Method for detecting a malware (US patent 9659173)