Results 1 to 10 of 10
  1. #1
    3 Star Lounger jockmullin's Avatar
    Join Date
    Dec 2009
    Location
    St-Eustache,QC,Canada
    Posts
    239
    Thanks
    10
    Thanked 21 Times in 20 Posts
    Hi folks

    Having just installed this month's batch of patch Tuesday updates from MS for all the local computers, I was wondering what, if anything, the monthly malicious software removal tool actually does.

    Has anyone ever seen this thing noticeably do anything, remove anything or in any way improve their lot in life? On a couple of the older XP systems here it takes as long as all the other updates combined to run, and then just silently closes.

    I was just wondering why it exists and what it does that isn't done by existing malware scanners such as MS's own?

    Jock

  2. #2
    Super Moderator BATcher's Avatar
    Join Date
    Feb 2008
    Location
    A cultural area in SW England
    Posts
    3,414
    Thanks
    33
    Thanked 195 Times in 175 Posts
    BATcher

    Time prevents everything happening all at once...

  3. #3
    3 Star Lounger jockmullin's Avatar
    Join Date
    Dec 2009
    Location
    St-Eustache,QC,Canada
    Posts
    239
    Thanks
    10
    Thanked 21 Times in 20 Posts
    Hi BATcher

    Yes I have seen that marketing level boilerplate. It is very short on specifics, and in there it says:

    Quote
    When the detection and removal process is complete, the tool displays a report describing the outcome, including which, if any, malicious software was detected and removed.
    Unquote

    I have in fact never seen any such report being displayed. This gives little confidence any of the rest has any basis in reality either, thus prompting my post.

    Have you seen such a report?

    Jock

  4. #4
    Plutonium Lounger Medico's Avatar
    Join Date
    Dec 2009
    Location
    USA
    Posts
    12,631
    Thanks
    161
    Thanked 936 Times in 856 Posts
    Jock,

    Perhaps this just means you are being proactive in keeping these threats at bay using other methods. My belief is that this provides one more level, perhaps a small one but a level none the less, of protection in my overall security package. I'm willing to have all the help I can get to keep this garbage off my PC's.

    Ted
    BACKUP...BACKUP...BACKUP
    Have a Great Day! Ted


    Sony Vaio Laptop, 2.53 GHz Duo Core Intel CPU, 8 GB RAM, 320 GB HD
    Win 8 Pro (64 Bit), IE 10 (64 Bit)


    Complete PC Specs: By Speccy

  5. #5
    3 Star Lounger jockmullin's Avatar
    Join Date
    Dec 2009
    Location
    St-Eustache,QC,Canada
    Posts
    239
    Thanks
    10
    Thanked 21 Times in 20 Posts
    Hi Ted

    You are correct in that I am very careful on my own systems. However I have on occasion worked on infected systems for custs, family and friends and in the cleanup process have seen malware detected after the MS tool has completed its run and silently slipped away without so much as a cya later.

    So I gather you have never seen a report either.

    Jock

  6. #6
    Plutonium Lounger Medico's Avatar
    Join Date
    Dec 2009
    Location
    USA
    Posts
    12,631
    Thanks
    161
    Thanked 936 Times in 856 Posts
    Quote Originally Posted by Jock Mullin View Post
    Hi Ted

    You are correct in that I am very careful on my own systems. However I have on occasion worked on infected systems for custs, family and friends and in the cleanup process have seen malware detected after the MS tool has completed its run and silently slipped away without so much as a cya later.

    So I gather you have never seen a report either.

    Jock
    Jock,

    No I have not personally seen a report, but just as no AV or AM app is 100%, this is just another tool in th security arsenal. Perhaps this is set up to just monitor for certain apps and elliminate them. Since I am not exactly sure what this is looking for, but if it does not find anything, that's great. It means my schemes are working. It does not appear to be hurting me and and may help.
    BACKUP...BACKUP...BACKUP
    Have a Great Day! Ted


    Sony Vaio Laptop, 2.53 GHz Duo Core Intel CPU, 8 GB RAM, 320 GB HD
    Win 8 Pro (64 Bit), IE 10 (64 Bit)


    Complete PC Specs: By Speccy

  7. #7
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,580
    Thanks
    5
    Thanked 1,058 Times in 927 Posts
    According to Download details: Windows Malicious Software Removal Tool:

    The tool creates a log file named mrt.log in the %WINDIR%\debug folder.

    Joe
    Joe

  8. #8
    3 Star Lounger jockmullin's Avatar
    Join Date
    Dec 2009
    Location
    St-Eustache,QC,Canada
    Posts
    239
    Thanks
    10
    Thanked 21 Times in 20 Posts
    Hi Joe

    Right you are! There is indeed a log there showing every invocation of the program.
    Interesting to note it says there were no infections found, but also says this:
    WARNING: Security policy doesn't allow for all actions MSRT may require.->Scan ERROR: resource process://pid:5108 (code 0x00000005 (5))

    Now I don't have any process ID 5108 running, so I don't know what that was at the time. I will be ready for it next month ...

    Thanks very much.
    Jock

  9. #9
    5 Star Lounger
    Join Date
    Dec 2009
    Location
    East Coast, USA
    Posts
    993
    Thanks
    8
    Thanked 43 Times in 43 Posts
    JoeP thanks for the file location info.
    It looks like the tool takes about 2 minutes to run and finds nothing.

    Not sure what it could find in 2 minutes

  10. #10
    New Lounger Corrine's Avatar
    Join Date
    Jun 2010
    Location
    Upstate, NY
    Posts
    18
    Thanks
    0
    Thanked 2 Times in 1 Post
    Quote Originally Posted by Tim Sullivan View Post
    Not sure what it could find in 2 minutes
    That is because your computer is clean. It is too soon for the report to be in on the results from the June MSRT update MSRT Targets Another Fake). However, here is the MMPC report from May, MSRT May Threat Reports and Alureon:

    In total, MSRT May cleaned malware infections from 1,961,243 machines


    Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!
    Remember - A day without laughter is a day wasted. ~ ~ ~ May the wind sing to you and the sun rise in your heart.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •