WebRebates

Description: Adware
Risk Level: High
Date of First Occurence: Tuesday, April 15, 2008
Software Developer: TopRebates, LLC
Brief Info: WebRebates tracks the user's Internet activity and displays rebate messages for certain Web sites.
Removal: This threat can be removed using "Spyware Terminator"

RIMUOVI SPYWARE »

Geographical Distribution of Threat "WebRebates"

Threat Info

View All

Detected Items

  1. Detected Files: %TEMP%\djtopr1150.exe MD5: BDC1886210A68E8A2758AD786869CD5B Size:32667 MD5: AB611275558A215E3E7ED60A82621F0D Size:32678 %PROGRAMFILES%\WebRebates4\w11150.exe MD5: 38AEDF0622F35DC267D8203EDFCA6AF7 Size:86016 MD5: BBCFC8250BA2C1EAEF617C02719EEBAF Size:86016 MD5: 3D551939C66887B25DDF2B40C4FD46DF Size:86016 MD5: 85056DAD2810720F92D5F7DC92B733A2 Size:86016 %PROGRAMFILES%\WebRebates4\webrebates2.dll MD5: 10300EE5519D57990795DFEA5428B6EB Size:135168 MD5: 71ED1F840040F30F76E7AE59B1C0D2A0 Size:135168 MD5: F605C5B393B4571A73A2DF81F3A2B02A Size:135168 MD5: 7B4E4215443A5FA2FA18ACE62A322824 Size:135168 %PROGRAMFILES%\WebRebates4\webrebates.dll MD5: 80D8F843E981C44903E7030E7F1DF960 Size:102400 MD5: 728242047C530C74E78A1A2FA0EED6CD Size:102498 MD5: 6539C3D77470E97042C16746B1B276B7 Size:102400 MD5: F48438D103BEFE10293E429249863298 Size:102400 %PROGRAMFILES%\Web_Rebates\WebRebates1.exe MD5: 8E03236F58DB8AFA359BA0E043C3C370 Size:290816 MD5: 1D619A0A6324714418B09D8DDA63E5AF Size:380928 MD5: 796DC10F80C1C8916CD18E39880AF443 Size:393216 MD5: 8008D9A366D6F42989716C1D1D84A96A Size:278528 %PROGRAMFILES%\Web_Rebates\disp1150.exe MD5: ABDCA7D052E3185D50F7F2A53AF1C2D2 Size:28672 MD5: 41B3DC12591821A656D09067DD024EAD Size:57344 MD5: FE723931D4D0B3FC77866A6FBBAC66CC Size:28672 %PROGRAMFILES%\Web_Rebates\WebRebates2.dll MD5: B66B44F12751FB09E76D4E30B829AB87 Size:135168 %PROGRAMFILES%\WebRebates4\webrebates.exe MD5: E5302B6EFC34F4BFA5BECFBC3AB8C50B Size:241664 MD5: 11155DBB30F9AFBD5EEDA92507562C7F Size:241664 MD5: C94AE0A7FFCA4D9FE9D2E2B1B0680EEA Size:241664 %PROGRAMFILES%\Web_Rebates\WebRebates0.exe MD5: AEA783C598C05132F3B774D0A8D51CF5 Size:98304 MD5: A84C6860EDA3A0C110E36231ABE51314 Size:57344 %PROGRAMFILES%\WebRebates\WebRebates1.exe MD5: E1B1CC556998D89BAC1CA25F013B8F52 Size:24576 %PROGRAMFILES%\WebRebates\WebRebates.exe MD5: 801261A0B30FA771A5A08DD64C9E1C3B Size:45056 %PROGRAMFILES%\Web_Rebates\WebRebates2.exe MD5: 33B10775938EA2EDF64CC19461250841 Size:24576
  2. Detected Files with variable Filenames: MD5: 7B4E4215443A5FA2FA18ACE62A322824 Size: 135168 %PROGRAMFILES%\WebRebates4\webrebates2.dll %PROGRAMFILES%\WebRebates4\webrebates2.dll.ren MD5: C94AE0A7FFCA4D9FE9D2E2B1B0680EEA Size: 241664 %PROGRAMFILES%\WebRebates4\webrebates.exe %PROGRAMFILES%\WebRebates4\webrebates.exe.ren MD5: F48438D103BEFE10293E429249863298 Size: 102400 %PROGRAMFILES%\WebRebates4\webrebates.dll %PROGRAMFILES%\WebRebates4\webrebates.dll.ren MD5: 85056DAD2810720F92D5F7DC92B733A2 Size: 86016 %PROGRAMFILES%\WebRebates4\w11150.exe %PROGRAMFILES%\WebRebates4\w11150.exe.ren MD5: 615694EB6FEDA5B938773D121991D64A Size: 351042 %PROGRAMFILES%\WebRebates\System\Temp\toprC.exe %PROGRAMFILES%\WebRebates\toprC.exe

Detecting items list:

  1. Files by Name %TEMP%\jkill.exe %ProgramFiles%\Web_Rebates*\disp1150.exe %ProgramFiles%\Web_Rebates*\sy1150\tp1150\wrwst5s.exe %ProgramFiles%\Web_Cpr*\WebCpr1.exe %ProgramFiles%\Web_Cpr*\WebCpr0.exe %ProgramFiles%\Web_Cpr*\disp2000.exe %TEMP%\djtopr1150.exe %TEMP%\supportinstall.exe %ProgramFiles%\Web_Rebates*\supportinstall.exe %ProgramFiles%\Web_Cpr*\WebCpr1.exe %ProgramFiles%\Web_Cpr\supportinstall.exe %ProgramFiles%\Web_Rebates?\webrebates*.dll %ProgramFiles%\WebRebates?\webrebates*.dll %ProgramFiles%\WebRebates?\w11150.exe %ProgramFiles%\WebRebates?\webrebates*.exe d:\Program Files\WebRebates?\webrebates*.exe %ProgramFiles%\WebRebates?\webrebates2.dll %ProgramFiles%\Web_Rebates?\webrebates*.exe %ProgramFiles%\Web_Rebates?\webrebates0.exe %ProgramFiles%\Web_Rebates?\webrebates2.exe %ProgramFiles%\WebRebates\webrebates*.exe d:\Program Files\WebRebates\webrebates*.exe %ProgramFiles%\WebRebates\webrebates2.dll %ProgramFiles%\Web_Rebates\webrebates*.exe %ProgramFiles%\Web_Rebates\webrebates0.exe %ProgramFiles%\Web_Rebates\webrebates2.exe
  2. Files by Directories %ProgramFiles%\Web_Rebates* %ProgramFiles%\Web_Cpr* %ProgramFiles%\webrebates*

« Go to Software Database