Trojan.Siggen31.34020

Technical Information

Modifies file system

Creates the following files

%TEMP%\rarsfx0\izarc_4.6.exe
%ProgramFiles(x86)%\izarc\languages\is-471c8.tmp
%ProgramFiles(x86)%\izarc\languages\is-1e93u.tmp
%ProgramFiles(x86)%\izarc\languages\is-qtktj.tmp
%ProgramFiles(x86)%\izarc\languages\is-rdhe5.tmp
%ProgramFiles(x86)%\izarc\languages\is-p4fi9.tmp
%ProgramFiles(x86)%\izarc\languages\is-alrt2.tmp
%ProgramFiles(x86)%\izarc\languages\is-34e28.tmp
%ProgramFiles(x86)%\izarc\languages\is-oqn8f.tmp
%ProgramFiles(x86)%\izarc\languages\is-d1l4o.tmp
%ProgramFiles(x86)%\izarc\languages\is-pv24f.tmp
%ProgramFiles(x86)%\izarc\languages\is-fi0u8.tmp
%ProgramFiles(x86)%\izarc\languages\is-hjo7d.tmp
%ProgramFiles(x86)%\izarc\languages\is-jr6ue.tmp
%ProgramFiles(x86)%\izarc\languages\is-ebrvs.tmp
%ProgramFiles(x86)%\izarc\languages\is-te6ea.tmp
%ProgramFiles(x86)%\izarc\languages\is-pk8qn.tmp
%ProgramFiles(x86)%\izarc\languages\is-h33e2.tmp
%ProgramFiles(x86)%\izarc\languages\is-ispp2.tmp
%ProgramFiles(x86)%\izarc\languages\is-pt836.tmp
%ProgramFiles(x86)%\izarc\languages\is-t77co.tmp
%ProgramFiles(x86)%\izarc\icons\is-ovjl1.tmp
%ProgramFiles(x86)%\izarc\languages\is-5377g.tmp
%ProgramFiles(x86)%\izarc\languages\is-4j9bu.tmp
%ProgramFiles(x86)%\izarc\icons\is-kteen.tmp
%ProgramFiles(x86)%\izarc\icons\is-h0eph.tmp
%ProgramFiles(x86)%\izarc\icons\is-mkenr.tmp
%ProgramFiles(x86)%\izarc\icons\is-r1dol.tmp
%ProgramFiles(x86)%\izarc\icons\is-n0db0.tmp
%ProgramFiles(x86)%\izarc\icons\is-n89dv.tmp
%ProgramFiles(x86)%\izarc\languages\is-nvl12.tmp
%ProgramFiles(x86)%\izarc\languages\is-0gilm.tmp
%ProgramFiles(x86)%\izarc\languages\is-gf172.tmp
%ProgramFiles(x86)%\izarc\languages\is-3alh8.tmp
%ProgramFiles(x86)%\izarc\languages\is-40t4c.tmp
%ProgramFiles(x86)%\izarc\languages\is-pkl5c.tmp
%ProgramFiles(x86)%\izarc\languages\is-7nfgk.tmp
%ProgramFiles(x86)%\izarc\languages\is-4k683.tmp
%ProgramFiles(x86)%\izarc\languages\is-bjupk.tmp
%ProgramFiles(x86)%\izarc\languages\is-683ui.tmp
%ProgramFiles(x86)%\izarc\languages\is-dcppf.tmp
%ProgramFiles(x86)%\izarc\languages\is-tdrb8.tmp
%ProgramFiles(x86)%\izarc\languages\is-umgsg.tmp
%ProgramFiles(x86)%\izarc\languages\is-prbna.tmp
%ProgramFiles(x86)%\izarc\icons\is-vstbj.tmp
%ProgramFiles(x86)%\izarc\languages\is-oqgm6.tmp
%ProgramFiles(x86)%\izarc\languages\is-8c8hi.tmp
%ProgramFiles(x86)%\izarc\languages\is-hpv3l.tmp
%ProgramFiles(x86)%\izarc\languages\is-2r6td.tmp
%ProgramFiles(x86)%\izarc\languages\is-aq7jf.tmp
%ProgramFiles(x86)%\izarc\is-jejc1.tmp
%ProgramFiles(x86)%\izarc\is-p4vq5.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\izarc\izarc.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\izarc\izarc help.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\izarc\what's new.lnk
%ProgramFiles(x86)%\izarc\icons\is-6gusi.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\izarc\uninstall izarc.lnk
%TEMP%\etilqs_u2fiynerokh1tb7
%TEMP%\etilqs_u6jf8aonb49tvdz
%TEMP%\etilqs_hbx59tyho4ctkvp
%TEMP%\etilqs_fjtgpgwx0crvs7c
%TEMP%\etilqs_ke4lc6fepxmy3f8
%TEMP%\etilqs_gmjswfiahh1sqyb
%TEMP%\etilqs_p2qckuii3pseyqx
%TEMP%\etilqs_t5exv54ybpxwmfh
%ProgramFiles(x86)%\izarc\languages\is-cme17.tmp
%ProgramFiles(x86)%\izarc\languages\is-0rg5o.tmp
%ProgramFiles(x86)%\izarc\languages\is-fr9to.tmp
%ProgramFiles(x86)%\izarc\languages\is-3s8md.tmp
%ProgramFiles(x86)%\izarc\languages\is-bh7r7.tmp
%ProgramFiles(x86)%\izarc\languages\is-mjae7.tmp
%ProgramFiles(x86)%\izarc\languages\is-fl6vn.tmp
%ProgramFiles(x86)%\izarc\languages\is-01t2f.tmp
%ProgramFiles(x86)%\izarc\languages\is-o4o8i.tmp
%ProgramFiles(x86)%\izarc\languages\is-o4806.tmp
%ProgramFiles(x86)%\izarc\languages\is-ip5km.tmp
%ProgramFiles(x86)%\izarc\languages\is-etcib.tmp
%ProgramFiles(x86)%\izarc\languages\is-brkqu.tmp
%ProgramFiles(x86)%\izarc\languages\is-bt2b5.tmp
%ProgramFiles(x86)%\izarc\languages\is-m42me.tmp
%ProgramFiles(x86)%\izarc\languages\is-m8si2.tmp
%ProgramFiles(x86)%\izarc\languages\is-7kucf.tmp
%ProgramFiles(x86)%\izarc\languages\is-6di1q.tmp
%ProgramFiles(x86)%\izarc\languages\is-nfh2m.tmp
%ProgramFiles(x86)%\izarc\languages\is-nq3mb.tmp
%ProgramFiles(x86)%\izarc\languages\is-b9u4t.tmp
%ProgramFiles(x86)%\izarc\languages\is-jjtat.tmp
%ProgramFiles(x86)%\izarc\languages\is-fnd7v.tmp
%ProgramFiles(x86)%\izarc\languages\is-6k61m.tmp
%ProgramFiles(x86)%\izarc\languages\is-3r4fv.tmp
%ProgramFiles(x86)%\izarc\icons\is-h1p35.tmp
%ProgramFiles(x86)%\izarc\icons\is-39d8e.tmp
%ProgramFiles(x86)%\izarc\icons\is-ho7vo.tmp
%ProgramFiles(x86)%\izarc\dllinfo\is-6i198.tmp
%ProgramFiles(x86)%\izarc\skins\is-d4phn.tmp
%ProgramFiles(x86)%\izarc\skins\is-f0ji7.tmp
%ProgramFiles(x86)%\izarc\skins\is-o0140.tmp
%ProgramFiles(x86)%\izarc\skins\is-hq696.tmp
%ProgramFiles(x86)%\izarc\skins\is-52f0a.tmp
%ProgramFiles(x86)%\izarc\skins\is-0cd68.tmp
%ProgramFiles(x86)%\izarc\skins\is-or8v4.tmp
%ProgramFiles(x86)%\izarc\skins\is-mqk3o.tmp
%ProgramFiles(x86)%\izarc\skins\is-bgl44.tmp
%ProgramFiles(x86)%\izarc\skins\is-jegk9.tmp
%ProgramFiles(x86)%\izarc\skins\is-68ica.tmp
%ProgramFiles(x86)%\izarc\skins\is-fhs8m.tmp
%ProgramFiles(x86)%\izarc\skins\is-vfrbs.tmp
%ProgramFiles(x86)%\izarc\skins\is-dg362.tmp
%ProgramFiles(x86)%\izarc\skins\is-5nfsa.tmp
%ProgramFiles(x86)%\izarc\skins\is-6mjbp.tmp
%ProgramFiles(x86)%\izarc\skins\is-qt0qb.tmp
%ProgramFiles(x86)%\izarc\dllinfo\is-dhuif.tmp
%ProgramFiles(x86)%\izarc\skins\is-tso9d.tmp
%ProgramFiles(x86)%\izarc\dllinfo\is-vfuti.tmp
%ProgramFiles(x86)%\izarc\misc\is-ve950.tmp
%TEMP%\rarsfx0\programs.url
%TEMP%\is-qaf32.tmp\izarc_4.6.tmp
%TEMP%\is-1caid.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\izarc\is-640av.tmp
%ProgramFiles(x86)%\izarc\is-62va0.tmp
%ProgramFiles(x86)%\izarc\is-9ksqf.tmp
%ProgramFiles(x86)%\izarc\is-pv5n3.tmp
%ProgramFiles(x86)%\izarc\is-7o4pb.tmp
%ProgramFiles(x86)%\izarc\is-jc54v.tmp
%ProgramFiles(x86)%\izarc\is-oc80a.tmp
%ProgramFiles(x86)%\izarc\is-u23f9.tmp
%ProgramFiles(x86)%\izarc\is-h8mpb.tmp
%ProgramFiles(x86)%\izarc\is-0fh7r.tmp
%ProgramFiles(x86)%\izarc\is-iiutk.tmp
%ProgramFiles(x86)%\izarc\is-lvqco.tmp
%ProgramFiles(x86)%\izarc\is-gkv3k.tmp
%ProgramFiles(x86)%\izarc\is-0q7eb.tmp
%ProgramFiles(x86)%\izarc\misc\is-kuct3.tmp
%ProgramFiles(x86)%\izarc\misc\is-j5r57.tmp
%ProgramFiles(x86)%\izarc\misc\is-o7oo7.tmp
%ProgramFiles(x86)%\izarc\sfxs\is-17qjt.tmp
%ProgramFiles(x86)%\izarc\dllinfo\is-3r8u7.tmp
%ProgramFiles(x86)%\izarc\sfxs\is-o4f4o.tmp
%ProgramFiles(x86)%\izarc\icons\is-9tdm2.tmp
%ProgramFiles(x86)%\izarc\icons\is-4h7bj.tmp
%ProgramFiles(x86)%\izarc\icons\is-0nmhc.tmp
%ProgramFiles(x86)%\izarc\icons\is-o5tkg.tmp
%ProgramFiles(x86)%\izarc\icons\is-70h3g.tmp
%ProgramFiles(x86)%\izarc\icons\is-keaam.tmp
%ProgramFiles(x86)%\izarc\icons\is-037rt.tmp
%ProgramFiles(x86)%\izarc\icons\is-5h0k7.tmp
%ProgramFiles(x86)%\izarc\icons\is-3ptp2.tmp
%ProgramFiles(x86)%\izarc\icons\is-bdu9e.tmp
%ProgramFiles(x86)%\izarc\icons\is-dnikl.tmp
%ProgramFiles(x86)%\izarc\icons\is-54pau.tmp
%ProgramFiles(x86)%\izarc\icons\is-ou7hm.tmp
%ProgramFiles(x86)%\izarc\icons\is-dhm7j.tmp
%ProgramFiles(x86)%\izarc\icons\is-ckdqb.tmp
%ProgramFiles(x86)%\izarc\icons\is-7miie.tmp
%ProgramFiles(x86)%\izarc\icons\is-q9se4.tmp
%ProgramFiles(x86)%\izarc\icons\is-p0g8s.tmp
%ProgramFiles(x86)%\izarc\icons\is-kk9a9.tmp
%ProgramFiles(x86)%\izarc\icons\is-cqs2k.tmp
%ProgramFiles(x86)%\izarc\icons\is-e5s49.tmp
%ProgramFiles(x86)%\izarc\icons\is-lqfgc.tmp
%ProgramFiles(x86)%\izarc\icons\is-33874.tmp
%ProgramFiles(x86)%\izarc\sfxs\is-iia68.tmp
%ProgramFiles(x86)%\izarc\sfxs\is-3qobr.tmp
%ProgramFiles(x86)%\izarc\sfxs\is-5i4fc.tmp
%ProgramFiles(x86)%\izarc\sfxs\is-rknqc.tmp
%ProgramFiles(x86)%\izarc\icons\is-h7ifj.tmp
%ProgramFiles(x86)%\izarc\icons\is-t91gr.tmp
%ProgramFiles(x86)%\izarc\icons\is-f05bd.tmp
%ProgramFiles(x86)%\izarc\icons\is-3urle.tmp
%ProgramFiles(x86)%\izarc\icons\is-mt31u.tmp
%TEMP%\etilqs_wxptmruehv2ofox
%ProgramFiles(x86)%\izarc\unins000.dat
%ProgramFiles(x86)%\izarc\icons\is-ue73m.tmp
%ProgramFiles(x86)%\izarc\icons\is-1o94r.tmp
%ProgramFiles(x86)%\izarc\icons\is-7oop3.tmp
%ProgramFiles(x86)%\izarc\icons\is-upnaj.tmp
%ProgramFiles(x86)%\izarc\icons\is-fb9vf.tmp
%ProgramFiles(x86)%\izarc\icons\is-08gpv.tmp
%ProgramFiles(x86)%\izarc\icons\is-bfapq.tmp
%ProgramFiles(x86)%\izarc\icons\is-rsc19.tmp
%ProgramFiles(x86)%\izarc\icons\is-j4mfs.tmp
%ProgramFiles(x86)%\izarc\sfxs\is-k5vfv.tmp
%ProgramFiles(x86)%\izarc\icons\is-iofa7.tmp
%TEMP%\etilqs_ufbzc4mhorfv7f6

Deletes the following files

%ProgramFiles(x86)%\izarc\sc.exe
%TEMP%\is-1caid.tmp\_isetup\_setup64.tmp
%TEMP%\is-qaf32.tmp\izarc_4.6.tmp

Moves the following files

from %ProgramFiles(x86)%\izarc\is-640av.tmp to %ProgramFiles(x86)%\izarc\unins000.exe
from %ProgramFiles(x86)%\izarc\languages\is-683ui.tmp to %ProgramFiles(x86)%\izarc\languages\chinese big5.lng
from %ProgramFiles(x86)%\izarc\languages\is-dcppf.tmp to %ProgramFiles(x86)%\izarc\languages\chinese gb.lng
from %ProgramFiles(x86)%\izarc\languages\is-tdrb8.tmp to %ProgramFiles(x86)%\izarc\languages\chinese traditional.lng
from %ProgramFiles(x86)%\izarc\languages\is-umgsg.tmp to %ProgramFiles(x86)%\izarc\languages\chinese.lng
from %ProgramFiles(x86)%\izarc\languages\is-4j9bu.tmp to %ProgramFiles(x86)%\izarc\languages\croatian.lng
from %ProgramFiles(x86)%\izarc\languages\is-prbna.tmp to %ProgramFiles(x86)%\izarc\languages\czech.lng
from %ProgramFiles(x86)%\izarc\languages\is-4k683.tmp to %ProgramFiles(x86)%\izarc\languages\castellano.lng
from %ProgramFiles(x86)%\izarc\languages\is-bjupk.tmp to %ProgramFiles(x86)%\izarc\languages\catalan.lng
from %ProgramFiles(x86)%\izarc\languages\is-5377g.tmp to %ProgramFiles(x86)%\izarc\languages\danish.lng
from %ProgramFiles(x86)%\izarc\languages\is-1e93u.tmp to %ProgramFiles(x86)%\izarc\languages\esperanto.lng
from %ProgramFiles(x86)%\izarc\languages\is-qtktj.tmp to %ProgramFiles(x86)%\izarc\languages\estonian.lng
from %ProgramFiles(x86)%\izarc\languages\is-rdhe5.tmp to %ProgramFiles(x86)%\izarc\languages\euskara.lng
from %ProgramFiles(x86)%\izarc\languages\is-p4fi9.tmp to %ProgramFiles(x86)%\izarc\languages\farsi.lng
from %ProgramFiles(x86)%\izarc\languages\is-alrt2.tmp to %ProgramFiles(x86)%\izarc\languages\finnish (variant savo).lng
from %ProgramFiles(x86)%\izarc\languages\is-34e28.tmp to %ProgramFiles(x86)%\izarc\languages\finnish.lng
from %ProgramFiles(x86)%\izarc\languages\is-t77co.tmp to %ProgramFiles(x86)%\izarc\languages\dutch.lng
from %ProgramFiles(x86)%\izarc\languages\is-471c8.tmp to %ProgramFiles(x86)%\izarc\languages\english.lng
from %ProgramFiles(x86)%\izarc\languages\is-7nfgk.tmp to %ProgramFiles(x86)%\izarc\languages\bulgarian.lng
from %ProgramFiles(x86)%\izarc\languages\is-pkl5c.tmp to %ProgramFiles(x86)%\izarc\languages\breton.lng
from %ProgramFiles(x86)%\izarc\languages\is-40t4c.tmp to %ProgramFiles(x86)%\izarc\languages\boso jowo.lng
from %ProgramFiles(x86)%\izarc\icons\is-p0g8s.tmp to %ProgramFiles(x86)%\izarc\icons\taz.ico
from %ProgramFiles(x86)%\izarc\icons\is-ho7vo.tmp to %ProgramFiles(x86)%\izarc\icons\tbz.ico
from %ProgramFiles(x86)%\izarc\icons\is-39d8e.tmp to %ProgramFiles(x86)%\izarc\icons\text.ico
from %ProgramFiles(x86)%\izarc\icons\is-h1p35.tmp to %ProgramFiles(x86)%\izarc\icons\tgz.ico
from %ProgramFiles(x86)%\izarc\icons\is-ovjl1.tmp to %ProgramFiles(x86)%\izarc\icons\tz.ico
from %ProgramFiles(x86)%\izarc\icons\is-vstbj.tmp to %ProgramFiles(x86)%\izarc\icons\uue.ico
from %ProgramFiles(x86)%\izarc\icons\is-kteen.tmp to %ProgramFiles(x86)%\izarc\icons\war.ico
from %ProgramFiles(x86)%\izarc\icons\is-q9se4.tmp to %ProgramFiles(x86)%\izarc\icons\tar.ico
from %ProgramFiles(x86)%\izarc\icons\is-h0eph.tmp to %ProgramFiles(x86)%\izarc\icons\xxe.ico
from %ProgramFiles(x86)%\izarc\icons\is-r1dol.tmp to %ProgramFiles(x86)%\izarc\icons\z.ico
from %ProgramFiles(x86)%\izarc\icons\is-n0db0.tmp to %ProgramFiles(x86)%\izarc\icons\zip.ico
from %ProgramFiles(x86)%\izarc\icons\is-n89dv.tmp to %ProgramFiles(x86)%\izarc\icons\zoo.ico
from %ProgramFiles(x86)%\izarc\languages\is-nvl12.tmp to %ProgramFiles(x86)%\izarc\languages\arabic.lng
from %ProgramFiles(x86)%\izarc\languages\is-0gilm.tmp to %ProgramFiles(x86)%\izarc\languages\bahasa gaul.lng
from %ProgramFiles(x86)%\izarc\languages\is-gf172.tmp to %ProgramFiles(x86)%\izarc\languages\bahasa indonesia.lng
from %ProgramFiles(x86)%\izarc\languages\is-3alh8.tmp to %ProgramFiles(x86)%\izarc\languages\bosnian.lng
from %ProgramFiles(x86)%\izarc\icons\is-mkenr.tmp to %ProgramFiles(x86)%\izarc\icons\yz1.ico
from %ProgramFiles(x86)%\izarc\languages\is-oqn8f.tmp to %ProgramFiles(x86)%\izarc\languages\french.lng
from %ProgramFiles(x86)%\izarc\languages\is-d1l4o.tmp to %ProgramFiles(x86)%\izarc\languages\friulian.lng
from %ProgramFiles(x86)%\izarc\languages\is-pv24f.tmp to %ProgramFiles(x86)%\izarc\languages\galician.lng
from %ProgramFiles(x86)%\izarc\languages\is-fi0u8.tmp to %ProgramFiles(x86)%\izarc\languages\german.lng
from %ProgramFiles(x86)%\izarc\languages\is-bt2b5.tmp to %ProgramFiles(x86)%\izarc\languages\romanian.lng
from %ProgramFiles(x86)%\izarc\languages\is-m42me.tmp to %ProgramFiles(x86)%\izarc\languages\russian.lng
from %ProgramFiles(x86)%\izarc\languages\is-m8si2.tmp to %ProgramFiles(x86)%\izarc\languages\serbian (cyrillic).lng
from %ProgramFiles(x86)%\izarc\languages\is-7kucf.tmp to %ProgramFiles(x86)%\izarc\languages\serbian (latin).lng
from %ProgramFiles(x86)%\izarc\languages\is-6di1q.tmp to %ProgramFiles(x86)%\izarc\languages\simplified chinese.lng
from %ProgramFiles(x86)%\izarc\languages\is-nfh2m.tmp to %ProgramFiles(x86)%\izarc\languages\slovak.lng
from %ProgramFiles(x86)%\izarc\languages\is-nq3mb.tmp to %ProgramFiles(x86)%\izarc\languages\slovenian.lng
from %ProgramFiles(x86)%\izarc\languages\is-b9u4t.tmp to %ProgramFiles(x86)%\izarc\languages\spanish (cl).lng
from %ProgramFiles(x86)%\izarc\languages\is-jjtat.tmp to %ProgramFiles(x86)%\izarc\languages\spanish (la).lng
from %ProgramFiles(x86)%\izarc\languages\is-bh7r7.tmp to %ProgramFiles(x86)%\izarc\languages\spanish (uruguay).lng
from %ProgramFiles(x86)%\izarc\languages\is-fnd7v.tmp to %ProgramFiles(x86)%\izarc\languages\spanish.lng
from %ProgramFiles(x86)%\izarc\languages\is-3r4fv.tmp to %ProgramFiles(x86)%\izarc\languages\swedish.lng
from %ProgramFiles(x86)%\izarc\languages\is-cme17.tmp to %ProgramFiles(x86)%\izarc\languages\taiwanese.lng
from %ProgramFiles(x86)%\izarc\languages\is-0rg5o.tmp to %ProgramFiles(x86)%\izarc\languages\thai.lng
from %ProgramFiles(x86)%\izarc\languages\is-hpv3l.tmp to %ProgramFiles(x86)%\izarc\languages\turkish.lng
from %ProgramFiles(x86)%\izarc\languages\is-2r6td.tmp to %ProgramFiles(x86)%\izarc\languages\ukrainian.lng
from %ProgramFiles(x86)%\izarc\languages\is-aq7jf.tmp to %ProgramFiles(x86)%\izarc\languages\vietnamese.lng
from %ProgramFiles(x86)%\izarc\languages\is-brkqu.tmp to %ProgramFiles(x86)%\izarc\languages\portuguese.lng
from %ProgramFiles(x86)%\izarc\languages\is-ip5km.tmp to %ProgramFiles(x86)%\izarc\languages\portuguese (brasil).lng
from %ProgramFiles(x86)%\izarc\languages\is-etcib.tmp to %ProgramFiles(x86)%\izarc\languages\portuguese (portugal).lng
from %ProgramFiles(x86)%\izarc\languages\is-o4806.tmp to %ProgramFiles(x86)%\izarc\languages\polish.lng
from %ProgramFiles(x86)%\izarc\languages\is-hjo7d.tmp to %ProgramFiles(x86)%\izarc\languages\greek.lng
from %ProgramFiles(x86)%\izarc\languages\is-jr6ue.tmp to %ProgramFiles(x86)%\izarc\languages\hebrew.lng
from %ProgramFiles(x86)%\izarc\languages\is-ebrvs.tmp to %ProgramFiles(x86)%\izarc\languages\hellenic (greek).lng
from %ProgramFiles(x86)%\izarc\languages\is-te6ea.tmp to %ProgramFiles(x86)%\izarc\languages\hungarian.lng
from %ProgramFiles(x86)%\izarc\languages\is-pk8qn.tmp to %ProgramFiles(x86)%\izarc\languages\icelandic.lng
from %ProgramFiles(x86)%\izarc\languages\is-h33e2.tmp to %ProgramFiles(x86)%\izarc\languages\indonesian.lng
from %ProgramFiles(x86)%\izarc\languages\is-ispp2.tmp to %ProgramFiles(x86)%\izarc\languages\irish.lng
from %ProgramFiles(x86)%\izarc\languages\is-pt836.tmp to %ProgramFiles(x86)%\izarc\languages\italian.lng
from %ProgramFiles(x86)%\izarc\languages\is-oqgm6.tmp to %ProgramFiles(x86)%\izarc\languages\japanese.lng
from %ProgramFiles(x86)%\izarc\languages\is-3s8md.tmp to %ProgramFiles(x86)%\izarc\languages\korean.lng
from %ProgramFiles(x86)%\izarc\languages\is-fr9to.tmp to %ProgramFiles(x86)%\izarc\languages\kurdish (kurmanci).lng
from %ProgramFiles(x86)%\izarc\languages\is-6k61m.tmp to %ProgramFiles(x86)%\izarc\languages\kurdish (sorani).lng
from %ProgramFiles(x86)%\izarc\languages\is-8c8hi.tmp to %ProgramFiles(x86)%\izarc\languages\kurdish.lng
from %ProgramFiles(x86)%\izarc\languages\is-mjae7.tmp to %ProgramFiles(x86)%\izarc\languages\latvian.lng
from %ProgramFiles(x86)%\izarc\languages\is-fl6vn.tmp to %ProgramFiles(x86)%\izarc\languages\lithuanian.lng
from %ProgramFiles(x86)%\izarc\languages\is-01t2f.tmp to %ProgramFiles(x86)%\izarc\languages\macedonian.lng
from %ProgramFiles(x86)%\izarc\languages\is-o4o8i.tmp to %ProgramFiles(x86)%\izarc\languages\norwegian.lng
from %ProgramFiles(x86)%\izarc\is-jejc1.tmp to %ProgramFiles(x86)%\izarc\donate.url
from %ProgramFiles(x86)%\izarc\icons\is-7miie.tmp to %ProgramFiles(x86)%\izarc\icons\setup.ico
from %ProgramFiles(x86)%\izarc\icons\is-ckdqb.tmp to %ProgramFiles(x86)%\izarc\icons\rpm.ico
from %ProgramFiles(x86)%\izarc\icons\is-dhm7j.tmp to %ProgramFiles(x86)%\izarc\icons\rar.ico
from %ProgramFiles(x86)%\izarc\skins\is-f0ji7.tmp to %ProgramFiles(x86)%\izarc\skins\blue.bmp
from %ProgramFiles(x86)%\izarc\skins\is-o0140.tmp to %ProgramFiles(x86)%\izarc\skins\bluecurve.bmp
from %ProgramFiles(x86)%\izarc\skins\is-hq696.tmp to %ProgramFiles(x86)%\izarc\skins\ciz_coctail1.bmp
from %ProgramFiles(x86)%\izarc\skins\is-52f0a.tmp to %ProgramFiles(x86)%\izarc\skins\crystal izarc.bmp
from %ProgramFiles(x86)%\izarc\skins\is-0cd68.tmp to %ProgramFiles(x86)%\izarc\skins\crystal_clear_-m-.bmp
from %ProgramFiles(x86)%\izarc\skins\is-or8v4.tmp to %ProgramFiles(x86)%\izarc\skins\gelbuttons.bmp
from %ProgramFiles(x86)%\izarc\dllinfo\is-6i198.tmp to %ProgramFiles(x86)%\izarc\dllinfo\yz1.txt
from %ProgramFiles(x86)%\izarc\skins\is-d4phn.tmp to %ProgramFiles(x86)%\izarc\skins\anarchy.bmp
from %ProgramFiles(x86)%\izarc\skins\is-mqk3o.tmp to %ProgramFiles(x86)%\izarc\skins\gnome.bmp
from %ProgramFiles(x86)%\izarc\skins\is-68ica.tmp to %ProgramFiles(x86)%\izarc\skins\izarc.bmp
from %ProgramFiles(x86)%\izarc\skins\is-fhs8m.tmp to %ProgramFiles(x86)%\izarc\skins\izbeos.bmp
from %ProgramFiles(x86)%\izarc\skins\is-vfrbs.tmp to %ProgramFiles(x86)%\izarc\skins\kde-linux.bmp
from %ProgramFiles(x86)%\izarc\skins\is-dg362.tmp to %ProgramFiles(x86)%\izarc\skins\oxygen-clear.bmp
from %ProgramFiles(x86)%\izarc\skins\is-5nfsa.tmp to %ProgramFiles(x86)%\izarc\skins\oxygen.bmp
from %ProgramFiles(x86)%\izarc\skins\is-6mjbp.tmp to %ProgramFiles(x86)%\izarc\skins\plastic xp 2.bmp
from %ProgramFiles(x86)%\izarc\skins\is-bgl44.tmp to %ProgramFiles(x86)%\izarc\skins\icandy izarc.bmp
from %ProgramFiles(x86)%\izarc\skins\is-jegk9.tmp to %ProgramFiles(x86)%\izarc\skins\iz3dblue.bmp
from %ProgramFiles(x86)%\izarc\dllinfo\is-3r8u7.tmp to %ProgramFiles(x86)%\izarc\dllinfo\ungca32.txt
from %ProgramFiles(x86)%\izarc\dllinfo\is-dhuif.tmp to %ProgramFiles(x86)%\izarc\dllinfo\tar32.txt
from %ProgramFiles(x86)%\izarc\dllinfo\is-vfuti.tmp to %ProgramFiles(x86)%\izarc\dllinfo\bga32.txt
from %ProgramFiles(x86)%\izarc\is-9ksqf.tmp to %ProgramFiles(x86)%\izarc\apr.dll
from %ProgramFiles(x86)%\izarc\is-pv5n3.tmp to %ProgramFiles(x86)%\izarc\whatsnew.txt
from %ProgramFiles(x86)%\izarc\is-7o4pb.tmp to %ProgramFiles(x86)%\izarc\izarc.chm
from %ProgramFiles(x86)%\izarc\is-jc54v.tmp to %ProgramFiles(x86)%\izarc\7za.dll
from %ProgramFiles(x86)%\izarc\is-oc80a.tmp to %ProgramFiles(x86)%\izarc\bga32.dll
from %ProgramFiles(x86)%\izarc\is-u23f9.tmp to %ProgramFiles(x86)%\izarc\cabinet5.dll
from %ProgramFiles(x86)%\izarc\is-h8mpb.tmp to %ProgramFiles(x86)%\izarc\tar32.dll
from %ProgramFiles(x86)%\izarc\is-62va0.tmp to %ProgramFiles(x86)%\izarc\izarc.exe
from %ProgramFiles(x86)%\izarc\is-0fh7r.tmp to %ProgramFiles(x86)%\izarc\ungca32.dll
from %ProgramFiles(x86)%\izarc\is-lvqco.tmp to %ProgramFiles(x86)%\izarc\yz1.dll
from %ProgramFiles(x86)%\izarc\is-gkv3k.tmp to %ProgramFiles(x86)%\izarc\arc.izp
from %ProgramFiles(x86)%\izarc\is-0q7eb.tmp to %ProgramFiles(x86)%\izarc\izarccm64.dll
from %ProgramFiles(x86)%\izarc\misc\is-kuct3.tmp to %ProgramFiles(x86)%\izarc\misc\exefile.ico
from %ProgramFiles(x86)%\izarc\misc\is-j5r57.tmp to %ProgramFiles(x86)%\izarc\misc\readme.ico
from %ProgramFiles(x86)%\izarc\misc\is-ve950.tmp to %ProgramFiles(x86)%\izarc\misc\setup.ico
from %ProgramFiles(x86)%\izarc\misc\is-o7oo7.tmp to %ProgramFiles(x86)%\izarc\misc\setup_old.ico
from %ProgramFiles(x86)%\izarc\is-iiutk.tmp to %ProgramFiles(x86)%\izarc\unrar.dll
from %ProgramFiles(x86)%\izarc\skins\is-qt0qb.tmp to %ProgramFiles(x86)%\izarc\skins\windows xp 2.bmp
from %ProgramFiles(x86)%\izarc\skins\is-tso9d.tmp to %ProgramFiles(x86)%\izarc\skins\winxp.bmp
from %ProgramFiles(x86)%\izarc\sfxs\is-17qjt.tmp to %ProgramFiles(x86)%\izarc\sfxs\izarcarj.dat
from %ProgramFiles(x86)%\izarc\sfxs\is-o4f4o.tmp to %ProgramFiles(x86)%\izarc\sfxs\izarcbh.dat
from %ProgramFiles(x86)%\izarc\icons\is-33874.tmp to %ProgramFiles(x86)%\izarc\icons\gca.ico
from %ProgramFiles(x86)%\izarc\icons\is-cqs2k.tmp to %ProgramFiles(x86)%\izarc\icons\gz.ico
from %ProgramFiles(x86)%\izarc\icons\is-lqfgc.tmp to %ProgramFiles(x86)%\izarc\icons\gza.ico
from %ProgramFiles(x86)%\izarc\icons\is-kk9a9.tmp to %ProgramFiles(x86)%\izarc\icons\ha.ico
from %ProgramFiles(x86)%\izarc\icons\is-9tdm2.tmp to %ProgramFiles(x86)%\izarc\icons\img.ico
from %ProgramFiles(x86)%\izarc\icons\is-e5s49.tmp to %ProgramFiles(x86)%\izarc\icons\iso.ico
from %ProgramFiles(x86)%\izarc\icons\is-4h7bj.tmp to %ProgramFiles(x86)%\izarc\icons\ize.ico
from %ProgramFiles(x86)%\izarc\icons\is-0nmhc.tmp to %ProgramFiles(x86)%\izarc\icons\jar.ico
from %ProgramFiles(x86)%\izarc\icons\is-o5tkg.tmp to %ProgramFiles(x86)%\izarc\icons\lha.ico
from %ProgramFiles(x86)%\izarc\icons\is-70h3g.tmp to %ProgramFiles(x86)%\izarc\icons\lib.ico
from %ProgramFiles(x86)%\izarc\icons\is-keaam.tmp to %ProgramFiles(x86)%\izarc\icons\lzh.ico
from %ProgramFiles(x86)%\izarc\icons\is-037rt.tmp to %ProgramFiles(x86)%\izarc\icons\mbf.ico
from %ProgramFiles(x86)%\izarc\icons\is-5h0k7.tmp to %ProgramFiles(x86)%\izarc\icons\mdf.ico
from %ProgramFiles(x86)%\izarc\icons\is-3ptp2.tmp to %ProgramFiles(x86)%\izarc\icons\mim.ico
from %ProgramFiles(x86)%\izarc\icons\is-bdu9e.tmp to %ProgramFiles(x86)%\izarc\icons\nrg.ico
from %ProgramFiles(x86)%\izarc\icons\is-dnikl.tmp to %ProgramFiles(x86)%\izarc\icons\pak.ico
from %ProgramFiles(x86)%\izarc\icons\is-54pau.tmp to %ProgramFiles(x86)%\izarc\icons\pdi.ico
from %ProgramFiles(x86)%\izarc\icons\is-j4mfs.tmp to %ProgramFiles(x86)%\izarc\icons\exefile.ico
from %ProgramFiles(x86)%\izarc\icons\is-bfapq.tmp to %ProgramFiles(x86)%\izarc\icons\deb.ico
from %ProgramFiles(x86)%\izarc\icons\is-rsc19.tmp to %ProgramFiles(x86)%\izarc\icons\enc.ico
from %ProgramFiles(x86)%\izarc\icons\is-08gpv.tmp to %ProgramFiles(x86)%\izarc\icons\cpio.ico
from %ProgramFiles(x86)%\izarc\sfxs\is-iia68.tmp to %ProgramFiles(x86)%\izarc\sfxs\izarcjar.dat
from %ProgramFiles(x86)%\izarc\sfxs\is-k5vfv.tmp to %ProgramFiles(x86)%\izarc\sfxs\izarclha.dat
from %ProgramFiles(x86)%\izarc\sfxs\is-3qobr.tmp to %ProgramFiles(x86)%\izarc\sfxs\izarcrar.dat
from %ProgramFiles(x86)%\izarc\sfxs\is-5i4fc.tmp to %ProgramFiles(x86)%\izarc\sfxs\izarcszip.dat
from %ProgramFiles(x86)%\izarc\sfxs\is-rknqc.tmp to %ProgramFiles(x86)%\izarc\sfxs\izarczip.dat
from %ProgramFiles(x86)%\izarc\icons\is-h7ifj.tmp to %ProgramFiles(x86)%\izarc\icons\7z.ico
from %ProgramFiles(x86)%\izarc\icons\is-t91gr.tmp to %ProgramFiles(x86)%\izarc\icons\a.ico
from %ProgramFiles(x86)%\izarc\icons\is-f05bd.tmp to %ProgramFiles(x86)%\izarc\icons\arc.ico
from %ProgramFiles(x86)%\izarc\icons\is-3urle.tmp to %ProgramFiles(x86)%\izarc\icons\arj.ico
from %ProgramFiles(x86)%\izarc\icons\is-mt31u.tmp to %ProgramFiles(x86)%\izarc\icons\b64.ico
from %ProgramFiles(x86)%\izarc\icons\is-ue73m.tmp to %ProgramFiles(x86)%\izarc\icons\bh.ico
from %ProgramFiles(x86)%\izarc\icons\is-6gusi.tmp to %ProgramFiles(x86)%\izarc\icons\bin.ico
from %ProgramFiles(x86)%\izarc\icons\is-iofa7.tmp to %ProgramFiles(x86)%\izarc\icons\bz2.ico
from %ProgramFiles(x86)%\izarc\icons\is-1o94r.tmp to %ProgramFiles(x86)%\izarc\icons\bza.ico
from %ProgramFiles(x86)%\izarc\icons\is-7oop3.tmp to %ProgramFiles(x86)%\izarc\icons\c2d.ico
from %ProgramFiles(x86)%\izarc\icons\is-upnaj.tmp to %ProgramFiles(x86)%\izarc\icons\cab.ico
from %ProgramFiles(x86)%\izarc\icons\is-fb9vf.tmp to %ProgramFiles(x86)%\izarc\icons\cdi.ico
from %ProgramFiles(x86)%\izarc\icons\is-ou7hm.tmp to %ProgramFiles(x86)%\izarc\icons\pk3.ico
from %ProgramFiles(x86)%\izarc\is-p4vq5.tmp to %ProgramFiles(x86)%\izarc\sc.exe

Network activity

UDP

DNS ASK google.com
DNS ASK se####.yahoo.com
DNS ASK du###uckgo.com
DNS ASK am##on.com
DNS ASK bi##.#ikimedia.org
DNS ASK bing.com
DNS ASK re###.opera.com
DNS ASK au######te.geo.opera.com
DNS ASK si#####ck2.opera.com
DNS ASK en.###ipedia.org
DNS ASK ya###.opera.com
DNS ASK sh###ahsoft.com

Miscellaneous

Searches for the following windows

ClassName: 'Edit' WindowName: ''
ClassName: 'Opera_MessageWindow' WindowName: '%APPDATA%\Opera Software\Opera Stable'

Creates and executes the following

'%TEMP%\rarsfx0\izarc_4.6.exe' /silent
'%TEMP%\is-qaf32.tmp\izarc_4.6.tmp' /SL5="$10260,4573127,954880,%TEMP%\RarSFX0\IZArc_4.6.exe" /silent
'%ProgramFiles(x86)%\izarc\sc.exe' -Language="English" -ArcTypes=""

Executes the following

'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\IZArc\IZArcCM64.dll"
'%ProgramFiles(x86)%\opera\launcher.exe' -noautoupdate -- "https://sharjahsoft.com/forums/%D9%88%D8%A7%D8%AD%D8%A9-%D8%A7%D9%84%D8%A8%D8%B1%D8%A7%D9%85%D8%AC-%D8%A7%D9%84%D8%B9%D8%A7%D9%85%D8%A9.5/"
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' -noautoupdate --ran-launcher -- https://sharjahsoft.com/forums/%D9%88%D8%A7%D8%AD%D8%A9-%D8%A7%D9%84%D8%A8%D8%B1%D8%A7%D9%85%D8%AC-%D8%A7%D9%84%D8%B9%D8%A7%D9%85%D8%A9.5/
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera_crashreporter.exe' -noautoupdate --ran-launcher -- https://sharjahsoft.com/forums/%D9%88%D8%A7%D8%AD%D8%A9-%D8%A7%D9%84%D8%A8%D8%B1%D8%A7%D9%85%D8%AC-%D8%A7%D9%84%D8%B9%D8%A7%D9%85%D8%A9.5/ /crash-reporter-parent...
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=gpu-process --channel="2108.0.1908793697\433351352" --enable-proprietary-media-types-playback --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,19,42 --gpu-vendor-id=0x0000 --gpu...
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=en-US --enable-proprietary-media-types-playback --disable-client-side-phishing-...
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=en-US --enable-proprietary-media-types-playback --extension-process --enable-we...
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2108.4.367298454\2102246644" --lang=en-US --no-sandbox --enable-proprietary-media-types-playback /prefetch:-645351001
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2108.5.696086884\1428992186" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2108.6.1254372292\577338028" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2108.7.196962361\240729230" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera_crashreporter.exe' --type=utility --channel="2108.4.367298454\2102246644" --lang=en-US --no-sandbox --enable-proprietary-media-types-playback /prefetch:-645351001 /crash-reporter-parent-id=2892
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2108.8.1698469284\2006522454" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2108.9.2135251519\491874405" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
'%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2108.10.90228416\1070824724" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial