|Type||PUP, Browser Hijacker|
|Short Description||The toolbar is developed by Mindspark Interactive and has been detected as suspicious.|
|Symptoms||The browser’s settings are changed, malicious processes are activated.|
|Distribution Method||Bundling, from its official website, other pages.|
|Detection tool||Download Malware Removal Tool, to See If Your System Has Been Affected By FromDocToPDF Toolbar|
There are multiple browser toolbars and desktop applications that offer to convert various types of files to PDF for free. However, many of those free programs and services turn out to be ad-supported and troublesome to the user. They may even be installed on the PC without the user’s consent – via bundled installers. FromDocToPDF toolbar by MindSpark Interactive Network and ASK.com has been detected as suspicious by several AV solutions.
FromDocToPDF Toolbar Description
The installer stub for FromDocToPDF toolbar offers to install the toolbar and change the browser’s search page, home page and new tab page to ask.com or mywebsearch.com. The user has the opportunity to un-check the options:]
Such changes to the browser’s default settings are typical for the so-called browser hijackers – a type of unwanted software typically installed through bundling and freeware installers. Also, Mindspark Interactive Network is a well-known developer and distributor of ad-supported software.
FromDocToPDF Suspicious Process Detected
Multiple anti-spyware programs have detected the fromdoctopdf.16934abef2944331812be03591a21418.exe version as potentially unwanted. The program is described as a setup application that employs the Nullsoft Scriptable Install System (also known as NSIS installer).
Here is a list of some of the AV detections for FromDocToPDF:
- Win32:Mindspark-A [PUP] (Avast)
- Adware.MyWebSearch.103 (Dr. Web)
- Win32/Toolbar.MyWebSearch.AV potentially unwanted (ESET NOD32)
- not-a-virus:WebToolbar.Win32.MyWebSearch (Kaspersky)
- PUP.Optional.MindSpark (MalwareBytes)
- PUP.Mindspark.MindsparkInteractiveNetwork.Installer (M) (Reason Heuristics)
According to security research, the fromdoctopdf.16934abef2944331812be03591a21418 version is bundled with MyWebSearch Toolbar – another infamous, potentially unwanted extension that has affected tons of computers.
Malware has been detected in several other files dropped by the toolbar:
Why is the Program Threatening?
Research indicates that, during the setup process, the program creates a startup registration point in Windows to automatically start each time the PC is booted. The program adds a toolbar to Microsoft Internet Explorer. Its primary executable is 65Bar.dll. However, the program package may drop more than 40 files on the system.
Shortly said, there are several reasons that point to the immediate uninstallation of the program:
- Malware is detected in the program (a list is provided above).
- It starts automatically with the system.
- It places itself in the browser.
- It modifies the browser’s settings.
FromDocToPDF Removal Options
The toolbar can be uninstalled from the browser. However, bundling may have let more unwanted software into the system. One example is the MyWebSearch.
As we have already reported, tb_mywebsearch.exe is the main process that belongs to the MyWebSearch toolbar, which is powered by Conduit. The process has been flagged by several anti-malware programs as potentially unwanted.
To completely clean the system, the user may have to uninstall MyWebSearch and Conduit, along with the FromDocToPDF toolbar.
After uninstalling any located suspicious software, scanning the system is required. Browser hijackers and adware are known to increase the system’s vulnerability to malicious threats. Refer to the STF removal manual below the article.
Step 1: Remove/Uninstall FromDocToPDF Toolbar in Windows
Here is a method in few easy steps to remove that program. No matter if you are using Windows 8, 7, Vista or XP, those steps will get the job done. Dragging the program or its folder to the recycle bin can be a very bad decision. If you do that, bits and pieces of the program get left behind, and that can lead to unstable work of your PC, mistakes with the file type associations and other unpleasant activities. The proper way to get a program off your computer is to Uninstall it.
Select the program that you want to remove, and press “Uninstall” (fig.3).
Follow the instructions above and you will successfully uninstall FromDocToPDF Toolbar.
Step 2: Remove FromDocToPDF Toolbar from your browser
Select the “Add-ons” icon from the menu
Select FromDocToPDF Toolbar and click “Remove”
After FromDocToPDF Toolbar is removed, restart Mozilla Firefox by closing it from the red “X” in the top right corner and start it again.
Select FromDocToPDF Toolbar to remove, and then click ‘Disable’. A pop-up window will appear to inform you that you are about to disable the selected toolbar, and some additional toolbars might be disabled as well. Leave all the boxes checked, and click ‘Disable’.
After FromDocToPDF Toolbar has been removed, restart Internet Explorer by closing it from the red ‘X’ in the top right corner and start it again.
From the drop menu select ‘Preferences’
In the new window select ‘Extensions’
Click once on FromDocToPDF Toolbar
A pop-up window will appear asking for confirmation to uninstall FromDocToPDF Toolbar. Select ‘Uninstall’ again, and the FromDocToPDF Toolbar will be removed.
In order to remove any associated objects that are left after uninstall and detect any other threats, you should:
Step 3: Start Your PC in Safe Mode to Remove FromDocToPDF Toolbar.
Removing FromDocToPDF Toolbar from Windows XP, Vista, 7 systems:
1. Remove all CDs and DVDs, and then Restart your PC from the “Start” menu.
– For PCs with a single operating system: Press “F8” repeatedly after the first boot screen shows up during the restart of your computer. In case the Windows logo appears on the screen, you have to repeat the same task again.
– For PCs with multiple operating systems: Тhe arrow keys will help you select the operating system you prefer to start in Safe Mode. Press “F8” just as described for a single operating system.
3. As the “Advanced Boot Options” screen appears, select the Safe Mode option you want using the arrow keys. As you make your selection, press “Enter“.
4. Log on to your computer using your administrator account
While your computer is in Safe Mode, the words “Safe Mode” will appear in all four corners of your screen.
Removing FromDocToPDF Toolbar from Windows 8, 8.1 and 10 systems:
Whilst holding down Shift button, click on Power and then click on Restart.
A menu will appear upon reboot. You should choose Safe Mode by pressing its corresponding number and the machine will restart and boot into Safe Mode so you can scan for and remove FromDocToPDF Toolbar.
Step 4: Remove FromDocToPDF Toolbar automatically by downloading an advanced anti-malware program.
To clean your computer you should download an updated anti-malware program on a safe PC and then install it on the affected computer in offline mode. After that you should boot into safe mode and scan your computer to remove all FromDocToPDF Toolbar associated objects.