MS Removal Tool (virus)

[TheRealAndyCook]

FOR THE LOVE OF GOD.


If you see anything about MS Removal Tool. Turn off your computer.

Run away from anything that points you towards a download for MS Removal Tool, or any screen that looks like your computer has a virus.



this is what it looks like when its too late and you have been infected.

I forget how many servers have the download installed on it.
Mysql, the database engine used to run millions of websites had an exploit that allowed hackers to take over sites and convert them to download hubs.

Do not download ANYTHING from anywhere.

 

[BOTR]

I should have grabbed a screen shot of WindowsRestore.......

 

[TheRealAndyCook]

Windows restore wont fix this, the task must be killed by a program like Rkill or removed remotely by a secondary OS.

 

[BOTR]

No, I meant the WindowsRestore "rouge" program.

 

[TheRealAndyCook]

ooo, i haven't seen this, tho i assume its just as nasty

 

[Carefree_Dude]

eh, I haven't seen a rogue program i couldn't kill. It just can be time consuming, especially if you have to go through the registry manually.

 

[TheRealAndyCook]

its not hard to kill, however this is the one thats on a bunch of sites right now

 

[Warborg]

Yea, we have gotten stuff similar to this in the past. I told my wife the same thing... if it ever shows up, shut the computer down right away and do a real virus scan once it's back up.

 

[Rockhoe14er]

Yeah i've seen a lot of people in my company get this. But once you realize it then it can usually be fixed in safemode.

here is a great site that tells you how to remove it if you are infected

http://www.bleepingcomputer.com/virus-removal/remove-win-7-internet-security-2011

 

[siebertn]

Just boot with Windows 7 cd and press enter when you are asked if you want to boot from cd