基于特征码的病毒查询程序

通过特征码数据库查找病毒，主要是根据pe的特殊结构查找程序入口点，进而找到被修改的可执行代码

// stdafx.cpp : source file that includes just the standard includes
//	VirRemv.pch will be the pre-compiled header
//	stdafx.obj will contain the pre-compiled type information

#include “stdafx.h“

 属性            大小     日期    时间   名称
----------- ---------  ---------- -----  ----

     文件       2855  2002-05-26 19:41  Chiklez\DontAllow.zip

     文件       1053  2002-05-26 09:30  Chiklez\Resource.h

     文件        209  2002-05-26 06:39  Chiklez\StdAfx.cpp

     文件        999  2002-05-26 06:39  Chiklez\StdAfx.h

     文件        121  2005-12-19 20:41  Chiklez\VirRemv.bbs

     文件       1442  2002-05-26 06:39  Chiklez\VirRemv.cpp

     文件        737  2002-05-26 13:44  Chiklez\VirRemv.dsw

     文件       1193  2002-05-26 06:39  Chiklez\VirRemv.h

     文件     295936  2010-05-11 09:24  Chiklez\VirRemv.ncb

     文件         54  2010-05-07 17:00  Chiklez\DontAlow.Def

     文件        248  2010-05-11 09:24  Chiklez\VirRemv.plg

     文件       6054  2002-05-26 10:56  Chiklez\VirRemv.rc

     文件      51712  2010-05-11 09:24  Chiklez\VirRemv.opt

     文件       1667  2002-05-26 13:55  Chiklez\VirRemvDlg.h

     文件      21652  2010-05-09 18:28  Chiklez\VirRemv.aps

     文件     225452  2010-04-17 21:37  Chiklez\DontAlow.dll

     文件       2084  2010-04-17 21:37  Chiklez\DontAlow.lib

     文件       4117  2010-04-17 21:01  Chiklez\VirRemv.dsp

     文件      12368  2010-04-17 21:00  Chiklez\Debug\VirRemv.res

     文件     205824  2010-05-11 09:24  Chiklez\Debug\vc60.idb

     文件     364544  2010-05-11 09:23  Chiklez\Debug\vc60.pdb

     文件    1353378  2010-05-09 18:29  Chiklez\Debug\StdAfx.sbr

     文件          0  2010-05-09 18:29  Chiklez\Debug\VirRemv.sbr

     文件    1400919  2010-05-11 09:23  Chiklez\Debug\VirRemv.exe

     文件    2810880  2010-05-11 09:23  Chiklez\Debug\VirRemv.pdb

     文件          0  2010-05-11 09:23  Chiklez\Debug\VirRemvDlg.sbr

     文件      47611  2010-05-11 09:23  Chiklez\Debug\VirRemvDlg.obj

     文件    6827452  2010-05-09 18:29  Chiklez\Debug\VirRemv.pch

     文件     105588  2010-05-09 18:29  Chiklez\Debug\StdAfx.obj

     文件      14914  2010-05-09 18:29  Chiklez\Debug\VirRemv.obj

............此处省略32个文件信息