microbillsys problem

[cheesedoctor]

Hi i was hoping somone could help me. when i turn my compute on a popup comes up saying i need to pay some bill even when not conected to internet. when i am conected a blank web page tries to open but fails. i have bought the newest norton and webroot spysweeper. this has not worked and wont let me delete it. i have vista home premium and am really worried as i haveread about peoples computers locking up. i have not signed up to this website and i know everyone probably says that but i genuinely havent.

[askey127]

cheeasedoctor,
ref: Metallica
Disclaimer: These instructions should NOT be used if you willingly installed the software, and agreed to its terms.

Please download Brute Force Uninstaller to your desktop.

• Right click the BFU folder on your desktop, and choose Extract All
• Click "Next"
• In the box to choose where to extract the files to,
• Click "Browse"
• Click on the + sign next to "My Computer"
• Click on "Local Disk (C: ) or whatever your primary drive is
• Click "Make New Folder"
• Type in BFU
• Click "Next", and Uncheck the "Show Extracted Files" box and then click "Finish".

RIGHT-CLICK HERE and choose "Save As" (in IE it's "Save Target As") in order to download MicroBill Remover.
Save it in the same folder you made earlier (c:\BFU).
--------------------------------------------------------------------
(The part above may have to be accomplished on a separate PC and copied to the infected machine)
--------------------------------------------------------------------
Restart your computer and boot into Safe Mode:

• Restart your computer
• Start tapping the F8 key when the computer restarts.
• When the start menu opens, choose Safe mode
• Press Enter. The computer then begins to start in Safe mode.

Then, please go to Start > My Computer and navigate to the C:\BFU folder.

• Start the Brute Force Uninstaller by doubleclicking BFU.exe
• Behind the scriptline to execute field click the and select mbs.bfu
• Press Execute and let it do it's job. (You ought to see a progress bar if you did this correctly.)
• Wait for the complete script execution box to pop up and press OK.
• Press exit to terminate the BFU program.

Reboot your computer and check if it worked.


Note: If your PC will not access the Internet, you may have to download the files on a clean PC and transfer them via a flash drive to execute the instructions.

Second Note: if you installed this software voluntarily and want to keep it, you can find a support address mentioned here:

Code: Select all

www.microbillsys.com/pagecontrol.php?pgidx=CH1SEC1#CH4SEC1

(copy & paste the address to your browser).

When you have comp;leted the instruction so far, please run a scan log from HiJackThis and post it back here.
Instructions are here:
-----------------------------------------------
Download HJTInstall.exe and save to your Desktop.

• Doubleclick HJTInstall.exe to install it.
• By default it will install to C:\Program Files\Trend Micro\HijackThis .
• Click on Install.
• It will create a HijackThis icon on the desktop.
• Once installed, it will launch Hijackthis.
• Click on the Do a system scan and save a logfile button. It will scan and a text log file will open in notepad.
• Make sure Notepad's Format Menu has Word Wrap Unchecked.
• Copy/Paste the entire log to your next reply please.
• No matter what it says in the QuickStart Guide or elsewhere, DON'T USE the "ANALYZE THIS" button.
  Its Findings can be Dangerous for your machine.
• Please Don't have Hijackthis fix anything yet.
  Most of what it is in the log are legitimate entries, necessary for the operation of your computer.

askey127

['KotaGuy]

This topic is now closed due to inactivity. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.