How do I remove MS Removal Tool manually?

How do I manually remove MS Removal Tool?
Mario MartinezIT Consultant Asked:
Who is Participating?
 
Sudeep SharmaConnect With a Mentor Technical DesignerCommented:
I would also recommend to scan the computer with Malwarebytes and HitmanPro which would take care of it.

Malwarebytes:
update it before running a full system scan:

http://www.malwarebytes.org/mbam-download.php

HitManPro

32bit
http://dl.surfright.nl/HitmanPro35.exe
http://download.cnet.com/Hitman-Pro-3/3000-2239_4-10895604.html

64bit
http://dl.surfright.nl/HitmanPro35_x64.exe

I hope that would help

Sudeep
0
 
flubbsterCommented:
0
 
wuyinzhiCommented:
1. boot your windows in safe mode
2. run registry cleaner (regedit.exe) from start - run
3. find registry KEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run or RunOnce
4. find suspicious key that launch random exe name
5. delete the random exe name manually from windows explorer
6. delete the suspicious registry key
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 
wuyinzhiCommented:
oops in point 2 i mean registry editor, not registry cleaner :) this maybe works for most fake antivirus
0
 
younghvCommented:
You need to fix your "Proxy" settings before starting to repair this problem.
You can do it manually (in Safe Mode with Networking) or you can use a free tool called "RogueKiller".
Please review the instructions here:
http://www.experts-exchange.com/A_4922.html (Rogue-Killer-What-a-great-name)

Complete step-by-step instructions are here:
http://www.bleepingcomputer.com/virus-removal/remove-ms-removal-tool
0
 
tamakiwoCommented:
Ms Removal Tool executable:

Windows XP/2000:
C:\Documents and Settings\All Users\Application Data\fHrPqDaZcCg02547\fHrPqDaZcCg02547.exe

fHrPqDaZcCg02547 = randomly generated. Yours will be different.

So, go to the Application data folder. Find randomly named folder (it can be hidden!! change folder options to see it) and rename the main executable in that folder, e.g. fHrPqDaZcCg02547.exe

It should be:
C:\Documents and Settings\All Users\Application Data\fHrPqDaZcCg02547\virus.ex_

Instead of:
C:\Documents and Settings\All Users\Application Data\fHrPqDaZcCg02547\fHrPqDaZcCg02547.exe

Restart your computer. Ms Removal Tool shouldn't come up anymore. Now you can  manually delete the entire folder. Also, don't forget to remove this registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[SET OF RANDOM CHARACTERS]"

Source: Ms Removal Tool executable:

Windows XP/2000:
C:\Documents and Settings\All Users\Application Data\fHrPqDaZcCg02547\fHrPqDaZcCg02547.exe

fHrPqDaZcCg02547 = randomly generated. Yours will be different.

So, go to the Application data folder. Find randomly named folder (it can be hidden!! change folder options to see it) and rename the main executable in that folder, e.g. fHrPqDaZcCg02547.exe

It should be:
C:\Documents and Settings\All Users\Application Data\fHrPqDaZcCg02547\virus.ex_

Instead of:
C:\Documents and Settings\All Users\Application Data\fHrPqDaZcCg02547\fHrPqDaZcCg02547.exe

Restart your computer. Ms Removal Tool shouldn't come up anymore. Now you can  manually delete the entire folder. Also, don't forget to remove this registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "[SET OF RANDOM CHARACTERS]"

Source: http://deletemalware.blogspot.com/2011/03/how-to-remove-ms-removal-tool-uninstall.html
0
 
Mario MartinezIT Consultant Author Commented:
I'm not a fan of using so many programs to remove infections but they worked like a charm.  

Thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.