Immunity.exe 病毒不驻留内存，也没有采用加密、压缩、变形等技术，启动的时候，首先获取所需的API函数的地址，然后在当前目录下查找host_pe.exe文件，若没有找到，则在Windows目录、System/System32目录下继续查找-Immunity.exe the presence of the virus is not memory, nor the use of encryption, compression, deformation, such as technology, time to start, first of all, the API function to obtain the required address, then search in the current directory host_pe.exe documents, if not found, then In the Windows directory, System/System32 directory to continue search