 Question About Windows Malicious Software Removal Tool Update, What is this exactly and how does it work? |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.| Important Announcement: We have two terrific contests running on the site that I wanted all our members and guests to know about. The first contest is the HP Magic Giveaway, which is underway as of November 28th. More information can be found at this topic, which will be updated very soon with further information. The second contests, is for the chance to win two Seagate FreeAgent external hard drives. More information about this contest can be found here. These are both amazing contests and I suggest everyone submit an entry for them. - BleepingComputer Management |
  |
 Jul 18 2007, 11:23 AM
Post
#31
|
|
|
Distinguished Member  Group: Members Posts: 656 Joined: 11-February 07 Member No.: 111,188  |
Seems like it's just an "internal error" or whatever... You probably have some other program that's causing it. To find out, download and run the MSRT from the link provided in this thread, then open ProcessExplorer, then open your MSRT log and match up the PID numbers and that will tell you. It sounds like you did this already, but couldn't find them, but I'd try again. If they're still not there, I'd start a new thread and ask specifically about that...? -------------------- My stats: Windows XP Home SP2; Firefox 2.0.0.16; IE 6.5 (used only for monthly Windows Critical Updates); ZoneAlarm 6.1.744.001 Free; AVG 7.5 A/V Free - AVG 7.5 Antispyware Free - AVG Anti-Rootkit Free (all soon to be replaced with AVG 8.0 Free); SuperAntispyware Free 4.15.1000; Spybot 1.4 (Immunised from a few months ago, but no longer doing updates - soon to be uninstalled); AdAware SE Free 1.06r1 (haven't downloaded definitions in awhile though); soon to add SpywareBlaster 4.1
|
 |
 
|
|
Sep 11 2007, 08:15 PM
Post
#32
|
|
|
New Member Group: Members Posts: 6 Joined: 12-July 07 Member No.: 143,173 |
QUOTE(bloomcounty @ May 17 2007, 10:41 AM)  UPDATE: So I went ahead and downloaded it... interesting note, the download was only 1.1 Megs... Not sure why it's listed as 7.7 Megs, unless you actually do keep part of the program on your computer, and the download is the "update". But it says that the files are deleted once it runs, so I'm not sure of the size difference... It did append the log, but for the first time, I got some kind of error: Microsoft Windows Malicious Software Removal Tool v1.29, May 2007 Started On Thu May 17 08:30:58 2007 ->Scan ERROR: resource process://pid:1248 (code 0x0000054F (1359)) ->Scan ERROR: resource process://pid:2056 (code 0x0000054F (1359)) ->Scan ERROR: resource process://pid:1248 (code 0x0000054F (1359)) Results Summary: ---------------- No infection found. Return code: 0 Microsoft Windows Malicious Software Removal Tool Finished On Thu May 17 08:31:38 2007 Any thoughts on this...? I tried looking up the errors, but could only find that they're "internal errors". But I might not be looking in the right place or looking up the right thing... Anything to be concerned about? Thanks! bloomcounty... I downloaded the KB 890830 tonight and even though the log did not show any infections, it did report the following: "Microsoft Windows Malicious Software Removal Tool v1.33, September 2007 Started On Tue Sep 11 20:38:48 2007 ->Scan ERROR: resource process://pid:2672 (code 0x00000057 (87)) ->Scan ERROR: resource process://pid:2672 (code 0x0000054F (1359)) (no 2672 found on Process Explorer!!! Results Summary: ---------------- No infection found." I notice you had similar results in one of your KB890830 downloads. I looked in Process Explorer but did not see any PID 2672. We are senior citizens and hope this does not mean that there is something seriously wrong with our laptop. We really couldn't afford to buy another one. Can you offer any explanations for these two "Scan ERRORS?" I notice a lot of other people are reporting similar "Scan Errors" also. Thank you. Alice WinXPsp2 / IE 6 / NAV2005 / AdAware (No Iomega) This post has been edited by AliceZ: Sep 11 2007, 08:22 PM |
|
|
|
|
Sep 11 2007, 09:03 PM
Post
#33
|
|
 Bleepin' Janitor Group: Global Moderator Posts: 13,524 Joined: 9-July 05 From: Virginia, USA Member No.: 26,513 |
"You receive an error when you run the Microsoft Windows Malicious Software Removal Tool".
I did not see your specific error code but the MS Article does offer some explanations for why these errors occur. -------------------- "THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"
Microsoft MVP - Windows Security 2007-2008  |
|
|
|
|
Sep 12 2007, 11:56 AM
Post
#34
|
|
|
Distinguished Member Group: Members Posts: 656 Joined: 11-February 07 Member No.: 111,188 |
I'm at a loss here... My thought is to not worry about it -- especially since it says no infection found. There always seems to be something that doesn't jive with Microsoft... My computer causes me WAY too much worry, so I'm deciding to try to stop worrying about at least a few of the many issues I seem to have with my computer(s)... Did I mention I hate computers?
 You said here that the errors were ZoneAlarm related (as I said mine were, according to the PIDs). Then you said that on your son's machine they were NAV related. So it sounds to me that MSRT is just having some weird issues with 3rd party firewalls or a/v -- especially since everyone who is getting these errors started getting them all at the same time (about 3 months ago now, I think?) and didn't have them prior. Sounds like a change in MSRT. And this may be an explanation, of sorts. Also, it seems to be happening with Comodo as well. So ZA, Comodo, and Norton. I don't think we have anything to worry about if all these are having the same issue... Thoughts, quietman7? This post has been edited by bloomcounty: Sep 12 2007, 12:11 PM -------------------- My stats: Windows XP Home SP2; Firefox 2.0.0.16; IE 6.5 (used only for monthly Windows Critical Updates); ZoneAlarm 6.1.744.001 Free; AVG 7.5 A/V Free - AVG 7.5 Antispyware Free - AVG Anti-Rootkit Free (all soon to be replaced with AVG 8.0 Free); SuperAntispyware Free 4.15.1000; Spybot 1.4 (Immunised from a few months ago, but no longer doing updates - soon to be uninstalled); AdAware SE Free 1.06r1 (haven't downloaded definitions in awhile though); soon to add SpywareBlaster 4.1
|
|
|
|
|
Sep 12 2007, 12:42 PM
Post
#35
|
|
|
Bleepin' Janitor Group: Global Moderator Posts: 13,524 Joined: 9-July 05 From: Virginia, USA Member No.: 26,513 |
I would not worry too much about it either.
However, you may want to ask about the error with Microsoft TechNet Support or Microsoft Support and see what they have to say. -------------------- "THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"
Microsoft MVP - Windows Security 2007-2008 |
|
|
|
|
Sep 12 2007, 01:17 PM
Post
#36
|
|
|
Distinguished Member Group: Members Posts: 656 Joined: 11-February 07 Member No.: 111,188 |
QUOTE(quietman7 @ Sep 12 2007, 10:42 AM) I would not worry too much about it either. However, you may want to ask about the error with Microsoft TechNet Support or Microsoft Support and see what they have to say. AliceZ, can you post here what you find out after doing this? Thanks! 
-------------------- My stats: Windows XP Home SP2; Firefox 2.0.0.16; IE 6.5 (used only for monthly Windows Critical Updates); ZoneAlarm 6.1.744.001 Free; AVG 7.5 A/V Free - AVG 7.5 Antispyware Free - AVG Anti-Rootkit Free (all soon to be replaced with AVG 8.0 Free); SuperAntispyware Free 4.15.1000; Spybot 1.4 (Immunised from a few months ago, but no longer doing updates - soon to be uninstalled); AdAware SE Free 1.06r1 (haven't downloaded definitions in awhile though); soon to add SpywareBlaster 4.1
|
|
|
|
|
Sep 12 2007, 04:33 PM
Post
#37
|
|
|
New Member Group: Members Posts: 6 Joined: 12-July 07 Member No.: 143,173 |
The posts relating to "ZA" were Error Scans we had on our quite old laptop. Our son gave us his 'old' laptop (which was newer than ours) and that is the one I am talking about now.
This laptop just has WinXPsp2; NIS 2005 and AdAware. (I always looked at the KB890830 log in the past [several months ago] and never saw these "Scan Errors.) I sent email to MS Tech Support, but don't know if I sent to right place or if I will ever receive an answer. |
|
|
|
|
Sep 12 2007, 04:45 PM
Post
#38
|
|
|
Distinguished Member Group: Members Posts: 656 Joined: 11-February 07 Member No.: 111,188 |
The kind people here who continuously help me with my computer issues will probably find it funny that *I'm* saying this, but I think you shouldn't worry about it.
Like I said, since so many people are having similar issues with similar error messages having to do with similar programs, and all at the same time, it would be REALLY weird that every one of us was infected or malware-ified by the same thing at the same time. (Of course, I suppose it's possible, since when a new virus or whatever pops up, many people get infected at the same time -- but I find it hard to believe that no one's A/V or A/S would catch anything...)I'm certainly no expert, but that's my opinion... -------------------- My stats: Windows XP Home SP2; Firefox 2.0.0.16; IE 6.5 (used only for monthly Windows Critical Updates); ZoneAlarm 6.1.744.001 Free; AVG 7.5 A/V Free - AVG 7.5 Antispyware Free - AVG Anti-Rootkit Free (all soon to be replaced with AVG 8.0 Free); SuperAntispyware Free 4.15.1000; Spybot 1.4 (Immunised from a few months ago, but no longer doing updates - soon to be uninstalled); AdAware SE Free 1.06r1 (haven't downloaded definitions in awhile though); soon to add SpywareBlaster 4.1
|
|
|
|
|
Sep 14 2007, 10:05 AM
Post
#39
|
|
|
New Member Group: Members Posts: 6 Joined: 12-July 07 Member No.: 143,173 |
QUOTE(bloomcounty @ Sep 12 2007, 02:17 PM) QUOTE(quietman7 @ Sep 12 2007, 10:42 AM) I would not worry too much about it either. However, you may want to ask about the error with Microsoft TechNet Support or Microsoft Support and see what they have to say. AliceZ, can you post here what you find out after doing this? Thanks! Here is the email answer I received. Supposedly "scan errors" are NOTHING TO WORRY ABOUT. Wonder if these MS email answers are coming from outside the USA? =================== Dear Alice, Thank you for contacting Microsoft Windows Update Support. My name is Susan and I am glad to work with you. You can contact me directly by sending an email to v-30suy@mssupport.microsoft.com with the case ID SRX1044110919 in the subject line. First, I would like to apologize for your support request being unexpectedly delayed during our internal transfer process. Please be assured you have successfully contacted the correct support team and I will be working with you to address your concerns as quickly as possible. From the problem description, I understand that after Microsoft Windows Malicious Software Removal Tool has been downloaded and running, two scan errors were received. If there has been any misunderstanding, please let me know. I understand the inconvenience you have experienced. Please be assured that I will do my best to help you. Alice, I would like to explain that Scan error means it could not perform something it wanted to do and we could ignore the message. The important part for it is that No infection found. Therefore, we do not need to worry about it and the computer was running with no problem. If you would like to learn more about Microsoft Windows Malicious Software Removal Tool, please refer to the following link. The Microsoft Windows Malicious Software Removal Tool helps remove specific, prevalent malicious software from computers that are running Windows Vista, Windows Server 2003, Windows XP, or Windows 2000 http://support.microsoft.com/kb/890830 Please let me know the results at your earliest convenience. If you have any other questions, please do not hesitate to let me know. I am standing by for your response. Best Regards, Susan Yuan v-30suy@mssupport.microsoft.com Microsoft Windows Update Support Professional Happy customers are my top priority. Please let either myself or my manager know what you think of the level of service provided. You can send feedback directly to my manager, Tony Tang at v-30tont@mssupport.microsoft.com =================== |
|
|
|
|
Sep 14 2007, 10:21 AM
Post
#40
|
|
|
Bleepin' Janitor Group: Global Moderator Posts: 13,524 Joined: 9-July 05 From: Virginia, USA Member No.: 26,513 |
Well at least they responded but it sounds like a generic response. I don't think Susan actually knows what is causing the scan errors but since MS is probably getting lots or complaints, they put together a standard reply.
Since these errors don't seem to be anything to be concerned about at this time, I too would just ignore them. -------------------- "THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"
Microsoft MVP - Windows Security 2007-2008 |
|
|
|
|
Sep 23 2007, 10:30 AM
Post
#41
|
|
|
Distinguished Member Group: Members Posts: 656 Joined: 11-February 07 Member No.: 111,188 |
Just a quick update... I got a new one this time around:
Microsoft Windows Malicious Software Removal Tool v1.33, September 2007 Started On Sun Sep 23 08:21:27 2007 ->Scan ERROR: resource process://pid:1244 (code 0x00000005 (5)) ->Scan ERROR: resource process://pid:1244 (code 0x0000054F (1359)) ->Scan ERROR: resource process://pid:992 (code 0x00000005 (5)) ->Scan ERROR: resource process://pid:992 (code 0x0000054F (1359)) ->Scan ERROR: resource process://pid:1244 (code 0x00000005 (5)) ->Scan ERROR: resource process://pid:1244 (code 0x0000054F (1359)) Results Summary: ---------------- No infection found. Return code: 0 Microsoft Windows Malicious Software Removal Tool Finished On Sun Sep 23 08:22:10 2007 Not sure what program that has to do with... But, I'm guessing it's no big deal like the other ZA related errors. This post has been edited by bloomcounty: Sep 23 2007, 10:30 AM -------------------- My stats: Windows XP Home SP2; Firefox 2.0.0.16; IE 6.5 (used only for monthly Windows Critical Updates); ZoneAlarm 6.1.744.001 Free; AVG 7.5 A/V Free - AVG 7.5 Antispyware Free - AVG Anti-Rootkit Free (all soon to be replaced with AVG 8.0 Free); SuperAntispyware Free 4.15.1000; Spybot 1.4 (Immunised from a few months ago, but no longer doing updates - soon to be uninstalled); AdAware SE Free 1.06r1 (haven't downloaded definitions in awhile though); soon to add SpywareBlaster 4.1
|
|
|
|
|
Oct 18 2007, 01:50 PM
Post
#42
|
|
|
Distinguished Member Group: Members Posts: 656 Joined: 11-February 07 Member No.: 111,188 |
Just ran this month's tool. Same errors as last month. I checked the PID #'s. They are all related to ZA. Four of them are for True Vector Service and two are for Zone Alarm Client.
-------------------- My stats: Windows XP Home SP2; Firefox 2.0.0.16; IE 6.5 (used only for monthly Windows Critical Updates); ZoneAlarm 6.1.744.001 Free; AVG 7.5 A/V Free - AVG 7.5 Antispyware Free - AVG Anti-Rootkit Free (all soon to be replaced with AVG 8.0 Free); SuperAntispyware Free 4.15.1000; Spybot 1.4 (Immunised from a few months ago, but no longer doing updates - soon to be uninstalled); AdAware SE Free 1.06r1 (haven't downloaded definitions in awhile though); soon to add SpywareBlaster 4.1
|
|
|
|
|
Oct 18 2007, 09:09 PM
Post
#43
|
|
|
Distinguished Member Group: Members Posts: 968 Joined: 21-October 04 Member No.: 3,911 |
If M$ is incapable of scanning drivers and live and open files, just shut down ZA when you do M$ updates when they include that malware scan thing. Updates will run faster that way anyway. You can disconnect from the internet for the duration of all those bug fix installs they push.
Don't forget, TrueVector is deeply imbedded in the OS, which is why it can protect you pretty well. And ZA won't let it be touched. Just my opinion. Give it a try if it bugs you so much. |
|
|
|
|
Oct 19 2007, 09:32 AM
Post
#44
|
|
|
Distinguished Member Group: Members Posts: 656 Joined: 11-February 07 Member No.: 111,188 |
QUOTE(tos226 @ Oct 18 2007, 07:09 PM) If M$ is incapable of scanning drivers and live and open files, just shut down ZA when you do M$ updates when they include that malware scan thing. Updates will run faster that way anyway. You can disconnect from the internet for the duration of all those bug fix installs they push. Don't forget, TrueVector is deeply imbedded in the OS, which is why it can protect you pretty well. And ZA won't let it be touched. Just my opinion. Give it a try if it bugs you so much. That all makes sense. And it really doesn't bug me. I just posted that to try to alleviate the worries of that other poster who was having similar issues and was worried about it. Thanks!
-------------------- My stats: Windows XP Home SP2; Firefox 2.0.0.16; IE 6.5 (used only for monthly Windows Critical Updates); ZoneAlarm 6.1.744.001 Free; AVG 7.5 A/V Free - AVG 7.5 Antispyware Free - AVG Anti-Rootkit Free (all soon to be replaced with AVG 8.0 Free); SuperAntispyware Free 4.15.1000; Spybot 1.4 (Immunised from a few months ago, but no longer doing updates - soon to be uninstalled); AdAware SE Free 1.06r1 (haven't downloaded definitions in awhile though); soon to add SpywareBlaster 4.1
|
|
|
|
|
Jul 14 2008, 02:19 PM
Post
#45
|
|
 Who is running the store? Group: Members Posts: 1,913 Joined: 26-November 05 From: Tampa Bay Area, Florida, USA Member No.: 42,052 |
Just thought that the topic "Windows Malicious Software Removal Tool Update" might be of interest to many, especially since it is updated monthly (I just got the update on 25 computers I maintain) so I thought I'd post in the thread.
This Microsoft article - The Microsoft Windows Malicious Software Removal Tool helps remove specific, prevalent malicious software from computers that are running Windows Vista, Windows Server 2003, Windows XP, or Windows 2000 (previously mentioned above), may be of interest to some. I must admit that I'm not sure how useful or effective this "tool" is. The price is right though. --------------------  I know you think you understand what you thought I said, but I'm not sure you realize that what you heard is not what I meant! |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 3rd December 2008 - 09:29 PM |
© 2003-2008 All Rights Reserved Bleeping Computer LLC.