The MS Removal Tool Virus which is also known as the Microsoft Removal Tool is a very harmful virus program that tries to trick the person using the infected computer to do things that will further harm the computer and benefit the person that created this malicious program. This malware virus is inserted with an executable file that could easily be downloaded along with a file you found on a free file sharing network. These types of free file sharing sites have been the cause of many computers coming down with serious viruses. If you commonly download files from these types of sites its highly advisable that you have your computer protected from a well known virus protection and online file sharing protection software like Kysparsky. Accidentally downloading something like the MS Removal Tool Virus can cause major harm to your computer and even possibly other computers across your network.
What Does The MS Removal Tool Virus Do?
When this type of Virus installs itself to your computer an executable file will run that makes the file go to work. The first thing you will probably notice on your computer from the MS Removal Tool Virus is a fake system scanner. The scanner will indicate that your computer has been infected and the proper steps are being made to scan your computer to check for other infections. Be very careful because the MS Removal Tool Virus can be really believable. If you follow its directions you will just cause further harm to your PC like the software author has intended.
Behind the scenes this file is making many changes to your computer system that you have absolutely no control over. The systems start up process is being modified and the trojans and malware are being spread across the system files and registry. As the fake MS Removal tool shows you a screen that’s scanning for viruses its also disabling your applications. This prevents you from doing things like running your virus removal software or other programs. You may try to immediately power off your computer but chances are that the damage has already been done at this point.
Whats The Point of the MS Removal Tool Virus?
Trying to run software and also clicking along to the viruses directions will only bring yo to a screen that asks for your credit card information. DON’T GIVE YOUR CREDIT CARD INFO!!! This is the trick that the viruses author is hoping you will fall for. This is the main reason these types of viruses exists, just to take money from people in the hopes that the virus will go away. You can find sad stories all over the internet about unsuspecting individuals that entered their credit card info only to have it stolen and their entire account be over drawn. Its very unfortunate that these types of things happen.
If you think giving them your credit card information and paying them to take the virus out of your computer than you have been tricked! There is really no easy way to remove a malicious virus like the MS Removal Tool Virus without downloading and running a program like Kysparsky and/or trying the following steps.
How to Remove the MS Removal Tool Virus
MS Removal Tool exhibits fake warning about a number of infections found on the computer. Selecting “Remove all threats now” releases new browser windows that prompts for credit card account to settle payment. You may select “Continue Unprotected” but excessive pop-up messages hassles the operation.
Damage Level: Medium
Systems Affected: Windows 9x, 2000, XP, Vista, Windows 7
MS Removal Tool Removal Procedures
Manual Removal:
1. Press Ctrl+Alt+Del on keyboard to stop process associated to “MS Removal Tool”. When Windows Task Manager opens, go to Processes Tab and find and end the following process:
(random characters).exe
2. You need to update your installed antivirus application to have the latest database.
3. Thoroughly scan the computer and any detected threats must be removed. If removal is prohibited, it is best to quarantine the infected item. Manually locating and deleting of malicious files should also be performed. Please see files below that are related to MS Removal Tool Virus.
4. Registry entries created by MS Removal Tool must also be removed from the Windows system. Please refer below for entries associated to the rogue program.
- For Windows 2000/XP: Go to Start > Run, type “regedit” on dialog box then press Enter on keyboard.
- For Windows Vista/7: Go to Start > Search Program and Files, type “regedit” and press Enter.
5. Exit registry editor.
6. Get rid of MS Removal Tool start-up entry by going to Start > Run, type msconfig on the “Open” dialog box. A windows containing System Configuration Utility will be launched. Go to Startup tab and uncheck the following Start-up item(s):
(random characters).exe
7. Click Apply and restart Windows.
Automatic Removal Tool:
1. Download Malwarebytes’ Anti-Malware (mbam-setup.exe) and save it on your Desktop.
2. After downloading, double-click on the file to install the application.
3. Follow the prompts and install as “default” only
4. Before the installation completes, check on the following prompts:
- Update Malwarebytes’ Anti-Malware
- Launch Malwarebytes’ Anti-Malware
5. Click “Finish.” Program will run automatically and you will be prompt to update the program before doing a scan. Please update.
6. Scan your computer thoroughly.
7. When scanning is finished, click on the “Show Results”
8. Make sure that all detected threats are marked, click on Remove Selected.
9. Restart the computer.
Note: MS Removal Tool may prevent mbam-setup.exe from downloading and running. You can download and rename this program from a different computer before running it on infected system.