Acrobat 5 0 pdf 1 4

'Scheduled Tasks' folder2009-05-28 c:\windows\Tasks\1-Click Maintenance.job- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 20:37]2009-05-28 c:\windows\Tasks\BMMTask.job- c:\progra~1\ThinkPad\UTILIT~1\BMMTASK.EXE [2007-03-09 06:38]2009-05-18 c:\windows\Tasks\Defraggler Volume C Task.job- c:\program files\Defraggler\df.exe [2009-03-13 13:37].- - - - ORPHANS REMOVED - - - -HKLM-RunOnce- - (no file)SafeBoot-procexp90.Sys.------- Supplementary Scan -------.mWindow Title = Windows Internet Explorer by RushIE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlIE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlIE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlIE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.htmlIE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.htmlIE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlIE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlIE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlIE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000TCP: {4AC3DF7D-EDD3-4E9B-AC5B-0D52E7F10764} = 208.67.222.222,208.67.220.220FF - ProfilePath - c:\documents and settings\Rush\Application Data\Mozilla\Firefox\Profiles\925q64q7.default\FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ig?hl=enFF - prefs.js: network.proxy.type - 4---- FIREFOX POLICIES ----FF - user.js: network.http.max-persistent-connections-per-server - 4FF - user.js: content.max.tokenizing.time - 1800000FF - user.js: content.notify.interval - 600000FF - user.js: content.switch.threshold - 1000000FF - user.js: nglayout.initialpaint.delay - 600c:\program files\Mozilla Firefox 3.5 Beta 4\greprefs\all.js - pref("media.enforce_same_site_origin", false);c:\program files\Mozilla Firefox 3.5 Beta 4\greprefs\all.js - pref("media.cache_size", 51200);c:\program files\Mozilla Firefox 3.5 Beta 4\greprefs\all.js - pref("media.ogg.enabled", true);c:\program files\Mozilla Firefox 3.5 Beta 4\greprefs\all.js - pref("media.wave.enabled", true);c:\program files\Mozilla Firefox 3.5 Beta 4\greprefs\all.js - pref("media.autoplay.enabled", true);c:\program files\Mozilla Firefox 3.5 Beta 4\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);c:\program files\Mozilla Firefox 3.5 Beta 4\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");c:\program files\Mozilla Firefox 3.5 Beta 4\greprefs\all.js - pref("dom.storage.default_quota", 5120);c:\program files\Mozilla Firefox 3.5 Beta 4\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);c:\program files\Mozilla Firefox 3.5 Beta 4\greprefs\all.js - pref("gestures.enable_single_finger_input", true);c:\program files\Mozilla Firefox 3.5 Beta 4\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);c:\program files\Mozilla Firefox 3.5 Beta 4\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);c:\program files\Mozilla Firefox 3.5 Beta 4\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");c:\program files\Mozilla Firefox 3.5 Beta 4\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);c:\program files\Mozilla Firefox 3.5 Beta 4\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);c:\program files\Mozilla Firefox 3.5 Beta 4\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");c:\program files\Mozilla Firefox 3.5 Beta 4\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);c:\program files\Mozilla Firefox 3.5 Beta 4\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);c:\program files\Mozilla Firefox 3.5 Beta 4\defaults\pref\firefox.js - pref("geo.wifi.uri", " File Associations -------.JSEFile=NOTEPAD.EXE %1VBEFile=NOTEPAD.EXE %1VBSFile=NOTEPAD.EXE %1.**************************************************************************catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, scan 2009-05-28 11:23Windows 5.1.2600 Service Pack 3 NTFSscanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfullyhidden files: 0**************************************************************************.--------------------- LOCKED REGISTRY KEYS ---------------------[HKEY_USERS\S-1-5-21-1715567821-1580436667-854245398-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{344E8A93-642D-7A72-BB71-7894350FE682}*]@Allowed: (Read) (RestrictedCode)@Allowed: (Read) (RestrictedCode)"abonigcihofdicienjnfkmfdoalnffgnoj"=hex:65,62,6f,6e,6c,65,6a,61,67,70,62,69, 6b,6a,61,67,6f,6b,6b,66,68,64,65,67,62,6d,6c,70,61,6b,6f,66,6f,6a,69,67,6e,"bbonigcihofdicienjgghmhenplcjdcnhcah"=hex:61,62,6a,64,6c,66,66,69,69,66,69,64, 70,66,6f,66,64,68,6e,6b,66,61,65,64,6b,63,68,6f,70,63,69,6a,6e,70,00,67[HKEY_USERS\S-1-5-21-1715567821-1580436667-854245398-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{87E61901-2CE9-3B5C-9106-BFD8CF378B69}*]@Allowed: (Read) (RestrictedCode)@Allowed: (Read) (RestrictedCode)"abpcdlagpmannjaanncdklbihjhbflnbeg"=hex:61,62,6e,66,62,6c,6c,61,6d,6c,69,67, 62,6e,69,67,70,6b,66,6e,62,68,65,70,69,70,62,64,66,6e,6e,6e,68,68,00,77"bbpcdlagpmannjaannjplcbebbefdihekhhj"=hex:61,62,69,66,70,6d,66,6c,67,64,6d,64, 6a,67,6b,6f,6e,68,63,67,69,65,6d,70,63,6f,62,67,6a,65,67,61,6f,6f,00,77[HKEY_LOCAL_MACHINE\software\ESET\ESET Security\CurrentVersion\Info]@Denied: (3) (LocalSystem)"AppDataDir"="c:\\Documents and Settings\\All Users\\Application Data\\ESET\\ESET NOD32 Antivirus\""DataDir"="ESET\\ESET NOD32 Antivirus\""EditionName"=" ""InstallDir"="c:\\Program Files\\ESET\\ESET NOD32 Antivirus\""LanguageId"=dword:00000409"ProductBase"=dword:00000000"ProductCode"="{2204AF25-80E5-468E-B46D-795685B35DEB}""ProductName"="ESET NOD32 Antivirus""ProductType"="eav""ProductVersion"="3.0.667.0""UniqueId"="00125FC148999535""ScannerBuild"=dword:00000bcb"ScannerVersionId"=dword:00000c78"ScannerVersion"="""FixId"=dword:00000001.--------------------- DLLs Loaded Under Running Processes ---------------------- - - - - - - > 'winlogon.exe'(504)c:\windows\system32\Ati2evxx.dllc:\windows\system32\tphklock.dll.Completion time: 2009-05-28 11:25ComboFix-quarantined-files.txt 2009-05-28 16:25ComboFix2.txt 2009-05-13 13:02ComboFix3.txt 2009-05-13 07:22ComboFix4.txt 2008-08-08 15:35Pre-Run: 128,675,631,104 bytes freePost-Run: 128,671,424,512 bytes free278 --- E O F --- 2009-05-25 19:35HJT Log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:31:35, on 05/28/09Platform: Windows XP

Can only be set before calling the submitFile method.ScalePageSpecifies whetherDocument Converter should scale the output document. If ScalePage is "false"output document will be stripped to DocumentPaperSize, if ScalePage is"true" output document will be scaled to DocumentPaperSize. Syntax NVDC.setParameter("ScalePage",value)Data Type: StringNote: Can only be set before calling thesubmitFile method. Will have effect only if DocumentOutputFormat is "PDF".ConstrainProportionsSpecifies whetherDocument Converter should constrain proportions when scaling the outputdocument. Possiblevalues: "true", "false"Syntax NVDC.setParameter("ConstrainProportions",value)Data Type: StringNote: Can only be set before calling thesubmitFile method. Will have effect only if DocumentOutputFormat is "PDF" and ScalePage is "true".PlaceContentInSpecifies where DocumentConverter should place the original page content on the scaled page.Possiblevalues: "0" (left-bottomcorner),"1" (right-bottomcorner),"2" (center), "3" (center-top), "4" (center-bottom), "5" (left-center), "6" (right-center), "7" (left-top corner),"8" (right-top corner)Syntax NVDC.setParameter("PlaceContentIn",value)Data Type: StringNote: Can only be set before calling thesubmitFile method. Will have effect only if DocumentOutputFormat is "PDF".PDFVersionSetsthe compatibility level (a.k.a. PDF version) of the output PDF document. Possiblevalues: "1.2" (Acrobat3-and-later compatible)"1.3" (Acrobat 4-and-later compatible)"1.4" (Acrobat 5-and-later compatible)"1.5" (Acrobat 6-and-later compatible)"1.6" (Acrobat 7-and-later compatible)"1.7" (Acrobat 8-and-later compatible)Syntax NVDC.setParameter("PDFVersion", value)Data Type: StringNote: Can only be set before calling thesubmitFile method. Will have effect only if "DocumentOutputFormat" is"PDF".DocumentTitleSetsthe title field in the output PDF document.Syntax NVDC.setParameter("DocumentTitle",value)Data Type: StringNote: Can only be set before calling the submitFile method. Will haveeffect only if "DocumentOutputFormat" is "PDF".DocumentSubjectSetsthe subject field in the output PDF document.Syntax NVDC.setParameter("DocumentSubject",value)Data Type: StringNote: Can only be set before calling the submitFile method. Will haveeffect only if "DocumentOutputFormat" is "PDF".DocumentAuthorSetsthe author field in the output PDF document.Syntax NVDC.setParameter("DocumentAuthor",value)Data Type: StringNote: Can

The previous options, plus add comments) 4 (General Editing, Comment and Form Field Authoring - will let users do anything to the document except extract contents and print). Syntax DPSDK.PDFChangesAllowed = valueDataType: IntegerNote: Will have effect only if DocumentOutput format="PDF"and PDFEncryptionType=128 or 256Do not mix this property with PDFNoCopyPermission,PDFNoPrintPermission, PDFNoChangePermission and PDFNoAddPermission properties.PDFPrintingPermissions Setsthe output document printing permissions. 0 (Not Allowed – will prevent users from printing the document) 1 (Low Resolution – will let users print, but at a resolution that prevents from recreating the PDF file with different security settings. Printing may be slower because each page will be printed as a bitmapped image.) 2 (Fully Allowed – will let users print at any resolution, directing high-quality vector output to PostScript and other printers that support advanced high-quality printing features). Possiblevalues:Syntax DPSDK.PDFPrintingPermissions = valueDataType: IntegerNote: Will have effect only if DocumentOutputFormat="PDF"and PDFEncryptionType=128 or 256Do not mix this property with PDFNoCopyPermission,PDFNoPrintPermission, PDFNoChangePermission and PDFNoAddPermission properties.PDF Viewer specific propertiesHideToolBarHidethe toolbar when PDF is opened in Adobe Acrobat Reader.Syntax DPSDK.HideToolBar = valueData type: BooleanNote: Will have effect only if DocumentOutputFormat="PDF".HideMenuBarHidethe menu bar when PDF is opened in Adobe Acrobat Reader.Syntax DPSDK.HideMenuBar = valueData type: BooleanNote: Will have effect only if DocumentOutputFormat="PDF".HideMainWindowHidethe main window when PDF is opened in Adobe Acrobat.Syntax DPSDK.HideMainWindow = valueData type: BooleanNote: Willhave effect only if DocumentOutputFormat="PDF".PDFOpenViewSpecifiesthe output document initial view.Possiblevalues: 0 (Page only) 1 (Page and bookmarks) 2 (Page and thumbnails). 3 (Full screen) Syntax DPSDK.PDFOpenView = valueData type: LongNote: Willhave effect only if DocumentOutputFormat="PDF". PDFOpenAtPageSpecifiesthe page output document should open at. Syntax DPSDK.PDFOpenAtPage = valueData type: LongPDFOpenMagnificationSpecifiesthe open magnification for the output document.Possiblevalues: 0 (Default) 1 (Fit Window) 2 (Fit Width) 3 (Fit Height) 4 (Zoom 25%) 5 (Zoom 50%) 6 (Zoom 100%) 7 (Zoom 125%) Syntax DPSDK.PDFOpenMagnification = valueData type: LongNote: Will have effect only if DocumentOutputFormat="PDF".PDFPageLayoutSpecifiesthe output document page layout.Possiblevalues: 0 (Page only) 1 (Single Page) 2 (Continuous) 3 (Continuous-Facing) Syntax DPSDK.PDFPageLayout = valueData type: LongNote: Will have effect only if DocumentOutputFormat="PDF".Watermark and Stationery PropertiesStampFontNameSets the watermark font name.Syntax DPSDK.StampFontName = valueData type: StringStampFontColorSets the watermark font color.Syntax DPSDK.StampFontColor = valueExample DPSDK.StampFontColor ="$0000FF"Data type: StringStampFontSizeSets the watermark font size (in points).Syntax DPSDK.StampFontSize = valueData type: LongStampMessageSets the watermark text message.Syntax DPSDK.StampMessage = valueData type: StringNote: You can use the following variables: %PAGE% - current page number%PAGES% -total number of pages%WEEKDAY% - full weekday name%WEEKDAY_SHORT% - abbreviated weekday name%MONTH% - month number (1-12)%MONTHNAME% - fullmonth name%MONTHNAME_SHORT% -abbreviated month name%YEAR% - yearwith century (YYYY) %YEAR_SHORT% - yearwithout century (YY) %DAY% - day ofmonth %DAY_YEAR% - day ofthe year (1 -366) %HOUR% - hour(01- 12)%HOURS% - hour(00-23)%MINUTES% -minutes (00-59)%SECONDS% -seconds (00-59)%AMPM% - AM, PM %DATE% -local date representation. Ex: 11/01/07%TIME% -local time representation. Ex: 1:17:10 PM %DATETIME%

Files with password in different encryption level. Prevent PDF files from being printed, copied, changed, extracted, signed, filled, assembled and/or merged. User Password is used to open the PDF document Owner Password is used to change security settings Encryption Level 40-bit RC4: Acrobat 3.0 and Later 128-bit RC4: Acrobat 5.0 and Later Security Options: Printing: Allow to print Modify Contents: Allow to modify Copy: Allow to copy or extract Modify Annotations: Allow to add or modify annotations or form fields Fill In: Allow to input form field and signature (128-bit RC4 only) Screen Readers: Allow to enable accessibility (128-bit RC4 only) Assembly: Allow to modify document assembly (128-bit RC4 only) Degraded Printing: Allow to print degraded mode (128-bit RC4 only) Note: To disable printing, you have to uncheck both Printing and Degraded Printing. The following registry table sets the properties of the generated PDF: Under: HKEY_CURRENT_USER\Software\PlotSoft\Writer\PDF_Security USESECURITY Integer This Flag must be set 1 to use the SECURITY options (0/1). USER_PASSWORD String User Password OWNER_PASSWORD String Owner Password BIT128 Integer Flag to use 128-bit RC4(0/1) PRINT Integer Flag to use Printing (0/1) MODIFY_CONTENT Integer Flag to use Modify Contents (0/1) COPY Integer Flag to use Copy (0/1) MODIFY_ANNOTATION Integer Flag to use Modify Annotations (0/1) FILL Integer Flag to use Fill In (0/1) SCREEN Integer Flag to use Screen Readers (0/1) ASSEMBLY Integer Flag to use Assembly (0/1) DEGRADED_PRINT Integer Flag to use Degraded Printing (0/1) 4. PDF View Preference: Set the view options when the PDF is open. Opening