ECQ 6.0进程浏览器的下载
http://www.ht-sky.com/Brygid/download/ECQPS6.rar
可以删除任何进程 永远不会自己打开.... 各位给个意见 是删除此进程还是其他.
icwx25b.dun 进程的PE分析
DOS Stud:232
支持CPU:Intel 80386
PE节数目:3
选项Size:224
文件Flag:271
标志字位:267
Link版本:7.10
代码段长度:7680
Init数据块大小:84480
UnInit数据块大小:0
程序段起始RVA:9297
代码段起始RVA:4096
数据段起始RVA:12288
内存装载地址:4194304
内存节对齐粒度:4096
文件节对齐粒度:512
系统定义版本号:5.1
自定义版本号:5.1
子系统版本号:4.0
内存PE映像:102400
头+节表大小:1024
CheckSum Sum:133355
节表序号1 .text
VirtualAddress:4096
SizeOfRawData:7680
PointerToRawData:1024
PointerToRe
locations:0
PointerToLinenumbers:0
NumberOfRe
locations:0
NumberOfLinenumbers:0
PhysicalAddress:7579
VirtualSize:7579
Characteristics:1610612768
节表序号2 .data
VirtualAddress:12288
SizeOfRawData:512
PointerToRawData:8704
PointerToRe
locations:0
PointerToLinenumbers:0
NumberOfRe
locations:0
NumberOfLinenumbers:0
PhysicalAddress:156
VirtualSize:156
Characteristics:-1073741760
节表序号3 .rsrc
VirtualAddress:16384
SizeOfRawData:83968
PointerToRawData:9216
PointerToRe
locations:0
PointerToLinenumbers:0
NumberOfRe
locations:0
NumberOfLinenumbers:0
PhysicalAddress:83580
VirtualSize:83580
Characteristics:1073741888