Trojan.Siggen9.45244

Technical Information

Modifies file system

Creates the following files

%TEMP%\7zsf6a2.tmp\setup.exe
%HOMEPATH%\documents\fontcreator\transform\is-jrmkm.tmp
%HOMEPATH%\documents\fontcreator\transform\is-19ghb.tmp
%HOMEPATH%\documents\fontcreator\transform\is-6kjgt.tmp
%HOMEPATH%\documents\fontcreator\transform\is-22i01.tmp
%HOMEPATH%\documents\fontcreator\transform\is-3i01q.tmp
%HOMEPATH%\documents\fontcreator\transform\is-kdqq0.tmp
%HOMEPATH%\documents\fontcreator\transform\is-fpev7.tmp
%HOMEPATH%\documents\fontcreator\transform\is-qa3mg.tmp
%HOMEPATH%\documents\fontcreator\transform\is-oj2t7.tmp
%HOMEPATH%\documents\fontcreator\transform\is-e6sq0.tmp
%HOMEPATH%\documents\fontcreator\transform\is-ufri5.tmp
%HOMEPATH%\documents\fontcreator\transform\is-eafk6.tmp
%HOMEPATH%\documents\fontcreator\transform\is-d5vck.tmp
%HOMEPATH%\documents\fontcreator\transform\is-df9rg.tmp
%HOMEPATH%\documents\fontcreator\transform\is-im5m0.tmp
%HOMEPATH%\documents\fontcreator\transform\is-jlfe2.tmp
%HOMEPATH%\documents\fontcreator\transform\is-dgdpf.tmp
%ProgramFiles(x86)%\high-logic fontcreator\is-6dfhe.tmp
%ProgramFiles(x86)%\high-logic fontcreator\composites\is-ff55u.tmp
%HOMEPATH%\documents\fontcreator\transform\is-v363a.tmp
%HOMEPATH%\documents\fontcreator\transform\is-ok1e7.tmp
%HOMEPATH%\documents\fontcreator\transform\is-jom8f.tmp
%HOMEPATH%\documents\fontcreator\transform\is-a1j34.tmp
%HOMEPATH%\documents\fontcreator\transform\is-8rlfv.tmp
%HOMEPATH%\documents\fontcreator\transform\is-7939e.tmp
%HOMEPATH%\documents\fontcreator\transform\is-ag4ig.tmp
%HOMEPATH%\documents\fontcreator\transform\is-92fk5.tmp
%HOMEPATH%\documents\fontcreator\transform\is-16d8u.tmp
%HOMEPATH%\documents\fontcreator\transform\is-h6s6u.tmp
%HOMEPATH%\documents\fontcreator\transform\is-p05pq.tmp
%HOMEPATH%\documents\fontcreator\transform\is-46k7q.tmp
%HOMEPATH%\documents\fontcreator\transform\is-amfn8.tmp
%HOMEPATH%\documents\fontcreator\transform\is-je8k2.tmp
%HOMEPATH%\documents\fontcreator\transform\is-utthm.tmp
%TEMP%\is-1fp43.tmp\_isetup\_regdll.tmp
%TEMP%\is-1fp43.tmp\_isetup\_setup64.tmp
%TEMP%\is-1fp43.tmp\_isetup\_shfoldr.dll
%ProgramFiles(x86)%\high-logic fontcreator\is-11336.tmp
%ProgramFiles(x86)%\high-logic fontcreator\is-6771s.tmp
%ProgramFiles(x86)%\high-logic fontcreator\is-eutbk.tmp
%ProgramFiles(x86)%\high-logic fontcreator\is-rb1dg.tmp
%ProgramFiles(x86)%\high-logic fontcreator\is-md4d6.tmp
%WINDIR%\syswow64\is-oh4qt.tmp
%ProgramFiles(x86)%\high-logic fontcreator\is-ts6bp.tmp
%ProgramFiles(x86)%\high-logic fontcreator\is-dqitb.tmp
%ProgramFiles(x86)%\high-logic fontcreator\unicode\is-tri7f.tmp
%ProgramFiles(x86)%\high-logic fontcreator\unicode\is-67pl9.tmp
%ProgramFiles(x86)%\high-logic fontcreator\unicode\is-3ct2j.tmp
%TEMP%\is-prsi4.tmp\setup.tmp
%HOMEPATH%\documents\fontcreator\kerning\is-vuded.tmp
%HOMEPATH%\documents\fontcreator\transform\is-gr9n8.tmp
%HOMEPATH%\documents\fontcreator\kerning\is-0v3no.tmp
%HOMEPATH%\documents\fontcreator\transform\is-o6hdn.tmp
%HOMEPATH%\documents\fontcreator\transform\is-0ekvq.tmp
%HOMEPATH%\documents\fontcreator\transform\is-liafe.tmp
%HOMEPATH%\documents\fontcreator\transform\is-79g7q.tmp
%HOMEPATH%\documents\fontcreator\transform\is-h7ol0.tmp
%HOMEPATH%\documents\fontcreator\transform\is-ckioa.tmp
%HOMEPATH%\documents\fontcreator\transform\is-ce4n4.tmp
%HOMEPATH%\desktop\high-logic fontcreator.lnk
%HOMEPATH%\documents\fontcreator\transform\is-3h2fr.tmp
%HOMEPATH%\documents\fontcreator\transform\is-6440c.tmp
%HOMEPATH%\documents\fontcreator\transform\is-2nm0a.tmp
%HOMEPATH%\documents\fontcreator\transform\is-bkc27.tmp
%HOMEPATH%\documents\fontcreator\transform\is-rken0.tmp
%HOMEPATH%\documents\fontcreator\transform\is-hdt5c.tmp
%APPDATA%\microsoft\internet explorer\quick launch\high-logic fontcreator.lnk

Sets the 'hidden' attribute to the following files

%ProgramFiles(x86)%\high-logic fontcreator\ser.reg

Moves the following files

from %ProgramFiles(x86)%\high-logic fontcreator\is-11336.tmp to %ProgramFiles(x86)%\high-logic fontcreator\unins000.exe
from %HOMEPATH%\documents\fontcreator\transform\is-jrmkm.tmp to %HOMEPATH%\documents\fontcreator\transform\maths symbol.xml
from %HOMEPATH%\documents\fontcreator\transform\is-19ghb.tmp to %HOMEPATH%\documents\fontcreator\transform\medium to bold high contrast.xml
from %HOMEPATH%\documents\fontcreator\transform\is-6kjgt.tmp to %HOMEPATH%\documents\fontcreator\transform\medium to bold.xml
from %HOMEPATH%\documents\fontcreator\transform\is-22i01.tmp to %HOMEPATH%\documents\fontcreator\transform\medium to book.xml
from %HOMEPATH%\documents\fontcreator\transform\is-3i01q.tmp to %HOMEPATH%\documents\fontcreator\transform\medium to demibold.xml
from %HOMEPATH%\documents\fontcreator\transform\is-kdqq0.tmp to %HOMEPATH%\documents\fontcreator\transform\nut fractions.xml
from %HOMEPATH%\documents\fontcreator\transform\is-fpev7.tmp to %HOMEPATH%\documents\fontcreator\transform\oblique.xml
from %HOMEPATH%\documents\fontcreator\transform\is-qa3mg.tmp to %HOMEPATH%\documents\fontcreator\transform\old style figures.xml
from %HOMEPATH%\documents\fontcreator\transform\is-oj2t7.tmp to %HOMEPATH%\documents\fontcreator\transform\outline bold.xml
from %HOMEPATH%\documents\fontcreator\transform\is-e6sq0.tmp to %HOMEPATH%\documents\fontcreator\transform\outline heavy.xml
from %HOMEPATH%\documents\fontcreator\transform\is-ufri5.tmp to %HOMEPATH%\documents\fontcreator\transform\outline light.xml
from %HOMEPATH%\documents\fontcreator\transform\is-eafk6.tmp to %HOMEPATH%\documents\fontcreator\transform\outline medium.xml
from %HOMEPATH%\documents\fontcreator\transform\is-d5vck.tmp to %HOMEPATH%\documents\fontcreator\transform\petite capitals private use.xml
from %HOMEPATH%\documents\fontcreator\transform\is-jlfe2.tmp to %HOMEPATH%\documents\fontcreator\transform\small capitals private use.xml
from %HOMEPATH%\documents\fontcreator\transform\is-dgdpf.tmp to %HOMEPATH%\documents\fontcreator\transform\small capitals.xml
from %HOMEPATH%\documents\fontcreator\transform\is-46k7q.tmp to %HOMEPATH%\documents\fontcreator\transform\spaces.xml
from %HOMEPATH%\documents\fontcreator\transform\is-p05pq.tmp to %HOMEPATH%\documents\fontcreator\transform\stacking diacrticds.xml
from %HOMEPATH%\documents\fontcreator\transform\is-h6s6u.tmp to %HOMEPATH%\documents\fontcreator\transform\subscript.xml
from %HOMEPATH%\documents\fontcreator\transform\is-16d8u.tmp to %HOMEPATH%\documents\fontcreator\transform\superscript.xml
from %HOMEPATH%\documents\fontcreator\transform\is-92fk5.tmp to %HOMEPATH%\documents\fontcreator\transform\symbol.xml
from %HOMEPATH%\documents\fontcreator\transform\is-ag4ig.tmp to %HOMEPATH%\documents\fontcreator\transform\tall.xml
from %HOMEPATH%\documents\fontcreator\transform\is-7939e.tmp to %HOMEPATH%\documents\fontcreator\transform\thin to demibold.xml
from %HOMEPATH%\documents\fontcreator\transform\is-ckioa.tmp to %HOMEPATH%\documents\fontcreator\transform\thin to light.xml
from %HOMEPATH%\documents\fontcreator\transform\is-8rlfv.tmp to %HOMEPATH%\documents\fontcreator\transform\thin to medium.xml
from %HOMEPATH%\documents\fontcreator\transform\is-jom8f.tmp to %HOMEPATH%\documents\fontcreator\transform\thin.xml
from %HOMEPATH%\documents\fontcreator\transform\is-ok1e7.tmp to %HOMEPATH%\documents\fontcreator\transform\vietnamese.xml
from %HOMEPATH%\documents\fontcreator\transform\is-v363a.tmp to %HOMEPATH%\documents\fontcreator\transform\wgl4 character set.xml
from %HOMEPATH%\documents\fontcreator\transform\is-im5m0.tmp to %HOMEPATH%\documents\fontcreator\transform\low profile diacritics.xml
from %ProgramFiles(x86)%\high-logic fontcreator\composites\is-ff55u.tmp to %ProgramFiles(x86)%\high-logic fontcreator\composites\compositedata.xml
from %HOMEPATH%\documents\fontcreator\transform\is-df9rg.tmp to %HOMEPATH%\documents\fontcreator\transform\light to very light.xml
from %HOMEPATH%\documents\fontcreator\transform\is-je8k2.tmp to %HOMEPATH%\documents\fontcreator\transform\letterlike symbols.xml
from %ProgramFiles(x86)%\high-logic fontcreator\is-6771s.tmp to %ProgramFiles(x86)%\high-logic fontcreator\fontcreator.exe
from %ProgramFiles(x86)%\high-logic fontcreator\is-eutbk.tmp to %ProgramFiles(x86)%\high-logic fontcreator\fontcreator.chm
from %ProgramFiles(x86)%\high-logic fontcreator\is-rb1dg.tmp to %ProgramFiles(x86)%\high-logic fontcreator\fontcreatormanual.pdf
from %ProgramFiles(x86)%\high-logic fontcreator\is-md4d6.tmp to %ProgramFiles(x86)%\high-logic fontcreator\fontcreatorext.dll
from %WINDIR%\syswow64\is-oh4qt.tmp to %WINDIR%\syswow64\fontinstaller.dll
from %ProgramFiles(x86)%\high-logic fontcreator\is-ts6bp.tmp to %ProgramFiles(x86)%\high-logic fontcreator\subfamily.dat
from %ProgramFiles(x86)%\high-logic fontcreator\is-dqitb.tmp to %ProgramFiles(x86)%\high-logic fontcreator\tableoffsetorder.txt
from %ProgramFiles(x86)%\high-logic fontcreator\unicode\is-tri7f.tmp to %ProgramFiles(x86)%\high-logic fontcreator\unicode\readme.txt
from %ProgramFiles(x86)%\high-logic fontcreator\unicode\is-67pl9.tmp to %ProgramFiles(x86)%\high-logic fontcreator\unicode\blocks.txt
from %ProgramFiles(x86)%\high-logic fontcreator\unicode\is-3ct2j.tmp to %ProgramFiles(x86)%\high-logic fontcreator\unicode\unicodedata.txt
from %HOMEPATH%\documents\fontcreator\kerning\is-vuded.tmp to %HOMEPATH%\documents\fontcreator\kerning\kern_standard.txt
from %HOMEPATH%\documents\fontcreator\kerning\is-0v3no.tmp to %HOMEPATH%\documents\fontcreator\kerning\kern_extended.txt
from %HOMEPATH%\documents\fontcreator\transform\is-o6hdn.tmp to %HOMEPATH%\documents\fontcreator\transform\black to extrablack.xml
from %HOMEPATH%\documents\fontcreator\transform\is-0ekvq.tmp to %HOMEPATH%\documents\fontcreator\transform\bold to heavy.xml
from %HOMEPATH%\documents\fontcreator\transform\is-liafe.tmp to %HOMEPATH%\documents\fontcreator\transform\book to demibold high contrast.xml
from %HOMEPATH%\documents\fontcreator\transform\is-79g7q.tmp to %HOMEPATH%\documents\fontcreator\transform\book to demibold.xml
from %HOMEPATH%\documents\fontcreator\transform\is-h7ol0.tmp to %HOMEPATH%\documents\fontcreator\transform\book to thin.xml
from %HOMEPATH%\documents\fontcreator\transform\is-ce4n4.tmp to %HOMEPATH%\documents\fontcreator\transform\condensed thin.xml
from %HOMEPATH%\documents\fontcreator\transform\is-a1j34.tmp to %HOMEPATH%\documents\fontcreator\transform\cyrillic petite capitals.xml
from %HOMEPATH%\documents\fontcreator\transform\is-hdt5c.tmp to %HOMEPATH%\documents\fontcreator\transform\cyrillic small capitals.xml
from %HOMEPATH%\documents\fontcreator\transform\is-3h2fr.tmp to %HOMEPATH%\documents\fontcreator\transform\demibold to bold.xml
from %HOMEPATH%\documents\fontcreator\transform\is-6440c.tmp to %HOMEPATH%\documents\fontcreator\transform\eastern europe.xml
from %HOMEPATH%\documents\fontcreator\transform\is-2nm0a.tmp to %HOMEPATH%\documents\fontcreator\transform\greek extended.xml
from %HOMEPATH%\documents\fontcreator\transform\is-bkc27.tmp to %HOMEPATH%\documents\fontcreator\transform\greek petite capitals.xml
from %HOMEPATH%\documents\fontcreator\transform\is-rken0.tmp to %HOMEPATH%\documents\fontcreator\transform\greek small capitals.xml
from %HOMEPATH%\documents\fontcreator\transform\is-gr9n8.tmp to %HOMEPATH%\documents\fontcreator\transform\heavy to black.xml
from %HOMEPATH%\documents\fontcreator\transform\is-utthm.tmp to %HOMEPATH%\documents\fontcreator\transform\italic.xml
from %HOMEPATH%\documents\fontcreator\transform\is-amfn8.tmp to %HOMEPATH%\documents\fontcreator\transform\ligature collection.xml
from %ProgramFiles(x86)%\high-logic fontcreator\is-6dfhe.tmp to %ProgramFiles(x86)%\high-logic fontcreator\ser.reg

Miscellaneous

Searches for the following windows

ClassName: 'MS_WINHELP' WindowName: ''

Creates and executes the following

'%TEMP%\7zsf6a2.tmp\setup.exe' /VERYSILENT /NORESTART
'%TEMP%\is-prsi4.tmp\setup.tmp' /SL5="$A0228,8433574,112640,%TEMP%\7zSF6A2.tmp\setup.exe" /VERYSILENT /NORESTART

Executes the following

'%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\High-Logic FontCreator\FontCreatorExt.dll"
'%WINDIR%\syswow64\regsvr32.exe' /s "<SYSTEM32>\FontInstaller.dll"

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial