microbillsys.com

[mjmoooney]

I am getting a persistent problem with "microbillsys.com" - this is referred to in a an archived thread

http://forums.spybot.info/showthread...crobillsys.com

but it seems that Spybot still does not deal with this trojan.

There are several references to this on the internet, e.g.

http://groups.google.co.uk/group/mic...ger%22&rnum=2#

Please advise on how I can use Spybot to remove this problem.

Thanks,

Mike

[tashi]

Hello.

If you can find the file/s, please zip and send to: detections(AT)spybot.info (Replace AT with @)

Also produce a *complete* Spybot bug report:

Open Spybot-S&D and start a scan ("check for problems"). After the scan, right-click in the results field and choose either "Save full report to file..." or
"Copy full report to clipboard".

Attach that file (or copy the report) to the email.

Then follow the procedure in this link: "BEFORE you POST" and start your own thread in the Malware Removal Forum

Cheers.

[mjmoooney]

OK, will do that tomorrow.

Thanks.

Mike

[mjmoooney]

Hello.

If you can find the file/s, please zip and send to: detections(AT)spybot.info (Replace AT with @)

Also produce a *complete* Spybot bug report:

Open Spybot-S&D and start a scan ("check for problems"). After the scan, right-click in the results field and choose either "Save full report to file..." or
"Copy full report to clipboard".

Attach that file (or copy the report) to the email.

Then follow the procedure in this link: "BEFORE you POST" and start your own thread in the Malware Removal Forum

Cheers.

OK, have done. I did update my Spybot files and I notice that MBS Billing is now covered - about to reboot after the fix.

Thanks for your help.

Mike

[mjmoooney]

Bad news. The Spybot fix did not work, I'm still getting the pop-up after a reboot.

I did notice that the scan says it found - and removed - a file called something like "MBS Sexxxxxxxxpassport" - which was indeed one of the pop-ups.

But there is another one (the one I'm still getting), which refers instead to "MySexWorld Subscription Gold".

Slightly different "invader", perhaps?

Mike

[mjmoooney]

D'oh. Hang on a minute (talking to myself here).

I forgot to immunize after doing the fix.

Once more, with feeling.....

[mjmoooney]

Drat and double drat, it's back.

Ran Immunise - successful.
Ran S&D - it found the MBS nasty.
Ran fix - green tick.
Ran immunise again to be on the safe side - all known products are blocked.
Rebooted.
After a few minutes of surfing, the bloody MBS demand screen popped up again.
Bugger.

[youngie62]

guys go onto this website and follow the instructions from fhiufhyrefyer it works and is really easy to do. see below

Removal!

Hi.

I accept no repsonsibility for any damage monetry or otherwise from using the following information.

[tashi]

Hello youngie62,

This has been posted before and we are not an advertisement for that person's instructions.

Thank you for your understanding.

[raiderxl7]

hello again ive benn off for a while and did not realise what has benn going on

tashi thankyou for correcting me even tho I was trying to help at the time
I forgot to read the posting instructions all the research the advise may have helped but with such a big crisis as it is Qualified people should br the only ones giving such advise

Ive realised by following the guidelines it can save alot of peoples effort and recources and can aid in better for the program

thanks tashi Ill try and make sure I follow the guideline fully next time

and I suggest anyoneelse who is to comment should view it the same way

looking all over this forum I can see that microbillsys is a big problem and advise anyone who will read this to follow proper procedure in reporting this

thanks