Owing to the difficulties of traditional anti-virus technologies against internet worms, more and more attention has been paid to anti-worm in the field of malicious code. Real-time hybrid confronting technology was presented to solve the shortcomings of the existing confronting technologies in confronting validity, resource consumption and the ability to handle accidents, which changes confronting tactic according to the radio of hosts infected by anti-worm to susceptible hosts. And the propagation model of real-time hybrid anti-worm was constructed. Finally, the performance of real-time hybrid confronting technology was validated by simulation experiments on confronting validity, resource consumption and ability to handle accidents. Analyses and experiments have indicated that real-time hybrid confronting technology is better than other technologies on confronting validity with low resource consumption, and can handle accidents.