MS Removal Tool Virus. Can't Update MBAM

BleepingComputer.com: MS Removal Tool Virus. Can't Update MBAM

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

MS Removal Tool Virus. Can't Update MBAM Having trouble using MBAM in safe mode w/ networking to remove Virus

#1 lwilwert

New Member

Group: Members
Posts: 2
Joined: 23-April 11

Posted 23 April 2011 - 01:24 PM

Hello,

My friend's laptop is infected with the MS Removal Tool virus. Most googling led me to this tutorial
http://www.bleepingcomputer.com/virus-removal/remove-ms-removal-tool

On step 7, it directs us to uncheck "Use a proxy server for your LAN".
However, this box is already NOT checked when I open this screen. Internet shows that it is connected to our network via wifi, but webpages will not load.
As such, I used my computer and an USB to transfer RKILL.exe as an ulterior option stated in guide.

RKILL finds and terminates:
C:\windows\SysWOW64\InfDefaultInstall.exe
C:\windows\SysWOW64\runonce.exe

As internet is still not working, I used the USB to transfer mbam-setup.exe as well. Install program. I then attempt to update to no avail.

So what other things must I do to regain internet connection and thus update mbam to fully remove MS Removal Tool? Does it HAVE to be updated (found 1 file. I don't remember what)?

Thank you for any insight!

#2 lwilwert

New Member

Group: Members
Posts: 2
Joined: 23-April 11

Posted 23 April 2011 - 02:32 PM

My friend's laptop had Webroot AntiVirus on his system already and had been recently updated (no need for internet!). I substituted this into procedure and seemed to have fixed the problem(no spam at reboot). If anyone knows if this will be insufficient in the long run, please let me know. Still food for thought if other people encounter same roadblock.

Still no internet, but I think I remember running across someone saying that system restores can cause this problem (The person using the laptop at time of infection attempted this before I took over). So I will poke around the interwebs to see how to resolve this hopefully unrelated problem.

If not, thank you for the guide! Definitely helped me get my bearings on my first virus purge! Was lost without it. Thanks! ^^