• Undesirable program

    FONTCORE.EXE Information

    This is an undesirable program.

    This file has been identified as a program that is undesirable to have running on your computer. This consists of programs that are misleading, harmful, or undesirable.

    If the description states that it is a piece of malware, you should immediately run an antivirus and antispyware program. If that does not help, feel free to ask us for assistance in the forums.

  • Name
  • Filename
  • Command
  • Description
    Trojan identified by Malwarebytes as a variant of the Trojan.Ransom.ED malware.
  • File Location
  • Startup Type
    This startup entry is started automatically via the following Windows Registry keys:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components

    HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components

    Under that key will be a subkey that is the CLSID listed below. That subkey will contain a value called StubPath that points to the file being loaded.

  • Note
    %AppData% refers to the current users Application Data folder. By default, this is C:\Documents and Settings\<Current User>\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\<Current User>\AppData\Roaming.
  • This entry has been requested 9,402 times.


It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Search Startups
HijackThis Startup Categories


Remember Me
Sign in anonymously