Re: MRT.exe CPU usage problem continues!

From: T_o_n_y (Tony_at_discussions.microsoft.com)
Date: 11/14/05

Next message: par7133: "Re: trojan by icq"
Previous message: Aquafina: "Re: Removing Newdotnet"
In reply to: MowGreen: "Re: MRT.exe CPU usage problem continues!"
Next in thread: David H. Lipman: "Re: MRT.exe CPU usage"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Sun, 13 Nov 2005 19:33:04 -0800

MowGreen,

I did follow up with Matt, and I've included a copy below if you are
interested. It looks like I'm exception #2 because I do not have McAfee
installed. I use NIS 2005. I was able to get the "download center" version
of the mrt tool to work. See more details in my letter to Matt below:

***************************************************
Matthew,

I wasn't sure what you meant by "download center" version, so I did the
wrong thing at first. But then it worked. Here is exactly what I did. I
first used IE 6 to go to Tools-->Windows Update and then it said I needed the
following:

Windows Malicious Software Removal Tool - November 2005 (KB890830)
Download size: 0 KB , 0 minutes (Downloaded; ready to install)
After the download, this tool runs once to check your computer for infection
by specific, prevalent malicious software (including Blaster, Sasser, and
Mydoom) and helps to remove any infection found. If an infection is found,
the tool will display a status report the next time you start your computer.
A new version of the tool will be offered every month. If you want to
manually run the tool on your computer, you can download a copy from the
Microsoft Download Center or run an online version from microsoft.com. This
tool is not a replacement for an anti-virus product. To help protect your
computer, you should use an anti-virus product. Details...

I then chose to install that and in the "Installing Updates" window it read:

Installing Windows Malicious Software Removal Tool - November 2005
(KB890830) (update 1 of 1)...

Meanwhile the CPU went to 98% with MRT.exe. After about 5 minutes of that I
stopped it using the cancel button of that window. However, even though it
read "Canceling updates..." in that window, the CPU continued at about 97%
for 5 more minutes. I finally stopped it via Windows Task Manager.

I then found the microsoft download center version at:
http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en

and after chosing "download" I chose to "run" rather than saving the
download. It ran very quickly and said "no malicious" detected. I actually
did that twice...each time, quick, and no cpu problem.

Thank you. Can you explain what happened? Should I be concerned about what
might have been happening to my computer during the times the CPU was racing
like that? Should I once again run "system recover" to get it back to the
state prior to that?

-Tony
----- Original Message -----
From: Matthew Braverman
To: myother_acct@hotmail.com
Sent: Friday, November 11, 2005 3:40 PM
Subject: RE: Writing per your request

Tony can you try running the download center version

-----Original Message-----
From: "MO"<myother_acct@hotmail.com>
Sent: 11/11/05 2:20:35 PM
To: "mattbrav@microsoft.com"<mattbrav@microsoft.com>
Cc:
Subject: Writing per your request

Per your request, I'm writing to you (see below). As I posted in the forum:

I've now had this happen to me twice...that is, I've now gotten stuck in a
state where the mrt.exe uses 90+% while never seeming to end. Each time I've
solved the problem by doing a system restore to earlier times. I now have
Windows Update waiting to install the tool again. What should I do?

Below is the content of my mrt.log file stored in c:\windows\debug\

-Tony

---------------------------------------------------------------------------------------

Microsoft Windows Malicious Software Removal Tool v1.2, March 2005
Started On Tue Mar 08 17:19:01 2005