Peid v0.95
PEiD是一款闻名的查壳工具，其功能强大，简直能够侦测出一切的壳，其数量已超越470种PE文档的加壳类型和签名。修改本段PEID的扫描模式●正常扫描模式：可在PE文档的进口点扫描一切记录的签名；●深度扫描模式：可深入扫描一切记录的签名，这种模式要比上一种的扫描范围更广、更深入；●核心扫描模式：可完整地扫描全面PE文档，建议将此模式作为最终的选择。PEiD内置有过失控制的技术，所以一般能保证扫描成果的准确性。前两种扫描模式简直在刹那间就可得到成果，最终一种有点慢，原因清楚明了。修改本段PEID的命令行选项●peid-time〓显示信息●peid-r〓扫描子目录●peid-nr〓不扫描子目录●peid-hard〓选用核心扫描模式●peid-deep〓选用深度扫描模式●peid-norm〓选用正常扫描模式修改本段PEiD的其它首要模块●命令检测模块：能够扫描并检测当时正在运行的一切命令和模块，并可停止其运行；●多文件扫描模块：可一起扫描多个文档。选择“只显示PE文件”能够过滤非PE文档；选择“递归扫描”可扫描一切文档，包括子目录。●Hex十六进制检测模块：能够以十六进制快速检测文档。修改本段PEiD的官方网站●peid官网：peid.info●peid官方论坛：peid.info/forum/(PEiD is a well-known shell checking tool, which is powerful enough to detect almost all shells, and its number has exceeded the packing types and signatures of 470 PE documents. Modify the scan mode of PEID in this paragraph. Normal scan mode: can scan the signatures of all records at the entry point of the PE document; Deep scan mode: can deeply scan the signatures of all records. This mode has a wider range than the previous scan. Wider and deeper; ●Core scan mode: It can scan all PE documents completely. It is recommended to use this mode as the final choice. PEiD has built-in fault control technology, so it can generally guarantee the accuracy of scanning results. The first two scan modes delivered results almost instantaneously, the last one was a bit slower for obvious reasons. Modify the command line options for PEID in this section ● peid-time〓 Display information ● peid-r〓 Scan subdirectories ● peid-nr〓 Do not scan subdirectories ● peid-hard〓 Select core scan mode ● peid-deep〓 Select deep scan mode ● peid-norm〓 Choose normal scan mode to modify other main modules of PEiD in this section. multiple documents. Select "Show only PE files" to filter non-PE documents; select "Recursive scan" to scan all documents, including subdirectories. ● Hex hexadecimal detection module: can quickly detect documents in hexadecimal. Modify the official website of PEiD in this paragraph ● peid official website: peid.info ● peid official forum: peid.info/forum/)
页:
[1]