-
-
[旧帖] [求助]帮忙告诉我这个壳怎么脱 0.00雪花
-
发表于: 2008-4-7 11:50
-
前几天,我看了有人脱"壳中壳"的病毒的文章:
http://bbs.pediy.com/showthread.php?t=57544
所以我也去下载了一个<小辉的PE加密>
我想破解他的注册,编出注册机,可是他有加壳,我就用PEiD查壳
PEiD显示是:(警告!木马) -> 小辉 *
我就把他的第一层壳给脱了,顺便把他的密码保护给取消了(密码是buest)
可是他还有第二层壳PEiD显示是:UPX 0.80 - 1.24 DLL -> Markus & Laszlo [Overlay]。
第二层壳很难脱,花指令很多,哪位大侠能帮我脱一下(也可以告诉我脱此壳的方法)
这不会封ID吧???
原文件一:cdbK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3k6K6x3Y4W2G2N6g2)9J5k6h3y4G2L8g2)9J5c8X3k6A6L8r3g2K6i4K6u0r3z5o6y4S2y4h3k6U0y4K6g2Q4x3X3b7H3y4o6f1K6i4K6u0V1x3e0q4V1k6q4)9J5k6r3t1@1k6o6c8Q4x3X3b7H3x3o6p5@1x3U0t1I4j5U0M7&6z5r3q4Q4x3V1j5`.
原文件二:60fK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3k6K6x3Y4W2G2N6g2)9J5k6h3y4G2L8g2)9J5c8X3k6A6L8r3g2K6i4K6u0r3z5o6y4S2y4K6m8S2k6o6q4Q4x3X3b7H3y4o6f1K6i4K6u0V1x3e0q4V1k6q4)9J5k6r3q4W2j5e0m8Q4x3X3b7H3x3o6p5@1x3U0t1I4j5U0M7&6z5r3q4Q4x3V1j5`.
脱一层壳的文件:5c1K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3k6K6x3Y4W2G2N6g2)9J5k6h3y4G2L8g2)9J5c8X3k6A6L8r3g2K6i4K6u0r3z5o6y4S2z5h3x3H3y4U0S2Q4x3X3b7H3y4o6f1K6i4K6u0V1x3e0q4V1k6q4)9J5k6o6W2X3z5e0g2Q4x3X3b7H3x3o6p5@1x3U0t1I4j5U0M7&6z5r3q4Q4x3V1j5`.
http://bbs.pediy.com/showthread.php?t=57544
所以我也去下载了一个<小辉的PE加密>
我想破解他的注册,编出注册机,可是他有加壳,我就用PEiD查壳
PEiD显示是:(警告!木马) -> 小辉 *
我就把他的第一层壳给脱了,顺便把他的密码保护给取消了(密码是buest)
可是他还有第二层壳PEiD显示是:UPX 0.80 - 1.24 DLL -> Markus & Laszlo [Overlay]。
第二层壳很难脱,花指令很多,哪位大侠能帮我脱一下(也可以告诉我脱此壳的方法)
这不会封ID吧???
原文件一:cdbK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3k6K6x3Y4W2G2N6g2)9J5k6h3y4G2L8g2)9J5c8X3k6A6L8r3g2K6i4K6u0r3z5o6y4S2y4h3k6U0y4K6g2Q4x3X3b7H3y4o6f1K6i4K6u0V1x3e0q4V1k6q4)9J5k6r3t1@1k6o6c8Q4x3X3b7H3x3o6p5@1x3U0t1I4j5U0M7&6z5r3q4Q4x3V1j5`.
原文件二:60fK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3k6K6x3Y4W2G2N6g2)9J5k6h3y4G2L8g2)9J5c8X3k6A6L8r3g2K6i4K6u0r3z5o6y4S2y4K6m8S2k6o6q4Q4x3X3b7H3y4o6f1K6i4K6u0V1x3e0q4V1k6q4)9J5k6r3q4W2j5e0m8Q4x3X3b7H3x3o6p5@1x3U0t1I4j5U0M7&6z5r3q4Q4x3V1j5`.
脱一层壳的文件:5c1K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3k6K6x3Y4W2G2N6g2)9J5k6h3y4G2L8g2)9J5c8X3k6A6L8r3g2K6i4K6u0r3z5o6y4S2z5h3x3H3y4U0S2Q4x3X3b7H3y4o6f1K6i4K6u0V1x3e0q4V1k6q4)9J5k6o6W2X3z5e0g2Q4x3X3b7H3x3o6p5@1x3U0t1I4j5U0M7&6z5r3q4Q4x3V1j5`.
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
