PConverter Toolbar

Published:
Last updated:

Threat Scorecard

Popularity Rank: 1,394
Threat Level: 20 % (Normal)
Infected Computers: 100,692
First Seen: October 6, 2015
Last Seen: October 5, 2026
OS(es) Affected: Windows

The detection of PConverter Toolbar on your system indicates a potential security threat that requires immediate attention. This report aims to provide you with a comprehensive understanding of the issue and guide you through the removal process. It is essential to approach this situation with caution and follow the recommended steps to ensure the complete elimination of the threat.

What Is PConverter Toolbar?

PConverter Toolbar is identified as a Trojan-type threat, which means it is a type of malware that disguises itself as a legitimate program but actually allows unauthorized access to your system. Trojans can be used to steal sensitive information, install additional malware, or provide a backdoor for remote access. The name "PConverter Toolbar" suggests it may pose as a toolbar or browser extension, potentially offering conversion services or other functionalities to deceive users into installing it.

How PConverter Toolbar Operates

Trojan-type threats like PConverter Toolbar typically operate by exploiting vulnerabilities in software or tricking users into installing them. Once installed, they can communicate with their command and control servers to receive instructions, which might include downloading and installing additional malware, stealing personal data, or using the infected computer for malicious activities such as spamming or participating in botnet attacks. The exact operation can vary widely depending on the intentions of the malware creators.

These threats often rely on social engineering tactics, such as phishing emails, infected software downloads, or misleading advertisements, to infiltrate systems. They can also spread through infected USB drives, network vulnerabilities, or other means. Understanding how such threats operate is crucial for preventing future infections and protecting your digital security.

Symptoms of Infection

Symptoms of a PConverter Toolbar infection can be subtle and may not always be immediately apparent. However, common indicators of a Trojan infection include unusual system behavior, such as unexpected pop-ups, slow system performance, unfamiliar programs or toolbars, and changes in browser settings. You might also notice that your antivirus software is disabled or that security updates are being blocked. In some cases, the infection might not display any noticeable symptoms, making regular system scans crucial for detection.

  • Unexplained changes in browser settings or the appearance of unfamiliar toolbars.
  • Pop-ups or advertisements that you did not initiate.
  • System slowdowns or crashes.
  • Security software warnings or the disabling of security features.

How to Remove PConverter Toolbar

  1. Enter Safe Mode with Networking to limit the malware's ability to interfere with the removal process. This mode allows you to use the internet to download necessary tools while minimizing system activity.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter. Ensure the tool is updated to the latest version to increase the chances of detecting and removing the threat.
  3. Uninstall any suspicious programs or applications that you do not recognize or no longer need. Be cautious and only remove programs you are sure are safe to uninstall.
  4. Reset your web browsers (Chrome, Firefox, Edge, etc.) to their default settings. This step can help remove any malicious extensions or settings changes made by the malware.
  5. Reboot your system and perform another full scan with your anti-malware tool to ensure that the threat has been completely removed. Repeat this process if any remnants are found.

Conclusion

Removing PConverter Toolbar requires a systematic approach to ensure that all components of the malware are eliminated from your system. By following the steps outlined in this report and maintaining vigilance through regular system scans and updates, you can protect your digital environment from similar threats in the future. Remember, prevention is key, so always be cautious when installing new software, opening email attachments, or clicking on links from unknown sources.

Aliases

7 security vendors flagged this file as malicious.

Antivirus Vendor Detection
Fortinet Riskware/MyWebSearch
GData Win32.Application.Agent.HQLCNJ
Antiy-AVL GrayWare[Downloader:not-a-virus]/Win32.Adload.gen
Comodo Application.Win32.MyWebSearch.R
Kaspersky not-a-virus:AdWare.Win32.MySearch.ac
Avast Win32:Mindspark-A [PUP]
F-Prot W32/Mywebsearch.K.gen!Eldorado

SpyHunter Detects & Remove PConverter Toolbar

Registry Details

PConverter Toolbar may create the following registry entry or registry entries:
CLSID
{008c09f9-2949-4d38-83fc-8c787e6dc1e3}
{01C906AF-E92D-4AD4-B478-FDE5AF2D7684}
{0D6C55A8-3003-4B48-BC64-F604E1F1122D}
{1046a206-5101-4a81-8358-1dbb63ae3210}
{19C0019A-7F07-48C1-82B1-B38A117AEC66}
{1a707f4c-78e8-49b7-8a3a-41255a22afe0}
{3438FE1A-0C94-45C3-8083-5CAE82872A4D}
{349B6EC0-6C39-432E-9486-64C82F38DE22}
{369D6F8D-CB2A-4A5C-9890-48C938267848}
{3CDAE1CB-896D-43E9-84D9-3B57EC71305B}
{3CF9745E-AE8F-4BFC-AA52-A86CBFBCA17F}
{47CCD08C-52C0-429C-BD30-E2913B7E4512}
{51063FD9-AC6E-413F-8CC3-FF04BFCF8E29}
{5165BA63-A70A-4262-BC63-3DFBE3F37BA8}
{55780950-41d9-4f03-a794-902e27237eb6}
{5A5014D7-80EA-44A4-BD99-264961772989}
{656e2a25-8226-470b-9a67-b2a60f657630}
{66C08BE3-CEBC-43AB-93CA-D63C3E802A96}
{716741B2-B364-47B7-A4A9-C5DDD84AE1A3}
{8698BCC7-46C5-45BF-9EB2-E751BEEB3E64}
{8956153C-5CFC-4150-B37D-DB68FF089767}
{91E9A2ED-034A-45ED-831D-E16E1909D446}
{952fddec-371f-4047-80cf-656ca214cb7a}
{97ba415c-383c-41a0-af12-0f7294a73f07}
{9E31C651-75BD-4E0B-8CB1-A396C2A6E8AC}
{a1b0a99a-19db-4d79-9c0f-955817e43094}
{A1B6BCF2-6D07-479D-A6AE-1666AD0B03E9}
{b074d394-fc50-4793-a09e-4f124e4d4a3b}
{B94227B9-6738-4936-A080-FC69E72AF1FB}
{BAC464B4-4E9F-4569-8745-DF1F8C55D616}
{bc82b923-4b58-40ce-ab3c-2cc15b203265}
{C85EF181-A7B6-49C2-9ABC-C63065A0A18D}
{D4563CAB-4168-49D2-9ED1-F40E618AA9ED}
{D7265892-B953-48B2-B388-19247C03B281}
{DE5A96B7-742C-4B99-8FA1-42779BAFD7BE}
{e7c23ec9-5ae4-4f01-94fd-38da3e187a30}
{f1aecc99-b93d-4a8c-a133-7e715084bcff}
{FBC24101-1F20-4D3F-940D-FE720D4C542F}
{FF512140-BFF9-425F-AFEA-11A0854ED50C}
File name without path
http_PConverter.dl.myway.com_0.localstorage
http_PConverter.dl.myway.com_0.localstorage-journal
http_PConverter.dl.tb.ask.com_0.localstorage
http_PConverter.dl.tb.ask.com_0.localstorage-journal
pconverter.dl.myway[1].xml
pconverter.dl.tb.ask[1].xml
Software\AppDataLow\Software\PConverter_dz
Software\Microsoft\Internet Explorer\Approved Extensions\{008C09F9-2949-4D38-83FC-8C787E6DC1E3}
Software\Microsoft\Internet Explorer\Approved Extensions\{656E2A25-8226-470B-9A67-B2A60F657630}
Software\Microsoft\Internet Explorer\Approved Extensions\{E7C23EC9-5AE4-4F01-94FD-38DA3E187A30}
SOFTWARE\Microsoft\Internet Explorer\DOMStorage\pconverter.com
SOFTWARE\Microsoft\Internet Explorer\DOMStorage\pconverter.dl.myway.com
Software\Microsoft\Internet Explorer\DOMStorage\pconverter.dl.tb.ask.com
SOFTWARE\Microsoft\Internet Explorer\DOMStorage\www.pconverter.com
SOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pconverter.dl.myway.com
SOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pconverter.dl.tb.ask.com
Software\Microsoft\Internet Explorer\SearchScopes\{eb43b60b-2197-43aa-86a6-b143774bae59}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{e7c23ec9-5ae4-4f01-94fd-38da3e187a30}
SOFTWARE\Microsoft\Tracing\PConverter_RASAPI32
SOFTWARE\Microsoft\Tracing\PConverter_RASMANCS
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{008c09f9-2949-4d38-83fc-8c787e6dc1e3}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{656e2a25-8226-470b-9a67-b2a60f657630}
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PConverter
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PConverter AppIntegrator 32-bit
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PConverter AppIntegrator 64-bit
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PConverter EPM Support
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PConverter Search Scope Monitor
Software\PConverter
Software\PConverter_dz
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{eb43b60b-2197-43aa-86a6-b143774bae59}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{e7c23ec9-5ae4-4f01-94fd-38da3e187a30}
SOFTWARE\Wow6432Node\Microsoft\Tracing\PConverter_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\PConverter_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{008c09f9-2949-4d38-83fc-8c787e6dc1e3}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{656e2a25-8226-470b-9a67-b2a60f657630}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\PConverter
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\PConverter AppIntegrator 32-bit
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\PConverter AppIntegrator 64-bit
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\PConverter EPM Support
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\PConverter Search Scope Monitor
SOFTWARE\Wow6432Node\PConverter_dz
SYSTEM\ControlSet001\services\PConverter_dzService
SYSTEM\ControlSet002\services\PConverter_dzService
SYSTEM\CurrentControlSet\services\PConverter_dzService
PConverter_dzbar Uninstall Internet Explorer
PConverterTooltab Uninstall Internet Explorer

Directories

PConverter Toolbar may create the following directory or directories:

%LOCALAPPDATA%\PConverterTooltab
%LOCALAPPDATA%\PConverter_dz
%PROGRAMFILES%\PConverter_dz
%PROGRAMFILES(x86)%\PConverter_dz
%PROGRAMFILES(x86)%\PConverter_dzEI
%USERPROFILE%\AppData\LocalLow\PConverter_dz
%USERPROFILE%\AppData\LocalLow\PConverter_dzEI
%USERPROFILE%\Application Data\PConverter_dz