The following instructions have been created to help you to get rid of "Wotch" manually.
Use this guide at your own risk; software should usually be better suited to remove malware, since it is able to look deeper.

If this guide was helpful to you, please consider donating towards this site.

Threat Details:

Categories:
  • adware
  • malware

Description:
May install third-party software without knowledge of the user.
Privacy Statement:
While we don't know the identity of MP Software users, the MP client side technology and the MP server technology could in the future, anonymously collect and use the following kinds of information:
Some of the Mini-products viewed
Response to the Mini-products viewed
Standard web log information (excluding IP Addresses) and system settings
What software is on the personal computer
Any demographic information you may provide at your choice like First name, Country, and ZIP code
[...]
We associate such information with a particular personal computer through a randomly generated Anonymous ID number and use it to accomplish the following:
Enable the functionality provided in the MP (for example, to offer mini-products like mini-books, mini-magazines, mini-stuff etc. according to user selections)
· Select and deliver installation files for optional new software applications
· Deliver sponsorships to a computer screen on behalf of sponsors
[...]
When running on a computer, the MP regularly communicates with MP servers, and in some cases, third party servers, among other reasons, to: - maintain/update the MP or the MP Server;
- facilitate installing and uninstalling the MP or MP Server;
- retrieve mini-products and sponsorships for display;
- facilitate various MP or MP Server features;
- collect computer user usage information in an anonymous manner; and/or update user information.
[...]
To improve the features or functions of the MP Server, or the MP or third-party Software, we may occasionally install technologies, such as certain rich media player applications, browser plugins, virtual machines, and runtime environments (collectively "Enabling Technologies").
[...]
Note that soon after you have uninstalled the MP, any Enabling Technologies or mini-programs or third party software that were previously installed (such as browser plug-ins and audio/video players) will remain on the computer, because other programs may rely on these Enabling Technologies to function correctly.
Links (be careful!):
Website: http://www.wotch.com/
Product: http://www.mini-player.com/
Privacy: http://www.mini-player.com/privacy/
Removal Instructions:

Autorun:

Please use Spybot-S&D, RunAlyzer or msconfig.exe to remove the following autorun entries.
  • Entries named "media_stub".
  • Entries pointing to "\ebkrdr\stub.exe".
  • Entries named "media_manager".
  • Entries pointing to "\ebkrdr\mediaman.exe".

Files:

Please use Windows Explorer or another file manager of your choice to locate and delete these files.
  • The file at "<$WINDIR>\..\Program Files\ebkrdr\stub.exe".
  • The file at "<$WINDIR>\..\Program Files\ebkrdr\mediaman.exe".
  • The file at "<$WINDIR>\..\ebkrdr\stub.exe".
  • The file at "<$WINDIR>\..\ebkrdr\mediaman.exe".
Make sure you set your file manager to display hidden and system files. If Wotch uses rootkit technologies, use our RootAlyzer or our Total Commander anti-rootkit plugins.
You will have to use a global search for files without a name specified. Be extra careful, because just the name might not be enough to identify files!

Folders:

Please use Windows Explorer or another file manager of your choice to locate and delete these folders.
  • The directory at "C:\Program files\ebkrdr".
  • The directory at "C:\ebkrdr".
Make sure you set your file manager to display hidden and system files. If Wotch uses rootkit technologies, use our RootAlyzer or our Total Commander anti-rootkit plugins.
You will have to use a global search for files without a name specified. Be extra careful, because just the name might not be enough to identify folders!

Final Words:

If neither Spybot-S&D nor self help did resolve the issue or you would prefer one on one help,
  1. Please read these instructions before requesting assistance,
  2. Then start your own thread in the Malware Removal Forum where a volunteer analyst will advise you as soon as available.