WebRebates

It is also known as advertising software, displays third-party advertising on the computer. The ads can take several forms, including pop-ups, pop-unders, banners, or links embedded within web pages or parts of the Windows interface. Some adware advertising might consists of text ads shown within the application itself or within side bars, search bars, and search results. Adware is often contextually or behaviorally based and tracks browsing habits in order to display ads that are meant to be relevant to the user.0

General information:

Malware Name: WebRebates
Malware Type: Adware, Browser Plug-in
Company Name: Top Rebates
Company URL: http://www.toprebates.com/
Threat Level: Moderate Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation.

Company Description:

Top Rebates is an online incentive marketing platform that rewards loyal members with incentives based on their customers' online activity. The service includes both a Top Rebates branded version at www.toprebates.com as well as private label versions for companies including eScrip, IMSI, Aladdin Systems and others. Top Rebates leverages the existing customer acquisition practices of its partners including a marketing mix of web site promotion, online advertising, search engine keyword listings, email marketing and more.

Spyware Description:

It is also known as advertising software, displays third-party advertising on the computer. The ads can take several forms, including pop-ups, pop-unders, banners, or links embedded within web pages or parts of the Windows interface. Some adware advertising might consists of text ads shown within the application itself or within side bars, search bars, and search results. Adware is often contextually or behaviorally based and tracks browsing habits in order to display ads that are meant to be relevant to the user.0

Characteristics/Symptoms:

    -> Displays third-party advertising on the computer -> Tracks browsing habits -> Degrade the performance and stability of the computer. -> Bundled with other adware0

Additional information might be found here:

google Search at Google for WebRebates
bing Search at Bing for WebRebates
yahoo Search at Yahoo for WebRebates

Processes Running:

webrebates.exe

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\WebRebates4\websrebates\websrebates\webprebates.dat 34095 DAT File
C:\Program Files\WebRebates4\websrebates\websrebates\websrebates.dat 6477 DAT File
C:\Program Files\WebRebates4\websrebates\webtrebates\ftoprrpmp0.htm 242 HTML Document

Folder information Created after Installation:

Folder Location
C:\Program Files\WebRebates4
C:\Program Files\WebRebates4\webarebates

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstalluntopr11150 DisplayIcon
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftWindowsCurrentVersionUninstalluntopr11150 DisplayName
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\untopr11150 UninstallString