VirSCAN VirSCAN

1, You can UPLOAD any files, but there is 20Mb limit per file.
2, VirSCAN supports Rar/Zip decompression, but it must be less than 20 files.
3, Aplikace VirSCAN může skenovat komprimované soubory s heslem 'infected'nebo'virus'.

Language
Server load
Server Load

File information
Safety rating:88
Behavior list
Basic Information
MD5:a79556729da734c13d9f4affdd0e5b20
file type:EXE
Production company:Xi
version:1.87.0.258---2001-2004 Xi
Shell or compiler information:COMPILER:Inno Setup Module Heuristic Mode [Overlay]
Process behavior
Behavior description:创建新文件进程
details:ImagePath = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\is-KCCRG.tmp\is-AP4IK.tmp, CmdLine = "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\is-KCCRG.tmp\is-AP4IK.tmp" /SL4 $D0180 c:\%temp%\1415607168.743921.exe 1312225 50688
File behavior
Behavior description:创建可执行文件
details:C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\is-KCCRG.tmp\is-AP4IK.tmp
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\is-B6HH9.tmp\_shfoldr.dll
Registry behavior
Behavior description:修改注册表
details:\REGISTRY\USER\S-1-5-21-1482476501-1645522239-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\X\BaseClass
Other behavior
Behavior description:窗口信息
details:Pid = 1440, Hwnd=0xc01e8, Text = Welcome, ClassName = TPage.
Pid = 1440, Hwnd=0xb01be, Text = Welcome to the Net Transport Setup Wizard , ClassName = TNewStaticText.
Pid = 1440, Hwnd=0xa0196, Text = This will install Net Transport 1.87.258 on your computer. It is recommended that you close all other applications before cont, ClassName = TNewStaticText.
Pid = 1440, Hwnd=0xa01aa, Text = Main, ClassName = TPage.
Pid = 1440, Hwnd=0xd01a4, Text = &Next >, ClassName = TButton.
Pid = 1440, Hwnd=0xa0198, Text = Cancel, ClassName = TButton.
Pid = 1440, Hwnd=0xc01c6, Text = Setup - Net Transport, ClassName = TWizardForm.
Behavior description:获取系统权限
details:SE_LOAD_DRIVER_PRIVILEGE
Run screenshot
VirSCAN

About VirSCAN | Privacy Policy | Contact us | Links | Help VirSCAN
中国反网络病毒联盟
Powered By CentOSpol

京ICP备11007605号-12

pol

京公网安备 11010802020746号