EbatesMoeMoneyMaker

The Moe Money Maker software alerts you when you visit an Ebates store without logging into Ebates.com first. This software runs as a BHO and has an Ebates icon in the Internet Explorer toolbar so we can edit some preferences for the use of the Ebates software. It is a component that Internet Explorer will load whenever it starts, shares IE's memory context, can perform any action on the available windows and modules. A BHO can detect events; create windows to display additional information on a viewed page, monitor messages and actions.0

General information:

Malware Name:	EbatesMoeMoneyMaker
Malware Type:	Browser Helper Object
Company Name:	Ebates
Company URL:	http://www.winsniffer.com/
Threat Level:
Operating System:
Installation Type:
Operation:

Company Description:

Ebates is all about saving money and getting Cash Back whenever we shop online. When we become a member and shop through Ebates, we can save literally thousands of dollars every year on the things we're already buying. It provides Free Membership, Cash Back on all purchase, Trust-e certified to protect privacy. It also provides exclusive offers and free shipping at over 800 stores.

Spyware Description:

The Moe Money Maker software alerts you when you visit an Ebates store without logging into Ebates.com first. This software runs as a BHO and has an Ebates icon in the Internet Explorer toolbar so we can edit some preferences for the use of the Ebates software. It is a component that Internet Explorer will load whenever it starts, shares IE's memory context, can perform any action on the available windows and modules. A BHO can detect events; create windows to display additional information on a viewed page, monitor messages and actions.0

Characteristics/Symptoms:

    -> Displays third-party advertising on the computer -> Tracks browsing habits -> Degrade the performance and stability of the computer. -> Bundled with other adware 0

Additional information might be found here:

	Search at Google for EbatesMoeMoneyMaker
	Search at Bing for EbatesMoeMoneyMaker
	Search at Yahoo for EbatesMoeMoneyMaker

Processes Running:

EbatesMoeMoneyMaker.exe

File information Created after Installation:

File Location	Size (Bytes)	Type
C:\Program Files\EbatesMoeMoneyMaker4\ebatessmmm\Html\ebmmP1.htm	3554	HTM File
C:\Program Files\EbatesMoeMoneyMaker4\ebatessmmm\Images\ebmm.ico	1718	Icon
C:\Program Files\EbatesMoeMoneyMaker4\ebatessmmm\ebatestmmm\ebmmr0.htm	3559	HTM File

Folder information Created after Installation:

Folder Location
C:\Program Files\EbatesMoeMoneyMaker4
C:\Program Files\EbatesMoeMoneyMaker4\ebateatmmm

Registry information Created after Installation: