VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.
4, If your browser cannot upload files, please download VirSCAN uploader to upload.

Language
Server load
Server Load

VirSCAN
VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

   File information

Virscan.org multi-engine scan report
Behavior analysis report:         Habo file analysis

Basic Information

MD5:7eef32f80097b1be2ead901179385ce8
文件大小:5.58MB
上传时间: 2014-09-22 10:36:30 (CST)
Package names:
Minimum operating environment:
copyright:

Key behavior

Behavior description: 屏蔽窗口关闭消息
details: hWnd = 0x00020340, Text = IBM Informix Client-SDK Advertised Install Transform Generator, ClassName = #32770.

File behavior

Behavior description: 复制文件
details: 123456 ---> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\CsdkTmp.msi

Other behavior

Behavior description: 创建互斥体
details: CTF.LBES.MutexDefaultS-*
CTF.Compart.MutexDefaultS-*
CTF.Asm.MutexDefaultS-*
CTF.Layouts.MutexDefaultS-*
CTF.TMD.MutexDefaultS-*
CTF.TimListCache.FMPDefaultS-*MUTEX.DefaultS-*
MSCTF.Shared.MUTEX.IOH
MSCTF.Shared.MUTEX.EDK
Behavior description: 创建事件对象
details: EventName = MSCTF.SendReceive.Event.EDK.IC
EventName = MSCTF.SendReceiveConection.Event.EDK.IC
Behavior description: 查找指定窗口
details: NtUserFindWindowEx: [Class,Window] = [Shell_TrayWnd,]
NtUserFindWindowEx: [Class,Window] = [CicLoaderWndClass,]
NtUserFindWindowEx: [Class,Window] = [OleMainThreadWndClass,]
NtUserFindWindowEx: [Class,Window] = [MS_WINHELP,]
Behavior description: 打开事件
details: HookSwitchHookEnabledEvent
CTF.ThreadMIConnectionEvent.000007E8.00000000.00000010
CTF.ThreadMarshalInterfaceEvent.000007E8.00000000.00000010
MSCTF.SendReceiveConection.Event.IOH.IC
MSCTF.SendReceive.Event.IOH.IC
Behavior description: 屏蔽窗口关闭消息
details: hWnd = 0x00020340, Text = IBM Informix Client-SDK Advertised Install Transform Generator, ClassName = #32770.
Behavior description: 窗口信息
details: Pid = 2608, Hwnd=0x10344, Text = OK, ClassName = Button.
Pid = 2608, Hwnd=0x10346, Text = Cancel, ClassName = Button.
Pid = 2608, Hwnd=0x10348, Text = &Help, ClassName = Button.
Pid = 2608, Hwnd=0x1034a, Text = Please enter the location of the IBM Informix Client-SDK install program (.msi file) or use the Browse button to select the file, ClassName = Static.
Pid = 2608, Hwnd=0x1034e, Text = Browse..., ClassName = Button.
Pid = 2608, Hwnd=0x10350, Text = Please enter the complete path of the transform file to be generated or use the Save As button to save the file, ClassName = Static.
Pid = 2608, Hwnd=0x10354, Text = Save As..., ClassName = Button.
Pid = 2608, Hwnd=0x20340, Text = IBM Informix Client-SDK Advertised Install Transform Generator, ClassName = #32770.
Pid = 2608, Hwnd=0x1035c, Text = 确定, ClassName = Button.
Pid = 2608, Hwnd=0x10360, Text = File copy failed!! Please confirm the location of the IBM Informix Client-SDK installation program and that the directory pointed to by %TMP% or %TEMP% exists and is writable., ClassName = Static.
Pid = 2608, Hwnd=0x5035a, Text = IBM Informix Client-SDK Advertise Install Transform Generator Error, ClassName = #32770.
Pid = 2608, Hwnd=0x1034c, Text = 123456, ClassName = Edit.
Pid = 2608, Hwnd=0x10352, Text = 123456, ClassName = Edit.
Pid = 2608, Hwnd=0x2035e, Text = 确定, ClassName = Button.
Pid = 2608, Hwnd=0x20362, Text = File copy failed!! Please confirm the location of the IBM Informix Client-SDK installation program and that the directory pointed to by %TMP% or %TEMP% exists and is writable., ClassName = Static.
Behavior description: 打开互斥体
details: ShimCacheMutex