1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
| Safety rating:77 |
| Behavior list |
| Basic Information | |
|---|---|
| MD5: | 35600b85d498f89da572bbc304eb3215 |
| file type: | Rar |
| Production company: | |
| version: | |
| Shell or compiler information: | COMPILER:Microsoft Visual C# / Basic .NET |
| Subfile information: | Interop.SHDocVw.dlldumpFile / 92c9b79557a52addb6406b976628a220 / DLL |
| Interop.SHDocVw.dll / 92c9b79557a52addb6406b976628a220 / DLL | |
| Interop.Shell32.dlldumpFile / 992b21ffc401ec264ca112fe46172dbc / DLL | |
| Interop.Shell32.dll / 992b21ffc401ec264ca112fe46172dbc / DLL | |
| Win7Fix.exedumpFile / 5353d313c4b43728b8dc50d39ae1fd7f / EXE | |
| Win7Fix.exe / 5353d313c4b43728b8dc50d39ae1fd7f / EXE | |
| ReadMe.txtdumpFile / 12705c6938b78698bf3c5de7aa54255a / Unknown | |
| ReadMe.txt / 12705c6938b78698bf3c5de7aa54255a / Unknown | |
| File behavior | |
|---|---|
| Behavior description: | 写权限映射文件 |
| details: | Global\Cor_Private_IPCBlock_2632 |
| Global\Cor_Public_IPCBlock_2632 | |
| CiceroSharedMemDefaultS-1-5-21-1482476501-1645522239-1417001333-500 | |
| \Documents and Settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT | |
| Global\NLS_00000804_Exception_Table_3_2 | |
| MSCTF.MarshalInterface.FileMap.MEK..BCMFF | |
| MSCTF.MarshalInterface.FileMap.MEK.B.BCMFF | |
| MSCTF.MarshalInterface.FileMap.MEK.C.BCMFF | |
| MSCTF.MarshalInterface.FileMap.MEK.D.BCMFF | |
| MSCTF.MarshalInterface.FileMap.MEK.E.BCMFF | |
| MSCTF.MarshalInterface.FileMap.MEK.F.BCMFF | |
| MSCTF.MarshalInterface.FileMap.MEK.G.BDMFF | |
| MSCTF.Shared.SFM.MEK | |
| Other behavior | |
|---|---|
| Behavior description: | 创建互斥体 |
| details: | CTF.LBES.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500 |
| CTF.Compart.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500 | |
| CTF.Asm.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500 | |
| CTF.Layouts.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500 | |
| CTF.TMD.MutexDefaultS-1-5-21-1482476501-1645522239-1417001333-500 | |
| CTF.TimListCache.FMPDefaultS-1-5-21-1482476501-1645522239-1417001333-500MUTEX.DefaultS-1-5-21-1482476501-1645522239-1417001333-500 | |
| MSCTF.Shared.MUTEX.AEH | |
| MSCTF.Shared.MUTEX.MEK | |
| Behavior description: | 查找指定窗口 |
| details: | NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,] |
| NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,] | |
| Behavior description: | 窗口信息 |
| details: | Pid = 2632, Hwnd=0x1035c, Text = 选择..., ClassName = WindowsForms10.STATIC.app.0.378734a. |
| Pid = 2632, Hwnd=0x1035e, Text = 游戏的执行文件：, ClassName = WindowsForms10.STATIC.app.0.378734a. | |
| Pid = 2632, Hwnd=0x10362, Text = XToolSoft出品 更多精彩访问:http://cn.xtoolsoft.com, ClassName = WindowsForms10.STATIC.app.0.378734a. | |
| Pid = 2632, Hwnd=0x10364, Text = 运行游戏, ClassName = WindowsForms10.BUTTON.app.0.378734a. | |
| Pid = 2632, Hwnd=0x10366, Text = 本补丁是一些Xp下的游戏在Windows7下花屏的通用解决办法，将此补丁拷贝到游戏目录下运行即可, ClassName = WindowsForms10.STATIC.app.0.378734a. | |
| Pid = 2632, Hwnd=0x10358, Text = Windows7游戏花屏通用补丁1.0, ClassName = WindowsForms10.Window.8.app.0.378734a. | |
| Run screenshot |
|---|
 |
HOME
