Malicious Software Removal Tool

Thanks. It's that Patch Tuesday time once again...

 

Speaking of MS security tools, anyone have any comments on the bootable Windows Defender Offline tool?

 

I have used it quite a few times on infected machines and it generally gets the machine to the point where I can run some scans with other programs inside windows. It is a very nice free tool IMHO. the quick scan only takes a couple of minutes and full scan can take awhile.

 

Thanks

 

How small/big are the updates?

 

The "Microsoft Windows Malicious Software Removal Tool" or MRT can be run optionally but should be run via Windows Update every Patch Tuesday.
http://support.microsoft.com/?kbid=890830

 

OT:

=

...............

 

Microsoft Security Bulletin MS13-065 - Important
Vulnerability in ICMPv6 could allow Denial of Service (2868623)
https://technet.microsoft.com/en-us/security/bulletin/ms13-065

 

WDO uses the same definitions as MSE and the current size is about 79.5MB (mpam-fe.exe)

Al

 

Is Microsoft Windows Malicious Software Removal Tool worth using for people who also use an antivirus like Avast or Comodo?

I download it and it runs with Windows updates, but it has never found anything as far as I know (I assume it would notify the user if it found something malicious). Has it saved anyone's Windows over here?

 

MRT is a free monthly scrub offered via Windows Update, courtesy of Microsoft. Many than have know good AV - AS Scanners opt for the scrub as a default setting.
It's recommended you leave that setting at a default.

 

Can you comment on its effectiveness? Specifically can the Quick Scan find and remove ransomware like the "FBI extortion virus" and rootkits?

 

Thank you.

 

http://www.microsoft.com/en-gb/secur...-families.aspx

The biggies on that list are Alureon, Sality, and Ramnit. Most conventional AVs have problems with those.

BTW - when you run MRT from the run box, you can scan your entire system or do a custom scan. When MRT runs auto on a monthly basis as a result of a WIN updates download, it only does a quick scan.

As far as effectiveness against ransomware, I would say minimal since it was designed primarily as a rootkit and AV scanner.