木马的手工检测技术

Research on Detecting Trojan Manually

特洛伊木马是基于计算机远程控制技术的一种工具程序,具有隐蔽性和非授权性的特点。介绍了木马的各种类型,通过对进程、端口、启动项、文件校验,嗅探抓包等手段检测计算机木马。

The Trojan horse is a program based on the computer remote control technology, has the covert and non-authorized characteristic. This article introduced the types of Trojan horse. And the examine methods as port and process check, file verification, sniff, etc.