PE File Auto Free-antivirus Strategy Based on Characteristic Code

This paper designs a characteristic code locating algorithm by using block-by-block recovery method instead of replacement method and proposes an auto free-antivirus strategy based on different PE sections.Under the premise of maintaining the original functionality of software after being modified to avoid killing,the combination of the strategy and the improved multi-characteristic code,it uses the equivalent code replacement,shifting methods of string and import table functions to automatically remove and replace the characteristic codes in tempt to avoid killing by anti-virus software.Experimental results verify the effectiveness of the strategy.