Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'FromDocToPDF Search Scope Monitor' = '"%PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65srchmn.exe" /m=2 /w /h'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'FromDocToPDF_65 Browser Plugin Loader' = '%PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65brmon.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'FromDocToPDF' = 'rundll32 %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65bar.dll,S'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'FromDocToPDF Home Page Guard 32 bit' = '"%PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\AppIntegrator.exe"'
- [<HKLM>\SYSTEM\ControlSet001\Services\FromDocToPDF_65Service] 'Start' = '00000002'
- '%PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65SrchMn.exe' /m=2 /w /h /r
- '%PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65brmon.exe'
- '%PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65highin.exe' 65tpinst.dll,#5
- '%PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65barsvc.exe' -remove
- '%PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65barsvc.exe' -install
- '%PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65barsvc.exe'
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65medint.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65ieovr.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65idle.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65radio.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65Plugin.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65mlbtn.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65httpct.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65highin.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65feedmg.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\T8EXTPEX.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65htmlmu.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\T8HTML.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65hkstub.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65regfft.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65tpinst.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\T8TICKER.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65srchmr.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\Settings\s_pid.dat
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\VERIFY.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\UNIFIEDLOGGING.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65SrchMn.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65script.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65regiet.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65reghk.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65SrcAs.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65skplay.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65skin.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\T8EXTEX.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\DPNMNGR.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\CrExtP65.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\CREXT.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\Hpg64.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\FF-NativeMessagingDispatcher.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\EXEMANAGER.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\CHROME.MANIFEST
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\T8RES.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\T8EPMSUP.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65barsvc.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\BOOTSTRAP.JS
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\AppIntegratorStub64.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\AppIntegrator64.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\INSTALL.RDF
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65brstub64.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65brstub.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65brmon64.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65dlghk64.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65dlghk.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65datact.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65brmon.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65auxstb.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\NP65Stub.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\LOGO.BMP
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65bprtct.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65bar.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65auxstb64.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65Plugin.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65mlbtn.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65medint.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65reghk.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65regfft.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65radio.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65ieovr.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\T8HTML.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65hkstub.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65highin.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65idle.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65httpct.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65htmlmu.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65regiet.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\VERIFY.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\UNIFIEDLOGGING.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65tpinst.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\T8RES.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\T8EPMSUP.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65barsvc.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\T8TICKER.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65skplay.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65skin.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65script.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65srchmr.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65SrchMn.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65SrcAs.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\Hpg64.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\FF-NativeMessagingDispatcher.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\EXEMANAGER.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\NP65Stub.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\LOGO.BMP
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\INSTALL.RDF
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\DPNMNGR.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\BOOTSTRAP.JS
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\AppIntegratorStub64.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\AppIntegrator64.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\CrExtP65.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\CREXT.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\CHROME.MANIFEST
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65auxstb.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65dlghk64.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65dlghk.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65datact.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65feedmg.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\T8EXTPEX.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\T8EXTEX.DLL
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65brstub64.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65bprtct.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65bar.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65auxstb64.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65brstub.dll
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65brmon64.exe
- %PROGRAM_FILES%\FromDocToPDF_65\bar\1.bin\65brmon.exe