|
Ebates -Moe Money Maker, eAnthology, eAcceleration
Ebates group of Browser Helper Objects (BHO) which eventually evolves into Browser Hijacking Objects.
eAnthology which claims to be an anti-spyware application plus pop-blocker and antivirus but does none of it efficient and in fact is a spyware itself. It is also listed as a trojan Win32.Wren.A by Pest Petrol .
Win32.Wren.A download trojan. Search for it under ID 43306.
Ebates MoneyMaker. Search for it under ID 453073593.
Some of the 'bundled' product - non-comprehensive list.
Stop-Sign
eAccelerate or eAcceleration
eAnthology
Moe Money Maker
Adware/MoeMoney [Panda]
Adware/TopMoxie [Panda]
HackTool/Jkill.A [Panda]
Removal eithier using Pest Patrol to clean up and prevent future infection or manually as follows;
Terminate the 'eanthology.exe' process from the Task Manager (ctrl-alt-delete), select it and click End Task.
Get into DOS prompt (Start, Run type CMD).
Once in DOS, you can highlight the following lines and then right click, select copy and then right click, select paste in the DOS screen to paste the instruction. Or if you prefer you can also type the following commands line by line.
cd "%WinDir%\System"
regsvr32 /u c:\progra~1\common~1\eacceleration\eanthmngr.dll
regsvr32 /u c:\progra~1\common~1\eacceleration\eanthtutor.dll
regsvr32 /u c:\progra~1\common~1\eacceleration\eanthtutor\eantheanthgen.dll
regsvr32 /u c:\progra~1\common~1\eacceleration\eanthtutor\eantheanthintro.dll
regsvr32 /u c:\progra~1\common~1\eacceleration\eanthtutor\eanthkonx.dll
regsvr32 /u c:\progra~1\common~1\eacceleration\eanthtutor\eanthstopsscan.dll
regsvr32 /u c:\progra~1\common~1\eacceleration\syscheck.dll
regsvr32 /u c:\progra~1\common~1\eacceleration\defender.dll
del c:\progra~1\common~1\eacceleration
rd c:\progra~1\common~1\eacceleration\eanthtutor
rd c:\progra~1\common~1\eacceleration
Run regedit (Start, Run, type regedit) and look into HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run and delete any value that refers to eAnthology.
|