不是，读取EXE文件内容（通常是乱码），判断书否存在某些字符
一下是VB代码
Screen.MousePointer = vbHourglass
'ProblemScan v1.0 by Alan Dipert
'Currently Scans for the following trojan servers:
'NetBus v1.6
'NetBus v1.7
'NetBus v2.1 Pro
'Subseven v1.8
'Subseven v1.9
'Subseven v2.0
'Subseven v2.1
'Subseven v2.1 GOLD
'Back Orifice v1.2
'Back Orifice v1.2 Encrypted variant
'Back Orifice v2000
'buffer and binary breakdown variables
Dim filename As String, buffer As String
'message box variables
Dim resultsMSG As String, msgResult As VbMsgBoxResult, deletion As String
'boolean declarations - "Are these strings in the file?"
Dim netbus16total As Integer, netbus17total As Integer, netbus21total As Integer
Dim subseven18total As Integer, subseven19total As Integer, subseven20total As Integer
Dim subseven21total As Integer, subseven21goldtotal As Integer, bo12total As Integer, bo2ktotal As Integer
Dim bo12encryptedtotal As Integer
'NetBus versions
Dim netbus16 As Boolean, netbus17 As Boolean, netbus21 As Boolean
'SubSeven versions
Dim subseven18 As Boolean, subseven19 As Boolean, subseven20 As Boolean, subseven21 As Boolean, subseven21gold As Boolean
'Back Orifice versions
Dim bo12 As Boolean, bo2k As Boolean, bo12encrypted As Boolean
'other
'begin NetBus series scan sequence
Dim server As String
netbus16total = 0
server = "No trojan server was found."
deletion = "The file has been deleted."
filename = f1.Path
If filename = "" Then
MsgBox "Please select a file to scan.", vbOKOnly, Scanner
GoTo end1
End If
Open filename For Binary As 1
Do While Not EOF(1)
buffer = Space(4096)
Get 1, , buffer
DoEvents
If InStr(buffer, " |
楼主: xiaoyingwu
楼主
发表于 2017-1-15 20:55:51
开源嘛？
我懂了 SHA1或者MD5的扫描器对吧？