Re: Windows Malicious Software Removal Tool?

From: "TNorth" <tnorth99@xxxxxxxxxxx>

| Thoughts and opinions on the Windows Malicious Software Removal Tool please?
| Is anyone using it? Are there problems with it?
|
| I run NAV 2006 one full scan a week plus "short" scans every other day,
| Ad-Aware SE weekly, and Ewido weekly. Do I need this MS tool as well?
|
| Once it is installed - does it always run or is it a one-shot deal each
| month?
|
| Any thoughts or ideas appreciated!
|
| Thanks!
| TN
|

MRT is a "On Demand" virus scanner that targets mostly Internet Worms but also a few Trojans
and now it is reported the the Sony DRM RootKit. It runs only when asked to run.

It is available to Win2K, WinXP and Win2003 Server platforms via the Windows Update web site
on a period basis. It is also available via download
http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en

The utility is...
%windir%\system32\MRT.exe

Command line switches...

/? or /HELP = displays the command line switches
/Q = quiet
/N = detect only
/F = force extended scan
/F:Y = force extended scan and automatically clean infected files

The following is the resultant log file...

%windir%\Debug\mrt.log

There have been issues where it draws a high CPU utilization on some platforms (not many).
Matt Braverman, Microsoft, looked into this problem and it was supposed to have been fixed
but there is anecdotal information in News Groups that there still may a problem.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


.

Relevant Pages

  • Re: MRT.exe CPU usage problem continues!
    ... I wasn't sure what you meant by "download center" version, ... Windows Malicious Software Removal Tool - November 2005 ... Mydoom) and helps to remove any infection found. ...
    (microsoft.public.security.virus)
  • MRT.exe CPU usage problem continues!
    ... state where the mrt.exe uses 90+% while never seeming to end. ... No infection found. ... Microsoft Windows Malicious Software Removal Tool Finished On Tue Mar 08 ...
    (microsoft.public.security.virus)
  • Re: Recurring Update, No Matter How Many Times I Install
    ... this folder will be automatically deleted after the tool has finished running or after the next restart. ... Windows XP Windows Malicious Software Removal Tool - August 2006 ... Thursday, August 17, 2006 Automatic Updates ...
    (microsoft.public.windowsupdate)
  • Re: Critical Updates
    ... Dunno if we'll see it again when the next version of the MSRT is released next month but I suspect we won't. ... "Microsoft Windows Malicious Software Removal Tool v2.8, ... and try again, ignoring. ...
    (microsoft.public.windowsupdate)