晕。居然没有人看得懂这个哦。

PEiD识别也不仅仅是凭EP数据的

不懂啊云猛中

fly能具体说下，peid还凭什么识别!

;The file userdb.txt is used to store the external signatures.
;External signatures can be modified by the user as and when he requires.
;The signatures are in the format

[Name of the Packer v1.0]
signature = 50 E8 ?? ?? ?? ?? 58 25 ?? F0 FF FF 8B C8 83 C1 60 51 83 C0 40 83 EA 06 52 FF 20 9D C3
ep_only = true

;The ?? in the signature represent wildcard bytes (they are skipped while scanning)
;ep_only can be either true or false. When true, the signature is scanned for at the EntryPoint only.
;Else it is scanned throughout the file.

;A '*' in the results of PEiD signifies that the external database was used for scanning the file.

还有的是PEiD自带的特征方式扫描

谢谢fly讲的很详细，看到最后一个*了，呵呵，原来是PEID自己加上去的

上传的附件：

• 新建 BMP 图像.JPG （5.29kb，146次下载）

几句代码看不出来啊， 给个 exe上来

看不懂啊

要 EXE 的请留邮箱。

PE 有没厉害的新版本~~~

看下  路过~!

估计是加了很多层壳吧