help please!

[MBS Hell]

As you can guess, we got hijacked by MBS! I read all the info on the internet and in this forum but being a complete novice on the computer, we decided to just pay the 40 pieces of silver and get rid of the problem. The bill has now gone from our laptop and the icon gone from the desktop etc (same as everyone else on here - some sort of dodgy pop up caused the problem initially and we were completely unaware we had "subscribed" to anything until the icon appeared on our desktop). Anyway, i have now noticed that everytime we log onto the internet our computer connects to MBS (i can see their website on our 'history' list). It doesn't seem to be causing any problem but being a bit computer illiterate i don't really understand how and why and certainly don't know how to get rid of it! If they have this sort of access to my computer will they be able to see my internet banking passwords or anything? When we paid the bill we expected all the MBS stuff to go. It seems to have done on the surface, but something must be causing their webpage to appear on our 'history' everytime we log on to the internet?
Sorry for seeming simple, but we really are idiots when it comes to the computer- we can only just about switch it on, collect emails and surf! 

[ForumFriend]

I'm a bit puzzled by what you've written - When you paid, did you ask them to provide you with the means of removing their software?  From what you say, you've clearly still got MBS things on your PC, and I think you need to rid yourself of them.

There are already some suggestions on the forum which have worked for others, including Brute Force and System Restore (which you need to do, apparently, to several days before the pop ups appeared - a week would be good - and you need to remove all other restore points as well, then turn system restore back on after all that.  I've also heard that Prevx works well, and their website is http://www.prevx.com/.

It is, in my opinion, entirely unacceptable that MBS should be keeping its options open on your computer like this.  I would advise you in the strongest terms to complain about this to Trading Standards and send a copy to MBS of your complaint.

The behaviour of this company is quite extraordinary.

[Andy M]

I'm not sure but someone has said that this is a recurring bill, so (not to worry you unduly) unless you specifically said you wanted to cancel when you paid the bill, the possibility is that the bill will reappear at some point in the future.

Though the icon etc. has gone from your desktop, there's obviously something somewhere that's still making it "call home" to MBS.

As ForumFriend says, that's totally unacceptable. Effectively, they're now stealing your resources (computer time, broadband access) and while the amounts are almost unmeasurable, the fact is that they are using your system without your permission.

Can you tell from your history file exactly what part of the MBS site is being accessed? I'm not sure the easiest way to get that information using Internet Explorer as I'm not on a PC. That might help someone with greater expertise in how MBS operate to track down exactly why they might still want to keep track of you.

The other possibility, given the sloppy nature of their whole operation, is that whatever removal method was initiated was incomplete. They may not be actively using the information at all, but the fact is it's still using up your PC's resources, and potentially making your system more unstable, for no good reason at all.

I hope you find a solution to this.

[helpplz]

mbs have said they have problems getting rid of their software from windows vista and the only way to get it off is with a cd they produce, are you using vista ?

[ForumFriend]

So, they produce a software that can't be easily removed?  Wow.  Though I'm not sure I'd trust a CD from them unless it had been thoroughly checked through with the best antispy, antieverything -ware.

[MBS Hell]

Thanks for replies.
We cancelled the subscription through the website we had allegedly subscribed to. The bill on our desktop then changed to say that the subscription was cancelled but that we still owed them £39.99. Not wanting to give them our bank details, we sent them a cheque. Couple of days later the icon and bill disappeared from our computer (this was about a week ago) and have not heard a peep from MBS since (no more disabling our internet for 5 minute periods when we log on). Since then in our internet history every day i have noticed the first webpage is listed as auth.microbillsys.com. I can't understand why they would still be accessing our computer...
I have emailed them to ask them why they are doing this and to stop, but as yet haven't heard anything - which is a joke really as during this whole saga we have only communicated with them by email (to ask why we had been charged, plead our case etc, to no avail) and have found them to be extremely quick to respond when they were wanting their money. Surprise surprise, now we have paid they don't seem so quick to help!

[ForumFriend]

In the circumstances, I think you are fully justified in taking advantage of any of the remedies which have worked for other MBS victims in order to get them completely off your computer.  As Andy has said, it is totally unacceptable for them to be hanging around in your system, and if it were me I'd want my computer to be completely cleaned of their software.

I really think you should raise this issue with Trading Standards, and in particular draw their attention to the point you have made:  i.e. that they pester you for payment, but then don't reciprocate when it comes to your entirely legitimate concerns. 

This company is an utter menace!

[jonlewi5]

id suggest you clear all your temp internet files, during my research i found there to be a few .php files dropped into the temp internet folders when installing, id suggest you try that mate.

another thing, you said you can see it in you history, could you post the entire url it is "calling" please

[MBS Hell]

Thanks guys.

I have just had a reply from them today - all they said was that they had received the payment and that the subscription was cancelled! Thats the only information that i do already know!! I have emailed them again saying thanks but can you actually answer the question which i asked them - why are they still accessing my computer?! Their URL is still in my history today.

Jonlewi5 - the URL is http://auth.microbillsys.com:1003/3/isvalid.php

[ForumFriend]

MBS Hell:  I tried your link and on my PC (which has never been 'infected') the screen shows up as blank.  I mention this as it may be of help to JonLewis.  Not sure if it would be safe for you to try it out, given that you've had it on your computer - Perhaps JonLewis can advise?

[Andy M]

Same here.

My guess is that it simply records the IP address of the computer accessing the page, though that *is* a guess.

[gemini84]

Andy's probably right, I've come across this before while doing tech support.  It sounds as though you still have the MBS software on your pc.  Your history indicates the URL is being accessed from your computer and not the other way round.  If you've paid then you should be able to have it removed.  Have you tried emailing them for an uninstaller?

[ForumFriend]

Hm, that could be interesting.  If they aren't prepared to provide you with the means to remove from your pc, I think you should let Trading Standards know of this.  It would be useful if you could keep records of all that, e.g. a pdf copy of your IE history to record the URL, copies of any communications you have already had with MBS (unsubscribing, payment, request to remove, etc.) and their responses to these .... Then, once you've got that body of evidence to show how it has gone for you, perform a System Restore to a point about a week before the first pop up.  Remove other restore points so that there is no memory of it before turning system restore back on. 

[Andy M]

There's something in MBS's laughable terms and conditions which states that it can take up to five days for the software to be removed from a PC after the user has paid - however I'm sure this time period has elapsed now.

[helpplz]

Do we know anything about the inside of mbs like is it run by a family, do they employ people ? If you've seen the pictures of mbs's address it looks like a warehouse with red vans infront