What do you think about Microsoft Windows Malicious Software Removal Tool ?

Hi,

The MS Windows Malicious Software Removal Tool available in 32-bit and 64-bit versions is not an anti-virus application but is intended to detect and remove specific malware such as, Blaster, Sasser and Mydoom. When anti-malware programs are designed for a specific task then the probability of success is much higher than generic programs. The tool removes malicious software from an already-infected computer. Again, this tool is not a replacement for an anti-virus product while Microsoft will be releasing an updated version every month.

http://www.microsoft.com/download/en/details.aspx?id=16

What do you think of this program ? Is it a bad/good/excellent malware detection software?

Thanks in advance !

 

I never used it. Generally I don't trust it, but the point is: which benefits ? I detect very few, well know, malwares, and above all, if a system is seriously infected it is seriously compromised: you probably you already would know that your pc is infected, may be you can't use it, or it's not easy clean it.

 

I let it run during the monthly Windows update.

 

I think of it as part of Windows Update security patches/fixes, not as a standalone tool. It doesn't have a GUI or any configurable options (AFAICT) and it doesn't display results so it's not particularly useful as an end-user tool, but it benefits the Windows ecosystem over all.

 

Agreed. But I wonder would it display the results somewhere if it found something?

 

This from http://www.microsoft.com/download/en/details.aspx?id=16

When the detection and removal process is complete, the tool displays a report describing the outcome, including which, if any, malicious software was detected and removed. The tool creates a log file named mrt.log in the %WINDIR%\debug folder.

I've never seen a report, but I've never run it "standalone".

 

Same, here!

 

Why do you not trust it?

 

When run as a standalone, it does have a GUI and gives results. You also have the choice of doing a quick scan, full scan, or custom scan.

 

I keep it in my download just as handy tool.A man can never have to many on demand tools.

 

Interesting - thanks for pointing this out. I need to have a look at it.

 

Here is a screen shot of what MrBrian is talking about.

 

Great, thanks! Here is more information about what the tool is capable of removing:

http://support.microsoft.com/?kbid=890830

It's not clear that this is comprehensive enough to be worth using as a standalone scanner though given how many free "on demand" scanners are available.

 

Agree,As a extra tool may be worthy to have just in case.

 

Generally for security I prefer third part trusted softwares. And prevention naturally is better.....

 

it is absolute garbage i thought it just went through the motion of looking goo, was very fast so fast it found nothing even though i put a bit of malware on yesterday to see what happened lol. ms security essentials is free too and i see why as i would want them to pay me. when i was hacked i contacted their support who were not supportive, sent me a password reset! i had told them i had a keylogger so wtf! Sophos is a good free rootkit scanner/remover.

 

I believe the tool is supposed to look for specific malware which may change each time it's deployed by MS.

 

Exactly.

If other folks bothered reading the link user Victek123 mentioned, then they would read the following:

To note that it's also possible to run it either by scheduling a task or if one would like either create shortcuts or add to Windows context menu, using the following flags/switches:

 

-edit-

To run an alternative on-demand scanner, that will look for all malware (all it can detect, of course), one could use Microsoft Safety Scanner, which has a similar UI to MMRT.

-https://www.microsoft.com/security/scanner/en-us/default.aspx

One needs to re-download it each 10 days.

 

MSRT may be also run on-demand I do as do many others.

Very helpful and useful.

 

I use it from time to time, and it really does not offer all that much extra as I am very well protected by other programs too. But it is there and it works okay, therefore I scan with it, but it never really finds anything

 

Meh. Like others said, prevention is better than removal. I'd much rather reinstall the OS than remove malware.

 

So, use it as a warning tool, then reinstall the O.S

 

I totally agree,once I know for sure I been infected I rather replace a clean image to be sure everything is gone.