MS Removal Tool is a very annoying rogue program because it displays fake security alerts and popups without your permission. The rogue program blocks nearly all programs on the infected computer claiming that they are infected with malicious software. The fake error message reads:
Application cannot be executed. The file cmd.exe is infected.
Please activate your antivirus software.
It will constantly display fake security warnings about serious security and privacy issues. It will state that you computer is infected.
Last, but not least, it will change your desktop wallpaper with its own which states that your computer is infected with spyware. The text of the fake background image:
It is obvious that MS Removal Tool 2011 is yet another rogue scam. Don't trust it. If you find that your computer has been infected with this rogue program then please uninstall MS Removal Tool from your computer as soon as possible. If you have already purchased it, then you should contact your credit card company and dispute the charges. Then, please follow the removal instructions below. Note, that you will have to reboot your computer in safe mode with networking in order to be able to download the automatic removal tool because MS Removal Tool blocks legitimate malware removal tools in normal mode. MS Removal Tool properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background
MS Removal Tool manual removal
Delete registry values:
C:\Documents and Settings\All Users\Application Data\[random]\[random].exe
Geolocation of MS Removal Tool
Comments on MS Removal Tool
Post a comment
Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.