micro bill systems

[pabzta]

I need help trying to remove this annoying micro bill systems pop up from my desktop. no matter how many times I delete it keeps popping back up. They keep saying I owe them money and until I pay them money this bill will stay. I tried every spyware remover inc spybot. what can I Do to make this go away

[tashi]

Hello pabzta.

Please follow the procedure in this sticky topic: "BEFORE you POST" -Preliminary Steps (http://forums.spybot.info/showthread.php?t=288)

Once you have posted a helper will advise you as soon as available.

Cheers.

[pabzta]

Hope this is correct i am new on this forum.


I need help trying to remove this annoying micro bill systems pop up from my desktop. no matter how many times I delete it keeps popping back up. They keep saying I owe them money and until I pay them money this bill will stay. I tried every spyware remover inc spybot. what can I Do to make this go away


Logfile of HijackThis v1.99.1
Scan saved at 23:47:52, on 05/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\mbssm32.exe
C:\WINDOWS\system32\ctfmon.exe
c:\windows\system32\mbsrm32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\LVComsX.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Yahoo!\browser\ybrowser.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\Yahoo!\browser\ybrwicon.exe
C:\PROGRA~1\Yahoo!\browser\YBrowser.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Messenger\msmsgs.exe
D:\Programes\HijackThis.exe

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

[pskelley]

Welcome to the forum, from the limited information you have provided, including about 1/2 of a HJT log, I can not tell you much. For starters I have no way of knowing if this is malware or not. You man need to talk to a attorney? If you want me to look to see if perhaps malware is causing the issue, you need to do this.

1) Follow the complete instructions in this link:
"BEFORE you POST" -Preliminary Steps
http://forums.spybot.info/showthread.php?t=288
Use "Post Reply" to post the information in the instructions and stay in the same topic.

2) Provide more information, I need to see the message you are receiving "word for word". Tell me all you can about it, is there a link to a website being used. The more information you give me the better chance we have.

3) When HJT creates the log for you in Notepad, check first under Format to be sure "Word Wrap" IS NOT checked, then click on Edit > Select All. Copy/Paste the complete highlited log to your topic.

4) Include the reguired antivirus scan with that log and the information I requested.

Thanks

[tashi]

This topic has been closed to prevent others with similar issues posting in it.
If you need it re-opened please send me or your helper a private message (pm) and provide a link to the thread.

Applies only to the original topic starter.