VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load

File information
Safety rating:79
Behavior list
Basic Information
MD5:24acb7e5be595468e3b9aa488b9b4fcb
file type:EXE
Production company:Microsoft Corporation
version:6.1.7600.16385---6.1.7600.16385 (win7_rtm.090713-1255)
Shell or compiler information:COMPILER:Not a valid PE file
Process behavior
Behavior description:创建进程
details:ImagePath = C:\Windows\system32\WerFault.exe, CmdLine = C:\Windows\system32\WerFault.exe -u -p 1016 -s 84
Registry behavior
Behavior description:修改注册表
details:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug\ExceptionRecord
\REGISTRY\USER\S-1-5-21-3173272205-2433999261-4062039417-500\Software\Microsoft\Windows\Windows Error Reporting\Debug\UIHandles\FirstLevelConsentDialog
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug\UIHandles\FirstLevelConsentDialog
Other behavior
Behavior description:窗口信息
details:Pid = 1604, Hwnd=0x200a0, Text = Services and Controller app, ClassName = #32770.
Pid = 1604, Hwnd=0x20076, Text = 问题签名: 问题事件名称: APPCRASH 应用程序名: sample.exe 应用程序版本: 6.1.7600.16385 应用程序时间戳: 4a5bc10e 故障模块名称: ntdll.dll 故障模块版本: 6.2.9200.16384 故
Pid = 1604, Hwnd=0x2006e, Text = 以后联机检查解决方案并关闭程序, ClassName = Button.
Pid = 1604, Hwnd=0x40064, Text = 关闭程序, ClassName = Button.
Run screenshot
VirSCAN

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
中国反网络病毒联盟
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号