MBS account manager

June 11, 2007 on 6:48 pm | In Malware analysis | 8 Comments

After having several users complain about popups by Micro Bill Sys. a fellow spyware fighter using the nick John McKenna approached me with a proposed fix for this pest.

The company that the commercials are for denies all responsibilty here:
Micro Bill Systems
so I’m sure they won’t mind us helping remove the source of the problems. ;)The method John started and I extended can be found here:
How-to-remove-MBS-account-manager
Don’t be shy to let me know if it helped you. I’d really like to find out if this software was installed willingly and you regretted it later or if it was installed without notifying you in any way.

8 Comments »

RSS feed for comments on this post. TrackBack URI

The Guardian wrote an article about MBS:

http://technology.guardian.co.uk/weekly/story/0,,2023190,00.html#article_continue

Comment by pieterarntz — July 12, 2007 #
hello there,

I followed your friend’s removal instructions but their invading colonialist MBS progrm still sits. on my computer. i have little tech knowledge so any help will be appriciared. M

Comment by Moshe — July 12, 2007 #
Hi Moshe,

The best way to go ahead is to look for help on a computer-forum. You can find several that are specialized in malware removal on the right-hand side of the blog. Make sure to read their FAQs about what they need to help you.

I have found a new installer, so there might be a update soon. I will post about it here when it’s done.

Comment by pieterarntz — July 13, 2007 #
in fact, I think it worked!!! Amazing. And no, the comercial colonialist was forced on me. DO let others know of the link which I followed. I’m not a subscriber to http://www.pcadvisor.co.uk/forums/index.cfm?action=showthread&threadid=261874&forumid=1&sr=641
and therefore was unfortunately unable to thank you there publicly as I hoped I could do.

Comment by Moshe — July 13, 2007 #
Thanks for posting this, Pieter. It’s guys like you who help the less internet savvy to keep on track. And thanks to John McKenna, whoever he may be.

Life’s too short to be MBS-ed!

Comment by Staying Alive — July 15, 2007 #
The software in question is downloaded and installed after accepting a “free” 3 day trial to an adult site called sexxxpassport or mysexworld. Before accepting the free trial the user is invited to read a brief statement and check the acceptance box for the terms and conditions. If the lengthy “drop down” terms and conditions are read carefully, the user agrees to MBS controlling their computer’s diskspace, bandwidth and the installation of other 3rd party software. What makes this software even more deplorable is MBS’s threat to make your computer unusable if the bill isn’t paid……

“11.6 IF YOU CHOOSE TO IGNORE THE PAYMENT REMINDERS AND DO NOT PAY THE REQUIRED MEMBERSHIP FEE, YOU HEREBY UNDERSTAND AND ACKNOWLEDGE THAT THE PROMPT REMINDERS MIGHT BECOME MORE FREQUENT AND THAT YOU MIGHT LOSE THE ABILITY TO USE YOUR COMPUTER (I.E. ACCESSING THE INTERNET, ACCESSING YOUR FILES ETC.), UNTIL YOU HAVE SUBMITTED PAYMENT OR CONTACTED CUSTOMER SERVICES. WHILE YOUR COMPUTER IS CONNECTED TO THE INTERNET THE BILLING PROCESS WILL BE ENFORCABLE”

If the free trial isn’t cancelled within the 3 days, the popup demands for money begin. The longer the bill goes unpaid, the more frequent the popups appear and eventually refuse to go away.

Since MBS Billing appeared near the start of the year, the software’s legality has been the subject of much debate on the internet. Many believe the company’s tactics are nothing more than extortion of the highest degree. Symantec and PrevX were two of the first anti-malware vendors to target MBS in their definitions which lead to various legal threats against them and anyone else providing removal instructions which breach the supposed legally binding terms and conditions.

If your computer has been “hijacked” by this software without your express conscent, I urge you to remove it without a second thought. The software doesn’t verify the age of the downloader and doesn’t record any personally identifiable information which could locate you making legal action a rather far fetched threat. The software simply relies on either shaming people into paying the bill or praying on their paranoia that the bailiffs will be sent around to recover the debt. Even more absurd is their threat to pursue the debt even if you die!!

Comment by john McKenna — July 20, 2007 #
Hi i have this mbs bill pain at the moment, i do not for one minute deny i was surfing checking out some “free” porn but at the same time i did not realise i was subscribing to any of the sites i briefly visited. i say breifly because they were all rubbish anyway and i justed surfed on and then 3 days later get this come up that i owe £39.99 no way am i paying and i will attempt to remove tonight.This surely cannot be legal for them to do this if i wanted to subscribe to a site i would pay my money and give out credit card details which i never did.

Comment by Tony Cattrall — September 7, 2007 #
This looks promising:

http://arstechnica.com/news.ars/post/20070914-extortion-or-just-a-negative-option-feature-ftc-busts-adware-vendors.html

Hey MBS, if you need help writing the removal instructions, you can reach me here. 🙂

Comment by pieterarntz — September 15, 2007 #

Metallica's blog