UNDERCODE COMMUNITY

▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Behavior analysis-How a antimalware works
> secure yourself !

🦑𝕃𝔼𝕋'𝕊 𝕊𝕋𝔸ℝ𝕋:

Dr.Web Process Heuristic

The behavior analysis technology Dr.Web Process Heuristic is used to resist the latest and most dangerous malware. Such malware can avoid the traditional signature analysis and heuristic analysis mechanism.

Dr.Web Process Heuristic analyzes each startup process, compares it with the constantly updated Dr.Web cloud service, and judges whether the process is dangerous based on the latest understanding of malware behavior and whether it needs to take action to remove the threat.

🦑This data protection technology can minimize the loss caused by unknown viruses, while taking up very little resources of the protected system.

Dr.Web Process Heuristic monitors any attempts to change the system:

•Identify malicious software processes that maliciously change user files (such as the activity of encryption Trojans);

•Prevent malware from being implanted in other applications;

•Prevent malware from changing important areas of the system;

•Detect and block malicious scripts and processes and suspicious or unreliable scripts and processes;

•Prevent malware from changing the disk boot sector so that it (such as Bootkit) cannot start on the computer;

•Prevent modifications to the registry and prevent Windows Safe Mode from being disabled;

•Prohibit malicious software from changing software startup permissions;

•It is forbidden to secretly load new or unknown drivers;

•Prevent malicious software and some applications from starting automatically, such as software that specifically destroys the operation of anti-virus software, and prohibit it from completing self-starting after registering in the registry;

•It is forbidden to change the registry branch responsible for the virtual device driver to prevent Trojans from posing as virtual devices to the computer;

•Prevent malware from disrupting the normal operation of system services.

Dr.Web Process Dumper

Dr.Web Process Dumper is a packaged threat comprehensive analyzer, greatly improving the detection level of so-called "new threats". These so-called "new threats" are actually known threats hidden in the new packager. Using this analysis technology can avoid adding unnecessary new records to the virus database, thus ensuring the compactness of the Dr.Web virus database, and thus eliminating the need to raise system requirements, while maintaining consistent small traffic updates, while detection and removal Always at a high level.

Dr.Web ShellGuard

Dr.Web ShellGuard prevents vulnerability attacks, that is, exploiting vulnerabilities in malware to control applications and operating systems.

Dr.Web ShellGuard protects the following common applications that can be installed on the Windows operating system:

•Internet browsers (Internet Explorer, Mozilla Firefox, Yandex browser, Google Chrome, Vivaldi Browser, etc.);

•MS Office applications, including MS Office 2016;

•System application;

•Application programs using java, flash and pdf technology;

•media Player.

When analyzing risk operations, the protection system uses Dr.Web ShellGuard technology to analyze not only the sub-rules stored on the computer, but also the latest data collected in the Dr.Web cloud service, including:

•Malware algorithm;

•Clean file information;

•Digital signatures of well-known software manufacturers that have been stolen;

•Digital signatures used in advertising and risk programs;

•Information about websites that are not recommended to visit;

•Protection algorithms for different applications.

@uNDERCODEtESTING
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

162 views07:00