Ebates Moneymaker

  • Thread starter Thread starter tan
  • Start date Start date
T

tan

Ebates Moneymaker is pissing me off. I scanned my
computer with both Microsoft AntiSpy and Lavasoft Ad-
aware, the result is: Ad-aware detected it everytime i
scan but Microsoft Antispy doesn't. The big problem is
even though i deleted, it kept coming back. I check my Ad-
watch event log and there's a registry modification
detected every 10 seconds.
Are there anyway to remove ebates moneymaker out of my
life?
Any help would be great. Thanks in advance
 
Hi

- First send a suspected spyware report about this to MS
menu tools within MSAS.

Download CCleaner for temporarily junk removal.
www.ccleaner.com

Restart in safe mode, press F8 during reboot/start

Scan again with Adaware > "Scan now" and choose "Full system scan"
 
I would restart in safe mode, open Microsoft AntiSpyware, on the Scan Page,
choose Scan Options > Full System Scan (check the boxes below) click "Run
Scan Now". Also run these additional AntiSpyware utilities in safe mode:
Ad-Aware - http://www.lavasoftusa.com
Spybot - http://www.safer-networking.org/
CWShredder - http://www.intermute.com/products/cwshredder.html
Spy Sweeper - http://www.webroot.com
Ccleaner - http://www.ccleaner.com
--
Andre
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
 
Hi There

Hope this helps

Ebates can disable any program that tries to prevent
ebates from running, Thats a dangerous part of the EULA,
In the sense of that wording it could mean it removes
vital parts of antispy programs if it detects the threat
of being removed !

From Ebates:
-------------------

Ebates may disable or uninstall any other product or
software tool that might interfere with the operability
of the Moe Money Maker Software or otherwise preempt or
render inoperative the Moe Money Maker Software in a
manner that might jeopardize the ability of Ebates to
earn you cash back discounts or coupon savings offered by
Ebates. In installing the Moe Money Maker Software, you
authorize Ebates to disable, uninstall, or delete any
application or software that might, in Ebates' opinion
nullify its function and put you at risk of loosing the
cash-back savings that Moe Money Maker Software is
designed to earn you.

The Moe Money Maker Software can be easily uninstalled
through the standard 'add or remove programs' control
panel, or through the Moe Money Maker's preference
settings.

On add/remove screen check for any reference to the files
listed below.


Please be aware that Adwatch blocks any changes being
made to the registry so it needs to be disabled before
trying to fix this,

Open AdAware Se.
Go to AdWatch User Interface.
Go to Tools and Preferences.
At the bottom of the screen you can see two checkable
items:
Active: This will turn Ad-Watch On\Off without closing it
Automatic: Suspicious activity will be blocked
automatically
Uncheck those boxes

Only re-enable it once you are clean again,Same goes for
any other protections products you have,

If your confident using regedit check for these and
remove any found (If not skip this and download Ewido
Security Suite)


HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversi
on\run\blubstersupport

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversi
on\run\ebatesmoemoneymaker

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversi
on\run\ebatesmoemoneymaker0

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversi
on\run\upromiseremindu

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversi
on\run\websavingsfromebates

Reboot and check for these folders and remove any found:

c:/programfiles/ebatesmoemoneymaker
c:/programfiles/websavings_from_ebates
c:/programfiles/ebates_moemoneymaker
c:/programfiles/websavingsfromebates
c:/programfiles/care2gtu
c:/programfiles/limeshop
c:/programfiles/blue haven media
c:/programfiles/websearch


If you have problems download Ewido Security Suite and
run it in safe mode:

Ewido Security Suite :
----------------------
Please download, install, and update the free version of
Ewido trojan scanner:

http://www.ewido.net/en/download/

When installing, under "Additional Options"
uncheck "Install background guard" and "Install scan via
context menu".

From the main ewido screen, click on update in the left
menu, then click the Start update button.

After the update finishes (the status bar at the bottom
will display "Update successful")



Reboot into Safe Mode.
----------------------
Restart your computer and keep tapping the F8 key on your
keyboard.

When you see the option screen, then choose safe mode
from the list,


Once in safe mode Run Ewido.

Click on the Scanner button in the left menu, then click
on Complete System Scan. This scan can take quite a while
to run.

If ewido finds anything, it will pop up a notification.
If its clearly described as malware(Trojan,Spyware etc..)
have ewido remove the entry,

When the scan finishes, click on "Save Report". This will
create a text file. Save to desktop incase its needed
later.

When ewido has finished, Also run Adaware and MS Antispy

Next clear the prefetch folder

goto start menu then run and type :

prefetch

delete the contents of this folder (left click and
highlight the files by holding the left mouse button and
covering all the files,then right click and choose delete)

Then perform a disk clean up to remove temp and unused
files

goto start run and type

cleanmgr

then press enter and remove what you can from this screen
especially temp files and recycle bin entries


Hopefully that should fix the problem for you but reply
if you have problems

Regards

Andy
 
Try running full scans in safe mode w/o networking. Then
manually search the c:/ for the ebates folder and delete
it. Then manually search the registry and msconfig for
ebates entries and remove. Then if your are running a
firewall like zone alarm or nortons go into the config
and reset anything you are not certain about from allowed
or automatic to manual. Restart and see what happens. pay
close attention to what the firewall says is looking for
access.
 
Tan,

If you can figure out how Ebates got onto your PC (apparently without your
knowledge or consent), can you send em a note?
http://www.benedelman.org/mail .

Some folks here may recall the video I posted last fall, showing Ebates
installed through security holes --
http://www.benedelman.org/news/121504-1.html . Since that time, Ebates
staff have repeatedly contacted me to tell me they've changed their ways,
their install practices are now clean-as-can-be, etc. If that's false, I'd
like to prove it.

Thanks

Ben
 
Back
Top