When Adware.UCMore is executed, it performs the following actions:
- Creates the following directory:
- %ProgramFiles%\TheSearchAccelerator
Note: %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
- Creates the following files in %ProgramFiles%\TheSearchAccelerator:
- INSTALL.LOG
- IUCmore.dll
- logo.ico
- rss_html_template.html
- toolbar.cfg
- UCMTSAIE.dll
- UNWISE.EXE
- Adds the value:
"{44BE0690-5429-47f0-85BB-3FFD8020233E}" = "UCmore - The Search Accelerator"
to the registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
so that Adware.UCMore runs every time Internet Explorer is started.
- Also, creates the following registry keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{44BE0690-5429-47F0-85BB-3FFD8020233E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\UCmore - The Search Accelerator
HKEY_LOCAL_MACHINE\SOFTWARE\Effective-i
HKEY_CURRENT_USER\Software\Effective-i
HKEY_CURRENT_USER\Software\Maxthon
- Contacts various sites and can display advertisements.
