Re: KB890830

From: AliceZ (AliceZ_at_discussions.microsoft.com)
Date: 08/17/05


Date: Tue, 16 Aug 2005 16:16:02 -0700

Thanks again for your kind help. I asked my husband to look in his System32
on his computer and he says he also sees "MRT.exe / 1,416kb / applications /
8/4/05." We both go to MS Critical Updates everytime we sign-on to see if
there are any Critical Updates and that is where we get the KB890830 every
month. Are we doing something wrong?

"Wesley Vogel" wrote:

> You better check for Norton Security 2005 updates at least once a day.
>
> MRT does not go to the system32 folder unless you actually download it and
> *save* it to your machine from here...
> http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en
>
> The Malicious Software Removal Tool from Automatic Updates, runs once and
> it's gone. Unless a problem is found.
>
> [[A new version of this tool is released on the second Tuesday of every
> month. These new versions will be available from the Microsoft Download
> Center—this page—as well as from Windows Update / Automatic Updates. An
> online version of the tool is also available. It is recommended that Windows
> XP users use Windows Update / Automatic Updates to download the tool.]]
> Microsoft® Windows® Malicious Software Removal Tool (KB890830)
> http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&displaylang=en
>
> [[Windows XP users may get the latest version through Windows Update. To
> have the newest versions automatically delivered and installed as soon as
> they are released, set the Automatic Updates feature to Automatic.
>
> Note The version of this tool delivered by Windows Update runs in the
> background and then deletes itself. If you would like to run this tool more
> than once a month, use the version on this Web page or install the version
> that is available in the Download Center.]]
> On-line version of the Malicious Software Removal Tool
> http://www.microsoft.com/security/malwareremove/default.mspx
>
> Every time the tool is executed, independent of the results of the
> execution, the tool will record a GUID to the registry to indicate that it
> has been executed. The following table lists the GUID corresponding to each
> release.
>
> Release Value Data
> January 2005 E5DD9936-C147-4CD1-86D3-FED80FAADA6C ]]
>
> Deployment of the Microsoft Windows Malicious Software Removal Tool in an
> enterprise environment
> http://support.microsoft.com/default.aspx?scid=kb;en-us;891716
>
> The Microsoft Windows Malicious Software Removal Tool helps remove specific,
> prevalent malicious software from computers that are running Windows Server
> 2003, Windows XP, or Windows 2000
> http://support.microsoft.com/kb/890830
>
> You receive an error when you run the Microsoft Windows Malicious Software
> Removal Tool
> http://support.microsoft.com/default.aspx?scid=kb;en-us;891717
>
> --
> Hope this helps. Let us know.
>
> Wes
> MS-MVP Windows Shell/User
>
> In news:6C3D017B-29CD-44BD-AB65-13CF28C7B7C5@microsoft.com,
> AliceZ <AliceZ@discussions.microsoft.com> hunted and pecked:
> > Thank you. We use Norton Security 2005 and update it's definitions every
> > week and run full scan every other day. We also use AdAware.
> > Would you know if the MRT in System32 (v1.07) will be REPLACED next month
> > by the September KB890830?
> > (I never knew the MRT was in the System32 until someone told me it was.)
> > If you don't know the answer, no need to respond. Thanks.
> >
> > "Wesley Vogel" wrote:
> >
> >> Well, I'm placing my money on the tool. Keep having fun. :-)
> >>
> >> Oh, keep in mind that the MRT is no substitute for fully updated
> >> antivirus software.
> >>
> >> --
> >> Hope this helps. Let us know.
> >>
> >> Wes
> >> MS-MVP Windows Shell/User
> >>
> >> In news:C2A85196-AD75-4FB7-AF82-7C9C4F0A43A9@microsoft.com,
> >> AliceZ <AliceZ@discussions.microsoft.com> hunted and pecked:
> >>> Thank you. I ran the MRT again and this time it showed only "No
> >>> Infections Found."
> >>> Hopefully it was tools fault and not something wrong with this fairly
> >>> new Tablet.
> >>>
> >>> "Wesley Vogel" wrote:
> >>>
> >>>> The link I included was as close as I could find to your error. I
> >>>> thought you might find a clue there.
> >>>>
> >>>> What I would suggest is running the Malicious Software Removal Tool
> >>>> again. To see if that error shows up again. I am guessing that the
> >>>> error was the tool's fault and not a problem on your machine.
> >>>>
> >>>> To run the tool again, you can go here...
> >>>>
> >>
> http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en
> >>>>
> >>>> Click the Download button at the top of the page
> >>>> Click the Open button on the File Download window that pops up (File
> >>>> Name: Windows-KB890830-V1.7-ENU.exe)
> >>>> Click the Next button on the Malicious Software Removal Tool popup
> >>>> Then a Scan results should show
> >>>> If nothing was found you'll see a green shield with a white check mark
> >>>> Click the Finish button
> >>>> You can also hit the Back button in Internet Explorer and run the tool
> >>>> again
> >>>>
> >>>> I have no idea what shows if there is an error or if something is
> >>>> found. I had no problems.
> >>>>
> >>>> Running the tool this way adds to the mrt.log.
> >>>>
> >>>> You probably know this but you can
> >>>> paste this in the Start | Run box...
> >>>>
> >>>> %windir%\debug\mrt.log
> >>>>
> >>>> Then click OK.
> >>>>
> >>>> To see what's in the log.
> >>>>
> >>>> --
> >>>> Hope this helps. Let us know.
> >>>>
> >>>> Wes
> >>>> MS-MVP Windows Shell/User
> >>>>
> >>>> In news:B3E3C330-94E5-40E9-A358-0FC7023C046F@microsoft.com,
> >>>> AliceZ <AliceZ@discussions.microsoft.com> hunted and pecked:
> >>>>> We looked at the article but it did not make any sense to us. We are
> >>>>> senior citizens and not too familiar with computers.
> >>>>> The "warning" wording we mentioned ("sys clean warning - mem scan get
> >>>>> image path from pid (3096) win32 error code 0x00000057 (87): the
> >>>>> parameter is incorrect (65)")was printed in the KB890830 (MS malicious
> >>>>> software checker) log that we opened after the KB890830 ran and
> >>>>> checked our system. The log mentioned that it did not find any
> >>>>> infections (as it has reported in previous months when the KB890830
> >>>>> was run.
> >>>>>
> >>>>> "Wesley Vogel" wrote:
> >>>>>
> >>>>>> http://www.mcse.ms/archive78-2005-7-1704494.html
> >>>>>>
> >>>>>> --
> >>>>>> Hope this helps. Let us know.
> >>>>>>
> >>>>>> Wes
> >>>>>> MS-MVP Windows Shell/User
> >>>>>>
> >>>>>> In news:97843631-7A43-4825-893F-94D17F77A191@microsoft.com,
> >>>>>> AliceZ <AliceZ@discussions.microsoft.com> hunted and pecked:
> >>>>>>> I recently downloaded KB 890830 as I have been doing regularly (for
> >>>>>>> my Gateway Tablet, which has WinXPsp2). After the
> >>>>>>> download I ran the "notepad %windir%.....etc. and noticed that it
> >>>>>>> not only told me it found no errors (as it usually did), it
> >>>>>>> mentioned the following which has us quite concerned:
> >>>>>>>
> >>>>>>> "sys clean warning - mem scan get image path from pid (3096) win32
> >>>>>>> error code 0x00000057 (87): the parameter is incorrect (65)"
> >>>>>>>
> >>>>>>> Would someone be able to tell us what this means and is it serious
> >>>>>>> and can we correct, etc.? Please advise and thank you.
> >>>>>>>
> >>>>>>> (I posted this message on the Tablet board, but they said they could
> >>>>>>> not comment on KB890830)
>
>



Relevant Pages

  • Re: Malicious Software Removal Tool Question
    ... | WindowsMalicious Software Removal Tool (KB890830" software package ... | the "Automatic Updates" function was turned on or off on my system. ... You can download it manually from Microsoft or it ...
    (microsoft.public.windowsxp.general)
  • Re: Malicious Software Removal Tool Question
    ... WindowsMalicious Software Removal Tool (KB890830" software package is ... download this software and run it against his system. ... "Automatic Updates" function was turned on or off on my system. ...
    (microsoft.public.windowsxp.general)
  • Re: Malicious Software Removal Tool Question
    ... WindowsMalicious Software Removal Tool (KB890830" software package is ... "Automatic Updates" function was turned on or off on my system. ... You can access the MS site to download & run the Malicious Software Removal ...
    (microsoft.public.windowsxp.general)
  • Re: Malicious Software Removal Tool Question
    ... With Automatic Updates enabled & working properly, ... Your Update History at http://windowsupdate.microsoft.com will list every time the MSRT has downloaded/run. ... WindowsMalicious Software Removal Tool (KB890830" software package ...
    (microsoft.public.windowsxp.general)
  • Malicious Software Removal Tool Question
    ... I saw where it was recommended on this newsgroup that an individual download this software and run it against his system. ... I visited the Microsoft web page having to do with Windows Malicious Software Removal Tool. ... There I learned that I could determine whether the "Automatic Updates" function was turned on or off on my system. ... I then read that computers running Windows XP Service Pack 2 automatically had "Automatic Updates" turned on by default. ...
    (microsoft.public.windowsxp.general)