KB890830

[Guest]

I recently downloaded KB 890830 as I have been doing regularly (for my
Gateway Tablet, which has WinXPsp2). After the
download I ran the "notepad %windir%.....etc. and noticed that it not only
told me it found no errors (as it usually did), it mentioned the following
which has us quite concerned:

"sys clean warning - mem scan get image path from pid (3096) win32 error
code 0x00000057 (87): the parameter is incorrect (65)"

Would someone be able to tell us what this means and is it serious and can
we correct, etc.? Please advise and thank you.

(I posted this message on the Tablet board, but they said they could not
comment on KB890830)

 

[Wesley Vogel]

http://www.mcse.ms/archive78-2005-7-1704494.html

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

We looked at the article but it did not make any sense to us. We are senior
citizens and not too familiar with computers.
The "warning" wording we mentioned ("sys clean warning - mem scan get image
path from pid (3096) win32 error code 0x00000057 (87): the parameter is
incorrect (65)")was printed in the KB890830 (MS malicious software checker)
log that we opened after the KB890830 ran and checked our system. The log
mentioned that it did not find any infections (as it has reported in previous
months when the KB890830 was run.

 

[Wesley Vogel]

The link I included was as close as I could find to your error. I thought
you might find a clue there.

What I would suggest is running the Malicious Software Removal Tool again.
To see if that error shows up again. I am guessing that the error was the
tool's fault and not a problem on your machine.

To run the tool again, you can go here...
http://www.microsoft.com/downloads/...E0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

Click the Download button at the top of the page
Click the Open button on the File Download window that pops up (File Name:
Windows-KB890830-V1.7-ENU.exe)
Click the Next button on the Malicious Software Removal Tool popup
Then a Scan results should show
If nothing was found you'll see a green shield with a white check mark
Click the Finish button
You can also hit the Back button in Internet Explorer and run the tool again

I have no idea what shows if there is an error or if something is found. I
had no problems.

Running the tool this way adds to the mrt.log.

You probably know this but you can
paste this in the Start | Run box...

%windir%\debug\mrt.log

Then click OK.

To see what's in the log.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Thank you. I ran the MRT again and this time it showed only "No Infections
Found."
Hopefully it was tools fault and not something wrong with this fairly new
Tablet.

 

[Wesley Vogel]

Well, I'm placing my money on the tool. Keep having fun.

Oh, keep in mind that the MRT is no substitute for fully updated antivirus
software.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Thank you. We use Norton Security 2005 and update it's definitions every week
and run full scan every other day. We also use AdAware.
Would you know if the MRT in System32 (v1.07) will be REPLACED next month by
the September KB890830?
(I never knew the MRT was in the System32 until someone told me it was.)
If you don't know the answer, no need to respond. Thanks.

 

[Wesley Vogel]

You better check for Norton Security 2005 updates at least once a day.

MRT does not go to the system32 folder unless you actually download it and
*save* it to your machine from here...
http://www.microsoft.com/downloads/...E0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

The Malicious Software Removal Tool from Automatic Updates, runs once and
it's gone. Unless a problem is found.

[[A new version of this tool is released on the second Tuesday of every
month. These new versions will be available from the Microsoft Download
Center—this page—as well as from Windows Update / Automatic Updates. An
online version of the tool is also available. It is recommended that Windows
XP users use Windows Update / Automatic Updates to download the tool.]]
Microsoft® Windows® Malicious Software Removal Tool (KB890830)
http://www.microsoft.com/downloads/...e0-e72d-4f54-9ab3-75b8eb148356&displaylang=en

[[Windows XP users may get the latest version through Windows Update. To
have the newest versions automatically delivered and installed as soon as
they are released, set the Automatic Updates feature to Automatic.

Note The version of this tool delivered by Windows Update runs in the
background and then deletes itself. If you would like to run this tool more
than once a month, use the version on this Web page or install the version
that is available in the Download Center.]]
On-line version of the Malicious Software Removal Tool
http://www.microsoft.com/security/malwareremove/default.mspx

Every time the tool is executed, independent of the results of the
execution, the tool will record a GUID to the registry to indicate that it
has been executed. The following table lists the GUID corresponding to each
release.

Release Value Data
January 2005 E5DD9936-C147-4CD1-86D3-FED80FAADA6C ]]

Deployment of the Microsoft Windows Malicious Software Removal Tool in an
enterprise environment
http://support.microsoft.com/default.aspx?scid=kb;en-us;891716

The Microsoft Windows Malicious Software Removal Tool helps remove specific,
prevalent malicious software from computers that are running Windows Server
2003, Windows XP, or Windows 2000
http://support.microsoft.com/kb/890830

You receive an error when you run the Microsoft Windows Malicious Software
Removal Tool
http://support.microsoft.com/default.aspx?scid=kb;en-us;891717

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Thanks again for your kind help. I asked my husband to look in his System32
on his computer and he says he also sees "MRT.exe / 1,416kb / applications /
8/4/05." We both go to MS Critical Updates everytime we sign-on to see if
there are any Critical Updates and that is where we get the KB890830 every
month. Are we doing something wrong?

You better check for Norton Security 2005 updates at least once a day.

MRT does not go to the system32 folder unless you actually download it and
*save* it to your machine from here...
http://www.microsoft.com/downloads/...E0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

The Malicious Software Removal Tool from Automatic Updates, runs once and
it's gone. Unless a problem is found.

[[A new version of this tool is released on the second Tuesday of every
month. These new versions will be available from the Microsoft Download
Center—this page—as well as from Windows Update / Automatic Updates. An
online version of the tool is also available. It is recommended that Windows
XP users use Windows Update / Automatic Updates to download the tool.]]
Microsoft® Windows® Malicious Software Removal Tool (KB890830)
http://www.microsoft.com/downloads/...e0-e72d-4f54-9ab3-75b8eb148356&displaylang=en

[[Windows XP users may get the latest version through Windows Update. To
have the newest versions automatically delivered and installed as soon as
they are released, set the Automatic Updates feature to Automatic.

Note The version of this tool delivered by Windows Update runs in the
background and then deletes itself. If you would like to run this tool more
than once a month, use the version on this Web page or install the version
that is available in the Download Center.]]
On-line version of the Malicious Software Removal Tool
http://www.microsoft.com/security/malwareremove/default.mspx

Every time the tool is executed, independent of the results of the
execution, the tool will record a GUID to the registry to indicate that it
has been executed. The following table lists the GUID corresponding to each
release.

Release Value Data
January 2005 E5DD9936-C147-4CD1-86D3-FED80FAADA6C ]]

Deployment of the Microsoft Windows Malicious Software Removal Tool in an
enterprise environment
http://support.microsoft.com/default.aspx?scid=kb;en-us;891716

The Microsoft Windows Malicious Software Removal Tool helps remove specific,
prevalent malicious software from computers that are running Windows Server
2003, Windows XP, or Windows 2000
http://support.microsoft.com/kb/890830

You receive an error when you run the Microsoft Windows Malicious Software
Removal Tool
http://support.microsoft.com/default.aspx?scid=kb;en-us;891717

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Thank you. We use Norton Security 2005 and update it's definitions every
week and run full scan every other day. We also use AdAware.
Would you know if the MRT in System32 (v1.07) will be REPLACED next month
by the September KB890830?
(I never knew the MRT was in the System32 until someone told me it was.)
If you don't know the answer, no need to respond. Thanks.

 

[Wesley Vogel]

My information may be wrong. I just found MRT.exe in my System32 folder.

I just ran it from there by double clicking. I just deleted it. I imagine
it will be back after the next series of Critical Updates.

I do not think that you're doing anything wrong.

The first sentence in the following paragraph has been changed from the one
I posted earlier.

[[Note The version of the tool delivered by Microsoft Update and Windows
Update runs in the background and then reports if an infection is found. If
you would like to run this tool more than once a month, use the version on
this Web page or install the version that is available in the Download
Center.]]
Malicious Software Removal Tool
http://www.microsoft.com/security/malwareremove/default.mspx

I apologize, my information was out of date.

Old version...
[[Note The version of this tool delivered by Windows Update runs in the
background and then deletes itself. If you would like to run this tool more
than once a month, use the version on this Web page or install the version
that is available in the Download Center.]]

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Thanks again for your kind help. I asked my husband to look in his
System32 on his computer and he says he also sees "MRT.exe / 1,416kb /
applications / 8/4/05." We both go to MS Critical Updates everytime we
sign-on to see if there are any Critical Updates and that is where we get
the KB890830 every month. Are we doing something wrong?

You better check for Norton Security 2005 updates at least once a day.

MRT does not go to the system32 folder unless you actually download it
and *save* it to your machine from here...
http://www.microsoft.com/downloads/...E0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

The Malicious Software Removal Tool from Automatic Updates, runs once and
it's gone. Unless a problem is found.

[[A new version of this tool is released on the second Tuesday of every
month. These new versions will be available from the Microsoft Download
Center—this page—as well as from Windows Update / Automatic Updates.
An online version of the tool is also available. It is recommended that
Windows XP users use Windows Update / Automatic Updates to download the
tool.]] Microsoft® Windows® Malicious Software Removal Tool (KB890830)
http://www.microsoft.com/downloads/...e0-e72d-4f54-9ab3-75b8eb148356&displaylang=en

[[Windows XP users may get the latest version through Windows Update. To
have the newest versions automatically delivered and installed as soon as
they are released, set the Automatic Updates feature to Automatic.

Note The version of this tool delivered by Windows Update runs in the
background and then deletes itself. If you would like to run this tool
more than once a month, use the version on this Web page or install the
version that is available in the Download Center.]]
On-line version of the Malicious Software Removal Tool
http://www.microsoft.com/security/malwareremove/default.mspx

Every time the tool is executed, independent of the results of the
execution, the tool will record a GUID to the registry to indicate that
it has been executed. The following table lists the GUID corresponding
to each release.

Release Value Data
January 2005 E5DD9936-C147-4CD1-86D3-FED80FAADA6C ]]

Deployment of the Microsoft Windows Malicious Software Removal Tool in an
enterprise environment
http://support.microsoft.com/default.aspx?scid=kb;en-us;891716

The Microsoft Windows Malicious Software Removal Tool helps remove
specific, prevalent malicious software from computers that are running
Windows Server 2003, Windows XP, or Windows 2000
http://support.microsoft.com/kb/890830

You receive an error when you run the Microsoft Windows Malicious
Software Removal Tool
http://support.microsoft.com/default.aspx?scid=kb;en-us;891717

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Thank you. We use Norton Security 2005 and update it's definitions every
week and run full scan every other day. We also use AdAware.
Would you know if the MRT in System32 (v1.07) will be REPLACED next
month by the September KB890830?
(I never knew the MRT was in the System32 until someone told me it was.)
If you don't know the answer, no need to respond. Thanks.

:

Well, I'm placing my money on the tool. Keep having fun.

Oh, keep in mind that the MRT is no substitute for fully updated
antivirus software.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In AliceZ <[email protected]> hunted and pecked:
Thank you. I ran the MRT again and this time it showed only "No
Infections Found."
Hopefully it was tools fault and not something wrong with this fairly
new Tablet.

:

The link I included was as close as I could find to your error. I
thought you might find a clue there.

What I would suggest is running the Malicious Software Removal Tool
again. To see if that error shows up again. I am guessing that the
error was the tool's fault and not a problem on your machine.

To run the tool again, you can go here...

http://www.microsoft.com/downloads/...E0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

Click the Download button at the top of the page
Click the Open button on the File Download window that pops up (File
Name: Windows-KB890830-V1.7-ENU.exe)
Click the Next button on the Malicious Software Removal Tool popup
Then a Scan results should show
If nothing was found you'll see a green shield with a white check
mark Click the Finish button
You can also hit the Back button in Internet Explorer and run the
tool again

I have no idea what shows if there is an error or if something is
found. I had no problems.

Running the tool this way adds to the mrt.log.

You probably know this but you can
paste this in the Start | Run box...

%windir%\debug\mrt.log

Then click OK.

To see what's in the log.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In AliceZ <[email protected]> hunted and pecked:
We looked at the article but it did not make any sense to us. We are
senior citizens and not too familiar with computers.
The "warning" wording we mentioned ("sys clean warning - mem scan
get image path from pid (3096) win32 error code 0x00000057 (87): the
parameter is incorrect (65)")was printed in the KB890830 (MS
malicious software checker) log that we opened after the KB890830
ran and checked our system. The log mentioned that it did not find
any infections (as it has reported in previous months when the
KB890830 was run.

:

http://www.mcse.ms/archive78-2005-7-1704494.html

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In AliceZ <[email protected]> hunted and pecked:
I recently downloaded KB 890830 as I have been doing regularly
(for my Gateway Tablet, which has WinXPsp2). After the
download I ran the "notepad %windir%.....etc. and noticed that it
not only told me it found no errors (as it usually did), it
mentioned the following which has us quite concerned:

"sys clean warning - mem scan get image path from pid (3096) win32
error code 0x00000057 (87): the parameter is incorrect (65)"

Would someone be able to tell us what this means and is it serious
and can we correct, etc.? Please advise and thank you.

(I posted this message on the Tablet board, but they said they
could not comment on KB890830)