Page 1 of 2 12 LastLast
Results 1 to 10 of 18

Thread: microbillsys.com

  1. #1
    Junior Member
    Join Date
    Apr 2007
    Posts
    10

    Default microbillsys.com

    I am getting a persistent problem with "microbillsys.com" - this is referred to in a an archived thread

    http://forums.spybot.info/showthread...crobillsys.com

    but it seems that Spybot still does not deal with this trojan.

    There are several references to this on the internet, e.g.

    http://groups.google.co.uk/group/mic...ger%22&rnum=2#

    Please advise on how I can use Spybot to remove this problem.

    Thanks,

    Mike

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,955

    Default

    Hello.

    If you can find the file/s, please zip and send to: detections(AT)spybot.info (Replace AT with @)

    Also produce a *complete* Spybot bug report:

    Open Spybot-S&D and start a scan ("check for problems"). After the scan, right-click in the results field and choose either "Save full report to file..." or
    "Copy full report to clipboard".

    Attach that file (or copy the report) to the email.

    Then follow the procedure in this link: "BEFORE you POST" and start your own thread in the Malware Removal Forum

    Cheers.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Junior Member
    Join Date
    Apr 2007
    Posts
    10

    Default

    OK, will do that tomorrow.

    Thanks.

    Mike

  4. #4
    Junior Member
    Join Date
    Apr 2007
    Posts
    10

    Default

    Quote Originally Posted by tashi View Post
    Hello.

    If you can find the file/s, please zip and send to: detections(AT)spybot.info (Replace AT with @)

    Also produce a *complete* Spybot bug report:

    Open Spybot-S&D and start a scan ("check for problems"). After the scan, right-click in the results field and choose either "Save full report to file..." or
    "Copy full report to clipboard".

    Attach that file (or copy the report) to the email.

    Then follow the procedure in this link: "BEFORE you POST" and start your own thread in the Malware Removal Forum

    Cheers.
    OK, have done. I did update my Spybot files and I notice that MBS Billing is now covered - about to reboot after the fix.

    Thanks for your help.

    Mike

  5. #5
    Junior Member
    Join Date
    Apr 2007
    Posts
    10

    Default

    Bad news. The Spybot fix did not work, I'm still getting the pop-up after a reboot.

    I did notice that the scan says it found - and removed - a file called something like "MBS Sexxxxxxxxpassport" - which was indeed one of the pop-ups.

    But there is another one (the one I'm still getting), which refers instead to "MySexWorld Subscription Gold".

    Slightly different "invader", perhaps?

    Mike

  6. #6
    Junior Member
    Join Date
    Apr 2007
    Posts
    10

    Default

    D'oh. Hang on a minute (talking to myself here).

    I forgot to immunize after doing the fix.

    Once more, with feeling.....

  7. #7
    Junior Member
    Join Date
    Apr 2007
    Posts
    10

    Default

    Drat and double drat, it's back.

    Ran Immunise - successful.
    Ran S&D - it found the MBS nasty.
    Ran fix - green tick.
    Ran immunise again to be on the safe side - all known products are blocked.
    Rebooted.
    After a few minutes of surfing, the bloody MBS demand screen popped up again.
    Bugger.

  8. #8
    Junior Member
    Join Date
    Dec 2006
    Posts
    18

    Default found something of value

    hello dont want to be a bother but just found something interesting about that popup problem

    http://www.microbillsys.com/pagecont...?pgidx=CH1SEC2

    if you go to this link you might find some valuable info

    Ill keep researching on how to get rid of them

  9. #9
    Junior Member
    Join Date
    Dec 2006
    Posts
    18

    Lightbulb some more info and a solution

    kehttp://research.sunbelt-software.com/threatdisplay.aspx?name=MicroBillSys&threatid=123902ep

    some more info about that mysterious problem with microbillsys
    in my first post I went to their webstite to see for myself they say another company is making malware with their logo

    then I came across another forum

    http://www.pcadvisor.co.uk/forums/in...1874&forumid=1

    the person named fhiufhyrefyer had a solution I dont know if it will help you but I cant garrentee

    note these are his words

    I accept no repsonsibility for any damage monetry or otherwise from using the following information.

    <Removed> See: "BEFORE you POST"

    you can go to that link to get more detailed info and read right underneith his post what mbs had to say for themselves
    Last edited by tashi; 2007-04-25 at 02:10. Reason: Removal advice edited out, link added

  10. #10
    Junior Member
    Join Date
    Dec 2006
    Posts
    18

    Exclamation more info

    one more bit of info
    they are nasty
    http://research.sunbelt-software.com...hreatid=123902

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •