Trojan-"Micro Bill Systems"

[lightoftruth]

Ive got a trojan on my computer, seems to be one of the smitfraud variety. It keeps hacking into internet explorer and using it to create a permanent pop up.

It claims i have to pay $19.99 for sexxxpassport.ico, a file i have never downloaded in my life.

Ive ran avast anti-virus, adaware SE personal and spybot S&D in safe mode all to no avail. Infact the trojan still managed to load whilst i put it in safe mode!

if there is a computer tech out there could you please tell me the following...

1) How to get into the "hkey" registery files
2) the names and location of all the malicious files associated with MBS trojan
3) best way to go about deleting them so that it doesn't just self ressurect!)

[Buenchico]

After a bit of Googling, I suggest that you first need to know how to unregister a dll file. See here:
http://www.xp-vista.com/other/how-to-unregiste r-dll-files

Then you need to know how to back-up the registry and (after backing up) how to edit it:
http://support.microsoft.com/kb/322756

Then you can follow the instructions here:
http://www.spywaredb.com/remove-sexxxpassport- com/

Chris

[buckoneton]

There is another way to remove it, if your not sure about messing around with the registery, article here - http://technology.guardian.co.uk/weekly/story/ 0,,2023190,00.html

[daimionn]

don't know if it will help but here's a piece of software that has potential Windows Defender a free program that helps protect your computer against pop-ups, slow performance, and security threats caused by spyware and other unwanted software.http://www.microsoft.com/athome/security/spywa re/software/default.mspx

[john1d]

Micro Bill Systems, absolutly a fake and dangerous hijacker, and it comes from trojan.zlob. now a days spylocked is a very dangerous virus and it also come from trojan.zlob spyware..

SpyLocked is a Dangerous fake antispyware software and it is update version of SpyDawn. SpyLocked is a variant of Trojan.Zlob. SpyLocked display a fake warning message to purchase the paid version of SpyLocked.

SpyLocked also displays a fake warning alert with flashing icon on your system tray. A Pop up balloon warning messages claiming that your PC is infected. For example : "Critical System Error", "Your computer is infected", "System Alert", "Security Alert", Trojan-Spy.win32@mx", "Virus Alert", "Security Alert" or "Spyware.Cyberlog-X".

you can manually or automatically remove it from the below link :-

http://www.pcontech.com/spyware/remove/spylock ed-remove.htm

also from...

http://www.pcontech.com/

[Rom 07]

Answer.

1. Go to 'Computer' > 'Local Disk (C:)' > 'Tools' > 'Folder Options...' > 'View' > Click on 'Show hidden files and folders'. Identify and delete any files that are trojans.

2. Install a spyware.

3. Go to 'Control Panel', check if everything is switched on and secure (Security Centre / Windows Firewall / Internet Options > Security)

4.
1) Back up your files.
2) Run a scan regularly.
3) Always 'Refresh' your computer.
4) Restart your computer after an installation.
5) Never ignore the 'terms & conditions'.
6) Update your computer security instantly when necessary.

Knowledge.

[Allena123]

My PC is running like new.
I was having trouble with my new computer running slow after I had only had it for a few months. I was upset thinking it was something wrong with my computer until I realized that I needed a good scan to clean out those bugs and viruses that was the real problem. When I started using Search-and-destroy Antispyware it took care of this problem and now my PC is running like new again. The antispyware solution from Search-and-destroy, which you can find at http://www.Search-and-destroy.com/antispyware. html, has made a big difference for me and I�m sure you�ll be happy with it too.