Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
I was working on a clients computer last night, and I cleaned up all the spyware, etc etc. I came across something in the registry that wouldn't go away, after I used hijackthis, it would show up instantly when I click on "Scan."
So I'm assuming it's a virus, it's in the shell line in the registry "explorer.exe C:\Windows\System32\msbl.exe"
I remove the everything post explorer, and if I click away and go back it will be there. I tried in safemode, and used procwatch, and ad-watch from adware 6, but still no go. Perhaps stopping some services, blah blah blah, I'm really not sure what to do. I recommended a format, because it's one of the most simple ways to ensure a cleaner system.
Are you sure it's not msbb.exe from 180 Solutions. Spyware crap that comes with N-case (AKA Ncase).
msbb.exe is (sometimes) found in a folder called ????? I can't remember. It is deleted with Spybot if run when Windows is in safemode.
0 
It is named MSBL.exe.
I ran across it last evening on a client's PC. It has corrupted the desktop shell. The command CMD to bring up the DOS Type window will not execute. Internet explorer Icon will not load. Thank goodness for MOZILLA.
Anybody know how to get rid of this thing called MSBL.EXE?
0
I think I just fixed this on a computer here in the office. Right click on msbl.exe and choose the security tab. Deny everyone the right to execute the file. Reboot. You'll get an error after logging on stating that you do not have permission to run the file. Just click ok. Run hijackthis again and remove the two references to msbl.exe. The references haven't returned for me.
IE and the command prompt work fine for me now. Windows Explorer still acts a little squirrelly, but I can live with that.
0
when i right click there isnt a security tab there? i'm still struggling to get rid of this has everyone else managed it?
0
The MSBL.exe file is rather elusive.
In SAFE MODE, the file does not exist but is replaced with MSBB.exe (the spyware from 180 solutions, A.K.A. GATOR, GAIN)
When booting in NORMAL MODE, the MSBB.exe disappears and is replaced with MSBL.exe and has an icon with a design of a numeral 7 next to a world globe followed by a lightning bolt. ( 7O/ )I had to boot the system in DOS with a floppy. Then I cd to the windows system32 directory and executed the erase command on MSBB.exe
Upon reboot, I recieved a couple of error messages, I ack'd them and continued.
It appears to be gone now.
After several dozen reboots, it appears to be gone. I also ran HIJACKTHIS and did a search in the registry along with the selective startup in MSCONFIG.
NOTE: MSBB.exe is in system32 directory when in safe mode. I believe that this file changes it's name to MSBL.exe when the system is in normal mode
Documentation on this paticular problem is almost non-existent.
Anyway...This is what worked for me.I considered fdisk and a reload, but I would rather solve the problem than cave in to a CYBER-TERRORIST.
Good Luck,
Bill C.
If your not on the EDGE...your taking up too much space...
0
yes!!! i've deleted it at last!
when you put up about the msbb i went into safe mode but couldnt find it. i searched for the msbl there and found that. i followed the instructions from the guy further up and it worked. thanks to everyone for their help and to the others who still have it, if i can do it so can you :) don't format its giving in to the idiots who think they can control us :)
0  |
 |
 |
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
