PUA_BILDDOWNLOADER.GA

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

侵入方法

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

プログラムは、以下のファイルを作成します。

• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm.sln
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\COM_TestForm.csproj
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\FilesForTests\BackgroundPage.pdf
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\FilesForTests\CoverPage.pdf
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Form1.Designer.cs
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Form1.cs
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Form1.resx
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Program.cs
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\AssemblyInfo.cs
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\Resources.Designer.cs
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\Resources.resx
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\Settings.Designer.cs
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\Settings.settings
• %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\app.config
• %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest.sln
• %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\CppCOMTest.cpp
• %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\CppCOMTest.vcxproj.filters
• %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\CppCOMTest.vcxproj
• %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\ReadMe.txt
• %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\stdafx.cpp
• %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\stdafx.h
• %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\targetver.h
• %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\FilesForTests\BackgroundPage.pdf
• %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\FilesForTests\CoverPage.pdf
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\GetPrinterDevices.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\MergedFiles2Tif.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\MultipleFiles2Tif.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\TestPage2JPG.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\TestPage2PDF.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\TestPage2Tif.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\TestPageMergeTarget.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\AttachmentPage.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\AttachmentPage.pdf
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\BackgroundPage.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\BackgroundPage.pdf
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\ChangeOutputFormat.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\ConvertFileAsync.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\CoverPage.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\CoverPage.pdf
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\EmailClient.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\EmailSmtp.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\JpegSettings.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\MergeAllJobs.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\PdfSecuritySettings.js
• %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\PdfSignatureSettings.js
• %Program Files%\PDFCreator\COM Scripts\Perl\BackgroundPage.pl
• %Program Files%\PDFCreator\COM Scripts\Perl\CoverPage.pl
• %Program Files%\PDFCreator\COM Scripts\Perl\FilesForTests\BackgroundPage.pdf
• %Program Files%\PDFCreator\COM Scripts\Perl\FilesForTests\CoverPage.pdf
• %Program Files%\PDFCreator\COM Scripts\Perl\JpegSettings.pl
• %Program Files%\PDFCreator\COM Scripts\Perl\MergedMultipleFiles2Tif.pl
• %Program Files%\PDFCreator\COM Scripts\Perl\TestPage2PDF.pl
• %Program Files%\PDFCreator\COM Scripts\Python\BackgroundPage.py
• %Program Files%\PDFCreator\COM Scripts\Python\CoverPage.py
• %Program Files%\PDFCreator\COM Scripts\Python\FilesForTests\BackgroundPage.pdf
• %Program Files%\PDFCreator\COM Scripts\Python\FilesForTests\CoverPage.pdf
• %Program Files%\PDFCreator\COM Scripts\Python\JpegSettings.py
• %Program Files%\PDFCreator\COM Scripts\Python\MergedMultipleFiles2Tif.py
• %Program Files%\PDFCreator\COM Scripts\Python\TestPage2PDF.py
• %Program Files%\PDFCreator\COM Scripts\Ruby\BackgroundPage.rb
• %Program Files%\PDFCreator\COM Scripts\Ruby\CoverPage.rb
• %Program Files%\PDFCreator\COM Scripts\Ruby\FilesForTests\BackgroundPage.pdf
• %Program Files%\PDFCreator\COM Scripts\Ruby\FilesForTests\CoverPage.pdf
• %Program Files%\PDFCreator\COM Scripts\Ruby\JpegSettings.rb
• %Program Files%\PDFCreator\COM Scripts\Ruby\MergedMultipleFiles2Tif.rb
• %Program Files%\PDFCreator\COM Scripts\Ruby\TestPage2PDF.rb
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm.sln
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\COM_TestForm.vbproj
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\FilesForTests\BackgroundPage.pdf
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\FilesForTests\CoverPage.pdf
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\Form1.Designer.vb
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\Form1.resx
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\Form1.vb
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Application.Designer.vb
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Application.myapp
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\AssemblyInfo.vb
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Resources.Designer.vb
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Resources.resx
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Settings.Designer.vb
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Settings.settings
• %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\app.config
• %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\COM_TestForm.frm
• %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\FilesForTests\BackgroundPage.pdf
• %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\FilesForTests\CoverPage.pdf
• %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\Projekt1.vbp
• %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\Projekt1.vbw
• %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\Readme.txt
• %Program Files%\PDFCreator\COM Scripts\VBScript\BackgroundPage.vbs
• %Program Files%\PDFCreator\COM Scripts\VBScript\CoverPage.vbs
• %Program Files%\PDFCreator\COM Scripts\VBScript\FilesForTests\BackgroundPage.pdf
• %Program Files%\PDFCreator\COM Scripts\VBScript\FilesForTests\CoverPage.pdf
• %Program Files%\PDFCreator\COM Scripts\VBScript\JpegSettings.vbs
• %Program Files%\PDFCreator\COM Scripts\VBScript\MergedMultipleFiles2Tif.vbs
• %Program Files%\PDFCreator\COM Scripts\VBScript\TestPage2PDF.vbs
• %Program Files%\PDFCreator\COM Scripts\Word - VBA\FilesForTests\BackgroundPage.pdf
• %Program Files%\PDFCreator\COM Scripts\Word - VBA\FilesForTests\CoverPage.pdf
• %Program Files%\PDFCreator\COM Scripts\Word - VBA\Testpage2PDF.docm
• %Program Files%\PDFCreator\DataStorage.dll
• %Program Files%\PDFCreator\DeleteMonitorDll.exe
• %Program Files%\PDFCreator\Dropbox.Api.Net40.dll
• %Program Files%\PDFCreator\Dropbox.dll
• %Program Files%\PDFCreator\ErrorReport.exe
• %Program Files%\PDFCreator\Ghostscript\Bin\gsdll32.dll
• %Program Files%\PDFCreator\Ghostscript\Bin\gsdll32.lib
• %Program Files%\PDFCreator\Ghostscript\Bin\gswin32c.exe
• %Program Files%\PDFCreator\Ghostscript\Lib\FAPIconfig-FCO
• %Program Files%\PDFCreator\Ghostscript\Lib\FCOfontmap-PCLPS3
• %Program Files%\PDFCreator\Ghostscript\Lib\FCOfontmap-PS3
• %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.ATB
• %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.ATM
• %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.OS2
• %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.OSF
• %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.SGI
• %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.Sol
• %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.URW-136.T1
• %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.URW-136.TT
• %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.Ult
• %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.VMS
• %Program Files%\PDFCreator\Ghostscript\Lib\Info-macos.plist
• %Program Files%\PDFCreator\Ghostscript\Lib\PDFA_def.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\PDFX_def.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\acctest.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\afmdiff.awk
• %Program Files%\PDFCreator\Ghostscript\Lib\align.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\bj8.rpd
• %Program Files%\PDFCreator\Ghostscript\Lib\bj8gc12f.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bj8hg12f.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bj8oh06n.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bj8pa06n.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bj8pp12f.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bj8ts06n.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a0.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a1.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a2.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a3.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a4.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a5.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a6.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a7.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a8.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b1.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b2.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b3.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b4.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b6.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b7.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b8.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\caption.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\cat.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\cbjc600.ppd
• %Program Files%\PDFCreator\Ghostscript\Lib\cbjc800.ppd
• %Program Files%\PDFCreator\Ghostscript\Lib\cdj550.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\cdj690.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\cdj690ec.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\cid2code.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\cidfmap
• %Program Files%\PDFCreator\Ghostscript\Lib\dnj750c.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\dnj750m.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\docie.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\dvipdf
• %Program Files%\PDFCreator\Ghostscript\Lib\eps2eps.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\eps2eps.cmd
• %Program Files%\PDFCreator\Ghostscript\Lib\eps2eps
• %Program Files%\PDFCreator\Ghostscript\Lib\font2pcl.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\ghostpdf.README
• %Program Files%\PDFCreator\Ghostscript\Lib\ghostpdf.cat
• %Program Files%\PDFCreator\Ghostscript\Lib\ghostpdf.inf
• %Program Files%\PDFCreator\Ghostscript\Lib\ghostpdf.ppd
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_ce_e.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_cmdl.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_il2_e.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_kanji.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_ksb_e.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_l.xbm
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_l.xpm
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_l_m.xbm
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_lgo_e.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_lgx_e.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_m.xbm
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_m.xpm
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_m_m.xbm
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_s.xbm
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_s.xpm
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_s_m.xbm
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_t.xbm
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_t.xpm
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_t_m.xbm
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_wl1_e.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_wl2_e.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\gs_wl5_e.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\gsbj.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\gsbj
• %Program Files%\PDFCreator\Ghostscript\Lib\gsdj.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\gsdj500.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\gsdj500
• %Program Files%\PDFCreator\Ghostscript\Lib\gsdj
• %Program Files%\PDFCreator\Ghostscript\Lib\gslj.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\gslj
• %Program Files%\PDFCreator\Ghostscript\Lib\gslp.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\gslp.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\gslp
• %Program Files%\PDFCreator\Ghostscript\Lib\gsnd.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\gsnd
• %Program Files%\PDFCreator\Ghostscript\Lib\gsndt.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\gsnup.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\gssetgs.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\gssetgs32.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\gssetgs64.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\gst.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\gstt.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\ht_ccsto.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\image-qa.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\jispaper.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\jobseparator.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\landscap.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\lines.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\lp386.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\lp386r2.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\lpgs.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\lpr2.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\lprsetup.sh
• %Program Files%\PDFCreator\Ghostscript\Lib\mkcidfm.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\necp2x.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\necp2x6.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\pdf2dsc.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\pdf2dsc.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\pdf2dsc
• %Program Files%\PDFCreator\Ghostscript\Lib\pdf2ps.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\pdf2ps.cmd
• %Program Files%\PDFCreator\Ghostscript\Lib\pdf2ps
• %Program Files%\PDFCreator\Ghostscript\Lib\pf2afm.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\pf2afm.cmd
• %Program Files%\PDFCreator\Ghostscript\Lib\pf2afm.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\pf2afm
• %Program Files%\PDFCreator\Ghostscript\Lib\pfbtopfa.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\pfbtopfa.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\pfbtopfa
• %Program Files%\PDFCreator\Ghostscript\Lib\ppath.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\pphs.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\pphs
• %Program Files%\PDFCreator\Ghostscript\Lib\prfont.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\printafm.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\printafm
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2ai.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2ascii.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2ascii.cmd
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2ascii
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2epsi.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2epsi.cmd
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2epsi.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2epsi
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf.cmd
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf12.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf12.cmd
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf12
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf13.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf13.cmd
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf13
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf14.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf14.cmd
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf14
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdfwr
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdfxx.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps.cmd
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps2.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps2.cmd
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps2
• %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps
• %Program Files%\PDFCreator\Ghostscript\Lib\ras1.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\ras24.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\ras3.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\ras32.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\ras4.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\ras8m.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\rinkj-2200-setup
• %Program Files%\PDFCreator\Ghostscript\Lib\rollconv.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\st640ih.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\st640ihg.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\st640p.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\st640pg.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\st640pl.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\st640plg.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc1520h.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc2.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc200_h.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc2_h.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc2s_h.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc300.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc300bl.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc300bm.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc500p.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc500ph.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc600ih.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc600p.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc600pl.upp
• %Program Files%\PDFCreator\NGettext.dll
• %Program Files%\PDFCreator\NLog.dll
• %Program Files%\PDFCreator\Newtonsoft.Json.dll
• %Program Files%\PDFCreator\Obsidian.dll
• %Program Files%\PDFCreator\Optional.dll
• %Program Files%\PDFCreator\PDFCreator.Actions.dll
• %Program Files%\PDFCreator\PDFCreator.ActionsInterface.dll
• %Program Files%\PDFCreator\PDFCreator.COM.dll
• %Program Files%\PDFCreator\PDFCreator.ComImplementation.dll
• %Program Files%\PDFCreator\PDFCreator.ComWrapper.dll
• %Program Files%\PDFCreator\PDFCreator.Communication.dll
• %Program Files%\PDFCreator\PDFCreator.Controller.dll
• %Program Files%\PDFCreator\PDFCreator.ConverterInterface.dll
• %Program Files%\PDFCreator\PDFCreator.DirectConversion.dll
• %Program Files%\PDFCreator\PDFCreator.EditionBase.dll
• %Program Files%\PDFCreator\PDFCreator.Ghostscript.dll
• %Program Files%\PDFCreator\PDFCreator.Interactions.dll
• %Program Files%\PDFCreator\PDFCreator.Jobs.dll
• %Program Files%\PDFCreator\PDFCreator.Presentation.dll
• %Program Files%\PDFCreator\PDFCreator.Printing.dll
• %Program Files%\PDFCreator\PDFCreator.Services.dll
• %Program Files%\PDFCreator\PDFCreator.Settings.dll
• %Program Files%\PDFCreator\PDFCreator.SettingsManagement.dll
• %Program Files%\PDFCreator\PDFCreator.Startup.dll
• %Program Files%\PDFCreator\PDFCreator.StartupInterface.dll
• %Program Files%\PDFCreator\PDFCreator.Utilities.dll
• %Program Files%\PDFCreator\PDFCreator.Workflow.dll
• %Program Files%\PDFCreator\PDFCreator.exe
• %Program Files%\PDFCreator\PDFCreatorShell.dll
• %Program Files%\PDFCreator\PDFCreator_english.chm
• %Program Files%\PDFCreator\PDFCreator_german.chm
• %Program Files%\PDFCreator\PayPal.ico
• %Program Files%\PDFCreator\PdfProcessingInterface.dll
• %Program Files%\PDFCreator\PrinterHelper.exe
• %Program Files%\PDFCreator\Prism.Wpf.dll
• %Program Files%\PDFCreator\Prism.dll
• %Program Files%\PDFCreator\PropertyChanged.dll
• %Program Files%\PDFCreator\PsParser.dll
• %Program Files%\PDFCreator\RepairFolderPermissions.exe
• %Program Files%\PDFCreator\SetupHelper.exe
• %Program Files%\PDFCreator\SimpleInjector.dll
• %Program Files%\PDFCreator\System.Net.Http.Extensions.dll
• %Program Files%\PDFCreator\System.Net.Http.Primitives.dll
• %Program Files%\PDFCreator\System.Windows.Interactivity.dll
• %Program Files%\PDFCreator\SystemInterface.dll
• %Program Files%\PDFCreator\SystemWrapper.dll
• %Program Files%\PDFCreator\Tartaros.dll
• %Program Files%\PDFCreator\ToastNotifications.Messages.dll
• %Program Files%\PDFCreator\ToastNotifications.dll
• %Program Files%\PDFCreator\Translatable.NGettext.dll
• %Program Files%\PDFCreator\Translatable.dll
• %Program Files%\PDFCreator\TrueTypeFontInfo.dll
• %Program Files%\PDFCreator\ftplib.dll
• %Program Files%\PDFCreator\itextsharp.dll
• %Program Files%\PDFCreator\pdfforge.Communication.dll
• %Program Files%\PDFCreator\pdfforge.Mail.dll
• %Program Files%\PDFCreator\pdfforge.ico
• %Program Files%\PDFCreator\unins000.exe
• %Program Data%\Lavasoft\Web Companion\Options\EventSafeguard.bkp
• %AppDataLocal%\Lavasoft\WebCompanion.exe_Url_f5db2c2eotb405zbclgx4obr3tgwdj1t\4.3.1917.3743\user.config
• %AppDataLocal%\Temp\Setup Log 2018-09-11 #001.txt
• %AppDataLocal%\Temp\is-5E0BM.tmp\1.tmp
• %AppDataLocal%\Temp\is-6SAD5.tmp\DownloadUpdateInfo.exe
• %AppDataLocal%\Temp\is-6SAD5.tmp\PDFArchitectAd2_English.bmp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc640p.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc800ih.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc800p.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc800pl.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc_h.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stc_l.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stcany.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stcany_h.upp
• %Program Files%\PDFCreator\Ghostscript\Lib\stcinfo.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\stcolor.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\stocht.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\traceimg.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\traceop.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\uninfo.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\unix-lpr.sh
• %Program Files%\PDFCreator\Ghostscript\Lib\viewcmyk.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\viewgif.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\viewjpeg.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\viewmiff.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\viewpbm.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\viewpcx.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\viewps2a.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\viewraw.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\viewrgb.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\winmaps.ps
• %Program Files%\PDFCreator\Ghostscript\Lib\wmakebat.bat
• %Program Files%\PDFCreator\Ghostscript\Lib\zeroline.ps
• %Program Files%\PDFCreator\GongSolutions.WPF.DragDrop.dll
• %Program Files%\PDFCreator\HtmlAgilityPack.dll
• %Program Files%\PDFCreator\ITextProcessing.dll
• %Program Files%\PDFCreator\Languages\ca\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\co-FR\LC_MESSAGES\messages.mo
• %AppDataLocal%\Temp\is-6SAD5.tmp\idp.dll
• %AppDataLocal%\Temp\is-6SAD5.tmp\lsop.exe
• %AppDataLocal%\Temp\is-6SAD5.tmp\update-info.txt
• %AppDataLocal%\Temp\is-DLRV2.tmp\_isetup\_shfoldr.dll
• %AppDataLocal%\Temp\is-DLRV2.tmp\idp.dll
• %AppDataLocal%\Temp\is-H5BVT.tmp\DownloadUpdateInfo.tmp
• %Application Data%Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
• %Windows%\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.944.1110664
• %Windows%\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch
• %Windows%\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.944.1110664
• %Windows%\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch
• %Program Files%\PDFCreator\Languages\cs\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\da\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\de\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\el\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\es\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\fa\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\fi\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\fr\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\ga\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\innosetup.pot
• %Program Files%\PDFCreator\Languages\it\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\lt\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\messages.pot
• %Program Files%\PDFCreator\Languages\nl\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\pl\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\pt-BR\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\ro\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\ru\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\sk\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\sl\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\sv\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\zh-HANS\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\Languages\zh-HANT\LC_MESSAGES\messages.mo
• %Program Files%\PDFCreator\LicenseValidator.Interface.dll
• %Program Files%\PDFCreator\LicenseValidator.dll
• %Program Files%\PDFCreator\MahApps.Metro.SimpleChildWindow.dll
• %Program Files%\PDFCreator\MahApps.Metro.dll
• %Program Files%\PDFCreator\Microsoft.Practices.ServiceLocation.dll

(註：%Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。Windows 2000、Server 2003、XP（32-bit）,Vista（32-bit）、7（32-bit）、8（32-bit）の場合、通常 "C:\Program Files"です。また、Windows XP（64-bit）、Vista（64-bit）、7（64-bit）、8（64-bit）の場合、通常 "C:\Program Files（x86）" です。. %AppDataLocal%フォルダは、ローカルアプリケーションデータフォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local" です。. %Application Data%フォルダは、現在ログオンしているユーザのアプリケーションデータフォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming" です。. %Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.)

他のシステム変更

プログラムは、インストールの過程で、以下のレジストリ値を追加します。

HKEY_CURRENT_USER\Software\Lavasoft\
Web Companion
isFFOpen = "False”

HKEY_CURRENT_USER\Software\Microsoft\
Direct3D\MostRecentApplication
Name = "PDFCreator.exe”

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
DisplayName = "Ad-Aware SecureSearch”

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
FaviconPath = "C:\ProgramData\Lavasoft\Web Companion\Icons\securesearch.ico”

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
FaviconURL = "http://securedsearch.lavasoft.com/templates/home/adaware_securesearch/favicon.ico"

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
OSDFileURL = " "

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
ShowSearchSuggestions = "1”

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
ShowTopResult = "1”

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
SuggestionsURL = "http://api.bing.com/qsml.aspx?query={searchTerms}

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
TopResultURL = "http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10421__180911&q={searchTerms}"

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
URL = "http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10421__180911&q={searchTerms}"

HKEY_CURRENT_USER\Software\PDF Architect 6\
Options\General
Send user statistics = "1”

HKEY_CURRENT_USER\Software\pdfforge\
PDFCreator\Settings\ApplicationSettings
Language = "en”

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{GUID}
{Default} = "PDF Architect 6 Manager"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{GUID}
LocalService = "PDF Architect 6 Manager"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{GUID}
LocalService = "PDF Architect 6"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}
LocalizedString = "@%programdata%\PDF Architect 6\Installation\Statistics.dll,-127"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\Elevation
IconReference = "@C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe,-501"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
{Default} = ""C:\Program Files\PDF Architect 6\creator\common\creator-ws.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
{Default} = ""C:\Program Files\PDF Architect 6\stats-com.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
{Default} = ""C:\Program Files\PDF Architect 6\ws.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
{Default} = ""C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
ServerExecutable = "C:\Program Files\PDF Architect 6\stats-com.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
ServerExecutable = "C:\Program Files\PDF Architect 6\ws.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
ServerExecutable = "C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\ProgID
{Default} = "PDFArchitect6CreatorService.COMCreator.1"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PDFArchitect6CreatorService.COMCreator
{Default} = "COMCreator Class”

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PDFArchitect6CreatorService.COMCreator.1
{Default} = "COMCreator Class"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PDFArchitect6CreatorService.COMCreator\CurVer
{Default} = "PDFArchitect6CreatorService.COMCreator.1”

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{GUID}\1.0\
0\win32
{Default} = "C:\Program Files\PDF Architect 6\stats-com.exe”

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{GUID}\1.0\
0\win32
{Default} = "C:\Program Files\PDF Architect 6\ws.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{GUID}\1.0\
0\win32
{Default} = "C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{GUID}\1.0\
HELPDIR
{Default} = "C:\Program Files\PDF Architect 6"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{GUID}\1.0\
HELPDIR
{Default} = "C:\ProgramData\PDF Architect 6\Installation"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
PDF Architect 6
DisplayIcon = "C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
PDF Architect 6
DisplayName = "PDF Architect 6"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
PDF Architect 6
DisplayVersion = "6.0.26.200"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
PDF Architect 6
EstimatedSize = "107520"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
PDF Architect 6
Publisher = "pdfforge GmbH"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
PDF Architect 6
UninstallString = "C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe /uninstall"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
AppPath = "C:\Program Files\PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
ApplicationVersion = "3.2.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
ApplicationVersion = "4.3.1917.3743"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Comments = "PDFCreator - The free PDF Converter"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Contact = "support@lavasoft.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
DisplayIcon = "C:\Program Files\Lavasoft\Web Companion\Application\WebCompanionIcon.ico"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
DisplayIcon = "C:\Program Files\PDFCreator\PDFCreator.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
DisplayName = "PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
DisplayName = "Web Companion"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
DisplayVersion = "3.2.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
DisplayVersion = "4.3.1917.3743"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
GhostscriptCopyright = "GPL"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
GhostscriptDirectoryBinaries = "C:\Program Files\PDFCreator\Ghostscript\Bin"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
GhostscriptDirectoryLibraries = "C:\Program Files\PDFCreator\Ghostscript\Lib"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
HelpLink = "http://www.pdfforge.org/support"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: App Path = "C:\Program Files\PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: Components = "program,pdfarchitect,pdfarchitect\firefox,pdfarchitect\internetexplorer"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: Group = "PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: NoIcons = "false"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: SetupLanguage = "en"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: SetupType = "custom”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: Silent = "false"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: Tasks = "desktopicon,desktopicon\common,winexplorer"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Printerdrivername = "PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Printermonitorname = "pdfcmon"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Printername = "PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Printerportname = "pdfcmon"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Publisher = "Lavasoft"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Publisher = "pdfforge GmbH"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Readme = "http://www.pdfforge.org"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
URLInfoAbout = "http://www.lavasoft.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
URLInfoAbout = "http://www.pdfforge.org"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
URLUpdateInfo = "http://www.pdfforge.org"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
UninstallString = "C:\Program Files\Lavasoft\Web Companion\Application\WebCompanionInstaller.exe --uninstall"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
UninstallString = "C:\Program Files\PDFCreator\unins000.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Installation
INSTALL_FOLDER = "C:\Program Files\PDF Architect 6"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Installation
edit = "C:\ProgramData\PDF Architect 6\Installation\pdf-architect6-edit-module-6.0.37.38653-x86.msi"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
DOWNLOAD_LINK = "download6.pdfarchitect.org/"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
cmp = "PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
cmp = "default"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
country_iso2 = "PH"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
params = "partner=default&uid=1006694&ref=pdfarchitect.org&cmp=PDFCreator&key1=6|3.2.0.11758&key2=1536653837&mkey1=default"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
redirector_link = "http://paygw.pdfarchitect.org/redirect/"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
ref = "pdfarchitect.org"

HKEY_LOCAL_MACHINE\SOFTWARE\pdfforge\
PDFCreator\Program
ApplicationPath = "C:\Program Files\PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\pdfforge\
PDFCreator\Program
ApplicationVersion = "3.2.0.11758"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Print\Monitors\
pdfcmon\Ports\pdfcmon
Description = "PDFCreator printer port"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Print\Monitors\
pdfcmon\Ports\pdfcmon
Program = "C:\Program Files\PDFCreator\PDFCreator.exe"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Print\Monitors\
pdfcmon\Ports\pdfcmon
TempFolderName = "PDFCreator"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Print\Monitors\
pdfcmon\Ports\pdfcmon
Type = "PS"

その他

プログラムは、以下の不正なWebサイトにアクセスします。

• http://sv.{BLOCKED}d.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQe6LNDJdqx%2BJOp7hVgTeaGFJ%2FCQgQUljtT8Hkzl699g%2B8uK8zKt4YecmYCEHbufvBDgh52FD6VEFUzieE%3D
• http://s2.{BLOCKED}b.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCED141%2Fl2SWCyYX308B7Khio%3D
• http://wc-tracking.{BLOCKED}ft.com/Install.asmx
• http://wc-update-service.{BLOCKED}ft.com/update.asmx
• http://wcdownloadercdn.{BLOCKED}ft.com/4.3.1917.3743/WebCompanion-4.3.1917.3743-prod.zip
• http://{BLOCKED}panion.com/version_logs?json=true&version=4.3.1917.3743
• http://rt.{BLOCKED}panion.com/notifications/download/rt/ActiveFeatures.zip
• http://wc-partners.{BLOCKED}ft.com/Partner.svc/GetPartnerInfo?partner=PF170501
• http://wc-partners.{BLOCKED}ft.com/Partner.svc/GetPartnerInfo?partner=PF170501_wb
• http://wc-partners.{BLOCKED}ft.com/Partner.svc/GetPartnerInfo?partner=PF170501_ab
• http://wc-partners.{BLOCKED}ft.com/Partner.svc/GetPartnerInfo?partner=PF170501_ac
• http://wc-tracking.{BLOCKED}ft.com/tracking.asmx
• http://wsgeoip.{BLOCKED}ft.com/ipservice.asmx
• http://{BLOCKED}panion.com/version_logs?json=true&version=4.3.1917.3743
• http://wc-update-service.{BLOCKED}ft.com/components.asmx
• http://update.{BLOCKED}ge.org/pdfcreator/update-info.txt
• http://download.{BLOCKED}rge.org/go/op/lsop.exe
• http://apps.{BLOCKED}ust.com/roots/dstrootcax3.p7c
• http://isrg.{BLOCKED}d.ocsp.identrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRv9GhNQxLSSGKBnMArPUcsHYovpgQUxKexpHsscfrb4UuQdf%2FEFWCFiRACEAoBQUIAAAFThXNqC4Xspwg%3D
• http://ocsp.int-x3.{BLOCKED}rypt.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBR%2B5mrncpqz%2FPiiIGRsFqEtYHEIXQQUqEpqYwR93brm0Tm3pkVl7%2FOo7KECEgNur8ZO4dUf37oI3UAe6fNeNw%3D%3D
• http://t2.{BLOCKED}b.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEHGgtzaV3bGvwjsrmhjuVMs%3D
• http://tl.{BLOCKED}d.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSFBjxN%2BWY73bfUnSOp7HDKJ%2Fbx0wQUV4abVLi%2BpimK5PbC4hMYiYXN3LcCECQ2LfZs8CKVstyxyyoTS1A%3D
• http://ocsp.{BLOCKED}ust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D
• http://ocsp.{BLOCKED}ca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCECsuburZdTZsFIpu26N8jAc%3D
• http://ocsp.{BLOCKED}ca.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQDWS6vvt3t7pQpYGGfZtA7Z