Played around with another download this morning. This time a bunch of new files and settings appeared. The first notable change was a new process and scheduled task called SW-Booster.exe appearing:
SW-Booster.exe is detected under names such as “a variant of Win32/TrojanDownloader.Agent.AFD” and “PUP.Optional.MultiPlug.A”
Two new Firefox extensions also appeared, Y**tubeAdBlocker and saVee aNete 5.14:
I’ve verified that FreeFixer removed these completely. There are also entries in the Programs and Features dialog.
Please let me know if this helped you remove the SW-Booster malware by posting a comment.
Update 2014-11-21: Seems to be a variant around called SoftwareBooster.exe: