|
|
|
Start new subject | Reply to this subject
|
[1] 2 3 4 5 6 7 8 9 10 11 12 13 14 15 
|
 niki31 |
Sun, 29/10/06@16:12
|
|
I know that this has been discussed but i can't find the thread. I keep getting the pop up every time i log on to the internet asking for money for a site i haven't been on - how do i get rid of it.. Please help
|
Diodorus Siculus |
Sun, 29/10/06@16:15
|
|
try installing, udating and running some of these click here
ewido - anti-spyware and anti-malware solutions
click here AdAware
click here SpywareBlaster
click here SpyBot
|
niki31 |
Tue, 31/10/06@20:42
|
|
It's sorted Thank you Diodorus Siculus you are a total star - I have installed ewido and it picked up 4 viruses 1 of which was trojan???? anyway i have deleted it and i haven't received a pop up yet thanks again
|
fhiufhyrefyer |
Tue, 31/10/06@21:17
|
|
Removal! Hi.
I accept no repsonsibility for any damage monetry or otherwise from using the following information.
You can do all of this off line from the internet, infact i would adivse you to be DISCONNECTED when you do the following!
You need to disable an activeX control in your web browser for starters!
Ensure you are logged on as an adminstrator (in XP).
I did this on someone else computer because they started to get this and had no idea how it had started at all and the timer had got up to 9 minutes, this when the person needed to be study work for the course they were on!
I can not rember the exact names of files so please bear with me!
Goto the Tools menu and select Manage Add-ons..., this will open up an window, in here you will see a control that starts with mbs, mbs......., select it and then at the bottom click on the disable radio button.
This does not delete the item!
OK the window!
Now we need to go and see where the other items reside:
open up My Computer from the desktop!
if you can not see the windows folder in the following part, you will have to go into the Tools menu and then Folder Options, in the window that opens you need to go to the view tab. Here you need to go down and clik the radio button for "show hidden files and folders" you will find this under Hidden files and folders.
you will also need to unselect the tick box for "Hide extensions for know file types". This will allow you see the extension .exe and .dll etc for what we will be looking for in a minute!
We need to goto into the c drive, then into the windows folder, from here we go into the system32 folder(XP).
That being: C:\WINDOWS\system32
In system32 we are looking for these two files:
mbsmon32.exe
mbsreg.exe
Click the toolbar to display the information as details instead of thumbs etc! This is important!
Note the date that these files were installed on the pc and click on the header bar to sort all of the files into date order when they were last modified.
Now look down the date column and find that date, you will see about 6 files i think, you will see the icons used by the two files above plus some others, one or two may be dll files!
NOTE ****
It is important to find the files on that date BUT ensure that the files you select all have the same TIME STAMP as mbsmon32.exe and mbsreg.exe, this will ensure you only pick the files that were installed with these two files!
****
note these files down and log off the computer!
Boot XP up and start pressing F8!
This will bring up a menu to boot XP in safe mode and into the all seeing administrator!
Choose to use ****** safe mode! *******
This will start and maintain a low resolution screen, this is ok.
At the log on choose the Administrator even if your user id (logon) has Admin rights!
A warning window will display on the screen, ok this and allow it fully load!
Now open my computer (or explorer) and goto the files we found earlier!
Those being in: C:\WINDOWS\system32
*** Remember the TIME STAMP ***
Select them and delete them!
Start up msconfig by going to the start button on the desktop ( bottom left) and goto run, in the box that appears, type msconfig and click ok. A window will open, goto the startup tab and untick the program identified as mbs...... ok that and allow the computer to reboot!
You can now delete the icon of the desktop and from the startup menu from the start button.
I hope this has cleared your ploblem and has been of some use!
This information has been given in good faith and it is your responsibility to do with it you see fit!
I accept no responsibility for any actions brought against you or third parties for use of the above information.
Good luck!
|
niki31 |
Wed, 01/11/06@18:49
|
|
it's back Thanks for the last message - i have looked where you said but there is no file starting with mbs i'm loosing the will to live would it be called something else
|
niki31 |
Wed, 01/11/06@20:10
|
|
i think it's gone Hi fhiufhyrefyer
me again, i have followed your instructions from the F8 bit - really pleased with myself - deleted all of the files with the same time and date - fingers crossed it has worked. Thanks for your easy to understand instructions.
|
fhiufhyrefyer |
Wed, 01/11/06@22:28
|
|
Cheers! I hope your computer is doing fine and that noting has gone wrong!
Cheers for the reply.
|
Help@MBS |
Mon, 06/11/06@14:45
|
|
MBS Forum Information Dear Forum
We read and note the comments of this forum and would like to offer the following advice
MBS is an independent billing company that provides billing and collection services to websites worldwide. Many of our client' sites are either age restricted (by consent) or of an adult nature.
The software that has been described on this forum can ONLY be downloaded from visiting one
of our clients sites. Our software is not spyware nor is it embedded as a trojan.
You, or a user of your computer, will have agreed to terms and conditions then voluntarily downloaded the software to gain access to the site. In the interest of privacy, we do not ask for email addresses or credit card details to do this.
Our system is based on honesty and we expect all people who access our clients sites to pay when the bills are first shown. These bills can be closed, do not stay visible or interfere with the computer.
Unfortunately, only when people ignore the bills, do not contact us or do not pay, we have to display the bills in a more persistent way.
We always provide access to a help email address and aim to respond to enquiries within 48 hrs.
If you have a genuine query and do not understand why you have received a bill, please contact us at billing@microbillsys.com and quote the mbs reference number starting MBS-043- which can be found on your bill.
Alternatively write to us quoting the above reference at:
MBS Information
PO Box 185
Leeds
LS12 9AJ
Thank you
|
headcast |
Mon, 06/11/06@20:39
|
|
mbs This sounds very similar to 'moviepass', see the link below -
click here
I would also be wary of a business that does not list a phone number and has a PO box as an Address.
|
headcast |
Tue, 07/11/06@14:26
|
|
“Our system is based on honesty”
I really can’t imagine that most people who have content like this have openly, clearly and knowingly agreed to pay these so called fees.
Be careful out there. There are many cases that show how the unscrupulous can extract money from the vulnerable by getting un-expecting persons to download malicious content by surreptitious means.
If in doubt speak to trading standards.
|
De Marcus™ |
Tue, 07/11/06@14:38
|
|
I was more concerned with this sentence:
"Unfortunately, only when people ignore the bills, do not contact us or do not pay, we have to display the bills in a more persistent way."
Is that an open admission to persistently displaying difficult to remove popups/adware?
If it is then you need to tread carefully click here
|
Debbiee |
Sun, 12/11/06@17:07
|
|
Help MBS Removal needed urgently I have tried to download the spyware packages etc. at the beginning but this has not worked. I have tried to follow instructions left by fhiufhyrefyer but fail when it comes to F8 section as I do not have a F8 option. F10 is the boot menu but what it takes me to is nowhere near your instructions. Does anyone have any other suggestions. Please. Many thanks!!
|
compo84 |
Wed, 15/11/06@11:55
|
|
thanks fhiufhyrefyer, easy to follow instructions and now im free of mbs hopefully for good
|
Kev the Toad |
Sun, 19/11/06@19:17
|
|
Gone at last! Cheers fhiufhyrefyer, it seems to have worked with no detrimental effects.
One comment I would make is that all files deleted were dated three days before the bill said the site was accessed,this only makes me more suspicious of the whole thing.
Kev.
|
Kev the Toad |
Sun, 19/11/06@19:21
|
|
One other thing The ActiveX control name started with UBS not MBS
|
Help@MBS |
Mon, 20/11/06@13:49
|
|
MBS Response Dear Advisors
We appreciate and note your comments but strongly advise that people contact us by the means given previously. MBS is a professional billing company and comply fully with UK legislation. Where users genuinely do not know why a demand for payment has been made, they should contact us and we will assist them as fully as possible.
MBS does not condone or allow subscriptions from adware sites.
MBS urges all users to carefully read all terms and conditions to any membership or subscription website before entering.
MBS Support Services
|
uglyfrog |
Sun, 17/12/06@02:21
|
|
MBS utter tosh What utter tosh,
Mbs's attempts at sounding plausible are totally risible.
Yes- they deposited malware
Yes- I accepted their offer to contact them
No- They did not respond
Would say more but civil and or criminal actions under advuice
|
Deucalion |
Wed, 14/02/07@13:09
|
|
MBS - Finally Gone? Hi everyone,
Would just like to say a big Thankyou to fhiufhyrefyer. I searched all over the net to find a solution to the MBS billing pain. Most of the responses were really complicated and I didn't dare try them in case I messed up the computer. Finally got to this website and found a solution which was easy to understand and carry out. Have just carried out the instructions and hopefully MBS has finally gone. Was so impressed with the level of help available that I've registerd with the site. Once again, THANK YOU FHIUFHYREFYER!!!
|
koebes |
Sun, 25/02/07@04:45
|
|
MBS bill MBS sent me, what they call a bill two days ago
it was the first I heard, that I was suppose to owe money I have never signed up for any sex program
The bill as they call it paralyzed my computer with the threat that it would stay there for the next 5 days. It took
me 5 hours to clear my computer of this Trojan at a time when I had some important work to do. This is a
criminal act coupled with blackmail trying to extort money from me. There must a way of reporting this sort of behavior.
|
SLAYER |
Sun, 25/02/07@06:19
|
|
bookmarked.
|
|
[1] 2 3 4 5 6 7 8 9 10 11 12 13 14 15
|
|
Total threads 330646 | Total posts 2151670 | Total users 295504
|
|
Forums > Helproom
|
Back to top
|
