Safe memory scanning
作者： Peter Szor
DOI:
关键词:
摘要: A kernel mode memory scanning driver for use in safely loaded drivers the of computer systems utilizing Windows® NT based operating systems, such as 2000, XP, and other base, viruses. Prior to viruses, hooks a unload function system, stalls any calls prevent from being unloaded during scanning. After is complete, stalled are released. In one embodiment, implemented 4.0 driver, thus can be used on 2000 or without platform specific code.
google.co.id 参考文章(8)
Christopher Blomfield-Brown, Management system for memory resident computer programs ,(1992)
Péter Ször, Eric Chien, BLENDED ATTACKS EXPLOITS, VULNERABILITIES AND BUFFER-OVERFLOW TECHNIQUES IN COMPUTER VIRUSES ,(2002)
Stuart Schaefer, Operating system abstraction and protection layer ,(2002)
David Alan Chambers, Method and apparatus for detection of computer viruses. ,(1994)
David I. Dalva, Homayoon Tajalli, Stephen T. Walker, Mark L. Badger, System and method for controlling the use of a computer ,(1992)
Péter Ször, ATTACKS ON WIN32 - PART II ,(2000)
Frank F. Hill, Anup K. Ghosh, John Thomas Bloch, Matthew N. Schmid, System and method for defending against malicious software ,(2001)