Results 1 to 4 of 4

Thread: I've tried everything to clear MicroBillSys infection

  1. #1
    Junior Member
    Join Date
    Aug 2007
    Posts
    17

    Angry I've tried everything to clear MicroBillSys infection

    I still have MicroBillSys even after running SpyBot which found and removed 8 infections. I have followed other threads on the forum and run Brute Force Remover also to no effect. (Thanks Shaba for your earlier input on this)
    It is activating every time we start Windows Messenger Live. I can stop it by Uninstalling Messenger, but if I download MSN again from Microsoft and re-install, it's back. I have stopped the pop-up by adding a General Firewall Rule in Norton Antivirus, so I would not be aware of the trojan if I didn't occasionally access Norton Reports & Statistics/View Activity Log/Activities, which reports the following:
    An instance of c:\Program Files\MSN Messenger\MsnMsgr.Exe is preparing to access the internet, followed by:
    Rule "Firewall Rule MBS" blocked communication. (My added rule)
    (Occasionally, it's \\MSN Messenger\livecall.exe that starts the sequence)
    Can anyone advise whether it's safe to leave things like this or will MicroBillSys start to cause havoc the longer it's left? Any ideas where it's hiding and how to clear it?
    Or, as it isn't active with MSN uninstalled, is there any way of installing a clean version of MSN?
    I have spent days on this and it's driving me mad, so all suggestions will be gratefully received.

  2. #2
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    Rather than try to follow solutions to problems posted in the Malware Removal forum that appear to be similar to yours, I suggest that you consider posting your own thread in that forum and have someone take a look at your system.

    Help in the Malware Removal forum is usually based on the specific content of the logs posted and therefore does not necessarily reflect the exact solution on other systems.

    If you decide to have an experienced malware removal specialist assist you with your particular problem, please follow the procedure in this link to run scans and produce a HijackThis log:
    After you have completed the required scans and produced the requested logs, start your own thread in the Malware Removal forum, making sure to post the logs produced from the above instructions.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  3. #3
    Junior Member
    Join Date
    Aug 2007
    Posts
    17

    Default Thanks for quick response

    Thanks for getting me back on the right track. As a new user I was stumbling about in the dark a bit and hadn't appreciated exactly how the forum worked or that there was more than one forum for different subjects.
    I'll follow your suggestions - I guess I'll need to re-install MSN before I do the scan and report?

  4. #4
    Junior Member
    Join Date
    Aug 2007
    Posts
    17

    Default Close

    Please close this thread - I will upload new thread in Malware forum as requested

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •