基于DLL的特洛伊木马实时检测机制研究与实现

Research and Implementation on Real Time Detection Mechanism of Troy Dynamic Link Library

中文关键词:DLL  特洛伊DLL  PE  实时检测

英文关键词:DLL  Troy DLL  PE  real time test

中文摘要:

      针对特洛伊DLL对系统造成的危害，本论通过分析动态链接库的PE文件结构，提出了一种实时检测TROY动态链接库的设计方案，并在VC环境下成功实现。基于该方法用户可以有效地、实时地检测出特洛伊DLL，减少特洛伊DLL对泄露用户信息所造成的危害。

英文摘要:

      As for the destruction of Troy DLL to the system,the author analysis the structure of the PE file of DLL, presents a way of real time detect Troy DLL. And finally succeeds the realization under the VC environment.Based on this method,user can detect Troy DLL effectively and continuously ,and it can reduces the harm that Troy DLL reveal the user information.