My app will ignore PE packed files ... how i can recognize them? ¿Ideas? ... help plz.
what kind of app is it? a virus?
No generic way to tell... all packers leave signature bytes in the pe hdr and sometimes sections, so you'd have to write a large - updateable - db that checked for these signatures and blah blah...:D There are a few ID progs around (check protools) but they dont update often as the workload to keep adding new types of packers is a nightmare... like updating a AV program really. ie dont bother... Maybe look at aspack and see how it ID's some compressed files in it's small db James