1. Symantec/
  2. Security Response/
  3. Adware.MDSSearchboost


February 13, 2007 11:49:58 AM
Risk Impact:
File Names:
%System%\dsmanager.dll %System%\dsmanager32.dll
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.MDSSearchboost is executed, it performs the following actions:
  1. Creates the following files:

    • %System%\dsmanager.dll
    • %System%\dsmanager32.dll

      Note: %System% is a variable that refers to the System folder. By default this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).

  2. Creates the following registry subkeys:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MDS Search Booster

  3. Hijacks Internet searches, such as Google, Yahoo!, MSN, and Netscape, and redirects them to a forged search page. The risk displays a search page that looks similar to the original search page, but returned results are links to advertisements.

Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube