Unknown
Adware/TopRebates [Panda]TrojanClicker.Win32.Delf.z [Kaspersky]TrojanDownloader.Win32.Agent.bfTrojanDownloader.Win32.Agent.y [Kaspersky]TrojanSpy.Win32.Spung.a [Kaspersky]
arupdate.exec: empwebrebates_cdt_installsilent.execashback.execb.exeflash.exenls.exeDocuments and Settingslocal settings empdjtopr1150.exeProgram Filesweb_rebatesdisp1150.exeProgram Filesweb_rebateswebrebates0.exeProgram Filesweb_rebateswebrebates1.exeProgram Fileswebrebateswebrebates1.exeWindows2805e.exeunregister.exeunstsa3.exe
Windows3_0_1browserhelper3.dllWindows eti.dllWindowssystem32imgconv.dll
HKEY_CURRENT_USERsoftwaremicrosoftinternet explorermenuextweb rebates HKEY_CURRENT_USERsoftwaremicrosoftinternet explorermenuextweb rebates contexts 63HKEY_CURRENT_USERsoftwaremicrosoftinternet explorermenuextweb rebates file://c:program filesweb_rebatessy1150 p1150scri1150a.htmHKEY_CURRENT_USERsoftwaremicrosoftinternet explorer oolbarwebbrowser{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstalluntopr1150 displayname webrebates (by toprebates.com)HKEY_LOCAL_MACHINEsoftwareclassesappidhungryhands.dllappidHKEY_LOCAL_MACHINEsoftwareclassesclsid{0a8ce102-fa03-4612-9bee-7fe5452f4cb1}HKEY_LOCAL_MACHINEsoftwareclassesclsid{bcf96fb4-5f1b-497b-aecc-910304a55011}appidHKEY_LOCAL_MACHINEsoftwareclassesinterface{f8fb4ea2-6c05-4de5-8cd0-625b03f48e22}HKEY_LOCAL_MACHINEsoftwareclasses ypelib{03f8822f-8877-4002-8bcd-b532d53d8471}HKEY_LOCAL_MACHINEsoftwaremicrosoftinternet explorer oolbar{26398112-f068-4273-964b-a1d8bcf3e576}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerrowser helper objects{c5941ee5-6dfa-11d8-86b0-0002441a9695}ho_pathHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerrowser helper objects{c5941ee5-6dfa-11d8-86b0-0002441a9695}honewHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerrowser helper objects{c5941ee5-6dfa-11d8-86b0-0002441a9695}honew_urlHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerrowser helper objects{c5941ee5-6dfa-11d8-86b0-0002441a9695}honew_versionHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstalluntopr1150 uninstallstring "c:program filesweb_rebateswebrebates1.exe" untopr1150HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstalluntopr1150 webrebates (by toprebates.com)HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstalluntopr1150displaynameHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstalluntopr1150uninstallstringHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerrowser helper objects{c5941ee5-6dfa-11d8-86b0-0002441a9695}hoversionHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerrowser helper objects{c5941ee5-6dfa-11d8-86b0-0002441a9695}keynewHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerrowser helper objects{c5941ee5-6dfa-11d8-86b0-0002441a9695}keynew_urlHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerrowser helper objects{c5941ee5-6dfa-11d8-86b0-0002441a9695}keynew_versionHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerrowser helper objects{c5941ee5-6dfa-11d8-86b0-0002441a9695}keyversionHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionexplorerdcr2HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionmoduleusagec:/winnt/downloaded program files/conflict.1/installer.dll.ownerHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionmoduleusagec:/winnt/downloaded program files/conflict.1/installer.dll{7eb15626-cb8e-4174-8a72-c055b12b4310}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionmoduleusagec:/winnt/downloaded program files/wuinst.dll.ownerHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionmoduleusagec:/winnt/downloaded program files/wuinst.dll{e2f2b9d0-96b9-4b25-b90c-636ecb207d18}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionun webrebates0 HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionun webrebates0 "c:program filesweb_rebateswebrebates0.exe"HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionunwebrebatesHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionunwebrebates0HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionshell extensionsapproved{26398112-f068-4273-964b-a1d8bcf3e576}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallwindows sr 3.0--HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallwindows sr 3.0displaynameHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallwindows sr 3.0uninstallstring