Notices
Computer & Technology Related Post here for help and discussion of computing and related technology. Internet, TVs, phones, consoles, computers, tablets and any other gadgets.

MS Removal Tool Virus

Thread Tools
 
Search this Thread
 
Old 31 March 2011, 08:44 AM
  #1  
blubs
Scooby Regular
Thread Starter
 
blubs's Avatar
 
Join Date: Jun 1999
Posts: 988
Likes: 0
Received 0 Likes on 0 Posts
Angry MS Removal Tool Virus

Folks,
I have the malware virus called MS REMOVAL TOOL and it has effectively crippled my desktop PC.
Just wondering whether any of you have any experience or tips on how to deal with this. I have looked at dozens of help processes online, (using a laptop that is not affected), and they are ALL flawed in one way or another.
My basic issues are;

- In normal boot mode I cannot run any browser, application or the Malwarebytes removal program that is recommended to get rid of it.
- If I run the PC in safe mode I can run Malwarebytes but it does not find or delete the virus because is needs updating. However, in safe mode I cannot get my PC to connect to the internet, so it is Catch 22!!
I've spend 2 days following various guides to delete the processes and registry entries but they simply do not work. The virus even stops you successfully doing CTL/ALT/DEL!

Last gasp attempt here folks, before I throw myself at the mercy of an online specialist team for an expensive support option!

Cheers

blubs
Old 31 March 2011, 01:18 PM
  #2  
phoenixgold
Scooby Regular
iTrader: (2)
 
phoenixgold's Avatar
 
Join Date: Oct 2007
Posts: 348
Likes: 0
Received 0 Likes on 0 Posts
Default

I did find a process killer when I removed this from a machine a couple of months ago. Can't remember exactly what it was called, but it's process name was iexplore.exe which is needed by the malware, so it will allow it to run. It terminates all processes except system ones and allows malwarebytes and other anti-virus to run to cleanup the files and registry. Worked a treat for me.
Old 31 March 2011, 02:10 PM
  #3  
Ray T
Scooby Regular
 
Ray T's Avatar
 
Join Date: Aug 2000
Location: kent Via the South pole
Posts: 1,007
Likes: 0
Received 0 Likes on 0 Posts
Default

can you not download the malwarebytes updates to a usb from your laptop and plug that into your desktop?

Or try this "Safe Mode with Networking" option when you start up with the F8 key

Last edited by Ray T; 31 March 2011 at 02:13 PM. Reason: extra info
Old 31 March 2011, 03:12 PM
  #4  
blubs
Scooby Regular
Thread Starter
 
blubs's Avatar
 
Join Date: Jun 1999
Posts: 988
Likes: 0
Received 0 Likes on 0 Posts
Default

Guys,

Thanks for the responses. I am making progress - in the end I have used a regedit piece of software to identify and kill the inherent file that it uses to re-install itself on start-up.

Then I've used 'process explorer', to overcome the CTRL/ALT/DEL issue and I've stopped the process itself.

This has allowed me to download the Malware and update files, so I can kill the trojan. It's running as we speak and has found it, just waiting for the scan to finish.

Ray - tried the USB idea but the Malware was stopping any .exe running, just flashes the message "xxx.exe has a virus, please click here to fix".

I'm confident this will sort it, but if anyone else gets the same issue I would recommend hitting the registry option first, as it stops lengthy re-boots and duplicate scanning!

Cheers

blubs
Old 31 March 2011, 05:06 PM
  #5  
Ian
Scooby Regular
iTrader: (10)
 
Ian's Avatar
 
Join Date: Jul 2005
Location: Cambridge
Posts: 7,845
Likes: 0
Received 1 Like on 1 Post
Default

i just had this on the mrs laptop.

i got rid of it this way (on xp)

start up in safe mode with networking.

then i run

malwearbites
spybot
microsoft ess (or you normal security program)

then this got rid if it all.

to get into safe mode, when you turn on pc, press f8 over and over again, and this will bring up a screen that you can select safe mode and networking

hope this helps
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
KAS35RSTI
Subaru
27
04 November 2021 07:12 PM
just me
Non Scooby Related
26
03 January 2020 11:12 AM
Ganz1983
Subaru
5
02 October 2015 09:22 AM
buckerz69
Subaru Parts
0
29 September 2015 04:16 PM
S600HBY
Subaru Parts
0
25 September 2015 09:46 AM



Quick Reply: MS Removal Tool Virus



All times are GMT +1. The time now is 10:11 PM.