Category:Trojan,Popups
MBS Bill (Micro Bill Systems) Detection :
Files:
[%SYSTEM%]\mbsmon32.exe
[%SYSTEM%]\mbssm32.exe
[%SYSTEM%]\mibssys.exe
[%SYSTEM%]\monstu.exe
[%SYSTEM%]\Sexxxpassport.ico
[%SYSTEM%]\smvalid.exe
[%SYSTEM%]\u2g.f
[%SYSTEM%]\UBSauthenticateAXC.ocx
[%SYSTEM%]\UBSauthenticateAXC1.ocx
[%SYSTEM%]\vi32.exe
[%SYSTEM%]\vsm.exe
[%SYSTEM%]\winiconmon.ico
[%SYSTEM%]\winiconmon.ico.bak0
[%SYSTEM%]\winiconmon.ico.bak1
[%SYSTEM%]\winiconmon.ico.bak2
[%SYSTEM%]\mbsmon32.exe
[%SYSTEM%]\mbssm32.exe
[%SYSTEM%]\mibssys.exe
[%SYSTEM%]\monstu.exe
[%SYSTEM%]\Sexxxpassport.ico
[%SYSTEM%]\smvalid.exe
[%SYSTEM%]\u2g.f
[%SYSTEM%]\UBSauthenticateAXC.ocx
[%SYSTEM%]\UBSauthenticateAXC1.ocx
[%SYSTEM%]\vi32.exe
[%SYSTEM%]\vsm.exe
[%SYSTEM%]\winiconmon.ico
[%SYSTEM%]\winiconmon.ico.bak0
[%SYSTEM%]\winiconmon.ico.bak1
[%SYSTEM%]\winiconmon.ico.bak2
Registry Values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-
Removing MBS Bill (Micro Bill Systems):
you can run trial version of ExterminateIt, or remove MBS Bill (Micro Bill Systems) manually..ExterminateIt effectively and automatically removes Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware) from you computer.
Download ExterminateIt! to instantly get rid of MBS Bill (Micro Bill Systems)!
Also Be Aware of the Following Threats:
Remove Nemesis Backdoor
Remove IRC.Contact Backdoor
Posts
