Is your computer infected with Adware.Webmoner? This step-by-step guide can help you safely and quickly remove Adware.Webmoner. If you have any problem during the removal process, please contact Tee Support agents 24/7 online for more detailed instructions.

Adware.Webmoner Description

Adware.Webmoner is determined by Tee Support Labs as malicious adware which will popup annoying aderts once infect a computer.  Adware.Webmoner installed itself to the targeted computer as a Browser Helper Object and will steal private information without any permission. Remove Adware.Webmoner before it do any damage to your system.

Adware.Webmoner has security threat shows in the following aspects

  1. Adware.Webmoner often infect computer without your permission at the background.
  2. Adware.Webmoner allow hacker remotely access to the computer.
  3. Adware.Webmoner can steal confidential information from computer users.
  4. Your antivirus software (Kaspersky) may alert you to get rid of this infection Adware.Webmoner.

Adware.Webmoner Step-by-Step Removal Instructions

1)  The associated files of  Adware.Webmoner to be deleted are listed below：

   %Temp%\dat1.tmp

2)  The registry entries of Adware.Webmoner that need to be removed are listed as follows (Take Note: Back up the Windows registry before editing it, so that you can quickly restore it later if something goes wrong.):

The Real Princess{F61B9126-7CC2-4BB1-B0BD-E7A872CACCE2} =
00 00 00 00 80 B9 E3 40
[HKEY_CURRENT_USER\Software\NATATA eBook]
exe = "1"
exeal = "0"
[HKEY_CURRENT_USER\Software\NATATA eBook\The Real Princess{F61B9126-7CC2-4BB1-B0BD-E7A872CACCE2}]
eBook = ""
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
0 = E0 5A 00 00 65 68 63 66 00 00 00 00 00 00 00 00 02 01 00 00 00 00 00 00 01 00 20 00 49 00 00 00 40

 00 64 00 65 00 76 00 69 00 63 00 65 00 3A 00 64 00 6D 00 6F 00 3A 00 7B 00 32 00 45 00 45 00 42 00 34 

00 41 00 44 00 46 00 2D 00 34 00 35 00 37 00 38 0
[HKEY_CURRENT_USER\Software\Microsoft\Multimedia\ActiveMovie\Filter Cache]
DSGuid = "{00000000-0000-0000-0000-000000000000}"
FilterData = 02 00 00 00 00 00 80 00 01 00 00 00 00 00 00 00 30 70 69 33 02 00 00 00 00 00 00 00 08 00

00 00 00 00 00 00 00 00 00 00 30 74 79 33 00 00 00 00 A8 00 00 00 B8 00 00 00 31 74 79 33 00 00 00 00

A8 00 00 00 C8 00 00 00 32 74 79 33 00 00 00 00 A8 00 00 0
CLSID = "{79376820-07D0-11CF-A24D-0020AFD79767}"
FriendlyName = "Default DirectSound Device"
[HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device]
MidiOutId = 0xFFFFFFFF
FilterData = 02 00 00 00 00 00 80 00 01 00 00 00 00 00 00 00 30 70 69 33 02 00 00 00 00 00 00 00 01 00

00 00 00 00 00 00 00 00 00 00 30 74 79 33 00 00 00 00 38 00 00 00 48 00 00 00 6D 69 64 73 00 00 10 00

80 00 00 AA 00 38 9B 71 00 00 00 00 00 00 00 00 00 00 00 0
CLSID = "{07B65360-C445-11CE-AFDE-00AA006C14F4}"
FriendlyName = "Default MidiOut Device"
[HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\[filename of the sample #1 without extension].eProtocol]
(Default) = "{82184935-B894-4AB2-8590-603BA7D74B71}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\[filename of the sample #1 without extension].eProtocol\Clsid]
(Default) = "eProtocol"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82184935-B894-4AB2-8590-603BA7D74B71}]
(Default) = "[file and pathname of the sample #1]"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82184935-B894-4AB2-8590-603BA7D74B71}\LocalServer32]
(Default) = "[filename of the sample #1 without extension].eProtocol"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{82184935-B894-4AB2-8590-603BA7D74B71}\ProgID]
Bookmark and Share