Comments for Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Comment from Nicholas on 2008-12-16

2008-12-16T23:21:55Z

Whether MSRT is or isnt part of Windows Defender, WD is a great program. Its set out well has extra features ( I know the features are native to Xp ) but for those that dont know that , theyre introduced to them by WD. Its free, its Windows, it works great, so whats the problem?

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Susan James on 2008-12-07

2008-12-08T05:51:31Z

Thanks for the article. Thx. to Kyle and Kenneth, too, this was very helpful!I wondered when this tool scanned myself. Now I know how to use it and where to get it.

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Kenneth Crook on 2008-12-06

2008-12-07T02:30:44Z

Malicious Software Removal Tool can be downloaded and run separately. Go to the default home page and download it. Each month it has the newest version. Once downloaded you can run it anytime you want, as many times as you want. I run it once a week when I do my full Norton Antivirus and Windows Defender scans.

http://www.microsoft.com/security/malwareremove/default.mspx

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Kyle on 2008-12-02

2008-12-03T06:22:07Z

The MRT is an 'On-Demand' scanner. It is pretty efective:
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9121161&source=rss_topic125
It is offered via the Microsoft Windows Update site once per month and it will scan your OS at the time it is downloaded/re-booted.

It also can be run at any time whenever you like.

Click Start==>Run... then type (or copy/paste) "MRT.exe" (w/out quotation marks) into the box, then click the 'OK' button.
Follow the prompts.

%windir%\system32\MRT.exe

Command Line Switches...
/q or /quiet -- execute without GUI
/? or /help -- displays command line switches
/n -- detect mode only
/f -- force a full scan
/f:y -- force a full scan and automatically clean infections found

MRT is much like McAfee's Stinger. It has a limited sub-set target list. However unlike Stinger it is updated monthly and is downloaded on Patch-Tuesday as well as can be manually downloaded.

MRT can be used as a valuable supplemental 'On-Demand' scanner.

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Glenn P. on 2008-12-02

2008-12-03T05:24:09Z

Nelson Webber wrote: "I wonder if one could run it if one wished. Also, any idea where it might be found?"

Yes:

http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

N.B. that's just for this month, though -- the Knowledgebase number changes with each edition, and the corresponding URL along with it.

Hope that helps! :)

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Daemon Singer on 2008-12-02

2008-12-02T21:48:59Z

I refuse to download it and that has generally related to Windows Defender, which is just treated as another non required Microsoft add-on.
I reckon if you are doing things that make spyware/malware, call it what you will, then you should use a properly constructed malware management suite such as CA, or even better, that plus a specific anti-spy such as spyhunter.
Problematically, most people don't want to pay for protection and that decision, in my experience can be very expensive.
One of the biggest income streams in my organisation is spyware removal (manual and machine based), and supporting people who refuse to spend money on the internet to protect themselves.

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from George on 2008-12-02

2008-12-02T18:20:29Z

LEO COMMENT:
I think it's pretty clear from Microsoft's description that it's only looking for certain things in certain places.
- Leo
30-Nov-2008
MY COMMENT
I think that MSRT is looking for non MS programs that emulate MS programs AND TO REMOVE THOSE!

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from mukuntharajan on 2008-12-02

2008-12-02T17:12:55Z

will ms malicious software remove win32/heur. if it cannot is there any other antivirus that can remove this particular virus or trojan or malware which i am not sure

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Diane Louw on 2008-12-02

2008-12-02T17:02:21Z

Well something must be wrong then on my side as i have MSRT and my email still tells me that i have Win32:Mydoom-M [Wrm]) I thought MSRT would take care of this but todate it has not. Does anyone have any suggestions as to how i can get MSRT to remove Win32:Mydoom-M [Wrm])? Many thanks for the great newsletter..

I don't think you can make it do anything that it doesn't do. I'd look into getting a good anti-virus program to do it for you.

- Leo
03-Dec-2008

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from verisimilidude on 2008-12-02

2008-12-02T16:34:35Z

You say (in bold type even) that the reporting is anonymous. Unless you are connecting through an anonymizing proxy this is never true - your IP address is an essential part of the communication. And there are lawyers arguing that anything sent from an IP address that you pay for is your responsibility - even if you have no knowledge of what was being sent.

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Nelson Webber on 2008-12-02

2008-12-02T16:33:05Z

I wonder if one could run it if one wished. Also, any idea where it might be found? I checked inside Program Files and of course, it wasn't there. That didn't really surprise me, but not finding it in the Control Panel did.
Any suggestions?
Many thanks!

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Chris on 2008-11-29

2008-11-30T01:39:24Z

Do you think it actually scans your entire disk, or looks into directories where Blaster, Sasser, and Mydoom (for example) are usually installed?

I think it just takes a look at specific registry entries (or directories) and deletes them if they indeed pertain to those types of infections (or maybe restores entries that have been modified). I doubt it scans the drive like Windows Defender would for example, because MS has to ask for your permission first for something like that.

Just me thinkin out loud :)

I think it's pretty clear from Microsoft's description that it's only looking for certain things in certain places.

- Leo
30-Nov-2008

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Just J on 2008-11-29

2008-11-29T18:24:10Z

Hi Leo

My guess also is that MSRT runs each time it's updated.

I've noticed that it takes longer & longer to 'install' each update, so I realised that it was probably running the scan each time. (Taking longer as it has more to scan for, I would assume).

]]>

A comment on: Just what is the Malicious Software Removal Tool that I keep getting in Windows Updates?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.