FontReg.exe

The executable FontReg.exe, “Font Registration Utility (x86-32)” has been detected as malware by 12 anti-virus scanners.
Remove FontReg.exe - Powered by Reason Core Security
Description:
Font Registration Utility (x86-32)

Version:
2.1.3.0

MD5:
a15d45f09da99a7369b5bb48767aba96

SHA-1:
d437e812eece183b4542cd2daa0016d40817f407

SHA-256:
6022a64245ba7985164120bd142b99f4a5c8bdaea2f47deea6bc05a57fd0f0c0

Scanner detections:
12 / 68

Status:
Malware

Analysis date:
12/4/2016 3:19:46 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Trojan.Heur.FU.bi0@aWG1F8hi
969

Avira AntiVirus
TR/Dropper.Gen
7.11.30.172

Antiy Labs AVL
Trojan/Win32.Tgenic
1.0.0.1

avast!
Win32:Patched-ALL [Trj]
140608-0

Bitdefender
Gen:Trojan.Heur.FU.bi0@aWG1F8hi
1.0.20.805

Commtouch SDK
W32/Virut.AI!Generic
5.4.1.7

F-Prot
W32/Virut.AI!Generic
4.6.5.141

F-Secure
Gen:Trojan.Heur.FU.bi0@aWG1F8hi
11.2014-10-06_3

G Data
Gen:Trojan.Heur.FU.bi0@aWG1F8hi
14.6.24

MicroWorld eScan
Gen:Trojan.Heur.FU.bi0@aWG1F8hi
15.0.0.483

NANO AntiVirus
Virus.Win32.Virut-Gen.bwpxnc
0.28.0.60253

Qihoo 360 Security
Malware.QVM19.Gen
1.0.0.1015

Remove FontReg.exe - Powered by Reason Core Security
File size:
31.5 KB (32,256 bytes)

Original file name:
FontReg.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Windows\System32\fontreg.exe

File PE Metadata
Compilation timestamp:
4/11/2008 10:48:25 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
384:het6ut4myLJ20KuS4MMDO4K+NUOYNow7iDr6Za4Gn/+qpzTCtHgpDZh6jEaD:hQPmmyLI7u6M1K3oIiDugLVzTuHgpzCD

Entry address:
0x1248

Entry point:
55, 8B, EC, B8, 74, 16, 00, 00, E8, AB, 08, 00, 00, 53, 56, 57, 8D, 45, F4, 50, 68, 1F, 00, 02, 00, 33, F6, 56, 68, B0, 10, 40, 00, 33, FF, 68, 02, 00, 00, 80, 47, 89, 75, F4, FF, 15, 0C, 10, 40, 00, 85, C0, 0F, 85, 73, 03, 00, 00, 56, 6A, 14, 8D, 85, DC, FD, FF, FF, 50, 56, FF, 15, 64, 10, 40, 00, 85, C0, 0F, 84, 51, 03, 00, 00, 8D, 85, DC, FD, FF, FF, 89, 45, F8, 33, C0, 8B, 7D, F8, 83, C9, FF, F2, 66, AF, F7, D1, 49, 91, 8D, 84, 45, DC, FD, FF, FF, C7, 00, 5C, 00, 00, 00, 40, 40, 89, 45, E8, 8B, 45, F4...
 
[+]

Entropy:
7.7199

Developed / compiled with:
Microsoft Visual C++

Code size:
4 KB (4,096 bytes)

Remove FontReg.exe - Powered by Reason Core Security