MS Removal Tool
Posted: March 27, 2011
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
|First Seen:||March 28, 2011|
MS Removal Tool is the newest rogue anti-virus application on the block, and this rogue threat can still slip under the detection methods of many types of anti-malware programs. Don't confuse this fraudulent MS Removal Tool with the real Microsoft Malicious Software Removal Tool - the latter will always come with Windows, free of charge. In between bouts of asking for your money, MS Removal Tool will block a wide range of programs and may also hijack your web browser. Deleting MS Removal Tool is a serious priority because this rogue application can interfere with almost every action you take on the infected PC.
Telltale Signs of the Fake MS Removal Tool
This rogue infection version of MS Removal Tool can be easily distinguished from the real MS Removal Tool by a number of signs:
- MS Removal Tool will exhibit the appearance and many obvious behaviors known from the rogue program System Tool, which it copies to a large extent. This includes the pink-themed interface and the alteration of your desktop background to a threatening message about spyware or other malware infections.
- This fake MS Removal Tool will also request money in exchange for registration of the program. The real MS Removal Tool is completely free and doesn't require registration. If you give your money or personal information to the fake MS Removal Tool, you're giving those things away to criminals.
- Infection by MS Removal Tool will coincide with dysfunctional behavior in many different programs. Anti-virus scanners may refuse to run, the Windows Task Manager may spontaneously shut down and other programs may crash with unusual error messages. Microsoft Security Essentials will also fail to run, potentially with a fake error message about an infected root file.
All error messages and warnings created by MS Removal Tool have no basis in reality as far as your PC's health goes. Here are some of the messages you might see:
MS Removal Tool Warning
Intercepting programs that may compromise your private and harm your system have been detected on your PC.
Click here to remove them immediately with MS Removal Tool.
MS Removal Tool
Some critical system files of your computer were modified by malicious program. It may cause system instability and data loss.
MS Removal Tool Warning
Your PC is infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid the theft of your credit card details.
Click here to activate protection.
Dealing with MS Removal Tool Attacks
MS Removal Tool has been reported to spread through insecure files on P2P networks, freeware websites and pirated software websites. Being careful to verify the safety of suspicious files before running them will help you avoid the MS Removal Tool bug.
Although MS Removal Tool is based off of the older rogue threat System Tool, MS Removal Tool has had sufficient alterations to avoid being detected by many anti-malware programs. Keeping your anti-malware software up to date is a critical step in detecting MS Removal Tool. Having multiple well-known brands of security software will also give you security through redundancy that may just be what you need to delete MS Removal Tool.
You probably won't be able to access most of the necessary software for removing MS Removal Tool while this rogue program is active. Using Safe Mode will let you scan your computer without MS Removal Tool getting in the way. Safe Mode is available for all Windows systems by tapping F8 during the booting process and makes cleaning out MS Removal Tool and otherrogue security applications such as Live Security Platinum and Security Shield 2012 a relatively simple task.
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.The following files were created in the system:
%ALLUSERSPROFILE%\Application Data\fNfBeFdPgGn07003\fNfBeFdPgGn07003.exeFile name: fNfBeFdPgGn07003.exe
Size: 293.56 KB (293560 bytes)
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Application Data\fNfBeFdPgGn07003
Group: Malware file
Last Updated: March 28, 2011
|1||MS Removal Tool Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC.
Click here to remove them immediately with MS Removal Tool
Application cannot be executed. The file [FILENAME].exe is infected.
Please activate your antivirus software.
|3||Warning: Your computer is infected
Windows has detected spyware infection!
Click this message to install the last update of Windows security software...