MS Removal Tool Virus
#1
MS Removal Tool Virus
Folks,
I have the malware virus called MS REMOVAL TOOL and it has effectively crippled my desktop PC.
Just wondering whether any of you have any experience or tips on how to deal with this. I have looked at dozens of help processes online, (using a laptop that is not affected), and they are ALL flawed in one way or another.
My basic issues are;
- In normal boot mode I cannot run any browser, application or the Malwarebytes removal program that is recommended to get rid of it.
- If I run the PC in safe mode I can run Malwarebytes but it does not find or delete the virus because is needs updating. However, in safe mode I cannot get my PC to connect to the internet, so it is Catch 22!!
I've spend 2 days following various guides to delete the processes and registry entries but they simply do not work. The virus even stops you successfully doing CTL/ALT/DEL!
Last gasp attempt here folks, before I throw myself at the mercy of an online specialist team for an expensive support option!
Cheers
blubs
I have the malware virus called MS REMOVAL TOOL and it has effectively crippled my desktop PC.
Just wondering whether any of you have any experience or tips on how to deal with this. I have looked at dozens of help processes online, (using a laptop that is not affected), and they are ALL flawed in one way or another.
My basic issues are;
- In normal boot mode I cannot run any browser, application or the Malwarebytes removal program that is recommended to get rid of it.
- If I run the PC in safe mode I can run Malwarebytes but it does not find or delete the virus because is needs updating. However, in safe mode I cannot get my PC to connect to the internet, so it is Catch 22!!
I've spend 2 days following various guides to delete the processes and registry entries but they simply do not work. The virus even stops you successfully doing CTL/ALT/DEL!
Last gasp attempt here folks, before I throw myself at the mercy of an online specialist team for an expensive support option!
Cheers
blubs
#2
I did find a process killer when I removed this from a machine a couple of months ago. Can't remember exactly what it was called, but it's process name was iexplore.exe which is needed by the malware, so it will allow it to run. It terminates all processes except system ones and allows malwarebytes and other anti-virus to run to cleanup the files and registry. Worked a treat for me.
#3
Scooby Regular
can you not download the malwarebytes updates to a usb from your laptop and plug that into your desktop?
Or try this "Safe Mode with Networking" option when you start up with the F8 key
Or try this "Safe Mode with Networking" option when you start up with the F8 key
Last edited by Ray T; 31 March 2011 at 02:13 PM. Reason: extra info
#4
Guys,
Thanks for the responses. I am making progress - in the end I have used a regedit piece of software to identify and kill the inherent file that it uses to re-install itself on start-up.
Then I've used 'process explorer', to overcome the CTRL/ALT/DEL issue and I've stopped the process itself.
This has allowed me to download the Malware and update files, so I can kill the trojan. It's running as we speak and has found it, just waiting for the scan to finish.
Ray - tried the USB idea but the Malware was stopping any .exe running, just flashes the message "xxx.exe has a virus, please click here to fix".
I'm confident this will sort it, but if anyone else gets the same issue I would recommend hitting the registry option first, as it stops lengthy re-boots and duplicate scanning!
Cheers
blubs
Thanks for the responses. I am making progress - in the end I have used a regedit piece of software to identify and kill the inherent file that it uses to re-install itself on start-up.
Then I've used 'process explorer', to overcome the CTRL/ALT/DEL issue and I've stopped the process itself.
This has allowed me to download the Malware and update files, so I can kill the trojan. It's running as we speak and has found it, just waiting for the scan to finish.
Ray - tried the USB idea but the Malware was stopping any .exe running, just flashes the message "xxx.exe has a virus, please click here to fix".
I'm confident this will sort it, but if anyone else gets the same issue I would recommend hitting the registry option first, as it stops lengthy re-boots and duplicate scanning!
Cheers
blubs
#5
Scooby Regular
iTrader: (10)
i just had this on the mrs laptop.
i got rid of it this way (on xp)
start up in safe mode with networking.
then i run
malwearbites
spybot
microsoft ess (or you normal security program)
then this got rid if it all.
to get into safe mode, when you turn on pc, press f8 over and over again, and this will bring up a screen that you can select safe mode and networking
hope this helps
i got rid of it this way (on xp)
start up in safe mode with networking.
then i run
malwearbites
spybot
microsoft ess (or you normal security program)
then this got rid if it all.
to get into safe mode, when you turn on pc, press f8 over and over again, and this will bring up a screen that you can select safe mode and networking
hope this helps
Thread
Thread Starter
Forum
Replies
Last Post