When is the Malicious Software Remove Tool running?

[RealCat]

This software comes as an important update each and every month.
However, it has no GUI or no shortcut in the start menu. Thus, I guess
most users, including me, have never manually run this tool before. I
have read the product page of it on the Microsoft web site, and it
said:

Note The version of the tool delivered by Microsoft Update and
Windows Update runs in the background and then reports if an infection
is found.

So when exactly is this tool running? Right after a new version of it
is downloaded? If so, it just sits on the hard disk for one month
doing nothing after that?

 

[Spikey]

This software comes as an important update each and every month.
However, it has no GUI or no shortcut in the start menu. Thus, I guess
most users, including me, have never manually run this tool before. I
have read the product page of it on the Microsoft web site, and it
said:

Note The version of the tool delivered by Microsoft Update and
Windows Update runs in the background and then reports if an infection
is found.

So when exactly is this tool running? Right after a new version of it
is downloaded? If so, it just sits on the hard disk for one month
doing nothing after that?

It runs once after download and then apparently removes itself.

 

[Kayman]

This software comes as an important update each and every month.
However, it has no GUI or no shortcut in the start menu. Thus, I guess
most users, including me, have never manually run this tool before. I
have read the product page of it on the Microsoft web site, and it
said:

Note The version of the tool delivered by Microsoft Update and
Windows Update runs in the background and then reports if an infection
is found.

So when exactly is this tool running? Right after a new version of it
is downloaded...

and rebooting the PC.

If so, it just sits on the hard disk for one month doing nothing after that?

Yes. But you can manually scan as many times you wish.
Start, Run, type: MRT - then OK, follow the prompts.

 

[Spikey]

Start, Run, type: MRT - then OK, follow the prompts.

So it does.

So I wonder why windows update says :-
"A new version of the tool will be offered every month. If you want to
manually run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. "

I mean who writes these details???

(

 

[RealCat]

and rebooting the PC.


Yes. But you can manually scan as many times you wish.
Start, Run, type: MRT - then OK, follow the prompts.

Ah, it does have a GUI. Then why didn't Microsoft provide a shortcut
in the start menu? That way, users can access this tool more easily.
Plus, I don't know the relationship between it and Windows Defender.
Both came from Microsoft, says that it detects mal-wares. Why does
Windows Vista need them both? (Apparently I cannot remove Windows
Defender from Windows Vista.)

 

[Paul Montgomery]

So I wonder why windows update says :-
"A new version of the tool will be offered every month. If you want to
manually run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. "

Because the newer version detects more malicious items than the
previous version.

DUH.

 

[Paul Montgomery]

So, inquiring minds want to know, has this "Critical Download" ever really
done anything for us?

It makes sure that no malware is running that will interfere with the
update process.

Look at it as insurance.

 

[Kayman]

Ah, it does have a GUI. Then why didn't Microsoft provide a shortcut
in the start menu?

Maybe scanning once a month is considered sufficient for the average
homeuser. Virus definitions evolve daily and the MSRT does not update daily
it loses its effectiveness as time progresses.

That way, users can access this tool more easily.
Plus, I don't know the relationship between it and Windows Defender.
Both came from Microsoft, says that it detects mal-wares. Why does
Windows Vista need them both? (Apparently I cannot remove Windows
Defender from Windows Vista.)

WindowsDefender is an Anti-Spy application, the MSRT is a (limited)
Anti-Virus Application.
A clarification on the terminology: the word "malware" is short for
"malicious software." Most Anti-Virus applications detect many types of
malware such as viruses, worms, trojans, etc.
What AV applications usually don't detect is "non-viral" malware, and the
term "non-viral malware" is normally used to refer to things like spyware
and adware.

 

[Kayman]

So it does.
So I wonder why windows update says :-
"A new version of the tool will be offered every month.

The new version includes the latest definitions.

If you want to manually run the tool on your computer, you can download
a copy from the Microsoft Download Center, or you can run an online
version from microsoft.com. "

Yes, if you ignore the the 'Patch Tuesday' updates.

I mean who writes these details???

The good people from MSFT.

Similar applications are:
Kaspersky's AVPTool
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/
There's no updating involved since the scanning engine is updated
several times a day and you simply download the updated scanner whenever
you want to do a scan.
--and/or--
Dr.Web CureIt!® Utility - FREE
http://www.freedrweb.com/cureit/
--and/or--
Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

 

[Paul Montgomery]

Read my full post - after it downloads, it does not appear to actually run.

I read your full post. It runs.

Now go play with your toys and be a nice boy.

 

[BillD]

Start, Run, type: MRT - then OK, follow the prompts.

Run??? NO!
just open the start menu, type mrt and hit Enter.

 

[Paul Montgomery]

Run??? NO!

It works Billy Dee. Now go find some more bugs.

 

[Tom Allen]

I just did an update, and there's no sign of the MRT running, before or
after the reboot.

Executing it manually, and selecting Quickscan, it takes several
minutes to
run. Not sure at all how long a complete scan would take - hmm, maybe
as
long as Win Defender does?

So, inquiring minds want to know, has this "Critical Download" ever
really
done anything for us?

Have a look at the log
C:\Windows\Debug\mrt.log

Tom

 

[Spikey]

Because the newer version detects more malicious items than the
previous version.

Do keep up dear!!! Yes we know it gets updated every month.



I was pointing out the the info included with the WUP is INCORRECT.

It says:

"If you want to manually run the tool on your computer, you can download a
copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. "



The notes should have read:-

" you can run it again, anytime you feel like it by typing MRT into the run
box"

The point is you DONT need to download it from the download center as its
still on the computer and accessible from "run"!!!!!

 

[Spikey]

Run??? NO!
just open the start menu, type mrt and hit Enter.

If you have the start menu set up as classic, with all the bling turned off,
you cant type in the start menu!