user's instruction is to output the data and the validity of the user's instruction is confirmed