Ms Removal Tool (Malicious)
Be aware when download or install any software anti-virus program. New of rogue anti-spyware is MS Removal Tool, Where install this program onto your computer without your knowledge or permission via malware. After Installed, they will be run scanned your PC and show fake security alerts and results in order to make you think your computer is infected by malware but will not allow you to remove them until you purchase the program.
MS Removal Tool also blocks malware removal tools and system utilities, Task Manager and other even changes your desktop wallpaper. If you click on any desktop icon you’ll get a message that the program is infected and that you should run your anti-virus software.
How to Remove MS Removal Tool
- Reboot your computer, when booting tap the “F8 key” and choose in “Safe Mode with Networking”.
- End the processes that belong to MS Removal Tool with Rkill, download iExplore.exe
- Download Malwarebytes’ Anti-Malware.
- Install Malwarebytes’ Anti-Malware and Do not make any changes to default settings and when the program has finished installing, make sure you leave both the Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware checked. Then click on the Finish button. If MalwareBytes’ prompts you to reboot, please do not do so. Scanner tab, make sure the the Perform full scan.
- As this infection also changes your Windows HOSTS file, we want to replace this file with the default version for your operating system, download hosts-perm.bat
- We now need to delete the C:\Windows\System32\Drivers\etc\HOSTS file. Once it is deleted, download the following HOSTS file that corresponds to your version of Windows and save it in the C:\Windows\System32\Drivers\etc
folder. If the contents of the HOSTS file opens in your browser when you click on a link below then right-click on the appropriate link and select Save
Target As…, if in Internet Explorer, or Save Link As.., if in Firefox, to download the file.
Your Windows HOSTS file should now be back to the default one from when Windows was first installed.
- Now reboot your computer.
via : http://www.bleepingcomputer.com/