Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

eBates Moe MoneyMaker

Overview:
eBates Moe MoneyMaker not only displays pop up ads but it interferes with many programs that try to prevent it from working properly. On top of this it also hijacks your browser and redirects you to sites where it can make money off of you. Removing this is a MUST.

From the developer:
" In downloading and/or installing the Moe Money Maker Software, you agree to the following:
1)Ebates and its agents may pop up brief alerts when you can save money by shopping through Ebates or by using the Moe Money Maker Software.

2)Ebates may direct your traffic to the merchant of your choice. This may be done
a)by presenting a choice in a pop up alert asking whether you wish to save by shopping through Ebates, thereby directing your browser through Ebates in order to ensure you earn a reward, or
b)by automatically routing you through Ebates and automatically earning you a cash-back discount with no further action on your part being necessary.

3)Ebates may disable or uninstall any other product or software tool that might interfere with the operability of the Moe Money Maker Software or otherwise preempt or render inoperative the Moe Money Maker Software in a manner that might jeopardize the ability of Ebates to earn you cash back discounts or coupon savings offered by Ebates. In installing the Moe Money Maker Software, you authorize Ebates to disable, uninstall, or delete any application or software that might, in Ebates' opinion nullify its function and put you at risk of loosing the cash-back savings that Moe Money Maker Software is designed to earn you.

4)If you would like to utilize another savings tool, you can simply uninstall the Moe Money Maker Software before installing a competitive application. The Moe Money Maker Software can be easily uninstalled through the standard 'add or remove programs' control panel, or through the Moe Money Maker's preference settings.

http://www.ebates.com/privacy.jsp

Destroy Autorun:
Delete the following keys

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\blubstersupport HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\ebatesmoemoneymaker
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\ebatesmoemoneymaker0
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\upromiseremindu
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\websavingsfromebates

Reboot your system then:

Make sure you click start --> Run and type in msconfig. Then select the startup tab. Any references to the processes below should be deleted

End Processes (may or may not exist):
couponsandoffers1.exe
care2gtu.exe
ebatesmoemoneymaker.exe
popup.exe
ebatesmoemoneymaker0.exe
ebatesmoemoneymaker.exe
webrebates.exe
websearch.exe
webrebates0.exe
webrebates1.exe

Unregister DLLs:
Tip:
this is only a list of known files/locations. You will want to do a search by the name of the file to see if they're on your system.
A while back I wrote a guide to Register/remove DLL or AX files which you will need if you don't know how to unregister these files.

Each file is in several locations so you'll need to search for them and unregister + delete them in every location you find.

iasrejcst.dll

Remove Directories:
%program_files%\ebatesmoemoneymaker
c:\program\ebatesmoemoneymaker
%program_files%\websavingsfromebates
%program_files%\ebates_moemoneymaker
%program_files%\websavings_from_ebates

Clean your Registry:

You should be back to normal IF this was your only problem. I suggest you post in our HJT forum since its not likely that this is your only bug. Read this first


Written By: Martin Krohn
Printer Friendly

Article Index:
Talk About it! -->