Win32 PE病毒原理及检测策略

Principle and detecting methods on Win32 PE virus

Win32 PE文件格式是微软视窗操作系统的标准可执行文件格式,由于Windows操作系统的广泛使用,Win32 PE病毒已经成为当前危害计算机安全的主要病毒之一,文中针对广泛传播的Win32 PE病毒,首先对Win32 PE文件结构进行分析,然后对病毒感染原理进行深刻详细解析,最后有针对性地提出对病毒检测的多种有效策略,从而为防毒、杀毒提供必要的理论依据。

The file of Win32 PE is the main executable file format of windows operating system for windows operating system is widely used, Win32 PE-virus has become one of most dangerous computer viruses to computer safety,for the most widely spread virus-win32 PE virvus, the paper analyzes the infection principle and points out several methods of dection, so it is necessary to clear the computer virus.