VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load

File information
Safety rating:73
Behavior list
Basic Information
MD5:77b27ff558e7919460a89fa80a61d9b0
file type:Cab
Production company:Microsoft Corporation
version:6.0.3790.3959---6.00.3790.3959 (srv03_sp2_rtm.070216-1710)
Shell or compiler information:COMPILER:Not a valid PE file
Subfile information:新建文~2.TXT / 8040b33ae9e31820309fa1f641ae0491 / Unknown
Key behavior
Behavior description:修改注册表_启动项
details:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0
File behavior
Behavior description:修改文件内容
details:C:\Users\ADMINI~1\AppData\Local\Temp\IXP000.TMP\新建文~2.TXT---> Offset = 0
Registry behavior
Behavior description:删除注册表键值_删除启动项
details:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0
Behavior description:修改注册表_启动项
details:\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0
Other behavior
Behavior description:窗口信息
details:Pid = 1904, Hwnd=0x40294, Text = 确定, ClassName = Button.
Pid = 1904, Hwnd=0x40290, Text = 创建进程 <CF刷钻.exe> 时出错。原因: 系统找不到指定的文件。 , ClassName = Static.
Pid = 1904, Hwnd=0x80024, Text = CF, ClassName = #32770.
Run screenshot
VirSCAN

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
中国反网络病毒联盟
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号