文件名称:FolderCleaner_src
- 所属分类:
- 文件操作
- 资源属性:
- [Windows] [Visual.Net] [源码]
- 上传时间:
- 2012-11-26
- 文件大小:
- 2.42mb
- 下载次数:
- 0次
- 提 供 者:
- 周**
- 相关连接:
- 无
- 下载说明:
- 别用迅雷下载,失败请重下,重下不扣分!
介绍说明--下载内容均来自于网络,请自行研究使用
工具原理:
1·遍历文件夹,扫描“是PE&会显示图标”的文件,选择其ICON_GROUP的第一个图标资源作判断
2·枚举该图标里的所有尺寸的图片,与Pattern中的相应尺寸的图片 比较每个像素的RGB,容差在某个范围内,则认为HIT
3·当该图标的某个尺寸的图片的所有像素HIT的百分比在某个范围内,则认为图标HIT,即认为是文件夹图标病毒
优势:
相比 通过提取文件CRC来判断一个文件夹病毒,通过图标来判断更为可控,更为迅速。而且,调整好几个阀值之后,理论上不会误报。-Tools principles: 1 · Traverse Folder to scan " is the PE & will show the icon" document, select the first icon in its ICON_GROUP resources to determine 2 · enumerate all the dimensions of the icon inside the picture, and Pattern in the corresponding size of the picture compares each pixel RGB, in a context of tolerance, then that HIT 3 · When the icon image to a size of HIT percentage of all pixels within a confined area, then that icon HIT, which is a folder icon that viruses advantage: compared to extract the files through the CRC to determine if a folder virus, through the icon to determine a more controllable, more rapidly. Moreover, the adjustment of several thresholds, the theory is not false positives.
1·遍历文件夹,扫描“是PE&会显示图标”的文件,选择其ICON_GROUP的第一个图标资源作判断
2·枚举该图标里的所有尺寸的图片,与Pattern中的相应尺寸的图片 比较每个像素的RGB,容差在某个范围内,则认为HIT
3·当该图标的某个尺寸的图片的所有像素HIT的百分比在某个范围内,则认为图标HIT,即认为是文件夹图标病毒
优势:
相比 通过提取文件CRC来判断一个文件夹病毒,通过图标来判断更为可控,更为迅速。而且,调整好几个阀值之后,理论上不会误报。-Tools principles: 1 · Traverse Folder to scan " is the PE & will show the icon" document, select the first icon in its ICON_GROUP resources to determine 2 · enumerate all the dimensions of the icon inside the picture, and Pattern in the corresponding size of the picture compares each pixel RGB, in a context of tolerance, then that HIT 3 · When the icon image to a size of HIT percentage of all pixels within a confined area, then that icon HIT, which is a folder icon that viruses advantage: compared to extract the files through the CRC to determine if a folder virus, through the icon to determine a more controllable, more rapidly. Moreover, the adjustment of several thresholds, the theory is not false positives.
(系统自动生成,下载前可以参看下载内容)
下载文件列表
FolderCleaner
.............\debug
.............\.....\AquaOS.ssk
.............\.....\cfg.ini
.............\.....\GenOpr.dll
.............\.....\GenOpr.lib
.............\.....\SkinPPWTL.dll
.............\.....\tmaiofc.sys
.............\.....\tmcomm.sys
.............\FolderCleaner
.............\.............\AIOFC.dll
.............\.............\Dib.cpp
.............\.............\Dib.h
.............\.............\FolderCleaner.aps
.............\.............\FolderCleaner.cpp
.............\.............\FolderCleaner.h
.............\.............\FolderCleaner.rc
.............\.............\FolderCleaner.vcproj
.............\.............\FolderCleaner.vcproj.COLORDANCER.Administrator.user
.............\.............\FolderCleanerDlg.cpp
.............\.............\FolderCleanerDlg.cpp~RF5ad9d0.TMP
.............\.............\FolderCleanerDlg.h
.............\.............\FolderCleanerDlg.h~RF57a457.TMP
.............\.............\FolderPtn.dll
.............\.............\FolderVirusCleaner.cpp
.............\.............\FolderVirusCleaner.cpp~RF6b23cb.TMP
.............\.............\FolderVirusCleaner.h
.............\.............\FolderVirusCleaner.h~RF6aa218.TMP
.............\.............\GerneralOpr.h
.............\.............\Icons.cpp
.............\.............\Icons.h
.............\.............\ReadMe.txt
.............\.............\res
.............\.............\...\FolderCleaner.rc2
.............\.............\...\icon1.ico
.............\.............\resource.h
.............\.............\SkinPPWTL.h
.............\.............\SkinPPWTL.lib
.............\.............\stdafx.cpp
.............\.............\stdafx.h
.............\.............\~VCCD.tmp
.............\.............\~VCCF.tmp
.............\.............\~VCD1.tmp
.............\FolderCleaner.sln
.............\FolderPtn
.............\.........\FolderPtn.aps
.............\.........\FolderPtn.cpp
.............\.........\FolderPtn.def
.............\.........\FolderPtn.h
.............\.........\FolderPtn.rc
.............\.........\FolderPtn.vcproj
.............\.........\FolderPtn.vcproj.COLORDANCER.Administrator.user
.............\.........\ReadMe.txt
.............\.........\res
.............\.........\...\6.ico
.............\.........\...\FolderPtn.rc2
.............\.........\resource.h
.............\.........\stdafx.cpp
.............\.........\stdafx.h
.............\release
.............\.......\AquaOS.ssk
.............\.......\cfg.ini
.............\.......\GenOpr.dll
.............\.......\GenOpr.lib
.............\.......\SkinPPWTL.dll
.............\.......\tmaiofc.sys
.............\.......\tmcomm.sys
.............\debug
.............\.....\AquaOS.ssk
.............\.....\cfg.ini
.............\.....\GenOpr.dll
.............\.....\GenOpr.lib
.............\.....\SkinPPWTL.dll
.............\.....\tmaiofc.sys
.............\.....\tmcomm.sys
.............\FolderCleaner
.............\.............\AIOFC.dll
.............\.............\Dib.cpp
.............\.............\Dib.h
.............\.............\FolderCleaner.aps
.............\.............\FolderCleaner.cpp
.............\.............\FolderCleaner.h
.............\.............\FolderCleaner.rc
.............\.............\FolderCleaner.vcproj
.............\.............\FolderCleaner.vcproj.COLORDANCER.Administrator.user
.............\.............\FolderCleanerDlg.cpp
.............\.............\FolderCleanerDlg.cpp~RF5ad9d0.TMP
.............\.............\FolderCleanerDlg.h
.............\.............\FolderCleanerDlg.h~RF57a457.TMP
.............\.............\FolderPtn.dll
.............\.............\FolderVirusCleaner.cpp
.............\.............\FolderVirusCleaner.cpp~RF6b23cb.TMP
.............\.............\FolderVirusCleaner.h
.............\.............\FolderVirusCleaner.h~RF6aa218.TMP
.............\.............\GerneralOpr.h
.............\.............\Icons.cpp
.............\.............\Icons.h
.............\.............\ReadMe.txt
.............\.............\res
.............\.............\...\FolderCleaner.rc2
.............\.............\...\icon1.ico
.............\.............\resource.h
.............\.............\SkinPPWTL.h
.............\.............\SkinPPWTL.lib
.............\.............\stdafx.cpp
.............\.............\stdafx.h
.............\.............\~VCCD.tmp
.............\.............\~VCCF.tmp
.............\.............\~VCD1.tmp
.............\FolderCleaner.sln
.............\FolderPtn
.............\.........\FolderPtn.aps
.............\.........\FolderPtn.cpp
.............\.........\FolderPtn.def
.............\.........\FolderPtn.h
.............\.........\FolderPtn.rc
.............\.........\FolderPtn.vcproj
.............\.........\FolderPtn.vcproj.COLORDANCER.Administrator.user
.............\.........\ReadMe.txt
.............\.........\res
.............\.........\...\6.ico
.............\.........\...\FolderPtn.rc2
.............\.........\resource.h
.............\.........\stdafx.cpp
.............\.........\stdafx.h
.............\release
.............\.......\AquaOS.ssk
.............\.......\cfg.ini
.............\.......\GenOpr.dll
.............\.......\GenOpr.lib
.............\.......\SkinPPWTL.dll
.............\.......\tmaiofc.sys
.............\.......\tmcomm.sys