Fraud alert: MS Removal Tool

Cybercriminals are circulating a new piece of fake security software that spoofs a Microsoft security tool. It’s called the “MS Removal Tool.” If you see a pop-up ad or an email for the “MS Removal Tool,” ignore it.

If you already have this malware on your computer, you might not be able to access Internet Explorer or any other programs.

You will have to boot your computer into Safe Mode. For detailed step-by-step instructions use another computer or smartphone to read Microsoft Support: How to remove the MS Removal Tool from your computer.

If you can access Internet Explorer or another web browser, use the Microsoft Safety Scanner to scan your computer and remove the MS Removal Tool.

To help protect yourself from malicious software, download and install Microsoft Security Essentials.

For more information on rogue security software, see Watch out for fake virus alerts.

About the Author
Eve Blakemore

Group Manager, Trustworthy Computing

Eve Blakemore is a Group Manager for Trustworthy Computing who delivers consumer guidance around the latest trends in security and privacy. Eve joined Microsoft in 1998 and has worked in corporate and field roles with Microsoft Learning, US Public Sector, Read more »

Join the conversation

6 comments
  1. Anonymous

    i have a original microsoft vista cd which i got on buying a dell computer the guy didnt give me the activation number the guy is ask informatics warangal dealer of hawlett packard please let me know if my ip address is being hacked

     

  2. Anonymous

    we keep getting phone calls supposedly from Windows telling us that corrupt emails are causing problems and then wanting us to put the P.C. on so that their Technion can sort things out but they will not give me any details that I can verify who they are I just wonder if this is some sort of scam  

  3. Anonymous

    The first indication I had there was aproblem, was when I tried to play COD Modern Warfare 2.  Previously, I could play full screen, then it had a reduced playing window.  After troubleshooting for a couple of hours on Steam and the game, I got a message that iw4sp.exe was really the trojan.  

    I downloaded msert, but it wouldn't run.  I'll try a reboot and get back to you when I get it fixed.

    FraudTool.win32.MSRemovalTool.ek!a(v)

  4. Anonymous

    Have you heard of the web site 24x7pctech.com and is this a valid company?

  5. Anonymous

    They got me on the 8th…79.90.  A total hijack of the computer.  I may be able to get my money back by filing a dispute with Visa but that is a maybe.  The billing Company name is MYMIGHTYSOFT  in Baku Azerbijania.  

  6. Anonymous

    I said goodbye to MS Security Essentials when I found out it does not

    protect E-MAIL and PLUG IN'S such as flash drives.  Microsoft, add these two capabilities and I will be right back.  I really like your product with these execptions.

Comments are closed.