Jump to content

windows/system32/MRT.exe


larz
 Share

Recommended Posts

This file is on my friends computer. Whenever the computer is booted, a confirmation message comes up and says Microsoft Malicous Software Removal tool wants to run. She has to go into task manager and kill it the process that is asking for permission

 

 Searching the web, it is entirely unclear if it could be a virus or if it is from microsoft and does it really need to run. I am not sure if we had downloaded it at some point or not.  I can't get rid of it because it is not listed under the installed programs from the control panel so you can't uninstall it. I am not sure how to get rid of the confirmation box etc .. Is it safe to just delete the program based on it's file path in windows explorer ? I am hesitant to do that

 

windows/system32/MRT.exe

Link to post
Share on other sites

:welcome:

It's better all around if your friend created their own post and posted diagnostic reports as per this post

 

Do they have a screen image capture of "the item in question"?

Did they start a Windows Update run, perhaps ?

 

MRT is part of each monthly Windows Update release.  Typically the 2nd Tuesday of the month.

 

 

If in doubt as to the legitimacy of that item, they could end the process using Task Manager.

 

But keep in mind that the Microsoft Malicious Software Removal tool is MRT.exe  and does reside at that location.

 

If they wish to get and run "manually"  ( ie, on demand ) the latest version of Microsoft Malicious Software Removal tool, they can do their own download and run.

 

Keep in mind That User Account Control ( UAC) will show the name "Microsoft" and the publisher as Microsoft Windows.

 

post-2622-0-53538700-1446984609_thumb.pn

 

Notice the Microsoft Windows name on the title bar plus also on the second bar on that window.

 

 

 

Manual on-demand download ( for latest version ) and manual run.

Download the Microsoft® Windows® Malicious Software Removal Tool from the Microsoft Download Center
http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

 

On Microsoft Vista and later operating systems, UAC will prompt you to allow it tor run.

After a run of MSRT has finished, you will find the log at C:\WINDOWS\Debug\mrt.log or C:\WINNT\Debug\mrt.log
The file may be opened and viewed with Notepad or similar text editor.

If and only if your system is  Windows 7 x64, Vista x64, or 64-bit Windows 8/8.1 or Windows 10 64-bit.
Get Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64
http://www.microsoft.com/downloads/details.aspx?familyid=585D2BDE-367F-495E-94E7-6349F4EFFC74&displaylang=en

Additional information Microsoft® Windows® Malicious Software Removal Tool is here http://support.microsoft.com/?kbid=890830

If no infections were found, you will see in your log  at the very very bottom.

Results Summary:
----------------
No infection found.

Edited by Maurice Naggar
Link to post
Share on other sites

It can be ended using task manager, but every time the computer is rebooted a message comes up that says something like: "Microsoft Malicious Software Removal tool wants to run" allow ?  etc

 

 I've never had this happen and I want to disable it's ability to run since I am not sure what it really is or what it wants to do. I see no way to disable it except having to go into task manager every time you reboot which is a pain. It does not show up in the downloads or in uninstall programs

Link to post
Share on other sites

Then either this is a mysterious rogue ( doubtful) or your machine is stuck and not able to finish the montthly run of MRT.

In either event, ATTACH diagnostic reports.

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.

You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). Please (only) attach the logs.
Link to post
Share on other sites

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.