File Behavior
DOPDF.EXE has been seen to perform the following behavior:
- Executes Processes stored in Temporary Folders
- Executes a Process
- The Process is polymorphic and can change its structure
- Uses rootkit techniques to conceal its presence, interrogation or removal
- Uses low level functions to hide itself from the user and from system/security processes
- Found on infected systems and resists interrogation by security products
- Writes to another Process's Virtual Memory (Process Hijacking)
- Creates system tray popups, messages, errors and security warnings
DOPDF.EXE has been the subject of the following behavior:
- Created as a process on disk
- Deleted as a process from disk
- Executed as a Process
- Has code inserted into its Virtual Memory space by other programs
- Executed by Internet Explorer
Country Of Origin
The filename DOPDF.EXE was first seen on Oct 16 2007 in the following geographical regions of the Prevx community:
- New Zealand on Oct 16 2007
- The United States on Oct 25 2007
- Europe on Apr 8 2008
- Italy on Apr 8 2008
- Spain on Jun 26 2008
- Taiwan on Jun 26 2008
- Brazil on Feb 7 2010
File Name Aliases
DOPDF.EXE can also use the following file names:
- DOPDF(1).EXE
- DOPDF 7.1 BUILD 325 X86 & X64.EXE
- DOPDF (1).EXE
- DOPDF71.EXE
- DOPDF7.1.EXE
- DOPDF_7.1.325.EXE
- DOPDF-V7.1.325.EXE
- DOPDF FREE PDF CONVERTER 7.0.EXE
- DOPDF CONVERTITORE DI FILES IN PDF.EXE
- DOPDF[n].EXE
- SETUP_.EXE
- DOPDF(n).EXE
- DOPDF 6.1.265.EXE
- MAY IN AO.EXE
- OFFICE SOFTWARE - DOPDF 6.0 BUILD 260 - GEEKAI.EXE
- DOC TO PDF.EXE
- DOPDF60257.EXE
- DOPDF[1].EXE
- DOPDF 6.0.258 FR.EXE
- PDF WIRETER.EXE
- DOPDF 6.0.258 (KALDATA.COM).EXE
- DC4.EXE
- 59649407.EXE
- 57682485.EXE
Filesizes
The following file size has been seen:
- 3,916,208 bytes
- 1,490,464 bytes
- 1,417,808 bytes
- 635,872 bytes
- 757,127 bytes
- 1,461,592 bytes
File Type
The filename DOPDF.EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.