计算机病毒

摘要

随着人们对计算机安全要求的不断提高，计算机病毒作为计算机安全的主要威胁，正在受到人们广泛的关注。只有透彻理解病毒的内在机理，知己知彼，才能更好的防范病毒。本论文深入剖析了Windows环境下各种病毒的相关技术，并提出了相应的检测方案。

本论文研究总结了网页病毒、宏病毒、邮件病毒的感染、传播及如何获得系统控制权机理，总结了防治脚本病毒、宏病毒、邮件病毒的一般做法，并针对这些病毒的特点提出了基于命令式的预防病毒方案。

蠕虫病毒成为当前网络环境下病毒的主要形式，本论文研究总结了蠕虫的行为特点及工作原理，并给出了一般的防范措施。计算机病毒手段越来越高明，论文给出了文件型、引导型、宏病毒及Windows病毒的隐藏技术。同时，论文还研究整理了病毒的常见反检测技术，包括隐藏、反跟踪、变形等。本文还介绍了木马的概念和危害、木马的工作原理、木马的预防和清除。

当前，病毒的传播途径主要依赖于网络，网络是主机感染病毒的主要来源，论文最后给出了常见的病毒检测技术并简要介绍了防火墙的概念。

关键词:脚本病毒，蠕虫病毒，木马，病毒检测，防火墙

Abstract

Nowadays, computer system's security is becoming more and more significant in people's daily life. So, more and more attentions have been payed to computer viruses which will do great harm to the computer system. Understanding of the computer viruses well will help us greatly. The paper analysised all kinds of technologies in different viruses which existing in Windows system, and proposed the correlative scheme of detecting viruses.

The paper summarized the mechanisms of infection, propagation and how to control the host computer which existing in script virus, macro virus and mail virus. The paper also included the common methods to prevent script virus, macro virus, mail virus, and proposed a new scheme to prevent virus based on command codes.

Worm viruses have become the main form in current network environment. Characteristic of worm viruses have been summarized and gave the protective step in the paper. Computer viruses become wiser and wiser. The virus anti-detecting technology has been collected, such as hiding, anti-tracing, and polymorphism.The paper also presents concept, harm, principle, cleaning, prevention of trojan horse.

Today, network was the main source catching computer viruses; the paper give common computer's viruses detection technic and concept of firewall.

Keywords:S cript virus, Worm virus, Trojan horse, Virus detection, Firewall

目录

1 绪论 (1)

1.1课题研究意义及背景 (1)

1.2 论文组织结构 (2)

2 计算机病毒特征 (3)

2.1 计算机病毒的定义和特征 (3)

2.1.1 基本定义 (3)

2.1.2 基本特征 (4)

2.2 计算机病毒的分类 (5)

2.2.1 按病毒攻击对象的机型分类 (5)

2.2.2按病毒攻击计算机的操作系统分类 (6)

2.2.3 按计算机病毒的传染方式分类 (6)

2.2.4 按计算机病毒破坏情况分类 (6)

2.2.5按计算机病毒寄生方式分类 (7)

2.3 计算机病毒的基本机制 (7)

3 Windows 病毒分析 (9)

3.1宏病毒分析 (9)

3.1.1宏病毒的原理 (9)

3.1.2 宏病毒的破坏表现 (9)

3.1.3 宏病毒的主要特点 (10)

3.1.4 宏病毒的检测 (10)

3.1.5 宏病毒的防范 (11)

3.2 网页病毒分析 (12)

3.2.1网页病毒的防范 (14)

3.3邮件病毒分析 (15)

3.3.1邮件病毒的工作流程 (15)

3.3.2 邮件病毒的防治 (16)

3.4脚本病毒分析 (16)

3.4.1 WSH介绍 (16)