Kitz ADSL Broadband Information
adsl spacer  
Support this site
Home Broadband ISPs Tech Routers Wiki Forum
 
     
   Compare ISP   Rate your ISP
   Glossary   Glossary
 
Please login or register.

Login with username, password and session length
Advanced search  

News:

Author Topic: MS Removal Tool  (Read 5709 times)

Peter

  • Reg Member
  • ***
  • Posts: 433
  • My Country needed me????
MS Removal Tool
« on: March 26, 2011, 08:19:14 PM »

this evening I suddenly got a pop message stating my pc is infected and is trying to persuade me to download MS removal Tool.

My Microsoft essentials has disapeared too and the desk top has turned blue.

Help please!!

Pete
Logged

jeffbb

  • Kitizen
  • ****
  • Posts: 2329
Re: MS Removal Tool
« Reply #1 on: March 26, 2011, 08:48:13 PM »

Hi
quick on google the  Microsoft® Windows® Malicious Software Removal Tool (KB890830) is to be found at :

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356

This is a genuine MS tool AFAIK
Further info  at

http://support.microsoft.com/kb/890830

What anti virus are you using ?
Regards Jeff
Edit :this is a post infection tool for specific viruses, so I guess the system has detected one of those .
« Last Edit: March 26, 2011, 08:50:52 PM by jeffbb »
Logged
zen user

HPsauce

  • Helpful
  • Kitizen
  • *
  • Posts: 2606
Re: MS Removal Tool
« Reply #2 on: March 26, 2011, 09:40:23 PM »

I guess the system has detected one of those.
I doubt that VERY much. You just DON'T get messages like that.

It's more likely that you've "acquired" one of the many "fake AV" scams that are around at present.
If you click on the download (which I wouldn't) it will soon be asking for money.....

I'd get someone who REALLY knows about PC's to have a good look and advise.
Logged

sevenlayermuddle

  • Helpful
  • Addicted Kitizen
  • *
  • Posts: 5369
Re: MS Removal Tool
« Reply #3 on: March 26, 2011, 09:51:04 PM »

this evening I suddenly got a pop message stating my pc is infected and is trying to persuade me to download MS removal Tool.

My Microsoft essentials has disapeared too and the desk top has turned blue.

Help please!!

Pete

Hopefully somebody familiar with 'modern' windows systems may come along and offer better advice, but meanwhile...

I'd be very suspicious as to whether that popup is genuine.  More likely Id say, you have been infected by some malware that is now trying to dupe you into installing something even nastier.  Malware writers have been playing that game for years, so I'd be surprised if any legitimate microsoft utilities behaved in the same way.

Be especially wary that any link in the popup box, apparently offering to download anything to fix things, could be completely fake and point instead to some evil trojan.  Have you tried cutting & pasting the EXACT text from the popup box, into a google search?  Odds on you'll find there's lots of other people with same experience.

I was hit by something similar on XP a few years back.   In that case, recovering from an earlier restore point got rid of the popups, after which I downloaded & installed trial versions of various AV (NcAfee, Norton etc), most of which failed to detect anything.  Kaspersky eventually spotted the malware and disinfected it.  But I'm not an expert on these things, so don't necessarily assume it'd work for you.

PS:  I just noticed, HP seemingly agrees with my suspicions.  His advice sounds good.



Logged

UncleUB

  • Helpful
  • Senior Kitizen
  • *
  • Posts: 29544
Re: MS Removal Tool
« Reply #4 on: March 27, 2011, 07:48:40 AM »

Download and run Malwarebytes free version.

You can get it safely from here

http://www.filehippo.com/download_malwarebytes_anti_malware/


And have a read here

http://thespykiller.co.uk/index.php?topic=9626.0
« Last Edit: March 27, 2011, 07:56:25 AM by UncleUB »
Logged

AdrianH

  • Guest
Re: MS Removal Tool
« Reply #5 on: March 27, 2011, 08:24:41 AM »

This is a known and very malicious peice of malware >> http://blog.teesupport.com/remove-fake-microsoft-removal-tool-fake-ms-removal-tool-manual-removal-guide/


MS Removal Tool Step-by-Step Removal Instructions

Quote
1.To stop all Fake MS Removal Tool processes, press CTRL+ALT+DELETE to open the Windows Task Manager.

2.Click on the "Processes" tab, search for Fake MS Removal Tool, then right-click it and select "End Process" key.

3.Click "Start" button and selecting "Run." Type "regedit" into the box and click "OK."

4.Once the Registry Editor is open, search for the registry key "HKEY_LOCAL_MACHINE\Software\Fake MS Removal Tool." Right-click this registry key and select "Delete."

5.Navigate to directory %PROGRAM_FILES%\MS Removal Tool\ and delete the infected files manually.

Malwarebytes should hopefully be able to remove it for you. This infection is a classic example of why you should be using a limited account for browsing, the infection cannot shut down your AV system or make major changes to the registry without permission and you also have a clean admin account to access your system and effect repair.

Logged

geep

  • Reg Member
  • ***
  • Posts: 452
    • My ST546 Statistics
Re: MS Removal Tool
« Reply #6 on: March 27, 2011, 09:50:11 AM »

Removing MS is a wise move - go for it. Switch to Linux  :)

Cheers,
Peter

PS - The other advice here is probably what you were looking for.
But given the title of your post I just couldn't resist...
Logged

UncleUB

  • Helpful
  • Senior Kitizen
  • *
  • Posts: 29544
Re: MS Removal Tool
« Reply #7 on: March 27, 2011, 10:02:27 AM »

Removing MS is a wise move - go for it. Switch to Linux  :)

Cheers,
Peter

PS - The other advice here is probably what you were looking for.
But given the title of your post I just couldn't resist...

The OP hasn't mentioned anything about removing his MS o/s.He wants to know how to remove the malwaeware he has been infected with
Logged

Peter

  • Reg Member
  • ***
  • Posts: 433
  • My Country needed me????
Re: MS Removal Tool
« Reply #8 on: March 27, 2011, 11:18:01 AM »

I cannot find the Fake MS Removal in the in task Manager Process list.

The removal programmes cannot run as the fake tool is stopping them.

time to call in an expert I think.

Thanks for all the help folks, I'll let you know how I get on.

Peter
Logged

UncleUB

  • Helpful
  • Senior Kitizen
  • *
  • Posts: 29544
Re: MS Removal Tool
« Reply #9 on: March 27, 2011, 11:22:32 AM »

Download Malwarebytes from another computer onto a usb flash pen drive and then run it from a usb port on your computer.
Logged

Peter

  • Reg Member
  • ***
  • Posts: 433
  • My Country needed me????
Re: MS Removal Tool
« Reply #10 on: March 27, 2011, 12:26:05 PM »

Download Malwarebytes from another computer onto a usb flash pen drive and then run it from a usb port on your computer.

Just tried this but again I got this message.

'Application cannot be executed.  The file Ms<pEng.exe is infected.

Please activate your anti-virus software.'

Peter
Logged

AdrianH

  • Guest
Re: MS Removal Tool
« Reply #11 on: March 27, 2011, 12:41:06 PM »

Go into Safe Mode and run Malwarebytes there.
Logged

Peter

  • Reg Member
  • ***
  • Posts: 433
  • My Country needed me????
Re: MS Removal Tool
« Reply #12 on: March 27, 2011, 01:01:28 PM »

Go into Safe Mode and run Malwarebytes there.

Thanks Adrian and everyone else, I had just done that and it seems to have done the trick. (Fingers crossed!)

Many thanks to everyone.

Peter
Logged