Design And Implementation Of Computer Virus Scan System In Windows

As thecomputer virus technology developeing rapidly, the market has been mature in deformation technology.And the new virus mutations be interfered with the networkevery day.The structure and composition of the virus becomesmore and more complicated and mature, the computer system security and information security has been giving a growing threat. Facing to this bad situation,our computer technicians should dissect degeneration characteristics and regularity of the virus, measures for killing virus, in order to achieve optimization software of organization innovation,it is conducive to improve the antiviral theory to study the purpose of the new breakthrough. Creating the combination of theory and practicing of large-scale network engineering is meaningful.In this study, the concept of the deformation of the virus was studied, and the design and implementation of a virus scanning system in Windows environment was analyzed. The main research contents are: the classification method of code evolution is given based on the comparison of other classification methods.In recognition of the premise of the failure of the anti virus means, the use of PE format file header information, through the behavior detection technology to detect the virus of the anti virus strategy.In addition, in order to improve the accuracy of detection, the paper also gives out the concept of scanning engine correction, and designs the corresponding algorithm.On the basis of the determination of anti virus strategy and corresponding algorithm, according to the idea of software engineering, using UEFI architecture and EDKII development environment, design and implement an anti virus demonstration software.On the basis of comprehensive analysis of anti virus technology, this thesis studies the concept and mechanism of the virus, and has the design of anti virus engine based on behavior detection.