ALIASES:

WebToolbar.Win32.MyWebSearch.sy (Kaspersky); MyWebSearch.J (v) (not malicious) (Sunbelt)

 PLATFORM:

Windows

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

  TECHNICAL DETAILS

File Size: 5,822,856 bytes
File Type: EXE
Memory Resident: Yes
Initial Samples Received Date: 05 May 2015

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This Trojan creates the following folders:

  • %Program Files%\Allin1Convert_8h
  • %Program Files%\Allin1Convert_8h\bar
  • %Program Files%\Allin1Convert_8h\bar\1.bin
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_default_search_provider
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_enable
  • %Program Files%\Allin1Convert_8h\bar\1.bin\chrome
  • %Program Files%\Allin1Convert_8h\bar\Message
  • %Program Files%\Allin1Convert_8h\bar\gen1
  • %Program Files%\Allin1Convert_8h\bar\assists
  • %Program Files%\Allin1Convert_8h\bar\Settings
  • %Program Files%\Allin1Convert_8h\bar\1.bin\ThirdPartyInstallers

(Note: %Program Files% is the Program Files folder, where it usually is C:\Program Files on all Windows operating system versions; C:\Program Files (x86) for 32-bit applications running on Windows 64-bit operating systems.)

Autostart Technique

This Trojan adds the following registry entries to enable its automatic execution at every system startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
Allin1Convert AppIntegrator 32-bit = "%Program Files%\ALLIN1~1\bar\1.bin\AppIntegrator.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
Allin1Convert = "rundll32 %Program Files%\ALLIN1~1\bar\1.bin\8hbar.dll,S"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
Allin1Convert Search Scope Monitor = "%Program Files%\ALLIN1~1\bar\1.bin\8hsrchmn.exe /m=2 /w /h"

It registers itself as a BHO to ensure its automatic execution every time Internet Explorer is used by adding the following registry keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
Browser Helper Objects\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
Browser Helper Objects\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}

Other System Modifications

This Trojan deletes the following files:

  • %Program Files%\Internet Explorer\msimg32.dll

(Note: %Program Files% is the Program Files folder, where it usually is C:\Program Files on all Windows operating system versions; C:\Program Files (x86) for 32-bit applications running on Windows 64-bit operating systems.)

It adds the following registry keys:

HKEY_LOCAL_MACHINE\Software\Allin1Convert_8h\
bar

HKEY_CURRENT_USER\Software\Allin1Convert_8h\
Events\EventData

HKEY_LOCAL_MACHINE\Software\Allin1Convert_8h\
bar\Switches

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar\Integrators

HKEY_CLASSES_ROOT\Allin1Convert_8h.ToolbarProtector.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.ToolbarProtector.1\CLSID

HKEY_CLASSES_ROOT\Allin1Convert_8h.ToolbarProtector

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.ToolbarProtector\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.ToolbarProtector\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{BB644C1C-BDFC-4390-8BCF-8E864D1859E6}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{BB644C1C-BDFC-4390-8BCF-8E864D1859E6}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{BB644C1C-BDFC-4390-8BCF-8E864D1859E6}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{BB644C1C-BDFC-4390-8BCF-8E864D1859E6}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4E089F3E-F5E1-4759-AF16-E7EBE24CAA9C}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4E089F3E-F5E1-4759-AF16-E7EBE24CAA9C}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4E089F3E-F5E1-4759-AF16-E7EBE24CAA9C}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4E089F3E-F5E1-4759-AF16-E7EBE24CAA9C}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4CE34BDA-95CD-431D-AA32-0FF7589C0376}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4CE34BDA-95CD-431D-AA32-0FF7589C0376}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4CE34BDA-95CD-431D-AA32-0FF7589C0376}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4CE34BDA-95CD-431D-AA32-0FF7589C0376}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5D5D5550-534F-4854-B461-3B40D759EA72}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5D5D5550-534F-4854-B461-3B40D759EA72}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5D5D5550-534F-4854-B461-3B40D759EA72}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5D5D5550-534F-4854-B461-3B40D759EA72}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{21B4FA2D-3459-44D1-A855-D8BC0378E9D2}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{21B4FA2D-3459-44D1-A855-D8BC0378E9D2}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{21B4FA2D-3459-44D1-A855-D8BC0378E9D2}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{21B4FA2D-3459-44D1-A855-D8BC0378E9D2}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1CE5ABBD-42D7-4EEE-BBD6-33E76D912ECD}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1CE5ABBD-42D7-4EEE-BBD6-33E76D912ECD}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1CE5ABBD-42D7-4EEE-BBD6-33E76D912ECD}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1CE5ABBD-42D7-4EEE-BBD6-33E76D912ECD}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{289211A5-2A74-454B-9F1F-FA9A8D9CD6D8}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{289211A5-2A74-454B-9F1F-FA9A8D9CD6D8}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{289211A5-2A74-454B-9F1F-FA9A8D9CD6D8}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{289211A5-2A74-454B-9F1F-FA9A8D9CD6D8}\TypeLib

HKEY_CLASSES_ROOT\Allin1Convert_8h.FeedManager.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.FeedManager.1\CLSID

HKEY_CLASSES_ROOT\Allin1Convert_8h.FeedManager

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.FeedManager\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.FeedManager\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\Control

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\MiscStatus

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\MiscStatus\
1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\Version

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{DC86010C-7F30-485D-85D4-0957ECA323DD}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{DC86010C-7F30-485D-85D4-0957ECA323DD}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{DC86010C-7F30-485D-85D4-0957ECA323DD}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{DC86010C-7F30-485D-85D4-0957ECA323DD}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2CFC7EED-36BA-4374-8D29-92895D942F6C}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2CFC7EED-36BA-4374-8D29-92895D942F6C}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2CFC7EED-36BA-4374-8D29-92895D942F6C}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2CFC7EED-36BA-4374-8D29-92895D942F6C}\TypeLib

HKEY_CLASSES_ROOT\Allin1Convert_8h.HTMLPanel.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.HTMLPanel.1\CLSID

HKEY_CLASSES_ROOT\Allin1Convert_8h.HTMLPanel

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.HTMLPanel\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.HTMLPanel\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\Control

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\MiscStatus

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\MiscStatus\
1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\Version

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Ext

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Ext\
PreApproved

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Ext\
PreApproved\{e4ef697f-434b-4dc7-a464-4412462206db}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B992BF10-B9DF-413D-BFBE-0DAED5BF0ABC}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B992BF10-B9DF-413D-BFBE-0DAED5BF0ABC}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B992BF10-B9DF-413D-BFBE-0DAED5BF0ABC}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B992BF10-B9DF-413D-BFBE-0DAED5BF0ABC}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B0602473-26E3-425F-A819-D8651D6D83A8}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B0602473-26E3-425F-A819-D8651D6D83A8}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B0602473-26E3-425F-A819-D8651D6D83A8}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B0602473-26E3-425F-A819-D8651D6D83A8}\TypeLib

HKEY_CLASSES_ROOT\CLSID\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}

HKEY_CLASSES_ROOT\CLSID\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}\
InprocServer32

HKEY_CLASSES_ROOT\CLSID\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}\
ProgID

HKEY_CLASSES_ROOT\CLSID\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}\
VersionIndependentProgID

HKEY_CLASSES_ROOT\Allin1Convert_8h.HTMLMenu.1

HKEY_CLASSES_ROOT\Allin1Convert_8h.HTMLMenu.1\CLSID

HKEY_CLASSES_ROOT\Allin1Convert_8h.HTMLMenu

HKEY_CLASSES_ROOT\Allin1Convert_8h.HTMLMenu\CLSID

HKEY_CLASSES_ROOT\Allin1Convert_8h.HTMLMenu\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Ext\
PreApproved\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F11B9E79-0F7B-4C8B-B507-F06982497901}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F11B9E79-0F7B-4C8B-B507-F06982497901}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F11B9E79-0F7B-4C8B-B507-F06982497901}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F11B9E79-0F7B-4C8B-B507-F06982497901}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3E698E62-9516-4670-AD6C-DC58181BC9F8}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3E698E62-9516-4670-AD6C-DC58181BC9F8}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3E698E62-9516-4670-AD6C-DC58181BC9F8}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3E698E62-9516-4670-AD6C-DC58181BC9F8}\TypeLib

HKEY_LOCAL_MACHINE\Software\Allin1Convert_8h\
Settings\SmileyCentralBtn

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{EA3743AC-948C-4E65-A61F-10EDA13D79CA}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{EA3743AC-948C-4E65-A61F-10EDA13D79CA}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{EA3743AC-948C-4E65-A61F-10EDA13D79CA}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{EA3743AC-948C-4E65-A61F-10EDA13D79CA}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5D076356-28C1-43B2-B29B-1AAE8D518E83}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5D076356-28C1-43B2-B29B-1AAE8D518E83}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5D076356-28C1-43B2-B29B-1AAE8D518E83}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5D076356-28C1-43B2-B29B-1AAE8D518E83}\TypeLib

HKEY_CLASSES_ROOT\Allin1Convert_8h.MultipleButton.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.MultipleButton.1\CLSID

HKEY_CLASSES_ROOT\Allin1Convert_8h.MultipleButton

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.MultipleButton\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.MultipleButton\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Allin1Convert_8hbar Uninstall Firefox

HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\
@Allin1Convert_8h.com/Plugin

HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\
@Allin1Convert_8h.com/Plugin\MimeTypes

HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\
@Allin1Convert_8h.com/Plugin\MimeTypes\application/x-allin1convert_8hplugin

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Allin1Convert_8hbar Uninstall Internet Explorer

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{88e44198-d164-4ec0-b2c0-f679d866c6da}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{6c5561b6-3dd2-46b5-83be-eae744366046}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{5e58cda9-3b21-4611-a859-26ee28950e61}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{f671c1b3-9776-426d-a350-55fb2d9b53f7}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{6874fade-02c8-4181-831a-fc7486cf1d74}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_CLASSES_ROOT\Allin1Convert_8h.ScriptButton.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.ScriptButton.1\CLSID

HKEY_CLASSES_ROOT\Allin1Convert_8h.ScriptButton

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.ScriptButton\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.ScriptButton\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_USERS\S-1-5-19_Classes\Software\
Microsoft\Windows\CurrentVersion\
Run

HKEY_USERS\S-1-5-20_Classes\Software\
Microsoft\Windows\CurrentVersion\
Run

HKEY_USERS\S-1-5-21-1645522239-1292428093-682003330-1003_Classes\Software\
Microsoft\Windows\CurrentVersion\
Run

HKEY_CLASSES_ROOT\Allin1Convert_8h.PseudoTransparentPlugin.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.PseudoTransparentPlugin.1\CLSID

HKEY_CLASSES_ROOT\Allin1Convert_8h.PseudoTransparentPlugin

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.PseudoTransparentPlugin\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.PseudoTransparentPlugin\CurVer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\Control

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\MiscStatus

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\MiscStatus\
1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\Version

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Ext\
PreApproved\{27f49273-de3a-4111-90f9-6c474c37aefb}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}\Control

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}\MiscStatus

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}\MiscStatus\
1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}\Version

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
SkinTools

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{248b3e95-17a4-482d-a8a8-6b3df4d05c35}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\Control

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\MiscStatus

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\MiscStatus\
1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\Version

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{774BFD7A-2CE7-4785-8957-2D62F7F4A83C}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{774BFD7A-2CE7-4785-8957-2D62F7F4A83C}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{774BFD7A-2CE7-4785-8957-2D62F7F4A83C}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{774BFD7A-2CE7-4785-8957-2D62F7F4A83C}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{45A28B99-6C20-441D-9D4D-F7EC7C701F6C}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{45A28B99-6C20-441D-9D4D-F7EC7C701F6C}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{45A28B99-6C20-441D-9D4D-F7EC7C701F6C}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{45A28B99-6C20-441D-9D4D-F7EC7C701F6C}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{43E76D04-EB5C-4D74-A11D-7403BAFE540B}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{43E76D04-EB5C-4D74-A11D-7403BAFE540B}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{43E76D04-EB5C-4D74-A11D-7403BAFE540B}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{43E76D04-EB5C-4D74-A11D-7403BAFE540B}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B1339BE3-9E4D-49D4-97F2-E4220530F65C}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B1339BE3-9E4D-49D4-97F2-E4220530F65C}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B1339BE3-9E4D-49D4-97F2-E4220530F65C}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B1339BE3-9E4D-49D4-97F2-E4220530F65C}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_CURRENT_USER\CLSID

HKEY_CURRENT_USER\CLSID\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}

HKEY_CURRENT_USER\CLSID\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}\
Programmable

HKEY_CURRENT_USER\CLSID\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}\
InprocServer32

HKEY_CURRENT_USER\CLSID\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}\
Implemented Categories

HKEY_CURRENT_USER\CLSID\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}\
Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_CLASSES_ROOT\Allin1Convert_8h.ThirdPartyInstaller.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.ThirdPartyInstaller.1\CLSID

HKEY_CLASSES_ROOT\Allin1Convert_8h.ThirdPartyInstaller

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.ThirdPartyInstaller\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.ThirdPartyInstaller\CurVer

HKEY_CURRENT_USER\CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}\Control

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}\MiscStatus

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}\MiscStatus\
1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}\Version

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Ext\
PreApproved\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{164993F7-4D6D-40A5-8FA1-37A8F96B4700}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{164993F7-4D6D-40A5-8FA1-37A8F96B4700}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{164993F7-4D6D-40A5-8FA1-37A8F96B4700}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{164993F7-4D6D-40A5-8FA1-37A8F96B4700}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{13B534D0-49F9-48A9-A006-B2F92E1D01CB}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{13B534D0-49F9-48A9-A006-B2F92E1D01CB}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{13B534D0-49F9-48A9-A006-B2F92E1D01CB}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{13B534D0-49F9-48A9-A006-B2F92E1D01CB}\TypeLib

HKEY_CURRENT_USER\CLSID\{cd1a63ba-a08c-431b-9a34-f240aadc728d}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{cd1a63ba-a08c-431b-9a34-f240aadc728d}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{cd1a63ba-a08c-431b-9a34-f240aadc728d}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{cd1a63ba-a08c-431b-9a34-f240aadc728d}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_CLASSES_ROOT\Allin1Convert_8h.SettingsPlugin.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.SettingsPlugin.1\CLSID

HKEY_CLASSES_ROOT\Allin1Convert_8h.SettingsPlugin

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.SettingsPlugin\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Allin1Convert_8h.SettingsPlugin\CurVer

HKEY_CURRENT_USER\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\Programmable

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\Control

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\MiscStatus

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\MiscStatus\
1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\Version

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\Implemented Categories

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\Implemented Categories\
{59fb2056-d625-48d0-a944-1a85b5ab2640}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Ext\
PreApproved\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{628BA19D-7BED-4C54-8210-AFE66BB15D06}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{628BA19D-7BED-4C54-8210-AFE66BB15D06}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{628BA19D-7BED-4C54-8210-AFE66BB15D06}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{628BA19D-7BED-4C54-8210-AFE66BB15D06}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{6C5561B6-3DD2-46B5-83BE-EAE744366046}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{6C5561B6-3DD2-46B5-83BE-EAE744366046}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{6C5561B6-3DD2-46B5-83BE-EAE744366046}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{6C5561B6-3DD2-46B5-83BE-EAE744366046}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5E58CDA9-3B21-4611-A859-26EE28950E61}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5E58CDA9-3B21-4611-A859-26EE28950E61}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5E58CDA9-3B21-4611-A859-26EE28950E61}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5E58CDA9-3B21-4611-A859-26EE28950E61}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{8077E854-138D-4396-ABB8-44C39E621705}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{8077E854-138D-4396-ABB8-44C39E621705}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{8077E854-138D-4396-ABB8-44C39E621705}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{8077E854-138D-4396-ABB8-44C39E621705}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1E6170F4-3856-40E4-A2EB-2D8FB46574A4}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1E6170F4-3856-40E4-A2EB-2D8FB46574A4}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1E6170F4-3856-40E4-A2EB-2D8FB46574A4}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1E6170F4-3856-40E4-A2EB-2D8FB46574A4}\TypeLib

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1B520A16-E83A-48F9-8802-8F485F24A452}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1B520A16-E83A-48F9-8802-8F485F24A452}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1B520A16-E83A-48F9-8802-8F485F24A452}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1B520A16-E83A-48F9-8802-8F485F24A452}\TypeLib

HKEY_CURRENT_USER\Software\Allin1Convert_8h\
bar\Switches

It adds the following registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
OToIData = "001"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar\Switches
nodns = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar\Switches
ffTabs = "0"

HKEY_CURRENT_USER\Software\Allin1Convert_8h\
Events\EventData
00000000_5 = "{random values}"

HKEY_CURRENT_USER\Software\Allin1Convert_8h\
Events\EventData
00000000_6 = "{random values}"

HKEY_CURRENT_USER\Software\Allin1Convert_8h\
Events\EventData
00000000_7 = "{random values}"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
Maximized = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
Visible = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
pid = "^AYY"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
un = "Allin1Convert"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
InstallingUser = "S-1-5-21-1645522239-1292428093-682003330-1003"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
tiec = "208976"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar\Switches
ok = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar\Switches
od = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar\Switches
nk = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar\Switches
nd = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
lidate = "2015-04-02T08:54:31Z"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
hpwl = ".mywebsearch.com,.google.com,.yahoo.com,.bing.com,.msn.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
Dir = "%Program Files%\Allin1Convert_8h\bar"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
DeletedCustomizations = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{BB644C1C-BDFC-4390-8BCF-8E864D1859E6}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4E089F3E-F5E1-4759-AF16-E7EBE24CAA9C}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4CE34BDA-95CD-431D-AA32-0FF7589C0376}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5D5D5550-534F-4854-B461-3B40D759EA72}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{21B4FA2D-3459-44D1-A855-D8BC0378E9D2}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1CE5ABBD-42D7-4EEE-BBD6-33E76D912ECD}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{289211A5-2A74-454B-9F1F-FA9A8D9CD6D8}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{DC86010C-7F30-485D-85D4-0957ECA323DD}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2CFC7EED-36BA-4374-8D29-92895D942F6C}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Main\FeatureControl\
FEATURE_BROWSER_EMULATION
CrExtP8h.exe = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B992BF10-B9DF-413D-BFBE-0DAED5BF0ABC}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B0602473-26E3-425F-A819-D8651D6D83A8}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F11B9E79-0F7B-4C8B-B507-F06982497901}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3E698E62-9516-4670-AD6C-DC58181BC9F8}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
Settings\SmileyCentralBtn
HTMLMenuPosDeleted = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{EA3743AC-948C-4E65-A61F-10EDA13D79CA}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5D076356-28C1-43B2-B29B-1AAE8D518E83}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Allin1Convert_8hbar Uninstall Firefox
UninstallString = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\
@Allin1Convert_8h.com/Plugin
Description = "Allin1Convert Plugin"

HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\
@Allin1Convert_8h.com/Plugin
Path = "%Program Files%\Allin1Convert_8h\bar\1.bin\NP8hStub.dll"

HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\
@Allin1Convert_8h.com/Plugin
vendor = "Allin1Convert_8h"

HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\
@Allin1Convert_8h.com/Plugin
version = "1.1.1.1"

HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\
@Allin1Convert_8h.com/Plugin\MimeTypes\application/x-allin1convert_8hplugin
Description = "Allin1Convert Plugin"

HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\
@Allin1Convert_8h.com/Plugin\MimeTypes\application/x-allin1convert_8hplugin
Suffixes = "8h"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
PluginPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
RegisteredWithFirefox = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
UninstallFFString = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Allin1Convert_8hbar Uninstall Internet Explorer
DisplayName = "Allin1Convert Internet Explorer Toolbar"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Allin1Convert_8hbar Uninstall Internet Explorer
HelpLink = "http://support.{BLOCKED}ark.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Allin1Convert_8hbar Uninstall Internet Explorer
Publisher = "Mindspark Interactive Network"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Allin1Convert_8hbar Uninstall Internet Explorer
UninstallString = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Allin1Convert_8hbar Uninstall Internet Explorer
UrlInfoAbout = "http://support.{BLOCKED}ark.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{88e44198-d164-4ec0-b2c0-f679d866c6da}
AppName = "8hmedint.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{88e44198-d164-4ec0-b2c0-f679d866c6da}
AppPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{88e44198-d164-4ec0-b2c0-f679d866c6da}
Policy = "3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{6c5561b6-3dd2-46b5-83be-eae744366046}
AppName = "8hSlSrch.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{6c5561b6-3dd2-46b5-83be-eae744366046}
AppPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{6c5561b6-3dd2-46b5-83be-eae744366046}
Policy = "3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{5e58cda9-3b21-4611-a859-26ee28950e61}
AppName = "AppIntegrator.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{5e58cda9-3b21-4611-a859-26ee28950e61}
AppPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{5e58cda9-3b21-4611-a859-26ee28950e61}
Policy = "3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{f671c1b3-9776-426d-a350-55fb2d9b53f7}
AppName = "8hSrchMn.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{f671c1b3-9776-426d-a350-55fb2d9b53f7}
AppPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{f671c1b3-9776-426d-a350-55fb2d9b53f7}
Policy = "3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{6874fade-02c8-4181-831a-fc7486cf1d74}
AppName = "CrExtP8h.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{6874fade-02c8-4181-831a-fc7486cf1d74}
AppPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{6874fade-02c8-4181-831a-fc7486cf1d74}
Policy = "3"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
SkinTools
PlayerPath = "%Program Files%\Allin1Convert_8h\bar\1.bin\8hSkPlay.exe "

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
AppName = "8hSkPlay.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
AppPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\Low Rights\ElevationPolicy\
{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
Policy = "3"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{774BFD7A-2CE7-4785-8957-2D62F7F4A83C}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{45A28B99-6C20-441D-9D4D-F7EC7C701F6C}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{43E76D04-EB5C-4D74-A11D-7403BAFE540B}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{B1339BE3-9E4D-49D4-97F2-E4220530F65C}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}\InprocServer32
ThreadingModel = "Apartment"

HKEY_CURRENT_USER\CLSID\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}\
InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar\Switches
8hSrcAs.dll = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{164993F7-4D6D-40A5-8FA1-37A8F96B4700}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{13B534D0-49F9-48A9-A006-B2F92E1D01CB}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{cd1a63ba-a08c-431b-9a34-f240aadc728d}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
UninstallString = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar\Switches
oldhpp = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{628BA19D-7BED-4C54-8210-AFE66BB15D06}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{6C5561B6-3DD2-46B5-83BE-EAE744366046}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5E58CDA9-3B21-4611-A859-26EE28950E61}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{8077E854-138D-4396-ABB8-44C39E621705}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1E6170F4-3856-40E4-A2EB-2D8FB46574A4}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1B520A16-E83A-48F9-8802-8F485F24A452}\TypeLib
Version = "1.0"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar\Switches
ua = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar\Switches
au = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
RegHookPath = "%Program Files%\ALLIN1~1\bar\1.bin\8hreghk"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
Id = "954506FA-8BD9-4567-A49B-984C4E8A4B57"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
Build = "162.41882"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
CurInstall = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
HomePage = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar\Switches
hpp = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
SettingsDir = "%Program Files%\Allin1Convert_8h\bar\Settings"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
sr = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\
bar
pl = "9"

Dropping Routine

This Trojan drops the following files:

  • %User Temp%\00000344T8SETUP.EX_
  • %User Temp%\00000344T8SETUP.EXE
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hbarsvc.exe
  • %Program Files%\Allin1Convert_8h\bar\1.bin\T8EPMSUP.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\T8RES.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_default_search_provider\ARBITER.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_default_search_provider\ARBITER64.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_default_search_provider\ASSIST.EXE
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_default_search_provider\CONFIG.XML
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_enable\ARBITER.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_enable\ARBITER64.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_enable\CONFIG.XML
  • %Program Files%\Allin1Convert_8h\bar\1.bin\APPINTEGRATOR.EXE
  • %Program Files%\Allin1Convert_8h\bar\1.bin\AppIntegrator64.exe
  • %Program Files%\Allin1Convert_8h\bar\1.bin\APPINTEGRATORSTUB.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\AppIntegratorStub64.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\ASSISTMONITOR.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\ASSISTMONITOR64.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\BOOTSTRAP.JS
  • %Program Files%\Allin1Convert_8h\bar\1.bin\CHROME.MANIFEST
  • %Program Files%\Allin1Convert_8h\bar\1.bin\CREXT.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\CrExtP8h.exe
  • %Program Files%\Allin1Convert_8h\bar\1.bin\DPNMNGR.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\HKFXMGR.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\HKFXMGR64.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\HPG.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\Hpg64.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\INSTALL.RDF
  • %Program Files%\Allin1Convert_8h\bar\1.bin\LOGO.BMP
  • %Program Files%\Allin1Convert_8h\bar\1.bin\FF-NativeMessagingDispatcher.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hbar.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hbprtct.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hdatact.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hdlghk.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hdlghk64.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\T8EXTEX.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\T8EXTPEX.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hfeedmg.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hhighin.exe
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hhkstub.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\T8HTML.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hhtmlmu.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hhttpct.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hidle.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hmedint.exe
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hmlbtn.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hPlugin.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hregfft.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hreghk.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hregiet.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hscript.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hskin.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hskplay.exe
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hSrcAs.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\T8TICKER.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8htpinst.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\TOOLBARGUARD.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\TOOLBARGUARD64.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\TPIMANAGERCONSOLE.EXE
  • %Program Files%\Allin1Convert_8h\bar\1.bin\VERIFY.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\chrome\8hffxtbr.jar
  • %Program Files%\Allin1Convert_8h\bar\Message\COMMON.T8S
  • %Program Files%\Allin1Convert_8h\bar\gen1\COMMON.T8S
  • %Program Files%\Allin1Convert_8h\bar\assists\COMMON.T8S
  • %Program Files%\Allin1Convert_8h\bar\Settings\s_pid.dat

(Note: %User Temp% is the user's temporary folder, where it usually is C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Local\Temp on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Program Files% is the Program Files folder, where it usually is C:\Program Files on all Windows operating system versions; C:\Program Files (x86) for 32-bit applications running on Windows 64-bit operating systems.)

This report is generated via an automated analysis system.

  SOLUTION

Minimum Scan Engine: 9.750

Step 1

Before doing any scans, Windows XP, Windows Vista, and Windows 7 users must disable System Restore to allow full scanning of their computers.

Step 2

Restart in Safe Mode

[ Learn More ]

Step 3

Close all opened browser windows

Step 4

Delete this registry key

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_LOCAL_MACHINE\Software\Allin1Convert_8h
    • bar
  • In HKEY_CURRENT_USER\Software\Allin1Convert_8h\Events
    • EventData
  • In HKEY_LOCAL_MACHINE\Software\Allin1Convert_8h\bar
    • Switches
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • Integrators
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.ToolbarProtector.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.ToolbarProtector.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.ToolbarProtector
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.ToolbarProtector
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.ToolbarProtector
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {889f49d2-6cea-40be-be5f-7217485f9745}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {2561FD25-FE31-4E56-A120-AF7FEAAE3124}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {BB644C1C-BDFC-4390-8BCF-8E864D1859E6}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BB644C1C-BDFC-4390-8BCF-8E864D1859E6}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BB644C1C-BDFC-4390-8BCF-8E864D1859E6}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BB644C1C-BDFC-4390-8BCF-8E864D1859E6}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {4E089F3E-F5E1-4759-AF16-E7EBE24CAA9C}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4E089F3E-F5E1-4759-AF16-E7EBE24CAA9C}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4E089F3E-F5E1-4759-AF16-E7EBE24CAA9C}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4E089F3E-F5E1-4759-AF16-E7EBE24CAA9C}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {4CE34BDA-95CD-431D-AA32-0FF7589C0376}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4CE34BDA-95CD-431D-AA32-0FF7589C0376}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4CE34BDA-95CD-431D-AA32-0FF7589C0376}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4CE34BDA-95CD-431D-AA32-0FF7589C0376}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {39d4f1a1-a94d-4b7d-bf1d-7446308800ed}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {507C73BB-FC69-425E-8A49-9204F886B328}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {5D5D5550-534F-4854-B461-3B40D759EA72}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5D5D5550-534F-4854-B461-3B40D759EA72}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5D5D5550-534F-4854-B461-3B40D759EA72}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5D5D5550-534F-4854-B461-3B40D759EA72}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {21B4FA2D-3459-44D1-A855-D8BC0378E9D2}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21B4FA2D-3459-44D1-A855-D8BC0378E9D2}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21B4FA2D-3459-44D1-A855-D8BC0378E9D2}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21B4FA2D-3459-44D1-A855-D8BC0378E9D2}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {1CE5ABBD-42D7-4EEE-BBD6-33E76D912ECD}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1CE5ABBD-42D7-4EEE-BBD6-33E76D912ECD}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1CE5ABBD-42D7-4EEE-BBD6-33E76D912ECD}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1CE5ABBD-42D7-4EEE-BBD6-33E76D912ECD}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {de0f6787-9d1c-42b7-a0b9-eac630f87902}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {BE698E51-830B-447A-954D-901D6E05DDE2}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {289211A5-2A74-454B-9F1F-FA9A8D9CD6D8}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{289211A5-2A74-454B-9F1F-FA9A8D9CD6D8}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{289211A5-2A74-454B-9F1F-FA9A8D9CD6D8}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{289211A5-2A74-454B-9F1F-FA9A8D9CD6D8}
    • TypeLib
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.FeedManager.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.FeedManager.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.FeedManager
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.FeedManager
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.FeedManager
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {8f83d657-5993-4ffa-9aee-da0b20d828a7}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}
    • Control
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}
    • MiscStatus
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\MiscStatus
    • 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}
    • Version
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {D617CF84-B0BC-441F-9984-B676AFBA1E8D}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {DC86010C-7F30-485D-85D4-0957ECA323DD}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DC86010C-7F30-485D-85D4-0957ECA323DD}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DC86010C-7F30-485D-85D4-0957ECA323DD}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DC86010C-7F30-485D-85D4-0957ECA323DD}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {2CFC7EED-36BA-4374-8D29-92895D942F6C}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2CFC7EED-36BA-4374-8D29-92895D942F6C}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2CFC7EED-36BA-4374-8D29-92895D942F6C}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2CFC7EED-36BA-4374-8D29-92895D942F6C}
    • TypeLib
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.HTMLPanel.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.HTMLPanel.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.HTMLPanel
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.HTMLPanel
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.HTMLPanel
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {e4ef697f-434b-4dc7-a464-4412462206db}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}
    • Control
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}
    • MiscStatus
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\MiscStatus
    • 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}
    • Version
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
    • Ext
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext
    • PreApproved
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved
    • {e4ef697f-434b-4dc7-a464-4412462206db}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl
    • FEATURE_BROWSER_EMULATION
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {BFCF748F-A56E-451F-AA45-0D7EB699E416}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {B992BF10-B9DF-413D-BFBE-0DAED5BF0ABC}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B992BF10-B9DF-413D-BFBE-0DAED5BF0ABC}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B992BF10-B9DF-413D-BFBE-0DAED5BF0ABC}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B992BF10-B9DF-413D-BFBE-0DAED5BF0ABC}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {B0602473-26E3-425F-A819-D8651D6D83A8}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0602473-26E3-425F-A819-D8651D6D83A8}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0602473-26E3-425F-A819-D8651D6D83A8}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0602473-26E3-425F-A819-D8651D6D83A8}
    • TypeLib
  • In HKEY_CLASSES_ROOT\CLSID
    • {7EB7381C-FB01-47FC-9C42-ED64122C1B92}
  • In HKEY_CLASSES_ROOT\CLSID\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}
    • InprocServer32
  • In HKEY_CLASSES_ROOT\CLSID\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}
    • ProgID
  • In HKEY_CLASSES_ROOT\CLSID\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}
    • VersionIndependentProgID
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.HTMLMenu.1
  • In HKEY_CLASSES_ROOT\Allin1Convert_8h.HTMLMenu.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.HTMLMenu
  • In HKEY_CLASSES_ROOT\Allin1Convert_8h.HTMLMenu
    • CLSID
  • In HKEY_CLASSES_ROOT\Allin1Convert_8h.HTMLMenu
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved
    • {7EB7381C-FB01-47FC-9C42-ED64122C1B92}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {76FC1003-0825-48BD-B59B-3B7A5754972C}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {F11B9E79-0F7B-4C8B-B507-F06982497901}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F11B9E79-0F7B-4C8B-B507-F06982497901}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F11B9E79-0F7B-4C8B-B507-F06982497901}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F11B9E79-0F7B-4C8B-B507-F06982497901}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {3E698E62-9516-4670-AD6C-DC58181BC9F8}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3E698E62-9516-4670-AD6C-DC58181BC9F8}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3E698E62-9516-4670-AD6C-DC58181BC9F8}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3E698E62-9516-4670-AD6C-DC58181BC9F8}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\Software\Allin1Convert_8h\Settings
    • SmileyCentralBtn
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {443321f7-e46c-42f8-812b-f35e98cbb44f}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {6EC57031-1740-4151-93C5-C465D6063DD2}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {EA3743AC-948C-4E65-A61F-10EDA13D79CA}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EA3743AC-948C-4E65-A61F-10EDA13D79CA}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EA3743AC-948C-4E65-A61F-10EDA13D79CA}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EA3743AC-948C-4E65-A61F-10EDA13D79CA}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {5D076356-28C1-43B2-B29B-1AAE8D518E83}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5D076356-28C1-43B2-B29B-1AAE8D518E83}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5D076356-28C1-43B2-B29B-1AAE8D518E83}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5D076356-28C1-43B2-B29B-1AAE8D518E83}
    • TypeLib
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.MultipleButton.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.MultipleButton.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.MultipleButton
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.MultipleButton
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.MultipleButton
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {ef3f28c8-0330-4d18-b901-d24cb83e5aa1}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
    • Allin1Convert_8hbar Uninstall Firefox
  • In HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins
    • @Allin1Convert_8h.com/Plugin
  • In HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/Plugin
    • MimeTypes
  • In HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/Plugin\MimeTypes
    • application/x-allin1convert_8hplugin
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
    • Allin1Convert_8hbar Uninstall Internet Explorer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy
    • {88e44198-d164-4ec0-b2c0-f679d866c6da}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy
    • {6c5561b6-3dd2-46b5-83be-eae744366046}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy
    • {5e58cda9-3b21-4611-a859-26ee28950e61}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy
    • {f671c1b3-9776-426d-a350-55fb2d9b53f7}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy
    • {6874fade-02c8-4181-831a-fc7486cf1d74}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.ScriptButton.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.ScriptButton.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.ScriptButton
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.ScriptButton
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.ScriptButton
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {ef5db804-585b-472e-b415-bc63f8f01bf6}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_USERS\S-1-5-19_Classes\Software\Microsoft\Windows\CurrentVersion
    • Run
  • In HKEY_USERS\S-1-5-20_Classes\Software\Microsoft\Windows\CurrentVersion
    • Run
  • In HKEY_USERS\S-1-5-21-1645522239-1292428093-682003330-1003_Classes\Software\Microsoft\Windows\CurrentVersion
    • Run
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.PseudoTransparentPlugin.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.PseudoTransparentPlugin.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.PseudoTransparentPlugin
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.PseudoTransparentPlugin
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.PseudoTransparentPlugin
    • CurVer
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {27f49273-de3a-4111-90f9-6c474c37aefb}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}
    • Control
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}
    • MiscStatus
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\MiscStatus
    • 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}
    • Version
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved
    • {27f49273-de3a-4111-90f9-6c474c37aefb}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {248b3e95-17a4-482d-a8a8-6b3df4d05c35}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
    • Control
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
    • MiscStatus
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}\MiscStatus
    • 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
    • Version
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h
    • SkinTools
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy
    • {248b3e95-17a4-482d-a8a8-6b3df4d05c35}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {f2c368c5-9f44-4d43-89f3-a1cc87f1da96}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}
    • Control
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}
    • MiscStatus
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\MiscStatus
    • 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}
    • Version
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {4BD0FCFF-AD64-4315-9F2C-960EF3C21623}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {774BFD7A-2CE7-4785-8957-2D62F7F4A83C}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{774BFD7A-2CE7-4785-8957-2D62F7F4A83C}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{774BFD7A-2CE7-4785-8957-2D62F7F4A83C}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{774BFD7A-2CE7-4785-8957-2D62F7F4A83C}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {45A28B99-6C20-441D-9D4D-F7EC7C701F6C}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{45A28B99-6C20-441D-9D4D-F7EC7C701F6C}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{45A28B99-6C20-441D-9D4D-F7EC7C701F6C}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{45A28B99-6C20-441D-9D4D-F7EC7C701F6C}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {43E76D04-EB5C-4D74-A11D-7403BAFE540B}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{43E76D04-EB5C-4D74-A11D-7403BAFE540B}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{43E76D04-EB5C-4D74-A11D-7403BAFE540B}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{43E76D04-EB5C-4D74-A11D-7403BAFE540B}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {B1339BE3-9E4D-49D4-97F2-E4220530F65C}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B1339BE3-9E4D-49D4-97F2-E4220530F65C}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B1339BE3-9E4D-49D4-97F2-E4220530F65C}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B1339BE3-9E4D-49D4-97F2-E4220530F65C}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_CURRENT_USER
    • CLSID
  • In HKEY_CURRENT_USER\CLSID
    • {5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}
  • In HKEY_CURRENT_USER\CLSID\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}
    • Programmable
  • In HKEY_CURRENT_USER\CLSID\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}
    • InprocServer32
  • In HKEY_CURRENT_USER\CLSID\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}
    • Implemented Categories
  • In HKEY_CURRENT_USER\CLSID\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.ThirdPartyInstaller.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.ThirdPartyInstaller.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.ThirdPartyInstaller
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.ThirdPartyInstaller
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.ThirdPartyInstaller
    • CurVer
  • In HKEY_CURRENT_USER\CLSID
    • {f99ddd9a-07d0-47ab-86f1-193533dd2c60}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}
    • Control
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}
    • MiscStatus
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}\MiscStatus
    • 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}
    • Version
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved
    • {f99ddd9a-07d0-47ab-86f1-193533dd2c60}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {9D217B94-6FC9-44FE-94B1-30C711871266}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {164993F7-4D6D-40A5-8FA1-37A8F96B4700}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{164993F7-4D6D-40A5-8FA1-37A8F96B4700}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{164993F7-4D6D-40A5-8FA1-37A8F96B4700}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{164993F7-4D6D-40A5-8FA1-37A8F96B4700}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {13B534D0-49F9-48A9-A006-B2F92E1D01CB}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{13B534D0-49F9-48A9-A006-B2F92E1D01CB}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{13B534D0-49F9-48A9-A006-B2F92E1D01CB}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{13B534D0-49F9-48A9-A006-B2F92E1D01CB}
    • TypeLib
  • In HKEY_CURRENT_USER\CLSID
    • {cd1a63ba-a08c-431b-9a34-f240aadc728d}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cd1a63ba-a08c-431b-9a34-f240aadc728d}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cd1a63ba-a08c-431b-9a34-f240aadc728d}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cd1a63ba-a08c-431b-9a34-f240aadc728d}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.SettingsPlugin.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.SettingsPlugin.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • Allin1Convert_8h.SettingsPlugin
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.SettingsPlugin
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Allin1Convert_8h.SettingsPlugin
    • CurVer
  • In HKEY_CURRENT_USER\CLSID
    • {7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
    • Programmable
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
    • Control
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
    • MiscStatus
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\MiscStatus
    • 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
    • Version
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
    • Implemented Categories
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\Implemented Categories
    • {59fb2056-d625-48d0-a944-1a85b5ab2640}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved
    • {7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {628BA19D-7BED-4C54-8210-AFE66BB15D06}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{628BA19D-7BED-4C54-8210-AFE66BB15D06}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{628BA19D-7BED-4C54-8210-AFE66BB15D06}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{628BA19D-7BED-4C54-8210-AFE66BB15D06}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {6C5561B6-3DD2-46B5-83BE-EAE744366046}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6C5561B6-3DD2-46B5-83BE-EAE744366046}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6C5561B6-3DD2-46B5-83BE-EAE744366046}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6C5561B6-3DD2-46B5-83BE-EAE744366046}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {5E58CDA9-3B21-4611-A859-26EE28950E61}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5E58CDA9-3B21-4611-A859-26EE28950E61}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5E58CDA9-3B21-4611-A859-26EE28950E61}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5E58CDA9-3B21-4611-A859-26EE28950E61}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {8077E854-138D-4396-ABB8-44C39E621705}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8077E854-138D-4396-ABB8-44C39E621705}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8077E854-138D-4396-ABB8-44C39E621705}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8077E854-138D-4396-ABB8-44C39E621705}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {1E6170F4-3856-40E4-A2EB-2D8FB46574A4}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1E6170F4-3856-40E4-A2EB-2D8FB46574A4}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1E6170F4-3856-40E4-A2EB-2D8FB46574A4}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1E6170F4-3856-40E4-A2EB-2D8FB46574A4}
    • TypeLib
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {1B520A16-E83A-48F9-8802-8F485F24A452}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1B520A16-E83A-48F9-8802-8F485F24A452}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1B520A16-E83A-48F9-8802-8F485F24A452}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1B520A16-E83A-48F9-8802-8F485F24A452}
    • TypeLib
  • In HKEY_CURRENT_USER\Software\Allin1Convert_8h\bar
    • Switches

Step 5

Delete this registry value

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    • Allin1Convert AppIntegrator 32-bit = "%Program Files%\ALLIN1~1\bar\1.bin\AppIntegrator.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    • Allin1Convert = "rundll32 %Program Files%\ALLIN1~1\bar\1.bin\8hbar.dll,S"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    • Allin1Convert Search Scope Monitor = "%Program Files%\ALLIN1~1\bar\1.bin\8hsrchmn.exe /m=2 /w /h"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • OToIData = "001"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar\Switches
    • nodns = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar\Switches
    • ffTabs = "0"
  • In HKEY_CURRENT_USER\Software\Allin1Convert_8h\Events\EventData
    • 00000000_5 = "{random values}"
  • In HKEY_CURRENT_USER\Software\Allin1Convert_8h\Events\EventData
    • 00000000_6 = "{random values}"
  • In HKEY_CURRENT_USER\Software\Allin1Convert_8h\Events\EventData
    • 00000000_7 = "{random values}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • Maximized = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • Visible = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • pid = "^AYY"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • un = "Allin1Convert"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • InstallingUser = "S-1-5-21-1645522239-1292428093-682003330-1003"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • tiec = "208976"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar\Switches
    • ok = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar\Switches
    • od = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar\Switches
    • nk = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar\Switches
    • nd = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • lidate = "2015-04-02T08:54:31Z"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • hpwl = ".mywebsearch.com,.google.com,.yahoo.com,.bing.com,.msn.com"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • Dir = "%Program Files%\Allin1Convert_8h\bar"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • DeletedCustomizations = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{889f49d2-6cea-40be-be5f-7217485f9745}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BB644C1C-BDFC-4390-8BCF-8E864D1859E6}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4E089F3E-F5E1-4759-AF16-E7EBE24CAA9C}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4CE34BDA-95CD-431D-AA32-0FF7589C0376}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{39d4f1a1-a94d-4b7d-bf1d-7446308800ed}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5D5D5550-534F-4854-B461-3B40D759EA72}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21B4FA2D-3459-44D1-A855-D8BC0378E9D2}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1CE5ABBD-42D7-4EEE-BBD6-33E76D912ECD}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{de0f6787-9d1c-42b7-a0b9-eac630f87902}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{289211A5-2A74-454B-9F1F-FA9A8D9CD6D8}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8f83d657-5993-4ffa-9aee-da0b20d828a7}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DC86010C-7F30-485D-85D4-0957ECA323DD}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2CFC7EED-36BA-4374-8D29-92895D942F6C}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e4ef697f-434b-4dc7-a464-4412462206db}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION
    • CrExtP8h.exe = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B992BF10-B9DF-413D-BFBE-0DAED5BF0ABC}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0602473-26E3-425F-A819-D8651D6D83A8}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F11B9E79-0F7B-4C8B-B507-F06982497901}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3E698E62-9516-4670-AD6C-DC58181BC9F8}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\Settings\SmileyCentralBtn
    • HTMLMenuPosDeleted = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{443321f7-e46c-42f8-812b-f35e98cbb44f}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EA3743AC-948C-4E65-A61F-10EDA13D79CA}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5D076356-28C1-43B2-B29B-1AAE8D518E83}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef3f28c8-0330-4d18-b901-d24cb83e5aa1}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Allin1Convert_8hbar Uninstall Firefox
    • UninstallString = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/Plugin
    • Description = "Allin1Convert Plugin"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/Plugin
    • Path = "%Program Files%\Allin1Convert_8h\bar\1.bin\NP8hStub.dll"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/Plugin
    • vendor = "Allin1Convert_8h"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/Plugin
    • version = "1.1.1.1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/Plugin\MimeTypes\application/x-allin1convert_8hplugin
    • Description = "Allin1Convert Plugin"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/Plugin\MimeTypes\application/x-allin1convert_8hplugin
    • Suffixes = "8h"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • PluginPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • RegisteredWithFirefox = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • UninstallFFString = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Allin1Convert_8hbar Uninstall Internet Explorer
    • DisplayName = "Allin1Convert Internet Explorer Toolbar"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Allin1Convert_8hbar Uninstall Internet Explorer
    • HelpLink = "http://support.{BLOCKED}ark.com"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Allin1Convert_8hbar Uninstall Internet Explorer
    • Publisher = "Mindspark Interactive Network"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Allin1Convert_8hbar Uninstall Internet Explorer
    • UninstallString = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Allin1Convert_8hbar Uninstall Internet Explorer
    • UrlInfoAbout = "http://support.{BLOCKED}ark.com"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88e44198-d164-4ec0-b2c0-f679d866c6da}
    • AppName = "8hmedint.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88e44198-d164-4ec0-b2c0-f679d866c6da}
    • AppPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88e44198-d164-4ec0-b2c0-f679d866c6da}
    • Policy = "3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6c5561b6-3dd2-46b5-83be-eae744366046}
    • AppName = "8hSlSrch.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6c5561b6-3dd2-46b5-83be-eae744366046}
    • AppPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6c5561b6-3dd2-46b5-83be-eae744366046}
    • Policy = "3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5e58cda9-3b21-4611-a859-26ee28950e61}
    • AppName = "AppIntegrator.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5e58cda9-3b21-4611-a859-26ee28950e61}
    • AppPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5e58cda9-3b21-4611-a859-26ee28950e61}
    • Policy = "3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f671c1b3-9776-426d-a350-55fb2d9b53f7}
    • AppName = "8hSrchMn.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f671c1b3-9776-426d-a350-55fb2d9b53f7}
    • AppPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f671c1b3-9776-426d-a350-55fb2d9b53f7}
    • Policy = "3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6874fade-02c8-4181-831a-fc7486cf1d74}
    • AppName = "CrExtP8h.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6874fade-02c8-4181-831a-fc7486cf1d74}
    • AppPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6874fade-02c8-4181-831a-fc7486cf1d74}
    • Policy = "3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{fbcbc43a-dca9-4192-a4c8-b57fd0f77d4d}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef5db804-585b-472e-b415-bc63f8f01bf6}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27f49273-de3a-4111-90f9-6c474c37aefb}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\SkinTools
    • PlayerPath = "%Program Files%\Allin1Convert_8h\bar\1.bin\8hSkPlay.exe "
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
    • AppName = "8hSkPlay.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
    • AppPath = "%Program Files%\Allin1Convert_8h\bar\1.bin"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{248b3e95-17a4-482d-a8a8-6b3df4d05c35}
    • Policy = "3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f2c368c5-9f44-4d43-89f3-a1cc87f1da96}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{774BFD7A-2CE7-4785-8957-2D62F7F4A83C}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{45A28B99-6C20-441D-9D4D-F7EC7C701F6C}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{43E76D04-EB5C-4D74-A11D-7403BAFE540B}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B1339BE3-9E4D-49D4-97F2-E4220530F65C}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a4c2fb10-84c3-44eb-9f9e-860fa1d9a797}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_CURRENT_USER\CLSID\{5bcf818d-78c8-41b8-ba89-65c5fdac4fc4}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar\Switches
    • 8hSrcAs.dll = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f99ddd9a-07d0-47ab-86f1-193533dd2c60}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{164993F7-4D6D-40A5-8FA1-37A8F96B4700}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{13B534D0-49F9-48A9-A006-B2F92E1D01CB}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cd1a63ba-a08c-431b-9a34-f240aadc728d}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • UninstallString = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7caefafc-9a1e-4bcc-94dd-bc7d8d52717a}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar\Switches
    • oldhpp = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{628BA19D-7BED-4C54-8210-AFE66BB15D06}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6C5561B6-3DD2-46B5-83BE-EAE744366046}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5E58CDA9-3B21-4611-A859-26EE28950E61}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8077E854-138D-4396-ABB8-44C39E621705}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1E6170F4-3856-40E4-A2EB-2D8FB46574A4}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1B520A16-E83A-48F9-8802-8F485F24A452}\TypeLib
    • Version = "1.0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar\Switches
    • ua = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar\Switches
    • au = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • RegHookPath = "%Program Files%\ALLIN1~1\bar\1.bin\8hreghk"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • Id = "954506FA-8BD9-4567-A49B-984C4E8A4B57"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • Build = "162.41882"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • CurInstall = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • HomePage = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar\Switches
    • hpp = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • SettingsDir = "%Program Files%\Allin1Convert_8h\bar\Settings"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • sr = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Allin1Convert_8h\bar
    • pl = "9"

Step 6

Search and delete these components

[ Learn More ]
There may be some components that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.
  • %User Temp%\00000344T8SETUP.EX_
  • %User Temp%\00000344T8SETUP.EXE
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hbarsvc.exe
  • %Program Files%\Allin1Convert_8h\bar\1.bin\T8EPMSUP.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\T8RES.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_default_search_provider\ARBITER.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_default_search_provider\ARBITER64.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_default_search_provider\ASSIST.EXE
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_default_search_provider\CONFIG.XML
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_enable\ARBITER.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_enable\ARBITER64.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_enable\CONFIG.XML
  • %Program Files%\Allin1Convert_8h\bar\1.bin\APPINTEGRATOR.EXE
  • %Program Files%\Allin1Convert_8h\bar\1.bin\AppIntegrator64.exe
  • %Program Files%\Allin1Convert_8h\bar\1.bin\APPINTEGRATORSTUB.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\AppIntegratorStub64.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\ASSISTMONITOR.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\ASSISTMONITOR64.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\BOOTSTRAP.JS
  • %Program Files%\Allin1Convert_8h\bar\1.bin\CHROME.MANIFEST
  • %Program Files%\Allin1Convert_8h\bar\1.bin\CREXT.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\CrExtP8h.exe
  • %Program Files%\Allin1Convert_8h\bar\1.bin\DPNMNGR.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\HKFXMGR.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\HKFXMGR64.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\HPG.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\Hpg64.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\INSTALL.RDF
  • %Program Files%\Allin1Convert_8h\bar\1.bin\LOGO.BMP
  • %Program Files%\Allin1Convert_8h\bar\1.bin\FF-NativeMessagingDispatcher.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hbar.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hbprtct.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hdatact.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hdlghk.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hdlghk64.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\T8EXTEX.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\T8EXTPEX.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hfeedmg.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hhighin.exe
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hhkstub.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\T8HTML.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hhtmlmu.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hhttpct.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hidle.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hmedint.exe
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hmlbtn.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hPlugin.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hregfft.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hreghk.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hregiet.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hscript.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hskin.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hskplay.exe
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8hSrcAs.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\T8TICKER.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\8htpinst.dll
  • %Program Files%\Allin1Convert_8h\bar\1.bin\TOOLBARGUARD.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\TOOLBARGUARD64.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\TPIMANAGERCONSOLE.EXE
  • %Program Files%\Allin1Convert_8h\bar\1.bin\VERIFY.DLL
  • %Program Files%\Allin1Convert_8h\bar\1.bin\chrome\8hffxtbr.jar
  • %Program Files%\Allin1Convert_8h\bar\Message\COMMON.T8S
  • %Program Files%\Allin1Convert_8h\bar\gen1\COMMON.T8S
  • %Program Files%\Allin1Convert_8h\bar\assists\COMMON.T8S
  • %Program Files%\Allin1Convert_8h\bar\Settings\s_pid.dat

Step 7

Search and delete these folders

[ Learn More ]
Please make sure you check the Search Hidden Files and Folders checkbox in the More advanced options option to include all hidden folders in the search result.
  • %Program Files%\Allin1Convert_8h
  • %Program Files%\Allin1Convert_8h\bar
  • %Program Files%\Allin1Convert_8h\bar\1.bin
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_default_search_provider
  • %Program Files%\Allin1Convert_8h\bar\1.bin\assists\ie_enable
  • %Program Files%\Allin1Convert_8h\bar\1.bin\chrome
  • %Program Files%\Allin1Convert_8h\bar\Message
  • %Program Files%\Allin1Convert_8h\bar\gen1
  • %Program Files%\Allin1Convert_8h\bar\assists
  • %Program Files%\Allin1Convert_8h\bar\Settings
  • %Program Files%\Allin1Convert_8h\bar\1.bin\ThirdPartyInstallers

Step 8

Restart in normal mode and scan your computer with your Trend Micro product for files detected as PUA_MyWebSearch. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.

Step 9

Restore this file from backup only Microsoft-related files will be restored. If this malware/grayware also deleted files related to programs that are not from Microsoft, please reinstall those programs on you computer again.

  • %Program Files%\Internet Explorer\msimg32.dll


Did this description help? Tell us how we did.