从网上下载了一个软件,用PEID检壳,是Microsoft Visual C++ 6.0 [Overlay]
有附加数据,OD载入后,发现附加文件释放在
C:\Documents and Settings\love\Local Settings\Temp\System.dj.mfx
C:\Documents and Settings\love\Local Settings\Temp\Registry.dj.mfx
C:\Documents and Settings\love\Local Settings\Temp\Projector.dj.mfx
C:\Documents and Settings\love\Local Settings\Temp\File.dj.mfx
C:\Documents and Settings\love\Local Settings\Temp\Flash6MovieV2.dj.mvx
C:\Documents and Settings\love\Local Settings\Temp\mPlayer.dj.dll
C:\Documents and Settings\love\Local Settings\Temp\FlashPlayer.dj.ocx