When Adware.MDSSearchboost is executed, it performs the following actions:
- Creates the following files:
Note: %System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
- Creates the following registry subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MDS Search Booster
- Hijacks Internet searches, such as Google, Yahoo!, MSN, and Netscape, and redirects them to a forged search page. The risk displays a search page that looks similar to the original search page, but returned results are links to advertisements.