{"id":827,"date":"2013-02-28T22:08:51","date_gmt":"2013-03-01T06:08:51","guid":{"rendered":"http:\/\/e-olio.com\/cknow\/cms\/?p=827"},"modified":"2013-04-16T12:38:25","modified_gmt":"2013-04-16T19:38:25","slug":"tunneling-viruses","status":"publish","type":"post","link":"https:\/\/www.cknow.com\/cms\/vtutor\/tunneling-viruses.html","title":{"rendered":"Tunneling Viruses"},"content":{"rendered":"

Some viruses will attempt to tunnel under anti-virus monitoring programs in order to bypass their monitoring functions.<\/strong><\/p>\n<\/div>One method of virus detection is an interception<\/a> program which sits in the background looking for specific actions that might signify the presence of a virus. To do this it must intercept interrupts and monitor what’s going on. A tunneling virus attempts to backtrack down the interrupt chain in order to get directly to the DOS and BIOS interrupt handlers. The virus then installs itself underneath everything, including the interception program. Some anti-virus programs will attempt to detect this and then reinstall themselves under the virus. This might cause an interrupt war between the anti-virus program and the virus and result in problems on your system.<\/p>\n

Some anti-virus programs also use tunneling techniques to bypass any viruses that might be active in memory when they load.<\/p>\n

Summary<\/h4>\n