Trend Micro Security

PUA_BILDDOWNLOADER.GA

2018年9月24日
 解析者: Arvin Roi Macaraeg   

 別名:

Win32/LuluSoftware.A (ESET-NOD32)

 プラットフォーム:

Windows

 危険度:
 ダメージ度:
 感染力:
 感染確認数:
 情報漏えい:


  • マルウェアタイプ: 潜在的に迷惑なアプリケーション
  • 破壊活動の有無: なし
  • 暗号化:  
  • 感染報告の有無: はい

  概要


プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。


  詳細

ファイルサイズ 33,587,144 bytes
タイプ EXE
メモリ常駐 なし
発見日 2018年3月20日

侵入方法

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

プログラムは、以下のファイルを作成します。

  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm.sln
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\COM_TestForm.csproj
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Form1.Designer.cs
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Form1.cs
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Form1.resx
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Program.cs
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\AssemblyInfo.cs
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\Resources.Designer.cs
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\Resources.resx
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\Settings.Designer.cs
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\Settings.settings
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\app.config
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest.sln
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\CppCOMTest.cpp
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\CppCOMTest.vcxproj.filters
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\CppCOMTest.vcxproj
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\ReadMe.txt
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\stdafx.cpp
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\stdafx.h
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\targetver.h
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\GetPrinterDevices.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\MergedFiles2Tif.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\MultipleFiles2Tif.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\TestPage2JPG.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\TestPage2PDF.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\TestPage2Tif.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\TestPageMergeTarget.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\AttachmentPage.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\AttachmentPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\BackgroundPage.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\ChangeOutputFormat.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\ConvertFileAsync.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\CoverPage.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\EmailClient.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\EmailSmtp.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\JpegSettings.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\MergeAllJobs.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\PdfSecuritySettings.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\PdfSignatureSettings.js
  • %Program Files%\PDFCreator\COM Scripts\Perl\BackgroundPage.pl
  • %Program Files%\PDFCreator\COM Scripts\Perl\CoverPage.pl
  • %Program Files%\PDFCreator\COM Scripts\Perl\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Perl\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Perl\JpegSettings.pl
  • %Program Files%\PDFCreator\COM Scripts\Perl\MergedMultipleFiles2Tif.pl
  • %Program Files%\PDFCreator\COM Scripts\Perl\TestPage2PDF.pl
  • %Program Files%\PDFCreator\COM Scripts\Python\BackgroundPage.py
  • %Program Files%\PDFCreator\COM Scripts\Python\CoverPage.py
  • %Program Files%\PDFCreator\COM Scripts\Python\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Python\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Python\JpegSettings.py
  • %Program Files%\PDFCreator\COM Scripts\Python\MergedMultipleFiles2Tif.py
  • %Program Files%\PDFCreator\COM Scripts\Python\TestPage2PDF.py
  • %Program Files%\PDFCreator\COM Scripts\Ruby\BackgroundPage.rb
  • %Program Files%\PDFCreator\COM Scripts\Ruby\CoverPage.rb
  • %Program Files%\PDFCreator\COM Scripts\Ruby\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Ruby\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Ruby\JpegSettings.rb
  • %Program Files%\PDFCreator\COM Scripts\Ruby\MergedMultipleFiles2Tif.rb
  • %Program Files%\PDFCreator\COM Scripts\Ruby\TestPage2PDF.rb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm.sln
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\COM_TestForm.vbproj
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\Form1.Designer.vb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\Form1.resx
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\Form1.vb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Application.Designer.vb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Application.myapp
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\AssemblyInfo.vb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Resources.Designer.vb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Resources.resx
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Settings.Designer.vb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Settings.settings
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\app.config
  • %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\COM_TestForm.frm
  • %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\Projekt1.vbp
  • %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\Projekt1.vbw
  • %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\Readme.txt
  • %Program Files%\PDFCreator\COM Scripts\VBScript\BackgroundPage.vbs
  • %Program Files%\PDFCreator\COM Scripts\VBScript\CoverPage.vbs
  • %Program Files%\PDFCreator\COM Scripts\VBScript\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\VBScript\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\VBScript\JpegSettings.vbs
  • %Program Files%\PDFCreator\COM Scripts\VBScript\MergedMultipleFiles2Tif.vbs
  • %Program Files%\PDFCreator\COM Scripts\VBScript\TestPage2PDF.vbs
  • %Program Files%\PDFCreator\COM Scripts\Word - VBA\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Word - VBA\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Word - VBA\Testpage2PDF.docm
  • %Program Files%\PDFCreator\DataStorage.dll
  • %Program Files%\PDFCreator\DeleteMonitorDll.exe
  • %Program Files%\PDFCreator\Dropbox.Api.Net40.dll
  • %Program Files%\PDFCreator\Dropbox.dll
  • %Program Files%\PDFCreator\ErrorReport.exe
  • %Program Files%\PDFCreator\Ghostscript\Bin\gsdll32.dll
  • %Program Files%\PDFCreator\Ghostscript\Bin\gsdll32.lib
  • %Program Files%\PDFCreator\Ghostscript\Bin\gswin32c.exe
  • %Program Files%\PDFCreator\Ghostscript\Lib\FAPIconfig-FCO
  • %Program Files%\PDFCreator\Ghostscript\Lib\FCOfontmap-PCLPS3
  • %Program Files%\PDFCreator\Ghostscript\Lib\FCOfontmap-PS3
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.ATB
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.ATM
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.OS2
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.OSF
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.SGI
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.Sol
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.URW-136.T1
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.URW-136.TT
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.Ult
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.VMS
  • %Program Files%\PDFCreator\Ghostscript\Lib\Info-macos.plist
  • %Program Files%\PDFCreator\Ghostscript\Lib\PDFA_def.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\PDFX_def.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\acctest.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\afmdiff.awk
  • %Program Files%\PDFCreator\Ghostscript\Lib\align.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8.rpd
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8gc12f.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8hg12f.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8oh06n.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8pa06n.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8pp12f.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8ts06n.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a0.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a1.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a2.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a3.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a4.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a5.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a6.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a7.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a8.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b1.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b2.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b3.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b4.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b6.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b7.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b8.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\caption.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\cat.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\cbjc600.ppd
  • %Program Files%\PDFCreator\Ghostscript\Lib\cbjc800.ppd
  • %Program Files%\PDFCreator\Ghostscript\Lib\cdj550.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\cdj690.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\cdj690ec.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\cid2code.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\cidfmap
  • %Program Files%\PDFCreator\Ghostscript\Lib\dnj750c.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\dnj750m.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\docie.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\dvipdf
  • %Program Files%\PDFCreator\Ghostscript\Lib\eps2eps.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\eps2eps.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\eps2eps
  • %Program Files%\PDFCreator\Ghostscript\Lib\font2pcl.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\ghostpdf.README
  • %Program Files%\PDFCreator\Ghostscript\Lib\ghostpdf.cat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ghostpdf.inf
  • %Program Files%\PDFCreator\Ghostscript\Lib\ghostpdf.ppd
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_ce_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_cmdl.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_il2_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_kanji.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_ksb_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_l.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_l.xpm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_l_m.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_lgo_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_lgx_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_m.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_m.xpm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_m_m.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_s.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_s.xpm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_s_m.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_t.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_t.xpm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_t_m.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_wl1_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_wl2_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_wl5_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsbj.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsbj
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsdj.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsdj500.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsdj500
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsdj
  • %Program Files%\PDFCreator\Ghostscript\Lib\gslj.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gslj
  • %Program Files%\PDFCreator\Ghostscript\Lib\gslp.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gslp.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gslp
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsnd.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsnd
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsndt.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsnup.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gssetgs.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gssetgs32.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gssetgs64.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gst.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gstt.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ht_ccsto.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\image-qa.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\jispaper.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\jobseparator.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\landscap.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\lines.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\lp386.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\lp386r2.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\lpgs.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\lpr2.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\lprsetup.sh
  • %Program Files%\PDFCreator\Ghostscript\Lib\mkcidfm.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\necp2x.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\necp2x6.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\pdf2dsc.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\pdf2dsc.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\pdf2dsc
  • %Program Files%\PDFCreator\Ghostscript\Lib\pdf2ps.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\pdf2ps.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\pdf2ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\pf2afm.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\pf2afm.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\pf2afm.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\pf2afm
  • %Program Files%\PDFCreator\Ghostscript\Lib\pfbtopfa.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\pfbtopfa.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\pfbtopfa
  • %Program Files%\PDFCreator\Ghostscript\Lib\ppath.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\pphs.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\pphs
  • %Program Files%\PDFCreator\Ghostscript\Lib\prfont.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\printafm.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\printafm
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ai.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ascii.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ascii.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ascii
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2epsi.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2epsi.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2epsi.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2epsi
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf12.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf12.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf12
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf13.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf13.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf13
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf14.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf14.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf14
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdfwr
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdfxx.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps2.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps2.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps2
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\ras1.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\ras24.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\ras3.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\ras32.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\ras4.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\ras8m.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\rinkj-2200-setup
  • %Program Files%\PDFCreator\Ghostscript\Lib\rollconv.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\st640ih.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\st640ihg.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\st640p.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\st640pg.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\st640pl.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\st640plg.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc1520h.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc2.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc200_h.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc2_h.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc2s_h.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc300.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc300bl.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc300bm.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc500p.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc500ph.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc600ih.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc600p.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc600pl.upp
  • %Program Files%\PDFCreator\NGettext.dll
  • %Program Files%\PDFCreator\NLog.dll
  • %Program Files%\PDFCreator\Newtonsoft.Json.dll
  • %Program Files%\PDFCreator\Obsidian.dll
  • %Program Files%\PDFCreator\Optional.dll
  • %Program Files%\PDFCreator\PDFCreator.Actions.dll
  • %Program Files%\PDFCreator\PDFCreator.ActionsInterface.dll
  • %Program Files%\PDFCreator\PDFCreator.COM.dll
  • %Program Files%\PDFCreator\PDFCreator.ComImplementation.dll
  • %Program Files%\PDFCreator\PDFCreator.ComWrapper.dll
  • %Program Files%\PDFCreator\PDFCreator.Communication.dll
  • %Program Files%\PDFCreator\PDFCreator.Controller.dll
  • %Program Files%\PDFCreator\PDFCreator.ConverterInterface.dll
  • %Program Files%\PDFCreator\PDFCreator.DirectConversion.dll
  • %Program Files%\PDFCreator\PDFCreator.EditionBase.dll
  • %Program Files%\PDFCreator\PDFCreator.Ghostscript.dll
  • %Program Files%\PDFCreator\PDFCreator.Interactions.dll
  • %Program Files%\PDFCreator\PDFCreator.Jobs.dll
  • %Program Files%\PDFCreator\PDFCreator.Presentation.dll
  • %Program Files%\PDFCreator\PDFCreator.Printing.dll
  • %Program Files%\PDFCreator\PDFCreator.Services.dll
  • %Program Files%\PDFCreator\PDFCreator.Settings.dll
  • %Program Files%\PDFCreator\PDFCreator.SettingsManagement.dll
  • %Program Files%\PDFCreator\PDFCreator.Startup.dll
  • %Program Files%\PDFCreator\PDFCreator.StartupInterface.dll
  • %Program Files%\PDFCreator\PDFCreator.Utilities.dll
  • %Program Files%\PDFCreator\PDFCreator.Workflow.dll
  • %Program Files%\PDFCreator\PDFCreator.exe
  • %Program Files%\PDFCreator\PDFCreatorShell.dll
  • %Program Files%\PDFCreator\PDFCreator_english.chm
  • %Program Files%\PDFCreator\PDFCreator_german.chm
  • %Program Files%\PDFCreator\PayPal.ico
  • %Program Files%\PDFCreator\PdfProcessingInterface.dll
  • %Program Files%\PDFCreator\PrinterHelper.exe
  • %Program Files%\PDFCreator\Prism.Wpf.dll
  • %Program Files%\PDFCreator\Prism.dll
  • %Program Files%\PDFCreator\PropertyChanged.dll
  • %Program Files%\PDFCreator\PsParser.dll
  • %Program Files%\PDFCreator\RepairFolderPermissions.exe
  • %Program Files%\PDFCreator\SetupHelper.exe
  • %Program Files%\PDFCreator\SimpleInjector.dll
  • %Program Files%\PDFCreator\System.Net.Http.Extensions.dll
  • %Program Files%\PDFCreator\System.Net.Http.Primitives.dll
  • %Program Files%\PDFCreator\System.Windows.Interactivity.dll
  • %Program Files%\PDFCreator\SystemInterface.dll
  • %Program Files%\PDFCreator\SystemWrapper.dll
  • %Program Files%\PDFCreator\Tartaros.dll
  • %Program Files%\PDFCreator\ToastNotifications.Messages.dll
  • %Program Files%\PDFCreator\ToastNotifications.dll
  • %Program Files%\PDFCreator\Translatable.NGettext.dll
  • %Program Files%\PDFCreator\Translatable.dll
  • %Program Files%\PDFCreator\TrueTypeFontInfo.dll
  • %Program Files%\PDFCreator\ftplib.dll
  • %Program Files%\PDFCreator\itextsharp.dll
  • %Program Files%\PDFCreator\pdfforge.Communication.dll
  • %Program Files%\PDFCreator\pdfforge.Mail.dll
  • %Program Files%\PDFCreator\pdfforge.ico
  • %Program Files%\PDFCreator\unins000.exe
  • %Program Data%\Lavasoft\Web Companion\Options\EventSafeguard.bkp
  • %AppDataLocal%\Lavasoft\WebCompanion.exe_Url_f5db2c2eotb405zbclgx4obr3tgwdj1t\4.3.1917.3743\user.config
  • %AppDataLocal%\Temp\Setup Log 2018-09-11 #001.txt
  • %AppDataLocal%\Temp\is-5E0BM.tmp\1.tmp
  • %AppDataLocal%\Temp\is-6SAD5.tmp\DownloadUpdateInfo.exe
  • %AppDataLocal%\Temp\is-6SAD5.tmp\PDFArchitectAd2_English.bmp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc640p.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc800ih.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc800p.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc800pl.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc_h.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc_l.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stcany.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stcany_h.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stcinfo.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\stcolor.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\stocht.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\traceimg.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\traceop.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\uninfo.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\unix-lpr.sh
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewcmyk.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewgif.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewjpeg.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewmiff.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewpbm.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewpcx.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewps2a.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewraw.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewrgb.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\winmaps.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\wmakebat.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\zeroline.ps
  • %Program Files%\PDFCreator\GongSolutions.WPF.DragDrop.dll
  • %Program Files%\PDFCreator\HtmlAgilityPack.dll
  • %Program Files%\PDFCreator\ITextProcessing.dll
  • %Program Files%\PDFCreator\Languages\ca\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\co-FR\LC_MESSAGES\messages.mo
  • %AppDataLocal%\Temp\is-6SAD5.tmp\idp.dll
  • %AppDataLocal%\Temp\is-6SAD5.tmp\lsop.exe
  • %AppDataLocal%\Temp\is-6SAD5.tmp\update-info.txt
  • %AppDataLocal%\Temp\is-DLRV2.tmp\_isetup\_shfoldr.dll
  • %AppDataLocal%\Temp\is-DLRV2.tmp\idp.dll
  • %AppDataLocal%\Temp\is-H5BVT.tmp\DownloadUpdateInfo.tmp
  • %Application Data%Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
  • %Windows%\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.944.1110664
  • %Windows%\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch
  • %Windows%\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.944.1110664
  • %Windows%\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch
  • %Program Files%\PDFCreator\Languages\cs\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\da\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\de\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\el\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\es\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\fa\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\fi\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\fr\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\ga\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\innosetup.pot
  • %Program Files%\PDFCreator\Languages\it\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\lt\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\messages.pot
  • %Program Files%\PDFCreator\Languages\nl\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\pl\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\pt-BR\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\ro\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\ru\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\sk\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\sl\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\sv\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\zh-HANS\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\zh-HANT\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\LicenseValidator.Interface.dll
  • %Program Files%\PDFCreator\LicenseValidator.dll
  • %Program Files%\PDFCreator\MahApps.Metro.SimpleChildWindow.dll
  • %Program Files%\PDFCreator\MahApps.Metro.dll
  • %Program Files%\PDFCreator\Microsoft.Practices.ServiceLocation.dll

(註:%Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。Windows 2000、Server 2003、XP(32-bit),Vista(32-bit)、7(32-bit)、8(32-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)の場合、通常 "C:\Program Files(x86)" です。. %AppDataLocal%フォルダは、ローカルアプリケーションデータフォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\<ユーザ名>\Local Settings\Application Data" です。また、Windows Vista、7、8の場合、通常 "C:\Users\<ユーザ名>\AppData\Local" です。. %Application Data%フォルダは、現在ログオンしているユーザのアプリケーションデータフォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\<ユーザ名>\Local Settings\Application Data" です。また、Windows Vista、7、8の場合、通常 "C:\Users\<ユーザ名>\AppData\Roaming" です。. %Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.)

他のシステム変更

プログラムは、インストールの過程で、以下のレジストリ値を追加します。

HKEY_CURRENT_USER\Software\Lavasoft\
Web Companion
isFFOpen = "False”

HKEY_CURRENT_USER\Software\Microsoft\
Direct3D\MostRecentApplication
Name = "PDFCreator.exe”

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
DisplayName = "Ad-Aware SecureSearch”

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
FaviconPath = "C:\ProgramData\Lavasoft\Web Companion\Icons\securesearch.ico”

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
FaviconURL = "http://securedsearch.lavasoft.com/templates/home/adaware_securesearch/favicon.ico"

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
OSDFileURL = " "

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
ShowSearchSuggestions = "1”

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
ShowTopResult = "1”

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
SuggestionsURL = "http://api.bing.com/qsml.aspx?query={searchTerms}

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
TopResultURL = "http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10421__180911&q={searchTerms}"

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\SearchScopes\{GUID}
URL = "http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10421__180911&q={searchTerms}"

HKEY_CURRENT_USER\Software\PDF Architect 6\
Options\General
Send user statistics = "1”

HKEY_CURRENT_USER\Software\pdfforge\
PDFCreator\Settings\ApplicationSettings
Language = "en”

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{GUID}
{Default} = "PDF Architect 6 Manager"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{GUID}
LocalService = "PDF Architect 6 Manager"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{GUID}
LocalService = "PDF Architect 6"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}
LocalizedString = "@%programdata%\PDF Architect 6\Installation\Statistics.dll,-127"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\Elevation
IconReference = "@C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe,-501"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
{Default} = ""C:\Program Files\PDF Architect 6\creator\common\creator-ws.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
{Default} = ""C:\Program Files\PDF Architect 6\stats-com.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
{Default} = ""C:\Program Files\PDF Architect 6\ws.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
{Default} = ""C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
ServerExecutable = "C:\Program Files\PDF Architect 6\stats-com.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
ServerExecutable = "C:\Program Files\PDF Architect 6\ws.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\LocalServer32
ServerExecutable = "C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{GUID}\ProgID
{Default} = "PDFArchitect6CreatorService.COMCreator.1"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PDFArchitect6CreatorService.COMCreator
{Default} = "COMCreator Class”

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PDFArchitect6CreatorService.COMCreator.1
{Default} = "COMCreator Class"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PDFArchitect6CreatorService.COMCreator\CurVer
{Default} = "PDFArchitect6CreatorService.COMCreator.1”

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{GUID}\1.0\
0\win32
{Default} = "C:\Program Files\PDF Architect 6\stats-com.exe”

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{GUID}\1.0\
0\win32
{Default} = "C:\Program Files\PDF Architect 6\ws.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{GUID}\1.0\
0\win32
{Default} = "C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{GUID}\1.0\
HELPDIR
{Default} = "C:\Program Files\PDF Architect 6"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{GUID}\1.0\
HELPDIR
{Default} = "C:\ProgramData\PDF Architect 6\Installation"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
PDF Architect 6
DisplayIcon = "C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
PDF Architect 6
DisplayName = "PDF Architect 6"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
PDF Architect 6
DisplayVersion = "6.0.26.200"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
PDF Architect 6
EstimatedSize = "107520"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
PDF Architect 6
Publisher = "pdfforge GmbH"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
PDF Architect 6
UninstallString = "C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe /uninstall"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
AppPath = "C:\Program Files\PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
ApplicationVersion = "3.2.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
ApplicationVersion = "4.3.1917.3743"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Comments = "PDFCreator - The free PDF Converter"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Contact = "support@lavasoft.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
DisplayIcon = "C:\Program Files\Lavasoft\Web Companion\Application\WebCompanionIcon.ico"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
DisplayIcon = "C:\Program Files\PDFCreator\PDFCreator.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
DisplayName = "PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
DisplayName = "Web Companion"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
DisplayVersion = "3.2.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
DisplayVersion = "4.3.1917.3743"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
GhostscriptCopyright = "GPL"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
GhostscriptDirectoryBinaries = "C:\Program Files\PDFCreator\Ghostscript\Bin"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
GhostscriptDirectoryLibraries = "C:\Program Files\PDFCreator\Ghostscript\Lib"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
HelpLink = "http://www.pdfforge.org/support"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: App Path = "C:\Program Files\PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: Components = "program,pdfarchitect,pdfarchitect\firefox,pdfarchitect\internetexplorer"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: Group = "PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: NoIcons = "false"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: SetupLanguage = "en"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: SetupType = "custom”

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: Silent = "false"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Inno Setup: Tasks = "desktopicon,desktopicon\common,winexplorer"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Printerdrivername = "PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Printermonitorname = "pdfcmon"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Printername = "PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Printerportname = "pdfcmon"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Publisher = "Lavasoft"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Publisher = "pdfforge GmbH"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
Readme = "http://www.pdfforge.org"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
URLInfoAbout = "http://www.lavasoft.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
URLInfoAbout = "http://www.pdfforge.org"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
URLUpdateInfo = "http://www.pdfforge.org"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
UninstallString = "C:\Program Files\Lavasoft\Web Companion\Application\WebCompanionInstaller.exe --uninstall"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{GUID}
UninstallString = "C:\Program Files\PDFCreator\unins000.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Installation
INSTALL_FOLDER = "C:\Program Files\PDF Architect 6"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Installation
edit = "C:\ProgramData\PDF Architect 6\Installation\pdf-architect6-edit-module-6.0.37.38653-x86.msi"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
DOWNLOAD_LINK = "download6.pdfarchitect.org/"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
cmp = "PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
cmp = "default"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
country_iso2 = "PH"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
params = "partner=default&uid=1006694&ref=pdfarchitect.org&cmp=PDFCreator&key1=6|3.2.0.11758&key2=1536653837&mkey1=default"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
redirector_link = "http://paygw.pdfarchitect.org/redirect/"

HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\
Links
ref = "pdfarchitect.org"

HKEY_LOCAL_MACHINE\SOFTWARE\pdfforge\
PDFCreator\Program
ApplicationPath = "C:\Program Files\PDFCreator"

HKEY_LOCAL_MACHINE\SOFTWARE\pdfforge\
PDFCreator\Program
ApplicationVersion = "3.2.0.11758"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Print\Monitors\
pdfcmon\Ports\pdfcmon
Description = "PDFCreator printer port"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Print\Monitors\
pdfcmon\Ports\pdfcmon
Program = "C:\Program Files\PDFCreator\PDFCreator.exe"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Print\Monitors\
pdfcmon\Ports\pdfcmon
TempFolderName = "PDFCreator"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Print\Monitors\
pdfcmon\Ports\pdfcmon
Type = "PS"

その他

プログラムは、以下の不正なWebサイトにアクセスします。

  • http://sv.{BLOCKED}d.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQe6LNDJdqx%2BJOp7hVgTeaGFJ%2FCQgQUljtT8Hkzl699g%2B8uK8zKt4YecmYCEHbufvBDgh52FD6VEFUzieE%3D
  • http://s2.{BLOCKED}b.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCED141%2Fl2SWCyYX308B7Khio%3D
  • http://wc-tracking.{BLOCKED}ft.com/Install.asmx
  • http://wc-update-service.{BLOCKED}ft.com/update.asmx
  • http://wcdownloadercdn.{BLOCKED}ft.com/4.3.1917.3743/WebCompanion-4.3.1917.3743-prod.zip
  • http://{BLOCKED}panion.com/version_logs?json=true&version=4.3.1917.3743
  • http://rt.{BLOCKED}panion.com/notifications/download/rt/ActiveFeatures.zip
  • http://wc-partners.{BLOCKED}ft.com/Partner.svc/GetPartnerInfo?partner=PF170501
  • http://wc-partners.{BLOCKED}ft.com/Partner.svc/GetPartnerInfo?partner=PF170501_wb
  • http://wc-partners.{BLOCKED}ft.com/Partner.svc/GetPartnerInfo?partner=PF170501_ab
  • http://wc-partners.{BLOCKED}ft.com/Partner.svc/GetPartnerInfo?partner=PF170501_ac
  • http://wc-tracking.{BLOCKED}ft.com/tracking.asmx
  • http://wsgeoip.{BLOCKED}ft.com/ipservice.asmx
  • http://{BLOCKED}panion.com/version_logs?json=true&version=4.3.1917.3743
  • http://wc-update-service.{BLOCKED}ft.com/components.asmx
  • http://update.{BLOCKED}ge.org/pdfcreator/update-info.txt
  • http://download.{BLOCKED}rge.org/go/op/lsop.exe
  • http://apps.{BLOCKED}ust.com/roots/dstrootcax3.p7c
  • http://isrg.{BLOCKED}d.ocsp.identrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRv9GhNQxLSSGKBnMArPUcsHYovpgQUxKexpHsscfrb4UuQdf%2FEFWCFiRACEAoBQUIAAAFThXNqC4Xspwg%3D
  • http://ocsp.int-x3.{BLOCKED}rypt.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBR%2B5mrncpqz%2FPiiIGRsFqEtYHEIXQQUqEpqYwR93brm0Tm3pkVl7%2FOo7KECEgNur8ZO4dUf37oI3UAe6fNeNw%3D%3D
  • http://t2.{BLOCKED}b.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEHGgtzaV3bGvwjsrmhjuVMs%3D
  • http://tl.{BLOCKED}d.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSFBjxN%2BWY73bfUnSOp7HDKJ%2Fbx0wQUV4abVLi%2BpimK5PbC4hMYiYXN3LcCECQ2LfZs8CKVstyxyyoTS1A%3D
  • http://ocsp.{BLOCKED}ust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D
  • http://ocsp.{BLOCKED}ca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCECsuburZdTZsFIpu26N8jAc%3D
  • http://ocsp.{BLOCKED}ca.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy%2BemBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQDWS6vvt3t7pQpYGGfZtA7Z


  対応方法

対応検索エンジン: 9.850
SSAPI パターンバージョン: 2.104.12
SSAPI パターンリリース日: 2018年9月20日

手順 1

Windows XP、Windows Vista および Windows 7 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。

手順 2

このマルウェアもしくはアドウェア等の実行により、手順中に記載されたすべてのファイル、フォルダおよびレジストリキーや値がコンピュータにインストールされるとは限りません。インストールが不完全である場合の他、オペレーティングシステム(OS)の条件によりインストールがされない場合が考えられます。手順中に記載されたファイル/フォルダ/レジストリ情報が確認されない場合、該当の手順の操作は不要ですので、次の手順に進んでください。

手順 3

このレジストリ値を削除します。

[ 詳細 ]

警告:レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

 
  • In HKEY_CURRENT_USER\Software\Lavasoft\Web Companion
    • isFFOpen = "False”
  • In HKEY_CURRENT_USER\Software\Microsoft\Direct3D\MostRecentApplication
    • Name = "PDFCreator.exe”
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{GUID}
    • DisplayName = "Ad-Aware SecureSearch”
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{GUID}
    • FaviconPath = "C:\ProgramData\Lavasoft\Web Companion\Icons\securesearch.ico”
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{GUID}
    • FaviconURL = "http://securedsearch.lavasoft.com/templates/home/adaware_securesearch/favicon.ico
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{GUID}
    • OSDFileURL = " "
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{GUID}
    • ShowSearchSuggestions = "1"
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{GUID}
    • ShowTopResult = "1”
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{GUID}
    • SuggestionsURL = "http://api.bing.com/qsml.aspx?query={searchTerms}”
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{GUID}
    • TopResultURL = "http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10421__180911&q={searchTerms}”
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{GUID}
    • URL = "http://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10421__180911&q={searchTerms}”
  • In HKEY_CURRENT_USER\Software\PDF Architect 6\Options\General
    • Send user statistics = "1”
  • In HKEY_CURRENT_USER\Software\pdfforge\PDFCreator\Settings\ApplicationSettings
    • Language = "en”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{GUID}
    • {Default} = "PDF Architect 6 Manager”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{GUID}
    • LocalService = "PDF Architect 6 Manager”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{GUID}
    • LocalService = "PDF Architect 6”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}
    • LocalizedString = "@%programdata%\PDF Architect 6\Installation\Statistics.dll,-127”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\Elevation
    • IconReference = "@C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe,-501”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\LocalServer32
    • {Default} = ""C:\Program Files\PDF Architect 6\creator\common\creator-ws.exe"”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\LocalServer32
    • {Default} = ""C:\Program Files\PDF Architect 6\stats-com.exe"”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\LocalServer32
    • {Default} = ""C:\Program Files\PDF Architect 6\ws.exe"”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\LocalServer32
    • {Default} = ""C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\LocalServer32
    • ServerExecutable = "C:\Program Files\PDF Architect 6\stats-com.exe”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\LocalServer32
    • ServerExecutable = "C:\Program Files\PDF Architect 6\ws.exe”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\LocalServer32
    • ServerExecutable = "C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{GUID}\ProgID
    • {Default} = "PDFArchitect6CreatorService.COMCreator.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFArchitect6CreatorService.COMCreator
    • {Default} = "COMCreator Class”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFArchitect6CreatorService.COMCreator.1
    • {Default} = "COMCreator Class”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFArchitect6CreatorService.COMCreator\CurVer
    • {Default} = "PDFArchitect6CreatorService.COMCreator.1”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\0\win32
    • {Default} = "C:\Program Files\PDF Architect 6\stats-com.exe”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\0\win32
    • {Default} = "C:\Program Files\PDF Architect 6\ws.exe”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\0\win32
    • {Default} = "C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\HELPDIR
    • {Default} = "C:\Program Files\PDF Architect 6”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{GUID}\1.0\HELPDIR
    • {Default} = "C:\ProgramData\PDF Architect 6\Installation
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PDF Architect 6
    • DisplayIcon = "C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PDF Architect 6
    • DisplayName = "PDF Architect 6”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PDF Architect 6
    • DisplayVersion = "6.0.26.200”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PDF Architect 6
    • EstimatedSize = "107520”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PDF Architect 6
    • Publisher = "pdfforge GmbH”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PDF Architect 6
    • UninstallString = "C:\ProgramData\PDF Architect 6\Installation\PDFArchitect6Installer.exe /uninstall”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • AppPath = "C:\Program Files\PDFCreator”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • ApplicationVersion = "3.2.0”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • ApplicationVersion = "4.3.1917.3743”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Comments = "PDFCreator - The free PDF Converter”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Contact = "support@lavasoft.com"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • DisplayIcon = "C:\Program Files\Lavasoft\Web Companion\Application\WebCompanionIcon.ico”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • DisplayIcon = "C:\Program Files\PDFCreator\PDFCreator.exe”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • DisplayName = "PDFCreator”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • DisplayName = "Web Companion”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • DisplayVersion = "3.2.0”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • DisplayVersion = "4.3.1917.3743”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • GhostscriptCopyright = "GPL”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • GhostscriptDirectoryBinaries = "C:\Program Files\PDFCreator\Ghostscript\Bin”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • GhostscriptDirectoryLibraries = "C:\Program Files\PDFCreator\Ghostscript\Lib”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • HelpLink = "http://www.pdfforge.org/support”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Inno Setup: App Path = "C:\Program Files\PDFCreator”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Inno Setup: Components = "program,pdfarchitect,pdfarchitect\firefox,pdfarchitect\internetexplorer”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Inno Setup: Group = "PDFCreator”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Inno Setup: NoIcons = "false”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Inno Setup: SetupLanguage = "en”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Inno Setup: SetupType = "custom”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Inno Setup: Silent = "false”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Inno Setup: Tasks = "desktopicon,desktopicon\common,winexplorer”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Printerdrivername = "PDFCreator”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Printermonitorname = "pdfcmon”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Printername = "PDFCreator”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Printerportname = "pdfcmon”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Publisher = "Lavasoft”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Publisher = "pdfforge GmbH"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • Readme = "http://www.pdfforge.org”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • URLInfoAbout = "http://www.lavasoft.com”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • URLInfoAbout = "http://www.pdfforge.org”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • URLUpdateInfo = "http://www.pdfforge.org”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • UninstallString = "C:\Program Files\Lavasoft\Web Companion\Application\WebCompanionInstaller.exe --uninstall”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{GUID}
    • UninstallString = "C:\Program Files\PDFCreator\unins000.exe”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\Installation
    • INSTALL_FOLDER = "C:\Program Files\PDF Architect 6”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\Installation
    • edit = "C:\ProgramData\PDF Architect 6\Installation\pdf-architect6-edit-module-6.0.37.38653-x86.msi”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\Links
    • DOWNLOAD_LINK = "download6.pdfarchitect.org/"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\Links
    • cmp = "PDFCreator”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\Links
    • cmp = "default”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\Links
    • country_iso2 = "PH"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\Links
    • params = "partner=default&uid=1006694&ref=pdfarchitect.org&cmp=PDFCreator&key1=6|3.2.0.11758&key2=1536653837&mkey1=default”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\Links
    • redirector_link = "http://paygw.pdfarchitect.org/redirect/”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\PDF Architect 6\Links
    • ref = "pdfarchitect.org”
  • In HKEY_LOCAL_MACHINE\SOFTWARE\pdfforge\PDFCreator\Program
    • ApplicationPath = "C:\Program Files\PDFCreator"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\pdfforge\PDFCreator\Program
    • ApplicationVersion = "3.2.0.11758”
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Print\Monitors\pdfcmon\Ports\pdfcmon
    • Description = "PDFCreator printer port”
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Print\Monitors\pdfcmon\Ports\pdfcmon
    • Program = "C:\Program Files\PDFCreator\PDFCreator.exe”
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Print\Monitors\pdfcmon\Ports\pdfcmon
    • TempFolderName = "PDFCreator"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Print\Monitors\pdfcmon\Ports\pdfcmon
    • Type = "PS"

手順 4

「PUA_BILDDOWNLOADER.GA」で検出したファイル名を確認し、そのファイルを終了します。

[ 詳細 ]

  • すべての実行中プロセスが、Windows のタスクマネージャに表示されない場合があります。この場合、"Process Explorer" などのツールを使用しマルウェアのファイルを終了してください。"Process Explorer" については、こちらをご参照下さい。
  • 検出ファイルが、Windows のタスクマネージャまたは "Process Explorer" に表示されるものの、削除できない場合があります。この場合、コンピュータをセーフモードで再起動してください。
    セーフモードについては、こちらをご参照下さい。
  • 検出ファイルがタスクマネージャ上で表示されない場合、次の手順にお進みください。

手順 5

以下のファイルを検索し削除します。

[ 詳細 ]
コンポーネントファイルが隠しファイル属性の場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm.sln
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\COM_TestForm.csproj
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Form1.Designer.cs
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Form1.cs
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Form1.resx
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Program.cs
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\AssemblyInfo.cs
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\Resources.Designer.cs
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\Resources.resx
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\Settings.Designer.cs
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\Properties\Settings.settings
  • %Program Files%\PDFCreator\COM Scripts\C#.Net\COM_TestForm\COM_TestForm\app.config
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest.sln
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\CppCOMTest.cpp
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\CppCOMTest.vcxproj.filters
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\CppCOMTest.vcxproj
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\ReadMe.txt
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\stdafx.cpp
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\stdafx.h
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\CppCOMTest\targetver.h
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\C++\CppCOMTest\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\GetPrinterDevices.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\MergedFiles2Tif.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\MultipleFiles2Tif.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\TestPage2JPG.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\TestPage2PDF.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\TestPage2Tif.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\Basics\TestPageMergeTarget.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\AttachmentPage.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\AttachmentPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\BackgroundPage.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\ChangeOutputFormat.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\ConvertFileAsync.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\CoverPage.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\EmailClient.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\EmailSmtp.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\JpegSettings.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\MergeAllJobs.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\PdfSecuritySettings.js
  • %Program Files%\PDFCreator\COM Scripts\JS Scripts\How To\PdfSignatureSettings.js
  • %Program Files%\PDFCreator\COM Scripts\Perl\BackgroundPage.pl
  • %Program Files%\PDFCreator\COM Scripts\Perl\CoverPage.pl
  • %Program Files%\PDFCreator\COM Scripts\Perl\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Perl\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Perl\JpegSettings.pl
  • %Program Files%\PDFCreator\COM Scripts\Perl\MergedMultipleFiles2Tif.pl
  • %Program Files%\PDFCreator\COM Scripts\Perl\TestPage2PDF.pl
  • %Program Files%\PDFCreator\COM Scripts\Python\BackgroundPage.py
  • %Program Files%\PDFCreator\COM Scripts\Python\CoverPage.py
  • %Program Files%\PDFCreator\COM Scripts\Python\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Python\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Python\JpegSettings.py
  • %Program Files%\PDFCreator\COM Scripts\Python\MergedMultipleFiles2Tif.py
  • %Program Files%\PDFCreator\COM Scripts\Python\TestPage2PDF.py
  • %Program Files%\PDFCreator\COM Scripts\Ruby\BackgroundPage.rb
  • %Program Files%\PDFCreator\COM Scripts\Ruby\CoverPage.rb
  • %Program Files%\PDFCreator\COM Scripts\Ruby\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Ruby\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Ruby\JpegSettings.rb
  • %Program Files%\PDFCreator\COM Scripts\Ruby\MergedMultipleFiles2Tif.rb
  • %Program Files%\PDFCreator\COM Scripts\Ruby\TestPage2PDF.rb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm.sln
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\COM_TestForm.vbproj
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\Form1.Designer.vb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\Form1.resx
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\Form1.vb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Application.Designer.vb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Application.myapp
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\AssemblyInfo.vb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Resources.Designer.vb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Resources.resx
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Settings.Designer.vb
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\My Project\Settings.settings
  • %Program Files%\PDFCreator\COM Scripts\VB.Net\COM_TestForm\COM_TestForm\app.config
  • %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\COM_TestForm.frm
  • %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\Projekt1.vbp
  • %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\Projekt1.vbw
  • %Program Files%\PDFCreator\COM Scripts\VB6\VB6_COMTest\Readme.txt
  • %Program Files%\PDFCreator\COM Scripts\VBScript\BackgroundPage.vbs
  • %Program Files%\PDFCreator\COM Scripts\VBScript\CoverPage.vbs
  • %Program Files%\PDFCreator\COM Scripts\VBScript\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\VBScript\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\VBScript\JpegSettings.vbs
  • %Program Files%\PDFCreator\COM Scripts\VBScript\MergedMultipleFiles2Tif.vbs
  • %Program Files%\PDFCreator\COM Scripts\VBScript\TestPage2PDF.vbs
  • %Program Files%\PDFCreator\COM Scripts\Word - VBA\FilesForTests\BackgroundPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Word - VBA\FilesForTests\CoverPage.pdf
  • %Program Files%\PDFCreator\COM Scripts\Word - VBA\Testpage2PDF.docm
  • %Program Files%\PDFCreator\DataStorage.dll
  • %Program Files%\PDFCreator\DeleteMonitorDll.exe
  • %Program Files%\PDFCreator\Dropbox.Api.Net40.dll
  • %Program Files%\PDFCreator\Dropbox.dll
  • %Program Files%\PDFCreator\ErrorReport.exe
  • %Program Files%\PDFCreator\Ghostscript\Bin\gsdll32.dll
  • %Program Files%\PDFCreator\Ghostscript\Bin\gsdll32.lib
  • %Program Files%\PDFCreator\Ghostscript\Bin\gswin32c.exe
  • %Program Files%\PDFCreator\Ghostscript\Lib\FAPIconfig-FCO
  • %Program Files%\PDFCreator\Ghostscript\Lib\FCOfontmap-PCLPS3
  • %Program Files%\PDFCreator\Ghostscript\Lib\FCOfontmap-PS3
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.ATB
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.ATM
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.OS2
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.OSF
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.SGI
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.Sol
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.URW-136.T1
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.URW-136.TT
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.Ult
  • %Program Files%\PDFCreator\Ghostscript\Lib\Fontmap.VMS
  • %Program Files%\PDFCreator\Ghostscript\Lib\Info-macos.plist
  • %Program Files%\PDFCreator\Ghostscript\Lib\PDFA_def.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\PDFX_def.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\acctest.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\afmdiff.awk
  • %Program Files%\PDFCreator\Ghostscript\Lib\align.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8.rpd
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8gc12f.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8hg12f.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8oh06n.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8pa06n.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8pp12f.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bj8ts06n.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a0.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a1.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a2.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a3.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a4.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a5.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a6.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a7.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610a8.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b1.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b2.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b3.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b4.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b6.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b7.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\bjc610b8.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\caption.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\cat.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\cbjc600.ppd
  • %Program Files%\PDFCreator\Ghostscript\Lib\cbjc800.ppd
  • %Program Files%\PDFCreator\Ghostscript\Lib\cdj550.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\cdj690.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\cdj690ec.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\cid2code.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\cidfmap
  • %Program Files%\PDFCreator\Ghostscript\Lib\dnj750c.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\dnj750m.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\docie.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\dvipdf
  • %Program Files%\PDFCreator\Ghostscript\Lib\eps2eps.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\eps2eps.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\eps2eps
  • %Program Files%\PDFCreator\Ghostscript\Lib\font2pcl.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\ghostpdf.README
  • %Program Files%\PDFCreator\Ghostscript\Lib\ghostpdf.cat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ghostpdf.inf
  • %Program Files%\PDFCreator\Ghostscript\Lib\ghostpdf.ppd
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_ce_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_cmdl.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_il2_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_kanji.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_ksb_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_l.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_l.xpm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_l_m.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_lgo_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_lgx_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_m.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_m.xpm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_m_m.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_s.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_s.xpm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_s_m.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_t.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_t.xpm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_t_m.xbm
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_wl1_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_wl2_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gs_wl5_e.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsbj.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsbj
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsdj.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsdj500.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsdj500
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsdj
  • %Program Files%\PDFCreator\Ghostscript\Lib\gslj.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gslj
  • %Program Files%\PDFCreator\Ghostscript\Lib\gslp.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gslp.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gslp
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsnd.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsnd
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsndt.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gsnup.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\gssetgs.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gssetgs32.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gssetgs64.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gst.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\gstt.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ht_ccsto.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\image-qa.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\jispaper.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\jobseparator.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\landscap.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\lines.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\lp386.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\lp386r2.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\lpgs.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\lpr2.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\lprsetup.sh
  • %Program Files%\PDFCreator\Ghostscript\Lib\mkcidfm.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\necp2x.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\necp2x6.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\pdf2dsc.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\pdf2dsc.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\pdf2dsc
  • %Program Files%\PDFCreator\Ghostscript\Lib\pdf2ps.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\pdf2ps.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\pdf2ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\pf2afm.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\pf2afm.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\pf2afm.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\pf2afm
  • %Program Files%\PDFCreator\Ghostscript\Lib\pfbtopfa.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\pfbtopfa.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\pfbtopfa
  • %Program Files%\PDFCreator\Ghostscript\Lib\ppath.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\pphs.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\pphs
  • %Program Files%\PDFCreator\Ghostscript\Lib\prfont.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\printafm.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\printafm
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ai.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ascii.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ascii.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ascii
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2epsi.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2epsi.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2epsi.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2epsi
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf12.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf12.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf12
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf13.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf13.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf13
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf14.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf14.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf14
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdf
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdfwr
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2pdfxx.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps2.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps2.cmd
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps2
  • %Program Files%\PDFCreator\Ghostscript\Lib\ps2ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\ras1.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\ras24.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\ras3.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\ras32.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\ras4.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\ras8m.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\rinkj-2200-setup
  • %Program Files%\PDFCreator\Ghostscript\Lib\rollconv.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\st640ih.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\st640ihg.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\st640p.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\st640pg.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\st640pl.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\st640plg.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc1520h.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc2.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc200_h.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc2_h.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc2s_h.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc300.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc300bl.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc300bm.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc500p.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc500ph.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc600ih.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc600p.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc600pl.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc640p.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc800ih.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc800p.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc800pl.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc_h.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stc_l.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stcany.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stcany_h.upp
  • %Program Files%\PDFCreator\Ghostscript\Lib\stcinfo.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\stcolor.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\stocht.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\traceimg.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\traceop.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\uninfo.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\unix-lpr.sh
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewcmyk.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewgif.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewjpeg.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewmiff.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewpbm.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewpcx.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewps2a.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewraw.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\viewrgb.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\winmaps.ps
  • %Program Files%\PDFCreator\Ghostscript\Lib\wmakebat.bat
  • %Program Files%\PDFCreator\Ghostscript\Lib\zeroline.ps
  • %Program Files%\PDFCreator\GongSolutions.WPF.DragDrop.dll
  • %Program Files%\PDFCreator\HtmlAgilityPack.dll
  • %Program Files%\PDFCreator\ITextProcessing.dll
  • %Program Files%\PDFCreator\Languages\ca\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\co-FR\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\cs\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\da\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\de\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\el\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\es\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\fa\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\fi\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\fr\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\ga\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\innosetup.pot
  • %Program Files%\PDFCreator\Languages\it\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\lt\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\messages.pot
  • %Program Files%\PDFCreator\Languages\nl\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\pl\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\pt-BR\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\ro\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\ru\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\sk\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\sl\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\sv\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\zh-HANS\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\Languages\zh-HANT\LC_MESSAGES\messages.mo
  • %Program Files%\PDFCreator\LicenseValidator.Interface.dll
  • %Program Files%\PDFCreator\LicenseValidator.dll
  • %Program Files%\PDFCreator\MahApps.Metro.SimpleChildWindow.dll
  • %Program Files%\PDFCreator\MahApps.Metro.dll
  • %Program Files%\PDFCreator\Microsoft.Practices.ServiceLocation.dll
  • %Program Files%\PDFCreator\NGettext.dll
  • %Program Files%\PDFCreator\NLog.dll
  • %Program Files%\PDFCreator\Newtonsoft.Json.dll
  • %Program Files%\PDFCreator\Obsidian.dll
  • %Program Files%\PDFCreator\Optional.dll
  • %Program Files%\PDFCreator\PDFCreator.Actions.dll
  • %Program Files%\PDFCreator\PDFCreator.ActionsInterface.dll
  • %Program Files%\PDFCreator\PDFCreator.COM.dll
  • %Program Files%\PDFCreator\PDFCreator.ComImplementation.dll
  • %Program Files%\PDFCreator\PDFCreator.ComWrapper.dll
  • %Program Files%\PDFCreator\PDFCreator.Communication.dll
  • %Program Files%\PDFCreator\PDFCreator.Controller.dll
  • %Program Files%\PDFCreator\PDFCreator.ConverterInterface.dll
  • %Program Files%\PDFCreator\PDFCreator.DirectConversion.dll
  • %Program Files%\PDFCreator\PDFCreator.EditionBase.dll
  • %Program Files%\PDFCreator\PDFCreator.Ghostscript.dll
  • %Program Files%\PDFCreator\PDFCreator.Interactions.dll
  • %Program Files%\PDFCreator\PDFCreator.Jobs.dll
  • %Program Files%\PDFCreator\PDFCreator.Presentation.dll
  • %Program Files%\PDFCreator\PDFCreator.Printing.dll
  • %Program Files%\PDFCreator\PDFCreator.Services.dll
  • %Program Files%\PDFCreator\PDFCreator.Settings.dll
  • %Program Files%\PDFCreator\PDFCreator.SettingsManagement.dll
  • %Program Files%\PDFCreator\PDFCreator.Startup.dll
  • %Program Files%\PDFCreator\PDFCreator.StartupInterface.dll
  • %Program Files%\PDFCreator\PDFCreator.Utilities.dll
  • %Program Files%\PDFCreator\PDFCreator.Workflow.dll
  • %Program Files%\PDFCreator\PDFCreator.exe
  • %Program Files%\PDFCreator\PDFCreatorShell.dll
  • %Program Files%\PDFCreator\PDFCreator_english.chm
  • %Program Files%\PDFCreator\PDFCreator_german.chm
  • %Program Files%\PDFCreator\PayPal.ico
  • %Program Files%\PDFCreator\PdfProcessingInterface.dll
  • %Program Files%\PDFCreator\PrinterHelper.exe
  • %Program Files%\PDFCreator\Prism.Wpf.dll
  • %Program Files%\PDFCreator\Prism.dll
  • %Program Files%\PDFCreator\PropertyChanged.dll
  • %Program Files%\PDFCreator\PsParser.dll
  • %Program Files%\PDFCreator\RepairFolderPermissions.exe
  • %Program Files%\PDFCreator\SetupHelper.exe
  • %Program Files%\PDFCreator\SimpleInjector.dll
  • %Program Files%\PDFCreator\System.Net.Http.Extensions.dll
  • %Program Files%\PDFCreator\System.Net.Http.Primitives.dll
  • %Program Files%\PDFCreator\System.Windows.Interactivity.dll
  • %Program Files%\PDFCreator\SystemInterface.dll
  • %Program Files%\PDFCreator\SystemWrapper.dll
  • %Program Files%\PDFCreator\Tartaros.dll
  • %Program Files%\PDFCreator\ToastNotifications.Messages.dll
  • %Program Files%\PDFCreator\ToastNotifications.dll
  • %Program Files%\PDFCreator\Translatable.NGettext.dll
  • %Program Files%\PDFCreator\Translatable.dll
  • %Program Files%\PDFCreator\TrueTypeFontInfo.dll
  • %Program Files%\PDFCreator\ftplib.dll
  • %Program Files%\PDFCreator\itextsharp.dll
  • %Program Files%\PDFCreator\pdfforge.Communication.dll
  • %Program Files%\PDFCreator\pdfforge.Mail.dll
  • %Program Files%\PDFCreator\pdfforge.ico
  • %Program Files%\PDFCreator\unins000.exe
  • %Program Data%\Lavasoft\Web Companion\Options\EventSafeguard.bkp
  • %AppDataLocal%\Lavasoft\WebCompanion.exe_Url_f5db2c2eotb405zbclgx4obr3tgwdj1t\4.3.1917.3743\user.config
  • %AppDataLocal%\Temp\Setup Log 2018-09-11 #001.txt
  • %AppDataLocal%\Temp\is-5E0BM.tmp\1.tmp
  • %AppDataLocal%\Temp\is-6SAD5.tmp\DownloadUpdateInfo.exe
  • %AppDataLocal%\Temp\is-6SAD5.tmp\PDFArchitectAd2_English.bmp
  • %AppDataLocal%\Temp\is-6SAD5.tmp\idp.dll
  • %AppDataLocal%\Temp\is-6SAD5.tmp\lsop.exe
  • %AppDataLocal%\Temp\is-6SAD5.tmp\update-info.txt
  • %AppDataLocal%\Temp\is-DLRV2.tmp\_isetup\_shfoldr.dll
  • %AppDataLocal%\Temp\is-DLRV2.tmp\idp.dll
  • %AppDataLocal%\Temp\is-H5BVT.tmp\DownloadUpdateInfo.tmp
  • %Application Data%Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
  • %Windows%\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.944.1110664
  • %Windows%\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch
  • %Windows%\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.944.1110664
  • %Windows%\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch

手順 6

最新のバージョン(エンジン、パターンファイル)を導入したウイルス対策製品を用い、ウイルス検索を実行してください。「PUA_BILDDOWNLOADER.GA」と検出したファイルはすべて削除してください。 検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。


ご利用はいかがでしたか? アンケートにご協力ください