Malicious Software Removal Tool Question

[Frog]

I am confused (nothing new) about whether or not the "Microsoft(R)
Windows(R) Malicious Software Removal Tool (KB890830" software package
is on my system, and, if so, is it active. Here is why I am asking this
question:

I saw where it was recommended on this newsgroup that an individual
download this software and run it against his system. That got me to
wondering if I had this software resident and active on my system.

I visited the Microsoft web page having to do with Windows Malicious
Software Removal Tool. There I learned that I could determine whether
the "Automatic Updates" function was turned on or off on my system.
Start>Control Panel>Performance and Maintenance>System>System
Properties>Automatic Updates tab>click to select the "Automatic
(recommended)" check box and then ok.
I did as suggested and this function was not originally checked, so I
check this box.

I then read that computers running Windows XP Service Pack 2
(SP2)automatically had "Automatic Updates" turned on by default. The
original operating system added to this computer was Windows XP Pro SP2.
This was subsequently updated to SP3. With this information, I
decided that I probably already had this software active on my
system--regardless of whether or not the "Automatic (recommended)" box
was checked (see paragraph above).

My next step was a search for this software on my system--thinking I
would run it against my system. I was unable to find this software or a
place to manually make it run against my system.

My next step was to see whether or not KB890830 updates were being
downloaded to my system--I found that they are being downloaded to my
computer routinely.

Now I don't know whether I only have the downloads of the updates on my
system or whether the updates are being incorporated in to a Malicious
Software Removal package somewhere on my computer. I don't know whether
this software is running without my knowledge or whether is is waiting
for me to activate it in some way.


Bottom line, how do I determine whether or not I have the Malicious
Software Removal Tool on my system? How do I determine whether or not
it is running? How can I make it run manually?


Thank you for any help sent my way on this subject.


Frog

 

[David H. Lipman]

From: "Frog" <[email protected]>

| I am confused (nothing new) about whether or not the "Microsoft(R)
| Windows(R) Malicious Software Removal Tool (KB890830" software package
| is on my system, and, if so, is it active. Here is why I am asking this
| question:

| I saw where it was recommended on this newsgroup that an individual
| download this software and run it against his system. That got me to
| wondering if I had this software resident and active on my system.

| I visited the Microsoft web page having to do with Windows Malicious
| Software Removal Tool. There I learned that I could determine whether
| the "Automatic Updates" function was turned on or off on my system.
| Start>Control Panel>Performance and Maintenance>System>System
| Properties>Automatic Updates tab>click to select the "Automatic
| (recommended)" check box and then ok.
| I did as suggested and this function was not originally checked, so I
| check this box.

| I then read that computers running Windows XP Service Pack 2
| (SP2)automatically had "Automatic Updates" turned on by default. The
| original operating system added to this computer was Windows XP Pro SP2.
| This was subsequently updated to SP3. With this information, I
| decided that I probably already had this software active on my
| system--regardless of whether or not the "Automatic (recommended)" box
| was checked (see paragraph above).

| My next step was a search for this software on my system--thinking I
| would run it against my system. I was unable to find this software or a
| place to manually make it run against my system.

| My next step was to see whether or not KB890830 updates were being
| downloaded to my system--I found that they are being downloaded to my
| computer routinely.

| Now I don't know whether I only have the downloads of the updates on my
| system or whether the updates are being incorporated in to a Malicious
| Software Removal package somewhere on my computer. I don't know whether
| this software is running without my knowledge or whether is is waiting
| for me to activate it in some way.


| Bottom line, how do I determine whether or not I have the Malicious
| Software Removal Tool on my system? How do I determine whether or not
| it is running? How can I make it run manually?


| Thank you for any help sent my way on this subject.


| Frog

The MRT is an "On Demand" anti malware scanner and has limited malware target list. A new
version is generated once per month. You can download it manually from Microsoft or it
can be obtained and executed
automatically on each month's Patch Tuesday.

The file is;
%windir%\system32\MRT.exe

You can see the switch parameters with...
%windir%\system32\MRT.exe /?

The log file is...
%windir%\Debug\mrt.log

Running the following command line with launch a full scan and clean malware automatically
without user intervention.
%windir%\system32\MRT.exe /f:y

 

[PA Bear [MS MVP]]

With Automatic Updates (AU) enabled & working properly, the MSRT
automatically downloads & runs once-a-month, silently & in the background.

You'll find the MSRT's log (MSR.LOG) in C:\WINDOWS\Debug <=this folder.

Your Update History at http://windowsupdate.microsoft.com will list every
time the MSRT has downloaded/run.

You can check to see if AU is enabled Start | Settings | Control Panel |
Automatic Updates <=here & Security Center <=here.

 

[Jim]

I am confused (nothing new) about whether or not the "Microsoft(R)
Windows(R) Malicious Software Removal Tool (KB890830" software package is
on my system, and, if so, is it active. Here is why I am asking this
question:

I saw where it was recommended on this newsgroup that an individual
download this software and run it against his system. That got me to
wondering if I had this software resident and active on my system.

I visited the Microsoft web page having to do with Windows Malicious
Software Removal Tool. There I learned that I could determine whether the
"Automatic Updates" function was turned on or off on my system.
Start>Control Panel>Performance and Maintenance>System>System
Properties>Automatic Updates tab>click to select the "Automatic
(recommended)" check box and then ok.
I did as suggested and this function was not originally checked, so I
check this box.

I then read that computers running Windows XP Service Pack 2
(SP2)automatically had "Automatic Updates" turned on by default. The
original operating system added to this computer was Windows XP Pro SP2.
This was subsequently updated to SP3. With this information, I decided
that I probably already had this software active on my system--regardless
of whether or not the "Automatic (recommended)" box was checked (see
paragraph above).

My next step was a search for this software on my system--thinking I would
run it against my system. I was unable to find this software or a place
to manually make it run against my system.

My next step was to see whether or not KB890830 updates were being
downloaded to my system--I found that they are being downloaded to my
computer routinely.

Now I don't know whether I only have the downloads of the updates on my
system or whether the updates are being incorporated in to a Malicious
Software Removal package somewhere on my computer. I don't know whether
this software is running without my knowledge or whether is is waiting for
me to activate it in some way.


Bottom line, how do I determine whether or not I have the Malicious
Software Removal Tool on my system? How do I determine whether or not it
is running? How can I make it run manually?


Thank you for any help sent my way on this subject.


Frog

A new version of MRT has been part of the regular monthly updates for well
over two years. You don't need to jump through quite that many hoops to see
whether it is on your system or not.
The file is \windows\system32\mrt.exe. If your system has this file, your
system has mrt.
Jim

 

[Anna]

I am confused (nothing new) about whether or not the "Microsoft(R)
Windows(R) Malicious Software Removal Tool (KB890830" software package is
on my system, and, if so, is it active. Here is why I am asking this
question:

I saw where it was recommended on this newsgroup that an individual
download this software and run it against his system. That got me to
wondering if I had this software resident and active on my system.

I visited the Microsoft web page having to do with Windows Malicious
Software Removal Tool. There I learned that I could determine whether the
"Automatic Updates" function was turned on or off on my system.
Start>Control Panel>Performance and Maintenance>System>System
Properties>Automatic Updates tab>click to select the "Automatic
(recommended)" check box and then ok.
I did as suggested and this function was not originally checked, so I
check this box.

I then read that computers running Windows XP Service Pack 2
(SP2)automatically had "Automatic Updates" turned on by default. The
original operating system added to this computer was Windows XP Pro SP2.
This was subsequently updated to SP3. With this information, I decided
that I probably already had this software active on my system--regardless
of whether or not the "Automatic (recommended)" box was checked (see
paragraph above).

My next step was a search for this software on my system--thinking I would
run it against my system. I was unable to find this software or a place
to manually make it run against my system.

My next step was to see whether or not KB890830 updates were being
downloaded to my system--I found that they are being downloaded to my
computer routinely.

Now I don't know whether I only have the downloads of the updates on my
system or whether the updates are being incorporated in to a Malicious
Software Removal package somewhere on my computer. I don't know whether
this software is running without my knowledge or whether is is waiting for
me to activate it in some way.


Bottom line, how do I determine whether or not I have the Malicious
Software Removal Tool on my system? How do I determine whether or not it
is running? How can I make it run manually?


Thank you for any help sent my way on this subject.

Frog

Frog:
Just one other thing in addition to what you've already heard...

You can access the MS site to download & run the Malicious Software Removal
Tool from..
http://www.microsoft.com/security/malwareremove/default.mspx
and do this "on demand". (Note the "Skip the details and download the tool"
notation at the top of the page). It's really only practical if you have a
DSL or cable or other hi-speed net connection.

If it is practical you can consider simply adding the site to your Favorites
list.
Anna