MS Removal Tool

MS Removal Tool is a new rogue antispyware which pretends to be a legitimate security program. It is a direct clone of System Tool and System Tool 2011. These malicious software applications were the hottest parasites in 2010. As a rogue program, MS Removal Tool is created to trick unsuspecting user into believing that this program could be trusted. However, the real aim of the rogue is to steal your financial information and then use it for its own purposes. The relationship between MS Removal Tool and its predecessors is more than obvious, because all software applications share the same infection symptoms.

The most popular way for the rogue to arrive at your computer is through fake online malware scanners. Are you wondering how it is possible to land in an infected site? The answer is simple – one click on a hijacked link from a search engine result can lead you to the site which hosts a download file for MS Removal Tool. Sometimes you don't even need to initiate the download yourself. The download starts automatically, when you land in the infected site. When the download is done, you need to initialize the installation yourself, but clicking on the rogue’s icon. Sometimes, however, the rogue can be downloaded an installed by a Trojan infection, which you have caught some time earlier. Depending on your operating system, MS Removal Tool's infection files are created in random folders in the following directories: C:\Documents and Settings\All Users\Application Data\ for Windows XP, and C:\Documents and Settings\All Users\Application Data\ for Windows Vista and Windows 7.

MS Removal Tool Warning
Your PC is infected with dangerous viruses. Activate antivirus protection to prevent data loss and avoid the theft of your credit card details.
Click here to activate protection.

MS Removal Tool Warning
Intercepting programs that may compromise your privacy and harm your system have been detected on your PC.
Click here to remove them immediately with MS Removal Tool.

Security Monitor: WARNING!
Attention: System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. Your private information and PC safety is at risk. To get rid of unwanted spyware and keep your computer safe you need to update your current security software.
CLick Yes to download official intrusion detection system (IDS software).

Warning: Your computer is infected
Windows has detected spyware infection!
Click this message to install the last update of Windows security software...

If that weren't enough, MS Removal Tool will change your desktop background into a blue screen with extensive warning.

With such poorly written messages you are urged to activate the protection by providing your credit card number and other personal information to MS Removal Tool. If you do so, you might as well say good-bye to your money for good. In order to prevent that, you need to acquire a good security program or do the manual removal to terminate MS Removal Tool.

In order to make the removal process smoother, you need to “register” the program. It will allow you to terminate MS Removal Tool easier. To “register” the problem, use one of the codes below:

If you use one of these codes to "register" the program, MS Removal Tool's interface will change from wash-out pink into light blue, and if you perform the scan again, the rogue will find no infections whatsoever. You will be allowed to access your Task Manager again, and load the .exe files. Also, when you have registered the program, another function appears, where you can contact MS Removal Tool's support service by the number 1-800-417-5679.

We have tried contacting them, with intention to say that there is something wrong with the software, and we were immediately asked for the transaction ID, which was supposed to be in our email inbox. If you don't have it, they ask for the first 6 and the last 4 digits of your credit card, and then checks in a data base, to see if they have a record of you. This implies that the people behind MS Removal Tool are storing the credit card information of every single person they have managed to trick.

They also offer a refund if you are not satisfied with the product, but for that you need to tell your transaction ID as well. Also, if you say that you think MS Removal Tool is a virus, the "support center" claims that malicious programs have merely infected MS Removal Tool and they are using the interface of the program. They try to look legitimate by saying their support extension number, and they assure that it is possible to use the same license on a a few computers. That is, they indirectly forces the user to infect as many computers as possible.

Not to mention, that MS Removal Tool's customer support is not your best service ever. We have contacted Anastasia and Max, and some of their answers were harsh, drenched with strong Russian accent. We even heard them swearing. The fact that there is more than 1 person answering the customer's support calls means that the creators of MS Removal Tool are well-prepared to make this scam a successful operation.

This program will always hinder your attempts to remove it, because it needs to stay in your computer for as long as possible. In order to do that, MS Removal Tool blocks your internet connection. When your internet connection is blocked you cannot search for the ways how to get rid of this rogue. The parasite allows you to load only MS Removal Tool’s purchase sites.

How to renew your internet connection:

1. Open Internet Explorer and go to >Tools< select >Internet Options<

   

2. Select >Connections<

   

3. Select >LAN Settings<

   

4. Now you need to uncheck the checkbox labeled >Use a proxy server for your LAN< in Proxy Server section. Then press the >OK< button to close this screen and press the >OK< button to close the Internet Options screen.

   

5. Now you can download the SpyHunter scanner and remove the infection.