Home Malware Programs Potentially Unwanted Programs (PUPs) PDFConverterHQ Toolbar

PDFConverterHQ Toolbar

Posted: November 22, 2015

Threat Metric

Ranking: 585
Threat Level: 1/10
Infected PCs: 445,514
First Seen: November 22, 2015
Last Seen: March 10, 2025
OS(es) Affected: Windows


The PDFConverterHQ is another toolbar by the questionable software developer Mindspark. Just like the majority of products that this company makes, the PDFConverterHQ is a Potentially Unwanted Program (PUP) that may have adverse consequences for your smooth surfing sessions. The problem with this suspicious application is that it may place additional ads in the sites you open. They may come in large quantities, which may distract and annoy the PC user. Wherever you go, you may notice aggressive pop-ups, banners, animations and videos. The PUP also may create in-text ads, which are hyperlinked words in the text. This questionable toolbar doesn't have a functioning official page, which is the main difference between it and the other PUPs by Mindspark.

You may be encouraged to load the PDFConverterHQ Toolbar by third-party freeware. This program promises to let the clients convert .doc files to .pdf files and vice versa. However, since it may change the performance of Google Chrome, Mozilla Firefox and Internet Explorer substantially, the experts suggest finding alternative software for the task. The persistence of the ads may even affect your browser from a technical point of view. The Web clients may start loading the pages too slowly due to multimedia ads, which may seize a lot of resources. You may notice that the offered vouchers, discounts, and coupons become more and more accurate. The PUP may monitor your surfing history to get to know your interests. It will be best if you ignore the commercial materials for security reasons because the legitimacy of the partners is unverified. You may encounter complications if you try to delete the PDFConverterHQ Toolbar manually, so you should perform its removal process with a powerful anti-malware application.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{0090C9D5-D952-4D5B-AB0D-02D7A9863F7E}{057c9ca6-4498-4529-a296-3ffffbeada1b}{09EC6DC8-A68C-46BE-BDF7-0FA35E05FF1B}{136af8e8-5bb0-4ced-a40c-1c41d7366d1a}{19987381-0acf-4db3-ad83-9876e7318f5c}{21b21364-a65c-4758-9235-c5bf95f2a2f4}{2B01ED88-5307-4E9A-97F9-43949A90B209}{2f4c81a1-e548-401b-b637-f2792ed34671}{34D6E146-87A0-4E74-A662-744AAB83992C}{3D2EEE50-BC20-4FD1-9B0C-96F00B125B74}{3d9c838e-60a3-4b16-95b6-50bc3a0f0c6e}{447A3817-3E8B-453C-B692-B69C3D5449A5}{44D3E86C-C0E6-4063-9D2E-0D56EFE918AA}{45A84A14-63E8-45B2-8BBD-6CC00232C90B}{4956C817-3BFC-4AAD-A937-ABB6071AA76B}{4af48f55-0dbb-4fe8-9a64-15925ea2309b}{4fd4d784-541c-4bb1-8bc3-51b0d745e8c6}{5072E0C6-4EB9-41A4-9360-E2173A53B01B}{556D9D82-A8AF-41B9-BAE5-7D2B0A89F852}{57FB1618-84D1-40C2-A040-D75DC2D0EAB2}{61613E56-1FBE-4662-842E-937529E41B26}{6836F64E-9520-46BC-AC93-143D3EE3D024}{77880D71-1DF5-4275-BC0F-F956C0A69F50}{7d7e39b9-4174-448f-b511-75fddcca282c}{809530F9-80E8-449B-BFDB-5CFCC5FFA24E}{87ad1579-4322-4341-a38c-439f553d807a}{880F1A96-68B6-47DE-A165-CB2A7ADBE03C}{8C6677BD-D303-4FF5-B93A-2558EC4B3239}{9484FF10-3F38-48DE-B44B-B2A308F0BA7F}{b13b7235-3b07-433c-bed1-e11e0d120edc}{B63A88F5-ADEF-48AE-9CFF-8DB702AB96A8}{B9CB64E3-B4CB-4547-B5E8-CE5D0D028FA4}{CDC0F676-53E8-4A7F-B46C-257904D0556A}{CF07BF64-A34D-42D2-9898-9EFF1B2789C3}{D92CAB18-441F-46E7-A95A-8EC57B58B9FA}{E26961A0-B762-45CE-9C44-901893FB9FD4}{E6E12ECD-80F8-4C2A-8BD4-FF1E1F1B35E0}{ED4025DF-B46D-4079-929F-677260137980}{F2B5F72C-C8D3-48D4-B71F-524D4818241A}{fade173a-c29b-4adf-9003-e647fe1a13d1}File name without pathhttp_pdfconverterhq.dl.myway.com_0.localstoragehttp_pdfconverterhq.dl.myway.com_0.localstorage-journalhttp_pdfconverterhq.dl.tb.ask.com_0.localstoragehttp_pdfconverterhq.dl.tb.ask.com_0.localstorage-journalpdfconverterhq.dl.myway[1].xmlpdfconverterhq.dl.tb.ask[1].xmlHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\PDFConverterHQ_fsSoftware\Microsoft\Internet Explorer\Approved Extensions\{19987381-0ACF-4DB3-AD83-9876E7318F5C}Software\Microsoft\Internet Explorer\Approved Extensions\{21B21364-A65C-4758-9235-C5BF95F2A2F4}Software\Microsoft\Internet Explorer\Approved Extensions\{FADE173A-C29B-4ADF-9003-E647FE1A13D1}Software\Microsoft\Internet Explorer\DOMStorage\pdfconverterhq.dl.myway.comSoftware\Microsoft\Internet Explorer\DOMStorage\pdfconverterhq.dl.tb.ask.comSOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pdfconverterhq.dl.tb.ask.comSoftware\Microsoft\Internet Explorer\SearchScopes\{bba6af07-0e2d-46e5-a25f-87179a57aa50}Software\PDFConverterHQSoftware\PDFConverterHQ_fsSOFTWARE\Wow6432Node\PDFConverterHQ_fsHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}PDFConverterHQ_fsbar Uninstall Internet ExplorerPDFConverterHQTooltab Uninstall Internet Explorer

Additional Information

The following directories were created:
%LOCALAPPDATA%\PDFConverterHQTooltab%LOCALAPPDATA%\PDFConverterHQ_fs%PROGRAMFILES%\PDFConverterHQ_fs%PROGRAMFILES(x86)%\PDFConverterHQ_fs%USERPROFILE%\AppData\LocalLow\PDFConverterHQ_fs%UserProfile%\Local Settings\Application Data\PDFConverterHQTooltab
The following URL's were detected:
pdfconverterhub.com
Loading...