英语翻译随着计算机的普及,计算机病毒的概念被越来越多的人所熟知.而感染型病毒若按照寄生部位或传染对象划分,属于PE(Portable Executable)文件病毒.它们通常寄生在可执行程序中,一旦程
来源:学生作业帮助网 编辑:作业帮 时间:2024/11/15 23:49:24
英语翻译随着计算机的普及,计算机病毒的概念被越来越多的人所熟知.而感染型病毒若按照寄生部位或传染对象划分,属于PE(Portable Executable)文件病毒.它们通常寄生在可执行程序中,一旦程
英语翻译
随着计算机的普及,计算机病毒的概念被越来越多的人所熟知.而感染型病毒若按照寄生部位或传染对象划分,属于PE(Portable Executable)文件病毒.它们通常寄生在可执行程序中,一旦程序被执行病毒就会被激活,病毒程序首先被运行,并将自身驻留在内存,然后设置出发条件进行感染.感染型病毒最大的特点在于感染性,它们能够通过病毒代码实现自我复制,重复感染等功能,最终造成被感染文件越来越大,严重影响计算机的运行速度,有的甚至能够导致可执行程序无法运行.
\x05本次毕业设计所做的专杀程序,是专门针对感染型病毒以及被感染型病毒感染过的文件而设计的,面对病毒的种类比较专一,针对特定需求、特定目标的专杀工具.本工具的设计,是以特定的病毒样本为对象,PE文件结构为基础,基于特征码匹配技术,利用多种动态和静态调试工具实现的,集分析、扫描、匹配、修复被感染文件于一体的完整应用程序.
\x05本文简要介绍了计算机病毒发展的历史和种类,感染型病毒的行为特点,着重分析了PE文件的结构特点,感染型病毒的感染机制和触发条件,病毒代码段所实现的功能,文件解密和特征码匹配技术以及PE文件修复技术.运用了C语言和VC++6.0中MFC设计和实现了专杀程序,并且展示了部分核心代码.
英语翻译随着计算机的普及,计算机病毒的概念被越来越多的人所熟知.而感染型病毒若按照寄生部位或传染对象划分,属于PE(Portable Executable)文件病毒.它们通常寄生在可执行程序中,一旦程
As the popularity of computers, is more and more people are familiar with the concept of computer viruses. Infection with the virus If classified by Habitat, or infected objects, belonging to the PE (Portable Executable) file viruses. They are often parasitic in the executable program, once the program is implementing the virus will be activated, the virus program is first run, and itself resides in the memory, and then set the starting conditions for infection. Infection virus's largest feature of infection, they can pass the virus code to replicate itself, repeating features such as infection, eventually causing the infected files increased, seriously affect the operation of your computer speed, and some can even lead to execution of the program cannot run.
The killing of graduation project of this program, is specific to the infection with the virus and infected virus infected files that have been designed, face the virus species comparison of single-minded, killing tool for specific needs, specific objectives. Design of the tools are targeted to specific virus sample, PE file structure for the Foundation, based on signature matching technology, using a variety of dynamic and static debug tools, analysis, scanning, matches, fix the infected files in one of the complete application.
This article briefly describes the development history and types of computer viruses, infection virus behavior, focusing on analysis of the characteristics of the PE file structure, infection of virus infection mechanisms and trigger conditions, virus features implemented by the code snippets, file decryption and signature matching technology and PE file repair technology. Use the c language and VC++6.0 in the MFC Windows design and implementation of the program, and shows some of the core code.