BleepingComputer.com: MS Removal Tool, 0.30605367786813775.exe and 0 file

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

MS Removal Tool, 0.30605367786813775.exe and 0 file

#1 User is offline   ttran2011 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 3
  • Joined: 20-June 11

Posted 20 June 2011 - 12:57 PM

Hi,
My computer was infected with MS Removal Tool and thanks to the instruction from your Web site, I was able to remove it. At the time of infection, I also noticed that 2 new files were added to my desktop. They are 0.30605367786813775.exe and 0 file. I've run both Malwarebytes' Anti-Malware and AVG full scan on my computer but they didn't mark them as virus/trojan/malware. Please let me know what these files are and how to safely remove them.
Thanks,
Tony

#2 User is offline   quietman7 

  • Bleepin' Janitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 25,517
  • Joined: 09-July 05
  • Gender:Male
  • Location:Virginia, USA

Posted 20 June 2011 - 01:32 PM

Based on the file names, there is no way to determine exactly what they are without further information. Anytime you come across a suspicious file or you want a second opinion, submit it to one of the following online services that analyzes suspicious files:
In the "File to upload & scan" box, browse to the location of the suspicious file and submit (upload) it for scanning/analysis. If you get a message saying "File has already been analyzed", click Reanalyze file now.

BTW, Malwarebytes Anti-Malware has a built-in FileAssassin feature for removing stubborn malware or other malicious files that it did not detect.
  • Go to the "More Tools" tab and click on the "Run Tool" button
  • Browse to the location of the file(s) to remove using the drop down box next to "Look in:" at the top.
  • When you find the file, click on it to highlight, then select Open.
  • You will be prompted with a message warning: This file will be permanently deleted. Are you sure you want to continue?. Click Yes.
  • If removal did not require a reboot, you will receive a message indicating the file was deleted successfully.
  • Click Ok and exit MBAM.
  • If prompted to reboot, then do so immediately.
-- If the file returns, then you probably have other malware on your system which is protecting or regenerating it.

Quote

Caution: Be careful what you delete. FileAssassin is a powerful program, designed to remove highly persistent files. Using it incorrectly could lead to serious problems with your operating system if removing a critical file.

Microsoft MVP - Consumer Security 2007-2012 Posted Image
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#3 User is offline   ttran2011 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 3
  • Joined: 20-June 11

Posted 20 June 2011 - 01:48 PM

Hi quietman7,
Thanks so much for your help. I'll follow your advice to submit the files to the online services mentioned in your post. Thanks also for the tip for Malwarebytes Anti-Malware. I'll try to resolve the issue and post about how it turns out. Thanks again for taking your time to help.
Regards,
Tony

#4 User is offline   quietman7 

  • Bleepin' Janitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 25,517
  • Joined: 09-July 05
  • Gender:Male
  • Location:Virginia, USA

Posted 20 June 2011 - 01:59 PM

Not a problem.
Microsoft MVP - Consumer Security 2007-2012 Posted Image
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users