The MS Removal Tool virus appeared suddenly on my system this morning. I was easily able to 'remove' it by doing a system restore back to the most previous restore point. BUT .....
When I 'shutdown' my laptop last night (actually suspend) I was not aware of a problem. When I opened it this morning Windows Update (Vista Home Premium) had done an update so the system was shut down - no big deal. But on turning it back on the MS Removal Tool virus was there.
For all the world it appears that this thing came from the Windows update (I can't imagine). But I am pretty darn sure that it was not there when I went into suspend mode last night, it was there after the update this morning, and it is gone now that I am restored to the restore point that was created right before last nights' Windows Update.
Thoughts on this?
Thanks.
dave
ps. I run Trend Micro Security Software and it had not reported a problem - at least not that I saw. It will from time to time open a TEENEY-TINY window regarding a suspicious process and ask for guidance (ALLOW, BLOCK, etc). If you don't answer the question in a few minutes the window goes away and I am not sure what happens in that case. Since my laptop was sitting there unattended for probably 30 minutes before I closed it down, there could have been one of 'those events' that I did not see.
When I 'shutdown' my laptop last night (actually suspend) I was not aware of a problem. When I opened it this morning Windows Update (Vista Home Premium) had done an update so the system was shut down - no big deal. But on turning it back on the MS Removal Tool virus was there.
For all the world it appears that this thing came from the Windows update (I can't imagine). But I am pretty darn sure that it was not there when I went into suspend mode last night, it was there after the update this morning, and it is gone now that I am restored to the restore point that was created right before last nights' Windows Update.
Thoughts on this?
Thanks.
dave
ps. I run Trend Micro Security Software and it had not reported a problem - at least not that I saw. It will from time to time open a TEENEY-TINY window regarding a suspicious process and ask for guidance (ALLOW, BLOCK, etc). If you don't answer the question in a few minutes the window goes away and I am not sure what happens in that case. Since my laptop was sitting there unattended for probably 30 minutes before I closed it down, there could have been one of 'those events' that I did not see.