UCmore

· Overview ·
· Origins ·
· Distribution ·
· Operation ·
· Risks ·
· Detection and Removal ·
· Research ·

Overview

Summary:

 UCmore is an Internet Explorer toolbar. When shown, it displays links to other sites it deems connected to the current page. PestPatrol detects versions 3.x and earlier, because of their stealth installation methods and because these versions tracked users with a unique ID. Version 4.x does not do this, is not considered a pest, and is not detected by PestPatrol.

Vendor Notes:

 "UCmore XP is a search accelerator for IE. It brings you great ideas for where to go next by extending your menu bar with search results whenever you Surf or Search!" --- http://www.ucmore.com/ Version 3, from the UCmore website: 'UCmore may even prevent the use of search engines in many cases by predicting your information needs and then presenting you with subjects that you may not have considered initially, but then realize their importance to you.'

Alias:

 Adware/Ucmore [Panda], ucmie, after the DLL containing the BHO code., UCmore Search Accelerator

See Also:

 VCatch

Category:

Toolbar: A group of buttons which perform common tasks. A toolbar for Internet Explorer is nomally located below the menu bar at the top of the form. Toolbars may be created by Browser Helper Objects.

Adware: Software that displays popup/popunder ads when the primary user interface is not visible or which do not appear to be assocaited with the product.

Browser Helper Object: (BHO). A component that Internet Explorer will load whenever it starts, shares IE's memory context, can perform any action on the available windows and modules. A BHO can detect events, create windows to display additional information on a viewed page, monitor messages and actions. Microsoft calls it "a spy we send to infiltrate the browser's land." BHOs are not stopped by personal firewalls, because they are seen by the firewall as your browser itself. Some exploits of this technology search all pages you view in IE and replace banner advertisements with other ads. Some monitor and report on your actions. Some change your home page.

Similar Pests:

 Toolbar · Adware · Browser Helper Object

Origins

Group:

 Effective-i Inc.

Vendor:

 UCmore

Mailing Address:

 747 Third Avenue, 4th Floor(Moshlovsky) New York City, NY, 10017

Phone:

 212-838-4646 Fax: 212-838-8155

EMail:

 info@effective-i.com

URL:

 http://ucmore.com/

Date of Origin:

 May, 2002

Distribution

Distribution:

 Version 3 was distributed with FreeWire (a file-sharing application), VCatch, MThree, and other ad-supported products. Version 4 is not bundled with any pests, to our knowledge.

Prevalence:
  • Ucmore: 0.0%
    • More Info

    Clot Factor:
  • Ucmore: 13

    • The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.

    Growth:
  • Ucmore: Insufficient data to report growth
    		•

    Operation

    Platform:

    		 Windows 95/98/ME/NT/2000/XP

    Advertising:

    		 No, other than its links.

    Storage Required:
  • UCmore: at least 11785 KB
    		•

    Browser Performance:

    		 Likely to slow performance of Internet Explorer.

    ScreenShot:


    UCMore Version 4

    Risks

    Privacy Issues:

    		 Yes in version 3, none known in version 4. In version 3, every URL opened is posted to the servers at users.ucmore.com together with a unique ID.

    Security Issues:

    		 No.

    Stability Issues:

    		 None known.

    Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.

    Manual Removal:

    		 The Add/Remove Programs option works reasonably well but leaves behind an empty 'UCmore' folder in Program Files, and some registry keys. The information below describes how to fully remove version 3.

    For version 4, use UCMore's own uninstaller at http://www.ucmore.com/clientuninstall.html
    Stop Running Processes:

    Kill these running processes with Task Manager:

    Unregister DLLs:

    Unregister these DLLs with Regsvr32, then reboot:

    Clean Registry:

    Remove these registry items (if present) with RegEdit:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Remove Directories:

    Remove these directories (if present) with Windows Explorer:

    Research

    File Analyses:

    More Info:
  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
    		•

    Research By:
  • Andrew Clover
  • PestPatrol's Pest Research Center
    		•

    Last Revised:

    		 April 06, 2005