Question by loubean: MS Removal Instrument virus- how to remove?
I’ve acquired the MS Elimination Device virus/trojan point- I’ve tried using employing anti-spyware, but the virus stops it from opening. Tried it in secure mode, explained it got rid of all troubles, but when restarted, virus was nevertheless there.
I’ve tried to eliminate it manually, but the directions inform me to go to
Personal computer/ProgramData
I’ve enabled viewing of hidden programs and files
Help Please!
Very best remedy:
Answer by Ѯӄ١
Attempt avast 5 (its free) then use ccleaner (its totally free as well)
Avast: http://download.cnet.com/Avast-Totally free-Antivirus/3000-2239_4-10019223.html?part=dl-85737&subj=dl&tag=button
Ccleaner: http://www.piriform.com/ccleaner/download/normal
great luck.
What do you feel? Solution beneath!


Try Malwarebytes Anti-Malware.
You can search on google. After you install it, scan your computer in safe mode.
It may solve your problem?…
Go into safe mode with networking. Download 30 days free trial of G-data antivirus. And do the scan right away. I have G-data antivirus and it took care of MS Removal tool easily
http://answers.yahoo.com/search/search_result;_ylt=AjfImqefd5c86DaiOHAnRV4azKIX;_ylv=3?p=MS+Removal+Tool+virus&submit-go=%3CSPAN%3E%3CSPAN%3E%3CSPAN%3E%3CSPAN%3ESearch+Y%21+Answers%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E&submit-go=%3CSPAN%3E%3CSPAN%3E%3CSPAN%3E%3CSPAN%3ESearch+Y%21+Answers%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E
i have gdata , and it will not block this or kaspersky or norton or mcafee , avast,avira,avg etc–etc–etc…only paid malwarebytes !
use the link i gave you or
http://www.bleepingcomputer.com/virus-removal/remove-ms-removal-tool
run rkill
http://www.bleepingcomputer.com/download/anti-virus/rkill
http://support.kaspersky.com/viruses/solutions?qid=208280684
all this is free
now your pc will be cleaned
http://www.bleepingcomputer.com/virus-removal/remove-ms-removal-tool
step by step removal instructions
free
just scroll halfway down the page to the automated removal instructions and follow the instructions exactly
hope this helps
mark is correct -rkill will , kill the process, tdss will check to make sure you don’t have a rootkit attachment and malwarebytes will solve your problem follow the bleepingcomputer guide for removal
mark gave you all the tools
MS Removal Guide
It is possible that the infection you are trying to remove will not allow you to
download files on the infected computer. If you run into this problem, you will need to download the files
requested in this guide on another computer and then transfer them to the infected computer. You can
transfer the files via a CD/DVD, external drive, or USB flash drive.
Option 1.
Step 1.
Reboot your computer into Safe Mode with Networking using the instructions for your version of
Windows found in the following tutorial:
How to start Windows in Safe Mode-http://www.bleepingcomputer.com/tutorials/tutorial61.html
Step 2.
Open Internet Explorer
Note: It MUST be Internet Explorer, not Firefox, Opera, Chrome or any other internet browser
Click on Tools at the top and select Internet Options
Note: If you do not see Tools, press the Alt key on your keyboard and it will show up
Click on the Connections tab
Click on the LAN settings button
Under Automatic configuration make sure that the box next to Automatically detect settings is checked, if it is not, then click the box next to it to check it
Click on the OK button to close the Local Area Network (LAN) Settings window
Click on the OK button to close the Internet Options window
Step 3.
Now we must end the processes that belong to MS Removal Tool so that it does not interfere with the
cleaning procedure. To do this, please download RKill to your desktop from the following link.
==Rkill – What it does and What it Doesn’t – A brief introduction to the program==
http://www.bleepingcomputer.com/forums/topic308364.html
#1. do not turn off computer until after running Malwarebytes’ when using rkill or the process will
have started again and you will have to start over.
#2.Vista and Windows 7 users, right click and click run as administrator.
#3. Keep running Rkill until no malicious processes are detected
Step 4.
Now you should download Malwarebytes’ Anti-Malware, or MBAM, from the following location and save
it to your desktop–http://www.bleepingcomputer.com/download/anti-virus/malwarebytes-anti-malware
# Double-click mbam-setup.exe and follow the prompts to install the program.
# At the end, be sure a checkmark is placed next to the following:
* Update Malwarebytes’ Anti-Malware
* Launch Malwarebytes’ Anti-Malware
# Then click Finish.
# If an update is found, it will download and install the latest version.
# Once the program has loaded, select Perform FULL scan, then click Scan.
# When the scan is complete, click OK, then Show Results to view the results.
# Be sure that everything is checked, and click Remove Selected.
# If it asks for a Restart DO SO, Very Important
Malwarebytes’ Tutorial
http://www.bleepingcomputer.com/virus-removal/how-to-use-malwarebytes-anti-malware-tutorial
Malwarebytes’ Video Tutorials
http://www.youtube.com/user/Malwarebytes?feature=mhum#p/u/1/xSHw-LItYmE
=====For those having trouble running Malwarebytes Anti-Malware=====
http://www.bleepingcomputer.com/forums/topic267354.html
Option 2.
To register (and help removal), copy paste one of these codes:
WNDS-S0DF5-GS5E0-FG14S-2DF8G
WNDS-JUYH3-24GHJ-HGKSH-FKLSD
WNDS-89OF7-7324R-5SAD4-TG68U
WNDS-HFVDR-9844O-U54DA-5TBSC
WNDS-G8FB6-1V87S-DRT1S-63SRG
WNDS-4BGY2-JY4KO-IT98Y-7HJ43
WNDS-5D1V2-XB0D5-JT1TY-97DS3
WNDS-F40SA-1ER5H-4FG5D-F8412
WNDS-SERFH-2642S-F04SD-64FG1
WNDS-S0DF5-GS5E0-FG14S-2DF8G
WNDS-452S3-ER00F-TSE35-S8FSD
WNDS-FGS5D-649RG-4S53D-412SF
WNDS-4TS8R-D6F5D-4JH8T-U4JK5
WNDS-2AE32-1VFC2-B6894-G67YU
WNDS-P9685-4H41A-DSW3A-2R64T
WNDS-5SRTS-AEHUF-YA54S-D6F35
WNDS-A1SDF-RY4E8-7U98D-F1GB2
Then download and run Malwarebytes’ without any hassle, your choice!
http://www.youtube.com/watch?v=w7f48-Ky9ow&feature=player_embedded
Extra clean up tools:
SUPERAntiSpyware
http://www.superantispyware.com/
SUPERAntiSpyware Tutorial
http://www.bleepingcomputer.com/virus-removal/how-to-use-superantispyware-tutorial
Ccleaner for a good clean-up
http://www.piriform.com/ccleaner/builds
Last Step as System Restore is NOT to be used as a virus removal
System Restore OFF>Restart PC>Turn System Restore on>Create New Restore Point
NOTE:Only done when computer is in fact clean
1.Restart your computer into safe mode WITH networking ( http://www.pchell.com/support/safemode.s… ) This shows how to restart into safe mode on all Operating systems.
2. Turn off your system restore ( http://www.ehow.com/how_2379192_manually… ) (Same steps to turn it back on, Except turn it on, rather than off)
3. Go to ( http://www.malwarebytes.org/ ) and download (While in safe mode w/ networking) the free version. When it is done installing, Please select to Update, But do NOT run. After it is done then run it.. Do a Full system scan and Quarantine anything it finds (once again, if your not sure, Google it)
4. Restart your computer, and Turn system restore back on. (refer to step 2 for instruction). Perform another scan with Both your anti virus, and Malwarebytes. If anything is found, then Restart and do step 2-3 again.
5. After everything is completely gone, Restart your computer one last time, and You should be good.
I would also recommend removing Anti Virus and Downloading Avast Free Edition™ ( http://www.avast.com/free-antivirus-down… ). Click Free download and Wait for the “No Thanks I want free protection” Button (usually 2-5 seconds).
If you have any questions or concerns feel free to email me @ walktovictory@yahoo.com. (Be sure to check your Spam Box)
–
Jon S.
Another option is restarting on safe mode and just restore system to a previous day. I just did it and it took me no more than 5 minutes to have my computer back !!!!!. Then download Super Anti-Spyware or Hitman Pro (in safe mode) and do a scan using it. All these program are free and legitimate.
http://malwarebytes.org
http://www.superantispyware.com
http://www.surfright.nl/en/hitmanpro
Ms Removal Tool description and removal guide:
http://deletemalware.blogspot.com/2011/03/how-to-remove-ms-removal-tool-uninstall.html
There’s also another question about the same infection here:
http://answers.yahoo.com/question/index?qid=20110326092551AAgGQnN
http://answers.yahoo.com/question/index?qid=20110327125040AAHOyN8
http://answers.yahoo.com/question/index?qid=20110327103446AAhj62W
ouu i had the exact same thing for the past 6 days! it sucks doesnt it. i tryed everything but then i found this website http://www.bleepingcomputer.com/virus-removal/remove-ms-removal-tool where it shows you the steps on how to delete it from your computer. and i guarantee that in 45 minutes-1 hour your computer will be free from that ms removal tool thingy. it helps alot! good luck
http://www.bleepingcomputer.com/virus-removal/remove-ms-removal-tool
theirs a guy on youtube his user name is haig something with numbers on it he has a really helpful and imformative video
he has it for windows 7 and windows xp
just look up ”how to remove ms removal tool virus” his vid should pop out
i had that same problem today also!! and to tell you the truth i felt soo proud of myself actually fixing it
hope this helped! (:
Simple method to remove the infection
*Turn off the computer and start the computer in safe mode(tap f8 the moment you turn on the computer)
*Choose your account where you have the infection
*For XP, Go to Start->Run and then copy this location and paste it
C:Documents And SettingsAll UsersApplication Data
*For Vista/Win7, Go to Start and then on the start search or search program and files, copy and paste this location and then hit enter
C:programdata
*In this folder you will find a weird foler which has alternate lower case and upper case letters and which will also have five numbers
*If you open this folder, You will find two files with the same name.. Delete this two files and restart the computer..
Bet this works.. Lemme kno wat happened
I have used Malwarebytes several times, and it does not remove this virus. It can’t even detect it with a full scan.