kaspersky lab zao_kaspersky os下载_kaspersky密码(11)

Then one of the types is the unknown object。 After determining the type of the object, the agent 170 sends to the control module 160 information about the object, which includes at least information about the type of the object and the identified event。 Moreover, the information sent may also include information on the location of the given object on the data medium for example, a hard disk) of the host machine 110 and metadata of the object (for example, the size, name, identifier)。

The control module 160 determines whether the object needs antivirus checking based on the type of the object。 For example, the control modue 160, in accordance with the information received, especially on the type of the object and the identified event, determines the need to perform an antivirus check and the depth of the needed antivirus check。 Since not all types of objects are subject to infection by the harmful code or are not a kind of container for the movement of the harmful code, these types are not subjected to further checking。

Examples of the most common types of objects which need to be checked are executable files, file scenarios, “Internet” files (web files), compressed files (archives) and text files (documents)。 This information is also stored in the informational database 240。 The depth of the antivirus check, however, is dictated by the identified type of event。 For example, if an event has occurred which indicates the starting of a file which has a digital signature of a developer company, then the antivirus check may be superficial or deferred, for example, making use of a list of “white” objects。 If an entry has been made in the header of an executable file, such an event requires careful checking, if possible by different methods of antivirus checking。

本文来自电脑杂谈，转载请注明本文网址：
http://www.pc-fly.com/a/jisuanjixue/article-50822-11.html