Patent ID: 8060933

Claim:
A method for protecting a computer device to ensure its proper operation and its proper data, said method comprising the steps of: monitoring by a monitor program, user activities on the computer device, the activities including attempts to modify, add, and delete any of files and program modules, the program modules including system files of an operating system; encoding the monitoring program into a first monitoring code expressed in a first language, re-arranging the first monitoring code into a second monitoring code expressed in a second language that is similar to the first language; confirming by a confirming program whether a predetermined identification number assigned to the computer device and at least one of a user's passwords are received when the monitoring step detects that a user attempts to modify, add to, or delete any of the files and the program modules; judging that the predetermined identification number and the at least one of the user's passwords are received, encoding the confirming program along with the predetermined identification number and the at least one of the user's passwords into a first confirming code expressed in the first language, re-arranging the first confirming code into a second confirming code expressed in the second language that is similar to the first language, wherein the second monitoring code and the second confirming code are compiled by a same compiler, and when during the confirming step the predetermined identification number and the at least one of the user's passwords are not received, then rejecting the user's attempts to modify, add to, or delete any of the files and the program modules, directing the user as an unauthorized user to a reaction system, providing by the reaction system the unauthorized user with response contents of virtual data, which have same data format as the files and the program modules, so as to provide the unauthorized user with false information that the unauthorized user has successfully accessed the files and the program modules, the response contents including any of tracing programs that includes Trojan programs, recording the user's attempts to modify, add to, or delete any of files and virtual program modules, and tracing the unauthorized user by the predetermined identification number or the at least one of the user's passwords so as to obtain data related to the unauthorized user, the related data including the unauthorized user's IP address.