May's Malicious Software Removal Tool returns to haunt me June 13


  1.    13 Jun 2016 #1
    Join Date : Feb 2015
    Posts : 491
    Vista Home Premium 32bit
    Local Time: 12:42
    usa

    May's Malicious Software Removal Tool returns to haunt me June 13


    This morning, Windows Update was prompting me to install Windows Malicious Software Removal Tool - May 2016. Did anyone else see that? My update history shows that it was successfully installed on May 10. Let's say the tool didn't run properly then (which I have no reason to believe): Why would it take Windows Update more than a month to make that determination? I tried checking for Windows updates again, but the removal tool repeat was still offered. I then opened MSE and checked for definition updates, after which I opened Windows Update again - and oddly enough, it then said that "Windows is up to date"!?

    Googling "KB890830 keeps installing" reveals that such issues have been reported for years. (There was no repeated install in my case because I don't allow updates to install automatically - and never will!)
      My System SpecsSystem Spec

  2.    13 Jun 2016 #2
    Join Date : Aug 2015
    Posts : 141
    Vista Home Premium 32-bit SP2
    Local Time: 12:42
    canada

     

    Re: May's Malicious Software Removal Tool returns to haunt me June 13


    Quote Originally Posted by Vistaar View Post
    My update history shows that it was successfully installed on May 10. Let's say the tool didn't run properly then (which I have no reason to believe): Why would it take Windows Update more than a month to make that determination?
    Hi Vistaar:

    The scan log for the MSRT is located at C:\Windows\Debug\mrt.log and can be opened with Notepad or any other text editor. Here's an excerpt from my log that shows that the 12-May-2016 scan that ran when I installed my May 2016 Patch Tuesday updates completed successfully:

    ---------------------------------------------------------------------------------------
    Microsoft Windows Malicious Software Removal Tool v5.36, May 2016 (build 5.36.12600.0)
    Started On Thu May 12 12:14:28 2016

    Engine: 1.1.12706.0
    Signatures: 1.219.58.0

    Results Summary:
    ----------------
    No infection found.
    Microsoft Windows Malicious Software Removal Tool Finished On Thu May 12 12:26:13 2016

    ---------------------------------------------------------------------------------------

    My own Windows Update is currently configured to never check for updates so I couldn't tell you if an updated set of signature definitions has been released since 12-May-2016, but the release information at https://support.microsoft.com/en-us/...bookmark-usage shows that detections for two new families of malware - Win32/Kovter and Win32/Locky - were added to the MSRT in May 2016 (V 5.36). What you observed was likely just another odd glitch in Vista's Windows Update but it's always possible there was a late out-of-band update for the tool this month to include scanning for Win32/Locky.
    ------------
    32-bit Vista Home Premium SP2 * Firefox v47.0 * NIS v21.7.0.11 * MBAM Premium v2.2.1
    Last edited by lmacri; 14 Jun 2016 at 07:18.
      My System SpecsSystem Spec

  3.    14 Jun 2016 #3
    Join Date : Feb 2015
    Posts : 491
    Vista Home Premium 32bit
    Local Time: 12:42
    usa

      Thread Starter

    Re: May's Malicious Software Removal Tool returns to haunt me June 13


    Quote Originally Posted by lmacri View Post
    What you observed was likely just another odd glitch in Vista's Windows Update
    I'm leaning strongly toward that type of explanation. I tried hiding the update, after which Windows Update proceeded to offer me the April Malicious Software Removal Tool (successfully installed April 12). In case Windows was trying to hint that I have a malware infection, I ran scans with Malwarebytes Free and Kaspersky Rescue Disk, in addition to Microsoft Security Essentials. No threats detected, and of course I have now successfully installed the latest and greatest removal tool for June, and I probably won't post again unless Windows Update offers me a rerun of this one. However it would still be interesting to know if anyone else observed this in the hours preceding Patch Tuesday updates. There was a similar post here in December, but at that time I had no idea how to reply to the hapless Vista user: Please HELP! Why so many Windows Update KB890830 Removal tool?.
      My System SpecsSystem Spec

  4.    30 Jun 2016 #4
    Join Date : Aug 2015
    Posts : 141
    Vista Home Premium 32-bit SP2
    Local Time: 12:42
    canada

     

    Re: May's Malicious Software Removal Tool returns to haunt me June 13


    Hi Vistaar:

    I just stumbled across Caravelle's thread Windows Malicious Software Removal Tool - update chaos in the bleepingcomputer forum that might be of interest. Moderator quietman7 has an excellent reputation in that forum but there is some very questionable advice given out in that thread by other users (e.g., deleting Windows files with Unlocker), so you might want to skip straight to the OP's solution in post # 17.
    -----------
    32-bit Vista Home Premium SP2 * Firefox v47.0.1 * NIS v21.7.0.11 * MBAM Premium v2.2.1
      My System SpecsSystem Spec

  5.    30 Jun 2016 #5
    Join Date : Feb 2015
    Posts : 491
    Vista Home Premium 32bit
    Local Time: 12:42
    usa

      Thread Starter

    Re: May's Malicious Software Removal Tool returns to haunt me June 13


    Yeah, that thread is mostly a wild goose chase. Even the Microsoft link provided by quietman7 in post #18 misses the point because it assumes that an update is being repeatedly offered because it failed, whereas we are now in the realm of successful updates being repeatedly offered. If this can happen with MSRT, then it can happen with any Windows update. I had an isolated incident in December that never recurred: Security Update for Windows Vista (KB2570947): Deja Vu?.

    In my case, the issue reported in the present thread hasn't recurred since the June MSRT was installed (at least not yet). I do not and will never allow Windows to install updates automatically, and I did not reinstall the May MSRT just because Windows Update was offering it again for reasons unknown. Caravelle's first post shows that both the May and June MSRT were repeatedly and successfully installed, so his experience was somewhat different from mine.
    Last edited by Vistaar; 30 Jun 2016 at 09:42.
      My System SpecsSystem Spec

  6.    30 Jun 2016 #6
    Join Date : Sep 2011
    US of A
    Posts : 2,180
    Windows 7 pro 64-bit
    Local Time: 12:42
    usa

     

    Re: May's Malicious Software Removal Tool returns to haunt me June 13


    I don't install that tool so I don't have any input. If it shows up I ignore it.
      My System SpecsSystem Spec

  7.    04 Jul 2016 #7
    Join Date : Feb 2015
    Posts : 491
    Vista Home Premium 32bit
    Local Time: 12:42
    usa

      Thread Starter

    Re: May's Malicious Software Removal Tool returns to haunt me June 13


    On the morning of July 4, Windows Update decided it was time to offer me a repeat of the June MSRT (successfully installed June 14). After updating definitions for MSE, Windows Update is no longer offering the MSRT (for now).

    [Edit] This has happened two more times, so I'm setting Windows Update to "never check for updates" until after July 12 patches are installed. That should fix it!
    Last edited by Vistaar; 05 Jul 2016 at 18:13. Reason: Update
      My System SpecsSystem Spec

  8.    16 Jul 2016 #8
    Join Date : Apr 2016
    Posts : 33
    Vista 32 Home Premium
    Local Time: 12:42


     

    Re: May's Malicious Software Removal Tool returns to haunt me June 13


    Quote Originally Posted by Vistaar View Post
    On the morning of July 4, Windows Update decided it was time to offer me a repeat of the June MSRT (successfully installed June 14). After updating definitions for MSE, Windows Update is no longer offering the MSRT (for now).

    [Edit] This has happened two more times, so I'm setting Windows Update to "never check for updates" until after July 12 patches are installed. That should fix it!
    Vistaar...are you a Comcast customer? If so, do you use Xfinity Norton Security Suite (specifically ver. 22.7.0.76)?

    It's funny because I have a vague memory that this started happening to me (your exact MSRT description) after a NSS version upgrade. I had an issue with Windows 7 (along with the NSS upgrade) that was fixed with a subsequent patch. Just wondering if Norton may have something to do with it?
      My System SpecsSystem Spec

  9.    16 Jul 2016 #9
    Join Date : Feb 2015
    Posts : 491
    Vista Home Premium 32bit
    Local Time: 12:42
    usa

      Thread Starter

    Re: May's Malicious Software Removal Tool returns to haunt me June 13


    Quote Originally Posted by Vista1972 View Post
    Vistaar...are you a Comcast customer? If so, do you use Xfinity Norton Security Suite...
    No, I'm a Mediacom customer using Microsoft Security Essentials 4.9. As I mentioned in the original post, installing MSE definition updates can actually cause Windows Update to change its mind about the "need" for an MSRT repeat. However the link in post #3 does mention Norton. I think Imacri uses Norton, but he hasn't reported this issue. Setting Windows Update to "never check for updates" except on Patch Tuesday following installation of the kernel-mode driver update is an effective preventative.
      My System SpecsSystem Spec

  10.    16 Jul 2016 #10
    Join Date : Apr 2016
    Posts : 33
    Vista 32 Home Premium
    Local Time: 12:42


     

    Re: May's Malicious Software Removal Tool returns to haunt me June 13


    Quote Originally Posted by Vistaar View Post
    No, I'm a Mediacom customer using Microsoft Security Essentials 4.9. As I mentioned in the original post, installing MSE definition updates can actually cause Windows Update to change its mind about the "need" for an MSRT repeat.
    Wow! Sorry about that! I don't think you could've have stated that any clearer.

    Forgot to include that if you run WU again ( after the initial auto check at startup) the MSRT is removed from available updates. Bizarre!!

    Anyway, I think I'll set WU to never check for updates. It's a lot easier at this point in the game.

    Thanks again!
      My System SpecsSystem Spec

Page 1 of 2 12 LastLast
May's Malicious Software Removal Tool returns to haunt me June 13

Similar Threads
Thread Forum
MS Malicious Software Removal Tool stalls
Hi We are currently having some problems... The latest of which is MS Malicious Software Removal tool wont complete a scan, it stalls part way...
Crashes and Debugging
Malicious Software Removal Tool
How to Use the Malicious Software Removal Tool in Vista This will show you how to open and use the Malicious Software Removal Tool (MRT) to...
Tutorials
Malicious Software Removal Tool?
Running Vista Ultimate 64-bit, OEM on a new HP computer. I receive regular updates to something called MS's Malicious Software Removal Tool. I...
Vista General
Malicious Software Removal Tool
Should I download Malicious Software Removal Tool or is it not necessary with Vista Security Protection?
Vista security
Malicious Software Removal Tool issue
Hello, Community I recently installed Windows Vista and have kept my computer updated, but one update it not only incompatible, but sets off a...
Vista General
Windows Malicious Software Removal Tool
The Microsoft Windows Malicious Software Removal Tool for November is now available through Windows Update. (It's the first time I've seen the tool...
Vista General
Windows Malicious Software Removal Tool Available
The Microsoft Windows Malicious Software Removal Tool for November is now available, through Windows Update. (It's the first time I've seen the tool...
Vista security

Our Sites
  • Ten Forums
  • Eight Forums
  • Seven Forums
  • Help Me Bake
  • Site Links
  • Contact Us
  • Privacy and Cookies
  • About Us
    Windows Vista Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

    Designer Media Ltd
    All times are GMT -5. The time now is 13:42.
    .