HELP with what I think is spyware

[Guest]

I have a site called https://secure.microbillsys.com/EN/bill.php, which keeps
appearing on a new browser no matter how many time I delete it. I also have
extra things appearing on my toolbar, from what little I have read about it I
believe this is spyware? I have firewall turned on, have anti-virus software
and windows defender seems to be on, please help as my computer is getting
slower by the second and I have no idea where to start!

 

[Dave M]

Google searching yields these results, among others:

http://research.sunbelt-software.com/threatdisplay.aspx?name=MicroBillSys&threatid=123902

looks like A-Squared can nail it though, install the 30 day trial and give
it a shot... Let us know how that goes.

http://www.emsisoft.com/en/malware/?Trojan.Win32.Agent.afi

You still might want to have your system looked at by a Malware removal
forum (HijackThis) even if you get this one removed... there could be
others with a Trojan / Backdoor such as this.

 

[Guest]

Hi

Have tried A-squared but it's still there. Some scans by various free
antispyware said it was a pretty nasty one? Where go I go from here? What is
a Malware removal forum and what should I do there. Should I buy a product to
get rid of it?

Thanks Nuala.

 

[Dave M]

No, do not buy anything, particularly any product advertising itself as
being able to remove this for a price. The chances are that such a claim
is from the very outfit that put it on your system to begin with, and there
are free options that will remove anything. A-squared does indicate that
it's got good detection for this malware... and there's no pricetag for the
free version. Did A-squared detect it and then was unable to remove it, or
was there just no detection?

Sometimes, depending on the location and complexity of the problem, the
system has locked the files involved so that it can't be removed normally
or it's so convoluted that one conventional malware protection can't handle
removal alone. That's when you may benefit from getting guided assistance
from a removal specialist, and there are forums set up to provide this
assistance free of charge, though they tend to be busy with waiting times
for someone to help you. They use a free tool called HijackThis to examine
your system in detail and then suggest other tools or remedial steps for
you to take. Don't attempt to use HijackThis without guided assistance,
though it can take some time. Here's one example of such a guided session:

http://forums.tomcoyote.org/microbillsys_removal_t76540.html&st=0

Any of the forums on this list should be able to assist you:

http://www.merijn.org/forums.php

Come back and bring us up-to-date when you get things resolved.