On Windows ME - Micro Billing System

Updated all MS software and in Safe Mode have run updated Ad-aware, SpyBot, Superantispyware. The first two appear to find it & say they've deleted it, but back in Real Mode it's still there!

SmitfraudFix & the Sophos fix don't appear to work in ME!

HJT (thru hijackthis.de) anything of any suspicion has been deleted.

Any next step please?

Hi elpmek,

I have edited your post and deleted the swear word..
It is against the rules:
The security team can help you with your problem, please follow the prework below and post back with the resulting logs.
http://www.pchelpforum.com/hijackthis-logs/11849-please-follow-these-instructions-before-posting-your-hijackthis-log-aka-prework.html

Moved to Hijack This! Log forum.

Okay - apologies for the out of wedlock connotation. However you give me the opportunity to add that have also ran updated AVG in Safe Mode which had zero problems.

Simply put how do you get rid of MBS in Windows ME??

Hi there.

If you could post the HijackThis log for the Secruity Team to check, that would be great as hijackthis.de isn't 100% accurate.

Log attached.............................

Attached Files

hijackthis.log (4.3 KB, 2 views)

Please download the OTMoveIt by OldTimer
.

• Save it to your desktop.
• Please double-click OTMoveIt.exe to run it
  .
• Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
  
  C:\WINDOWS\SYSTEM\vsm.exe

• Return to OTMoveIt, right click on the "Paste List of Files/Folders to be moved" window and choose Paste.
• Click the red Moveit! button.
• Close OTMoveIt

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

========================================

Have "Hijack This" fix all the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and Close HJT.
O4 - HKLM\..\Run: [mbssm32] C:\WINDOWS\SYSTEM\vsm.exe

Reboot and post a new HJT log..