Remove MS Removal Tool [Removal Guide]

This guide will give you easy instructions on how to remove MS Removal Tool for free.


What is MS Removal Tool? (Information)

MS Removal Tool is a fake security software which uses fraudulent strategies by displaying false or exaggerated security issues on your computer rather than any legitimate ones to coerce you into purchasing their software.

MS Removal Tool will displays bogus warning messages, telling you that your computer is infected. It uses misleading methods to win your trust and make you actually believe your computer is compromised with viruses, spyware or trojans. MS Removal Tool will later suggest that you purchase a copy of it to remove the infections as part of their scam. Their bogus antispyware or antivirus database is totally incapable of performing any removal of viruses or other declared functions.

---

Follow these preparation steps:

Because MS Removal Tool sets your browser to use an invalid proxy, you will not be able to surf websites properly.

If you are using Internet Explorer, click on the Tools menu and select Internet Options.

• Now click on the Connections tab and then the Lan Settings button.
  
• Under the Proxy Server section, please uncheck the checkbox labeled Use a proxy server for your LAN.
  
• Click the OK button. Then press the Apply button and then the OK button. Now that you have disabled the proxy server you will be able to browse the web again with Internet Explorer.

If you are using Firefox, click on Tools and click the Advanced tab.

• Go to the Network tab and select Settings.
  
• Select No proxy and click the OK button and click OK again. Now that you have disabled the proxy server you will be able to browse the web again with Firefox.

---

Follow these instructions:

You have to start computer in Safe Mode by doing the following:

• Restart your computer
  
• After hearing your computer beep once during startup, but before the Windows icon appears, keep tapping F8.
  
• Instead of Windows loading as normal, a menu should appear
  
• Select the first option, to run Windows in Safe Mode with Networking.

---

1. Please download this latest official version of Malwarebytes' Anti-Malware.




2. Install Malwarebytes' Anti-Malware by double clicking on mbam-setup




3. Follow the prompts. Make sure that Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware are checked. Then click finish.




4. Malwarebytes' Anti-Malware will automatically update itself after the installation, click the OK button to close that box and you will now be at the main program Window as shown below.

If you are having problems with the updater, you can use this link to manually update Malwarebytes' Anti-Malware with the latest database. Make sure that Malwarebytes' Anti-Malware is closed before installing the update.


5. Close All opened Windows, Programs, File or Folders.


6. Make sure you are on the Scanner tab. Select Perform quick scan then click the Scan button as shown below.




7. Malwarebytes' Anti-Malware will now start scanning your computer for infected files as shown below.




8. When the scan is finished a message box will appear, click OK to continue.




9. Click Show Results.




10. You will now be presented with a screen showing you the malware infections like shown below. Yours may look different depending on the infection you have.


11. Click on Remove selected.




12. When removing the files, Malwarebytes' Anti-Malware may require you to restart the computer in order to do a complete removal. If it displays a message stating that it needs to restart, click Yes.




13. After that you can close the Malwarebytes' Anti-Malware window, your computer is now cleaned from the malware infection.


To protect and prevent your computer from experiencing future threats like this, we highly recommend purchasing the FULL version of Malwarebytes' Anti-Malware with real-time (live) protection from this link.

---

If you are still experiencing problems or difficulties following this guide or require any assistance removing this malware, please post your questions in our Virus, Spyware & Malware Removal forums for free help.

You have to be logged in to post questions. Registration is free. By registering you will be privileged to other resources and to ask questions.



Last edited by Doctor Inferno on 13th April 2011, 2:54 pm; edited 6 times in total (Reason for editing : Information Update)

Thank god it worked! Thank you!!

I was skeptical of this guide at first because of all the other websites that offer solutions that didn't work, but I just gave it a shot, downloaded Malwarebytes Anti Malware and ran a scan.

20 minutes later... problem solved. MS Removal Tool was removed, so simply!

I don't know how to thank you guys... Thank you so much GeekPolice!

PS. Would you guys recommend buying the full version in case this comes up again?

Yeah, the full or paid version of Malwarebytes Anti-Malware offers good security. I highly recommend it.

It can run alongside your current antivirus software as an added layer of protection. :smile2:

My sisters laptop had this on, thanks alot for giving spot on advice to remove it!!

Removed MS removal tool in under 20 minutes. Just bought malwarebytes too, great application. Thanks!!

Thank you so much, MSRT has been 0wn3d !

Hi, I'm having this exact problem but I can't connect to the internet in safe mode with networking! It connects to the network, but not the internet. It just says "limited connectivity." I have a wireless connection to a router..also this laptop runs on Windows Vista. This MS Removal Tool virus is so annoying

Hello Jake,

Please read this and open a new topic here, we will there you there.

Thank you so much. This worked, and I'm not the most tech-savvy person.

Thank you this was easy and quick!

You are the Bomb!
Thanks so much for the guide.
We had two torrents on our computer that were not letting us into programs and were telling us to download antivirus software.

All solved thanks to you!

Jo <--- this is me

Hi, My husband's computer has been attacked by the fake ms removal tool virus. I've tried to do a systems restore so I can load the malwarebytes malware removal program, but the virus disallows any system tool to operate. I can not load task manager either. I can not open Outook Express but can open an IE web browser page slowly. I've tried to load malwarebytes to his computer using a USB memory stick and CD with the program burned onto it, both will no success. Besides having my anti-virus program disabled by this virus it his also preventing any exe file being opened and any windows app from working. So then I tried to start in safe mode. The computer can not shut down but will restart, so I can manage to get into the safe mode page, but it will not allow me to arrow up or down to select safe mode or any mode for that matter and it counts down to restarting normally. Would you know of any other means for me to remove this virus without having to put the computer into a shop to have Windows reloaded? Thank you for any help that you are able to give to me

Following the instructions but find no check in the proxy server box. What next? The annoying "Warnings" keep popping up

First off, whoever created this pain in the butt needs to be punched in the nuts.

Before I found this site, I ran across something that recommended Spyware Doctor, so I went ahead and ponied up the $30 for that and let it do it's thing for nearly 2 hours. After it "removed" all "threats" I rebooted and no dice... this virus is STILL there.

So I found this site, and downloaded the AntiMalware fix... and after it ran its "quick" scan it reported NO items needing removal.

So what do I do now? The MS Removal Tool is definitely still there when I leave safe mode. Help!!!


*EDIT*

Ran the AntiMalware again, this time checked off the detailed scan option... Got the same message when it was done that there was nothing to remove, but after I rebooted it now appears that the little bugger is gone!!!

=)

I have ran the Malwarebytes program three, that's three, times and it has NOT removed the MS Removal tool.

What do I do now?

You guys just kept me from losing my most expensive possession and from failing a 5 month long school project thats due in 2 days. Thank you so much.

Thank You Sooooo Much.

I got infected with that horrible MS Removal Tool last night. Searched all over for solutions and was grateful to have found GeekPolice. Followed the instructions to the T, ran Malwarebytes' Anti-Malware program, and 25 minutes later following the reboot, my PC is clean. Thank You.

Thank you so much for this free fix! It's awesome to know that there are great people out there to help us combat the evil ones! You guys rock!

hello, Im pretty sure I followed all instructions correctly and im still having that annoying ms removal tool what now?

Thank you so much, it worked for me! ! You guys rock

Heyy umm.. This didnt work saddly . i did everything it said and i did it twice , it deleted some of the viruss but the MS removal tool Is still poping up... Is there any other thing i can do , if so PLEASE help mee

Just stumbled on this site…… love your work... its fixed now

The proxy server box was not checked. My computer will not let me start in safe mode. Is it possible that they are on to your once-successful solution now, and have found workarounds ? I need another solution. Looks like others do too. I'd be grateful for some help. Thanks.

Same issues as olive ranch. Any and all help to get rid of this evil trojan/rogue is greatly appreciated.

i clicked the red download icon, the program got saved to my desk top but the "ms removal" says the program is infected and wont open it. what is next you think? it wont let me run any program.

I was able to download the mbam file, but when I try to run it, I get a message that it is infected. It also seems that this virus is redirecting my browser to bogus websites when I try to go to Malwarebytes or to GeekPolice.

Anyone experiencing difficulties removing MS Removal Tool with the guide, please read this, our tech staff will assist you in the removal.

Am trying to remove the vrius but cannot get into safe mode because the up/down keys on my keyboard do not work! Any ideas?
Thanks

Hi All On the phone to my brother. Safe Mode throws into sleep mode! Mind you he is currently watching Cricket 1,6,6,6,6,2.. Poor Bangladesh!

Anyway.... any sure fire answers? Thanks for Helping everyone!

sys restore

on off

Seemed to work? Waiting for success?

ok...scan is working... in the mean time Shane Watson has hit 14 sixes! new world record
Anyway. The Scan appears to have worked.

So by Turning System Restore Off it stopped Windows XP from going into sleep mode after selecting Safe Mode with Networking.

The Administrators recommend only following their official instructions so please wait for them to recognise why this worked?

Thank You for all your assistance.

missedabee wrote:

Am trying to remove the vrius but cannot get into safe mode because the up/down keys on my keyboard do not work! Any ideas?
Thanks

Had same issue, now solved, check my final post, but confirm with Moderators first!

Hope you work it out.

Am trying to remove the vrius but cannot get into safe mode because the up/down keys on my keyboard do not work! Any ideas?
Thanks

Still after two trys of doing everything step by step that is stated above and the computer restarts back to normall out of safe mode, the stupid MS Removal Tool is still on my comupter and will not stop popping up!!!!!!
im so angry i cant figure out how to get it off even after doing everything this site has said......
:sad:

I'm having the same problem as Chelsie19! This is the 2nd time i've used malwarebytes to scan in safe-mode, and upon restart the virus is STILL there. Another website mentioned something about 'Window's HOSTS files' and having to replace them??

As this infection also changes your Windows HOSTS file, we want to replace this file with the default version for your operating system. Please note that if you or your company has added custom entries to your HOSTS file then you will need to add them again after restoring the default HOSTS file. In order to protect itself, MS Removal Tool changes the permissions of the HOSTS file so you can't edit or delete it. To fix these permissions please download the following batch file and save it to your desktop:

Any ideas!? I'd REALLY like to not lose this laptop! Every assignment/project/art-piece i own is on this thing -- the only backups were on an external harddrive that bit the dust last week!!

third time trying all of your steps and still no luck.. i will sleep on it and try again tomorrow..
super annoying but not sure if it is the fact that i have xp?? will that make any difference?? somone please help me, i have so much work on this computer and a huge essay due this week, trying hold back the tears..

OK, Had the same issue. The Safe Mode with Networking seems to have had some systems sleeping & then restarting. No matter what you try, it still fails or programs do not launch?

Had the same issue, and is now solved! I am waiting for a suggestion as to HOW turning the "system restore" off/on can resolve this issue? But it did?

Good Luck!

i've solved mine. Unfortunately i had to do a system restore from a couple of weeks ago, but at least it's gone, and most of my documents were completely unaffected.

OTL wont open either. "user acount control" pops up and asks if i want this program to make to make changes to this computer. I click yes and its gone. with no results
also a warning comes up telling me otl is infected just like when i tried to open mbam-set.

Last edited by erik on 12th April 2011, 2:33 pm; edited 2 times in total

Worked wonderfully. Didnt even have to try a second time. Was freakin out cause i couldnt do anything on my computer, but it worked. surprisingly. if youre skeptical, email me and ill confirm its legitimacy.

Last edited by DragonMaster Jay on 11th April 2011, 7:26 pm; edited 1 time in total (Reason for editing : Email removed)

Welcome! Glad to have you here.
Still having problems??

Please read here
Then post in the malware forum here
One of the awesome techs will help you as soon as they can!

Leaving an e-mail address on a forum is very dangerous for your privacy. Anyone can send you an e-mail that had any sort of malware included. Anything from a simple virus to cause grief to a keylogger which are used by identity theives.
A good read:
http://www.mysecurecyberspace.com/secure/email/threats/malware.html

I can't get past step two. I started my computer is SAFE mode but it also asks me after that to choose one-
Windows Media console or
Windows recovery
I don't want to do anything that says recovery since to me that means erasing everything on my computer! What do I do in this case?

Also, when I try and download the program it will allow me to RUN it but nothing further. Even if I click it twice something comes up and says it's infected and I should run my spyware. I have Norton 360 and when I run it is states everything is great, but that MS removal tool is still there!

Thank you so much! This worked perfectly!

thank you so much!
i got the MS Removal Tool about half an hour ago, and it said i had viruses, my Norton has recently expired and I havent renewed, but because i just noticed this "service" now, i was skeptical. i went to google on my ipod, and typed in ms removal tool, and went to the first page, which was a yahoo answers page asking how to remove it, and i saw even in the google suggestions that it was a virus, and the best answer was one with a link to this page, i followed the on screen instructions, and within 5 minutes of installing the program the virus was gone!
thank you guys so much!!

You're welcome. We're glad to help!

Just used MAM for ms removal tool malware & it worked like a charm, I've used it before (my kids know every privacy setting on Facebook but can't recognize bogus software to save their lives) so I was a convert quite some time ago; In the past, I would have done a restore to factory settings but MAM has saved me that aggravation twice now and the fact that its free is a bonus.