Sunday, April 24, 2011

removing "MS Removal Tool" worm

This malware (worm?) pretended to be software which detects viruses etc. It attempts to get payment to buy the "protection" to remove the fake viruses it finds. It has interfered with my McAfee virus software. When I try to start a scan, I get a message that the McAfee exec is infected. When I try to uninstall it, it blocks me from getting to the Control menu. It even interferes with internet links to info on how to remove it. What should I do/use to get rid of this? I found a write-up on "Spyware Doctor" to remove this worm(internet on an uninfected computer). Has anyone dealt with this issue or this antivirus software?
My system is a Dell XPS M1530 running Window Vista.

Reply 1 : removing "MS Removal Tool" worm

http://www.bleepingcomputer.com/virus-removal/remove-ms-removal-tool

If you are not a member of BleepingComputer you will probably see ads above the removal guide. Disregard those and scroll down to the guide. It would probably also be a good thing to print out the instructions.

Reply 2 : removing "MS Removal Tool" worm

RubyShoe..

You wrote, 'It even interferes with internet links to info on how to remove it.' IF you don't have another computer at your disposal, in order to view the removal guide at the site Roddy suggested, try the below.

Reboot into "Safe Mode with Networking". Check to see if the following settings were changed by the malware.

Open Internet Explorer. Go to Tools>Internet Options>Connections Tab. Click on the "LAN Settings" button. If there is a check in the box "Use a proxy server for your LAN", uncheck it. Click "OK". Then "OK", again.

Open Firefox. Go to Tools>Options>Advanced. Click on the "Network" tab. To the right of where you see ""Configure how Firefox connects to the Internet", click on the "Settings" button. Put a tick mark next to "No proxy". Click "OK". Then "OK", again.

IF the above doesn't allow you to access the removal guide, you will need to end the offending process with the Rkill tool. It's also possible the malware will prevent you from downloading the tool/s. In this case, it will become necessary to use another computer, in order to download and transfer the files to yours.

Try checking your settings first. Let us know if you're able to access the guide. If not, we'll include further instructions.

Best of luck..
Carol

Reply 3 : removing "MS Removal Tool" worm

Thank you so much for this link. I was able to print the guide from an uninfected computer. Its downloaded tools worked like a charm and its step-by-step instructions were clear and easy to follow. And unlike the program I was considering, this did not require that I purchase anything. You guys are THE BEST.

Reply 4 : removing "MS Removal Tool" worm

This worked GREAT!!! Thanks so much. This took some time to run (about an hour), but it did the job and we are very thankful for the use of the tool and the detailed instructions. Thanks again!!!

No comments:

Post a Comment