What do you think about Microsoft Windows Malicious Software Removal Tool ?

[Ashanta]

Hi,

The MS Windows Malicious Software Removal Tool available in 32-bit and 64-bit versions is not an anti-virus application but is intended to detect and remove specific malware such as, Blaster, Sasser and Mydoom. When anti-malware programs are designed for a specific task then the probability of success is much higher than generic programs. The tool removes malicious software from an already-infected computer. Again, this tool is not a replacement for an anti-virus product while Microsoft will be releasing an updated version every month.

http://www.microsoft.com/download/en/details.aspx?id=16

What do you think of this program ? Is it a bad/good/excellent malware detection software?

Thanks in advance !

[blacknight]

I never used it. Generally I don't trust it, but the point is: which benefits ? I detect very few, well know, malwares, and above all, if a system is seriously infected it is seriously compromised: you probably you already would know that your pc is infected, may be you can't use it, or it's not easy clean it.

[ronjor]

The MSRT has cleaned thousands of computers since it was released. It is a useful tool.

Here is a list of every major virus and worm family added since the tool was first released on January 11, 2005.

[G1111]

I let it run during the monthly Windows update.

[Victek123]

Originally Posted by Ashanta

Hi,

The MS Windows Malicious Software Removal Tool available in 32-bit and 64-bit versions is not an anti-virus application but is intended to detect and remove specific malware such as, Blaster, Sasser and Mydoom.

What do you think of this program ? Is it a bad/good/excellent malware detection software?

I think of it as part of Windows Update security patches/fixes, not as a standalone tool. It doesn't have a GUI or any configurable options (AFAICT) and it doesn't display results so it's not particularly useful as an end-user tool, but it benefits the Windows ecosystem over all.

[The Hammer]

Originally Posted by Victek123

I think of it as part of Windows Update security patches/fixes, not as a standalone tool. It doesn't have a GUI or any configurable options (AFAICT) and it doesn't display results so it's not particularly useful as an end-user tool, but it benefits the Windows ecosystem over all.

Agreed. But I wonder would it display the results somewhere if it found something?

[Victek123]

Originally Posted by The Hammer

Agreed. But I wonder would it display the results somewhere if it found something?

This from http://www.microsoft.com/download/en/details.aspx?id=16

When the detection and removal process is complete, the tool displays a report describing the outcome, including which, if any, malicious software was detected and removed. The tool creates a log file named mrt.log in the %WINDIR%\debug folder.

I've never seen a report, but I've never run it "standalone".

[PJC]

Originally Posted by G1111

I let it run during the monthly Windows update.

Same, here!

[The Seeker]

Originally Posted by blacknight

I never used it. Generally I don't trust it, but the point is: which benefits ?

Why do you not trust it?

[MrBrian]

Originally Posted by Victek123

It doesn't have a GUI or any configurable options (AFAICT) and it doesn't display results so it's not particularly useful as an end-user tool, but it benefits the Windows ecosystem over all.

When run as a standalone, it does have a GUI and gives results. You also have the choice of doing a quick scan, full scan, or custom scan.

[Dark Shadow]

I keep it in my download just as handy tool.A man can never have to many on demand tools.

[Victek123]

Originally Posted by MrBrian

When run as a standalone, it does have a GUI and gives results. You also have the choice of doing a quick scan, full scan, or custom scan.

Interesting - thanks for pointing this out. I need to have a look at it.

[Dark Shadow]

Here is a screen shot of what MrBrian is talking about.

[Victek123]

Originally Posted by djohn

Here is a screen shot of what MrBrian is talking about.

Great, thanks! Here is more information about what the tool is capable of removing:

http://support.microsoft.com/?kbid=890830

It's not clear that this is comprehensive enough to be worth using as a standalone scanner though given how many free "on demand" scanners are available.

[Dark Shadow]

Originally Posted by Victek123

Great, thanks! Here is more information about what the tool is capable of removing:

http://support.microsoft.com/?kbid=890830

It's not clear that this is comprehensive enough to be worth using as a standalone scanner though given how many free "on demand" scanners are available.

Agree,As a extra tool may be worthy to have just in case.

[blacknight]

Originally Posted by The Seeker

Why do you not trust it?

Generally for security I prefer third part trusted softwares. And prevention naturally is better.....

[paulito]

it is absolute garbage i thought it just went through the motion of looking goo, was very fast so fast it found nothing even though i put a bit of malware on yesterday to see what happened lol. ms security essentials is free too and i see why as i would want them to pay me. when i was hacked i contacted their support who were not supportive, sent me a password reset! i had told them i had a keylogger so wtf! Sophos is a good free rootkit scanner/remover.

[The Hammer]

Originally Posted by paulito

it is absolute garbage i thought it just went through the motion of looking goo, was very fast so fast it found nothing even though i put a bit of malware on yesterday to see what happened lol. ms security essentials is free too and i see why as i would want them to pay me. when i was hacked i contacted their support who were not supportive, sent me a password reset! i had told them i had a keylogger so wtf! Sophos is a good free rootkit scanner/remover.

I believe the tool is supposed to look for specific malware which may change each time it's deployed by MS.

[m00nbl00d]

Originally Posted by The Hammer

I believe the tool is supposed to look for specific malware which may change each time it's deployed by MS.

Exactly.

If other folks bothered reading the link user Victek123 mentioned, then they would read the following:

Microsoft released the Microsoft Windows Malicious Software Removal Tool to help remove specific prevalent malicious software from computers that are running Windows 7, Windows Vista, Windows Server 2003, Windows Server 2008, or Windows XP.

To note that it's also possible to run it either by scheduling a task or if one would like either create shortcuts or add to Windows context menu, using the following flags/switches:

Switch Purpose
/Q or /quiet Uses quiet mode. This option suppresses the user interface of the tool.
/? Displays a dialog box that lists the command-line switches.
/N Runs in detect-only mode. In this mode, malicious software will be reported to the user, but it will not be removed.
/F Forces an extended scan of the computer.
/F:Y Forces an extended scan of the computer and automatically cleans any infections that are found.

[m00nbl00d]

-edit-

To run an alternative on-demand scanner, that will look for all malware (all it can detect, of course), one could use Microsoft Safety Scanner, which has a similar UI to MMRT.

-https://www.microsoft.com/security/scanner/en-us/default.aspx

One needs to re-download it each 10 days.

[siljaline]

MSRT may be also run on-demand I do as do many others.

Very helpful and useful.

[Karsten]

I use it from time to time, and it really does not offer all that much extra as I am very well protected by other programs too. But it is there and it works okay, therefore I scan with it, but it never really finds anything

Meh. Like others said, prevention is better than removal. I'd much rather reinstall the OS than remove malware.

[m00nbl00d]

Originally Posted by BrandiCandi

Meh. Like others said, prevention is better than removal. I'd much rather reinstall the OS than remove malware.

So, use it as a warning tool, then reinstall the O.S

[Dark Shadow]

Originally Posted by BrandiCandi

Meh. Like others said, prevention is better than removal. I'd much rather reinstall the OS than remove malware.

I totally agree,once I know for sure I been infected I rather replace a clean image to be sure everything is gone.