MicroBillSys Description

MicroBillSys is an application that is affiliated with several pornographic websites, including www.Sexxxpassport.com, www.Mysexworld.com, and www.Membersmatter.net. Once installed on your PC, this malware will constantly prompt you to purchase a membership to these sites. After the three day “trial” period ends, the program may also lock down all Internet access unless you pay the membership fee.

Type: Spyware

How Can You Detect MicroBillSys?

MicroBillSys Technical Report

As new MicroBillSys details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following MicroBillSys files with its MD5s were created in the system:

MicroBillSys has typically the following processes in memory:

• mbsreg32.exe
• ubsauthenticateaxc.ocx
• winsysmon32.exe
• setup1_10045.exe
• vi32.exe
• pzsys1.exe
• mbsmon32.exe
• mbssm32.exe
• winregmon32.exe
• mbsauthenticate.exe
• vsm.exe
• spzsu.exe
• MBSAuthenticate_39[1].exe
• mbsrm32.exe
• ubsauthenticateaxc1.ocx
• MBSInstallerAXC.ocx
• smvalid.exe
• mibssys.exe

MicroBillSys creates the following registry entries:

• D2FAC024-92C0-42E5-A75B-7B4E3915CC50

Important Article Disclaimer