VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
4, If your browser cannot upload files, please download VirSCAN uploader to upload.

Language
Server load
Server Load

VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

   File information

Virscan.org multi-engine scan report
Behavior analysis report:         Habo file analysis

Basic Information

MD5:135adb94090d51e030b0dcdd579a5b76
文件大小:5.58MB
上传时间: 2014-09-22 10:36:30 (CST)
Package names:
Minimum operating environment:
copyright:

File behavior

Behavior description: 查找文件
details: FileName = \\宋健\宋健的完全共享\工程部 资料(非工程部勿动)\新台帐系统\服务端\升级\update.ini
FileName = \\宋健\宋健的完全共享\工程部 资料(非工程部勿动)\新台帐系统\服务端\WorkInfo.xls
FileName = \\宋健\宋健的完全共享\工程部 资料(非工程部勿动)\新台帐系统\服务端\WorkMap.dwg
FileName = \\钱小燕\(2012年建立)经营部动态管理\经营部动态管理台账(补).xls

Network behavior

Behavior description: 按名称获取主机地址
details: gethostbyname: computer

Other behavior

Behavior description: 查找指定窗口
details: NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,]
Behavior description: 创建事件对象
details: EventName = DINPUTWINMM
EventName = MSCTF.SendReceive.Event.MH.IC
EventName = MSCTF.SendReceiveConection.Event.MH.IC
Behavior description: 创建互斥体
details: CTF.LBES.MutexDefaultS-*
CTF.Compart.MutexDefaultS-*
CTF.Asm.MutexDefaultS-*
CTF.Layouts.MutexDefaultS-*
CTF.TMD.MutexDefaultS-*
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
MSCTF.Shared.MUTEX.ELH
MSCTF.Shared.MUTEX.MH
Behavior description: 窗口信息
details: Pid = 588, Hwnd=0x10306, Text = 确定, ClassName = Button.
Pid = 588, Hwnd=0x10308, Text = 取消, ClassName = Button.
Pid = 588, Hwnd=0x1030c, Text = 应用程序发生异常 unknown software exception (0x80000003),位置为 0x7c92120e。 要终止程序,请单击“确定”。 要调试程序,请单击“, ClassName = Static.
Pid = 588, Hwnd=0x10304, Text = svchost.exe - 应用程序错误, ClassName = #32770.
Pid = 632, Hwnd=0x10302, Text = 快查支付信息, ClassName = Button.
Pid = 632, Hwnd=0x102fc, Text = 工程竣工资料, ClassName = Button.
Pid = 632, Hwnd=0x102f8, Text = 计划和进度, ClassName = Button.
Pid = 632, Hwnd=0x102f0, Text = 基本需求:office2003和AutoCAD2014, ClassName = _EL_Label.
Pid = 632, Hwnd=0x10300, Text = ←如出现程序运行错误:请尝试打开缓存文件夹,并删除其中所有的文件。, ClassName = _EL_Label.
Pid = 632, Hwnd=0x102f4, Text = 退出(ESC), ClassName = Button.
Pid = 632, Hwnd=0x102ee, Text = 缓存文件夹, ClassName = Button.
Pid = 632, Hwnd=0x102ea, Text = 关于, ClassName = Button.
Pid = 632, Hwnd=0x102e6, Text = 升级, ClassName = Button.
Pid = 632, Hwnd=0x102de, Text = 经营部台帐, ClassName = Button.
Pid = 632, Hwnd=0x202d0, Text = 本地缓存状态, ClassName = _EL_Label.