摘要
计算机变形病毒的发展伴随着病毒的发展史,从上世纪90年代至今,变形病毒发展经历了加密病毒、单变形、准变形、完全变形病毒,一直到现在的网络变形病毒阶段。与变形病毒紧密相关的技术也在不断创新和发展,如解密技术、网络技术、各种数学算法等,它们的发展也加速了变形病毒的无穷更新变种。同时,这对反病毒技术的变革和更新换代不断地提出新挑战。文章中对变形病毒的解决策略就是以网络蠕虫的变形为分析例子。
Polymorphic Virus plays an important role in computing virus history.Form 1990s by now,polymorphic virus passes by the following stages:single encrypted virus,encrypted virus with variable keys,polymorphic virus,full metamorphic virus and networking metamorphic virus.Following by polymorphic virus,some key technologic is developing rapidly such as decryption,networking,mathematic algorithm etc.So the developing polymorphic virus brings more and more big trouble and challenge to the anti-virus skills.In the paper,a trouble shooting strategic of the latest worm polymorphic virus will be analyzed.
关键词
变形病毒
蠕虫
解密器
变形机
动态虚拟机
polymorphic virus
worm
decrypted engine
metamorphic engine
virtual machine