Spyware - WebRebates0.exe & WebRebates1.exe

[Mockery]

Ok, I've been trying to get rid of these two things for a while now. I haven't seen them actually cause any ads to pop-up yet, but they're both constantly in my windows task manager "processes" list. I have the most updated versions of Spybot and AdAware and I ran them after rebooting windows xp into safe mode. All the other spyware on my computer is gone, but I can't seem to get rid of these damned WebRebates0.exe and WebRebates1.exe files from my processes.

Any help would be greatly appreciated.

Thankee. :o

[Mr. Oysterhead]

Go to program files and delete them. And continue doing so each time they come back.

[AChimp]

Better not mess with 'em. They're probably required for your FREE iPOD. :rolleyes

[executioneer]

probably need to edit the registry :(

[MetalMilitia]

unfortunatly these look like some pretty mean bits of spyware. A quick goodle search turned up this...

WebRebates0.exe and WebRebates1.exe, Please help! (http://forums.spywareinfo.com/index.php?showtopic=24658&pid=112643&st=0&#entry112643)

looks like you may have to download a program called 'Hijack This' but someone at the bottom of the page suggested that you can simply stop the running processes and delete the files.

Hope this helps.

[Mockery]

unfortunatly these look like some pretty mean bits of spyware. A quick goodle search turned up this...

WebRebates0.exe and WebRebates1.exe, Please help! (http://forums.spywareinfo.com/index.php?showtopic=24658&pid=112643&st=0&#entry112643)

looks like you may have to download a program called 'Hijack This' but someone at the bottom of the page suggested that you can simply stop the running processes and delete the files.

Hope this helps.
Actually, that's the problem. (I'm not at home now so I can't try deleting them) but whenever I tried stopping the process on either file, they'd start back up again.

[Mr. Oysterhead]

That's why you need to be quick. Not sure if it's true, but when I had them, ending 0 first made them not start back up. Or try deleting them in safe mode.

[Cosmo Electrolux]

hijack this can remove those files, Rog....it'll also remove the registry entries and other dependent files too....If I remember correctly.

[slain]

http://www.lavasoftsupport.com/ i dont know how to make a link.. my sister downloaded a bunch of stuff i couldnt delete with ad-aware, they also have hijackthis support..

[slain]

they have you post a log file and can tell you exactly what to delete

[Raize]

Better not mess with 'em. They're probably required for your FREE iPOD.

HAHAHAHAHAHAHAHAHAHAHAHAHA

AChimp is a god. Not my god, but a god.

First off, you have to accept the fact that you're an idiot. Then you have to run the following:
cd "C:\Program Files\Winad Client"
taskkill /T /F /IM WinClt.exe
taskkill /T /F /IM WinAd.exe
erase WinClt.exe
erase WinAd.exe
cd ..
cd Web_Rebates
taskkill /T /F /IM WebRebates0.exe
taskkill /T /F /IM WebRebates1.exe
erase WebRebates0.exe
erase WebRebates1.exe
cd ..
rd /Q /S "Winad Client"
rd /Q /S "Web_Rebates"
cd "C:\Windows\system32"
taskkill /T /F /IM fjdria.exe
taskkill /T /F /IM ezSP_Px.exe
erase fjdria.exe
erase ezSP_Px.exe

That code will successfully delete your entire windows folder and fuck up your computer so you cannot start. Put it in a batch file and run it right now, you moron.

[executioneer]

hardcore!

[Anonymous]

I bet this guy is really Gene Snitsky, on the internet.

[Raize]

Actually my solution works even though you cannot trust me because I say it does not work and deletes your hard drive. But I know Mockery is smart enough to "figure it out".

[xenosoul]

You have probably already solved this already but; Boot into safe mode delete those files from the hard drive and from the registry.

Then boot normally and double check to make sure they are gone.

That should be it.. I think I had something similar to webrebates.exe and its really not that hard to get rid of.

[FartinMowler]

Better not mess with 'em. They're probably required for your FREE iPOD.


:lol (I'd ignore that Raize guy, eh seems shifty)