1. /
  2. Security Response/
  3. Adware.UCMore

Adware.UCMore

Updated:
February 13, 2007 11:42:41 AM
Type:
Adware
Version:
4.5.32.0
Publisher:
Effective-i Inc
Risk Impact:
Low
File Names:
UCMTSAIE.dll
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.UCMore is executed, it performs the following actions:
    1. Creates the following directory:

      • %ProgramFiles%\TheSearchAccelerator

        Note: %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.

    2. Creates the following files in %ProgramFiles%\TheSearchAccelerator:

      • INSTALL.LOG
      • IUCmore.dll
      • logo.ico
      • rss_html_template.html
      • toolbar.cfg
      • UCMTSAIE.dll
      • UNWISE.EXE

    3. Adds the value:

      "{44BE0690-5429-47f0-85BB-3FFD8020233E}" = "UCmore - The Search Accelerator"

      to the registry subkey:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar

      so that Adware.UCMore runs every time Internet Explorer is started.

    4. Also, creates the following registry keys:

      HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{44BE0690-5429-47F0-85BB-3FFD8020233E}
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\UCmore - The Search Accelerator
      HKEY_LOCAL_MACHINE\SOFTWARE\Effective-i
      HKEY_CURRENT_USER\Software\Effective-i
      HKEY_CURRENT_USER\Software\Maxthon

    5. Contacts various sites and can display advertisements.


Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver