DATA RETOUCHING METHOD FOR EXECUTING FILE ON REAL TIME AND VIRUS ELIMINATION METHOD USING THE DATA RETOUCHING METHOD THEREOF

摘要

PURPOSE: A method for correcting the data of an executed file in real-time and a virus curing method using the same are provided to correct the executed file in the real-time without rebooting a system or forcibly terminating a process. CONSTITUTION: An image section is extracted, a physical memory is extracted by the information mapped to a cache viewer of the image section, and the data of an original image mapped to the physical memory is corrected. The virtual address information of the executed file stored in a virtual memory is extracted from the header information recorded according to a PE(Portable Executable) file structure of the executed file, and the private image information matched with the virtual address information is corrected. A data section is extracted, and the information of the physical memory is corroded according to the mapping information provided from the cache viewer of the data section and is stored in a disk by using a page writer.