Whats this file??

[jonlewi5]

been a while, anyway, last night i set up a fresh machine to continue looking into this software, any way, i found some network monitoring tools, so i installed these and ran the MBS installer while the monitor was running,

now here is the interesting part, this file was run the exact time the sexxxpassport icon was created,

see here

http://img527.imageshack.us/img527/673/filegi1.jpg

the filename is : ins9.tmp

googling the filename comes up with logs from hijackthis and prevx

i dont know what this file is, but i gots a feeling it is to do with MBS, but dont hold me to that.

the file tried accessing the web when sexxxpassport  was accessed.

anyone know what this is?

[ForumFriend]

Have you seen this, Jon? See here

[jonlewi5]

thatll teach me for not looking hard enough 

thanks for that, seems this file may be one to put on the list on unwanted files?

although it doesnt seem to pose any risk, im certainly wouldnt want anything of MBS's on my system

thanks for that FF

[Vampire182@Hotmail.co.uk]

If youve recieved a MBS popup reboot your PC open 'Run' type 'MBSSM32.EXE' hopefully MBS will popup if so delete all cookies and history and delete the file it worked for and.... dont visit the website again

[jonlewi5]

sorry fella, that wont work, theres morre than just cookies and your history, just deleting the files wont work hence why we have tools like the BFU etc

[Rab]

guys, i'm not sure if you've seen this thread:

http://mbsvictims.org.uk/index.php?topic=88.0

Let me know if it's of help to you.