UC知道英语翻译～～～急急急
来源：百度知道 编辑：UC知道 时间：2024/05/11 05:07:48
基基于行为判断的防毒软件实时监控模块主要是使用VC实现的一个文件监视器。设计中采用WINDOWS文件过滤驱动等相关技术，让工作与系统核心态的驱动程序去拦截所有的文件访问。本文将对当今先进的病毒/反病毒技术做全面而细致的介绍，重点当然放在了反病毒上，特别实时监控技术。文中首先介绍几种当今较为流行的病毒技术，包括获取系统核心态特权级，驻留，截获系统操作，变形和加密等。然后分五节详细讨论实时监控技术。由于win9x和winnt/2000系统机制和驱动模型不同，所以会分成两个操作系统进行讨论。其中涉及的技术很广泛：包括驱动编程技术，文件钩挂，特权级间通信等等。本文介绍的技术涉及操作系统底层机制，难度较大。所提供的代码，包括两个病毒实时监控驱动程序反汇编代码，具有一定的研究和实用价值。
关键词：实时监控 WINDOWS文件过滤驱动
不要机器翻译的，要自己手工翻译的，鄙视 xw_daiyan，你在http://www.hao123.com/ss/fy.htm上翻译的吧
The viral real-time monitoring is actually a document monitoring device, it can open to the document, the closure, eliminates, reads in and so on the operations to carry on the real-time monitoring, then by kills the poisonous module inspection document whether is the viral carrier.If is acts according to the user the decision choice different processing plan, like the elimination virus, the prohibition visits this document, deletes this document or neglects simply.Like this may effectively avoid virus's on local machine infection dissemination, because may the execution document load when loads a document execution first can request to open this document, but this request can certainly intercept by the real-time monitoring in the first time, thus it guaranteed each time has carried out all is clean does not bring the poisonous document not to give the virus by any execution and the outbreak opportunity. The base mainly uses a document monitoring device based on the behavior ju