Windows PE病毒关键技术分析与防治措施

On Key Technique Analysis and Prevention Measures of Windows PE Virus

在windows操作系统下,PE病毒很常见且危害极大.只有通过编制PE病毒程序,熟悉其感染与隐藏特性机制,才能找到防治措施.通过分析PE病毒程序的开发环境、X86体系结构与操作系统,介绍PE文件格式和分析代码来研究病毒程序的传染技术.最后阐述了驱动程序的释放与加载方法以及病毒防治措施.

PE viruses are very common and harmful in windows operating system. Only through programming PE virus programs can we know the mechanism of infection and hidden characteris- tics well and then find prevention measures. Through analyzing PE virus program development environment, X86 structures and operating system, as well as PE file format introduction and this paper tries to study virus program transmission technology. Finally, the paper expounds the release and loading method of the driver and the prevention measures of virus.