MS Removal Tool
MS Removal Tool is a new rogue antispyware which pretends to be a legitimate security program. It is a direct clone of System Tool and System Tool 2011. These malicious software applications were the hottest parasites in 2010. As a rogue program, MS Removal Tool is created to trick unsuspecting user into believing that this program could be trusted. However, the real aim of the rogue is to steal your financial information and then use it for its own purposes. The relationship between MS Removal Tool and its predecessors is more than obvious, because all software applications share the same infection symptoms.
The most popular way for the rogue to arrive at your computer is through fake online malware scanners. Are you wondering how it is possible to land in an infected site? The answer is simple – one click on a hijacked link from a search engine result can lead you to the site which hosts a download file for MS Removal Tool. Sometimes you don't even need to initiate the download yourself. The download starts automatically, when you land in the infected site. When the download is done, you need to initialize the installation yourself, but clicking on the rogue’s icon. Sometimes, however, the rogue can be downloaded an installed by a Trojan infection, which you have caught some time earlier. Depending on your operating system, MS Removal Tool's infection files are created in random folders in the following directories: C:\Documents and Settings\All Users\Application Data\ for Windows XP, and C:\Documents and Settings\All Users\Application Data\ for Windows Vista and Windows 7.
When MS Removal Tool infiltrates in your computer, it initiates a fake system scan, and it will always show you that you have numerous infections, such as rogues, backdoors, worms and Trojans. The infections in scan results always appear in the same order, no matter how many times you perform the scan. MS Removal Tool also disables your task manager and does not allow you to execute .exe files. The rogue also floods you with fake security alert messages, which might look legitimate at first glance, because they are constructed to look reliable. Nevertheless messages are not true, and MS Removal Tool is programmed to bombard you with these fraudulent notifications so that you would believe your computer is seriously compromised. Here are some of the fake messages that MS Removal Tool shows you:
MS Removal Tool Warning
MS Removal Tool Warning
Security Monitor: WARNING!
Warning: Your computer is infected
If that weren't enough, MS Removal Tool will change your desktop background into a blue screen with extensive warning.
With such poorly written messages you are urged to activate the protection by providing your credit card number and other personal information to MS Removal Tool. If you do so, you might as well say good-bye to your money for good. In order to prevent that, you need to acquire a good security program or do the manual removal to terminate MS Removal Tool.
In order to make the removal process smoother, you need to “register” the program. It will allow you to terminate MS Removal Tool easier. To “register” the problem, use one of the codes below:
If you use one of these codes to "register" the program, MS Removal Tool's interface will change from wash-out pink into light blue, and if you perform the scan again, the rogue will find no infections whatsoever. You will be allowed to access your Task Manager again, and load the .exe files. Also, when you have registered the program, another function appears, where you can contact MS Removal Tool's support service by the number 1-800-417-5679.
We have tried contacting them, with intention to say that there is something wrong with the software, and we were immediately asked for the transaction ID, which was supposed to be in our email inbox. If you don't have it, they ask for the first 6 and the last 4 digits of your credit card, and then checks in a data base, to see if they have a record of you. This implies that the people behind MS Removal Tool are storing the credit card information of every single person they have managed to trick.
They also offer a refund if you are not satisfied with the product, but for that you need to tell your transaction ID as well. Also, if you say that you think MS Removal Tool is a virus, the "support center" claims that malicious programs have merely infected MS Removal Tool and they are using the interface of the program. They try to look legitimate by saying their support extension number, and they assure that it is possible to use the same license on a a few computers. That is, they indirectly forces the user to infect as many computers as possible.
Not to mention, that MS Removal Tool's customer support is not your best service ever. We have contacted Anastasia and Max, and some of their answers were harsh, drenched with strong Russian accent. We even heard them swearing. The fact that there is more than 1 person answering the customer's support calls means that the creators of MS Removal Tool are well-prepared to make this scam a successful operation.
This program will always hinder your attempts to remove it, because it needs to stay in your computer for as long as possible. In order to do that, MS Removal Tool blocks your internet connection. When your internet connection is blocked you cannot search for the ways how to get rid of this rogue. The parasite allows you to load only MS Removal Tool’s purchase sites.
To restore your internet connection, please follow the instructions below:
How to renew your internet connection:This rogue antispyware blocks your Internet connection to prevent you from removing the rogue application. To enable the Internet connection, please follow these instructions:
How to manually remove MS Removal Tool
Files associated with MS Removal Tool infection:
MS Removal Tool processes to kill: