I was infected with the MS removal tool this AM while cruising the underbelly of the internet. Running Malwarebytes while in safe mode did not detect it when runnig database ver 6350. Around 11:00AM I updated again and received ver 6351. While running in normal operating mode (this is my XP Pro SP3 box) I changed mbam.exe to iexplore.exe in the progra~1 folder (sorry, old habit...) and it was able to correctly ID and delete the malware. Reboot and she's clean. Cheers.