BleepingComputer.com: MS Removal Tool uninstalled but corrupt files remain

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

MS Removal Tool uninstalled but corrupt files remain

#1 User is offline   OldTed 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 2
  • Joined: 19-April 11

Posted 19 April 2011 - 05:26 PM

My computer was infected with MS Removal Tool. I followed the steps in the Bleeping Computer website and it was a success. The infection is gone and my computer works as well as before. In the Malware Bytes program, two infected files and and one registry were listed and I wrote them down before doing the Removal. The 2 files still exist and I have not checked the registry. Shouldn't these files be gone? The size is only 192 bytes. Are they empty? Can I delete these folders?
Thanks for any assistance.

#2 User is offline   jntkwx 

  • Bleepin' Meteorologist
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Study Hall Senior
  • Posts: 2,307
  • Joined: 12-September 08
  • Gender:Male
  • Location:New England, U.S.A.

Posted 23 April 2011 - 03:55 PM

Hi OldTed,

:welcome: to BleepingComputer. Sorry for the delay. My name is Jason and I will be helping you. (You can either call me by my screenname jntkwx, or Jason is fine.)

Yes, it is odd that the files are not deleted.

Let's make sure Malwarebytes is up to date:

  • Make sure you are connected to the Internet.
  • Open Malwarebytes' and click on the Update tab.
  • Then click on the Check for Updates button. Malwarebytes will download the latest database.


Let's then run a quick scan with Malwarebytes:

  • Under the Scanner tab, make sure the "Perform Quick Scan" option is selected.
  • Click on the Scan button.
  • When finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box, then click the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked and then click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows the database version and your operating system.
  • Exit Malwarebytes' when done.

Note: If Malwarebytes' encounters a file that is difficult to remove, you will be asked to reboot your computer so it can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally will prevent Malwarebytes' from removing all the malware.


Then download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.


To recap, please include with your reply:
  • The full Malwarebytes log
  • The contents of the checkup.txt file from Security Check

Regards,
Jason


Member of the Bleeping Computer A.I.I. early response team!
Please do not PM me for help!

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users