How does an antivirus
Sometimes when we run a script on any Windows or whether VBscript JSscript received a message from antivirus to warn of operation of a system failure, how this is possible because the interpreter of these languages are respectively VBScript.dll and JScript. dll and hardly able to make an antivirus rollback of the actions of a malicious script, because that would always have the operating system in the kept in some way that a script longer mean a considerable degradation of performance ... what antivirus do to detect exploitation of this type of failure is to change the system registry and tell what the interpreter of these scripts is another dll which is a proxy provided by antivirus and they are sent to the instructions in the script so that they can be analyzed and compared with a database of known operating failures in order to track possible attempts to run malicious code, and if necessary block the same, if the code is "clean" the instructions are for their interpreter.
If you want to see if a more practical and inspiration for this article visit this site ...


Recent Comments