Comodo是怎么知道不是同一个文件的？

显示全部楼层 · 发表于 2018-10-30 00:48:32

软件改文件时间，虽然设不到秒以下，但其实秒以下必然是0（见我那个回帖中最后），可以用7-Zip/Everything查验。
所以如果你把两个文件时间改成一致，那必然是一致。

显示全部楼层 · 发表于 2018-10-30 00:54:11

大小一致你怎么做的？
Hex编辑？

显示全部楼层 · 发表于 2018-10-30 01:05:15

kfk 发表于 2018-10-30 00:54
大小一致你怎么做的？
Hex编辑？

7-Zip/Everything怎么查看你那个帖子里那样的精确时间？

AHK做了个分割软件，把大的按字节数裁剪了

显示全部楼层 · 发表于 2018-10-30 01:15:06

7-Zip：[查看]菜单中切换时间格式
Everything：导出文件列表

那照理你的两个文件在大小、时间上确实是一致的。

显示全部楼层 · 发表于 2018-10-30 01:37:46

kfk 发表于 2018-10-30 01:15
7-Zip：[查看]菜单中切换时间格式
Everything：导出文件列表

确实是0

不一致，因为源文件的时间我没动啊，又上不了图了，源文件秒后不是0，用AHK改过的秒后是0

明天再试，希望是这个原因

显示全部楼层 · 发表于 2018-10-30 20:01:35

随便注册发表于 2018-10-30 01:37
确实是0

不一致，因为源文件的时间我没动啊，又上不了图了，源文件秒后不是0，用AHK改过的秒后是0

两个文件时间改成一致，再看Comodo咋整

显示全部楼层 · 发表于 2018-10-30 21:16:57

kfk 发表于 2018-10-30 20:01
两个文件时间改成一致，再看Comodo咋整

传不了图，base64代替，已经一致了，还是瞒不过去，Comodo厉害

data:image/png;base64,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

复制代码

显示全部楼层 · 发表于 2018-10-30 23:16:21

都没有人提到答案，至少COMODO以前是这样
Alternate Data Streams
7-zip可以查看和修改

85683213 · 发表于 2018-10-30 23:17:33

都没有人提到答案，至少以前COMODO是这样
Alternate Data Streams

7-zip 可以查看和修改

显示全部楼层 · 发表于 2018-10-31 17:41:18

85683213 发表于 2018-10-30 23:16
都没有人提到答案，至少COMODO以前是这样
Alternate Data Streams
7-zip可以查看和修改

你回复怎么没提醒？

7z也看不到啊，测试时用的内存盘+C盘重启还原，如果有，Comodo可能另存了

这些伎俩Comodo应该早防范了，不然改个名就能入侵了

[讨论] Comodo是怎么知道不是同一个文件的？