Jump to content

one-time permanent blocking of MRT


Recommended Posts

Guest Costin Gusa
Posted

Does anyone know how to permanently decline installation of Malware Removal

Tool ? In 15 years of computer use I have never been infected and I don't

need the MRT to be offered as an update. If i click 'don't show this update

again', it will dissapear, but it will prompt me to install the previous'

month MRT, and then I would have to repeat this for all months since MRT has

been released. I want to decline this tool ONCE and FOREVER!

No, disabling automatic updates is not an option.

And no, using WSUS for a approving updates for a single home computer is

also not an option.

Guest Steve Riley [MSFT]
Posted

I can understand the desire to be in control of the software that you run on

your computer, but in this particular case I'd ask that you not worry about

the MSRT. It installs with each monthly update, runs the next time you

reboot, then deletes itself. Worldwide the tool has executed over two

billion times and has removed about 60 million infections from 25 million

computers. So while it's admirable that you're practicing safe computing and

have avoided malware, we believe that one way to help reduce everyone's

exposure is to have a consistent, repeatable scan for some of the most

dangerous stuff happen automatically. Think of it as a public service for

all computers running Windows.

 

--

Steve Riley

steve.riley@microsoft.com

http://blogs.technet.com/steriley

http://www.protectyourwindowsnetwork.com

 

 

 

"Costin Gusa" <Costin Gusa@discussions.microsoft.com> wrote in message

news:5BCC64B2-8E3B-4604-BB55-49FD75B98D17@microsoft.com...<span style="color:blue">

> Does anyone know how to permanently decline installation of Malware

> Removal

> Tool ? In 15 years of computer use I have never been infected and I don't

> need the MRT to be offered as an update. If i click 'don't show this

> update

> again', it will dissapear, but it will prompt me to install the previous'

> month MRT, and then I would have to repeat this for all months since MRT

> has

> been released. I want to decline this tool ONCE and FOREVER!

> No, disabling automatic updates is not an option.

> And no, using WSUS for a approving updates for a single home computer is

> also not an option. </span>

Guest Costin Gusa
Posted

Hi Steve,

 

I would understand and tolerate the tool if it had deleted itself.

However, I do get irritated everytime I run Spacemonger (free tool) to check

who's eating my/(other peoples') disk space and always find MRT.EXE sitting

there in %SystemRoot%\System32...

Could you (or you all other reading this thread) check your and a couple of

your friends' computers for the presence of %SystemRoot%\System32\MRT.EXE ?

 

Many thanks,

Costin

 

 

"Steve Riley [MSFT]" wrote:

<span style="color:blue">

> I can understand the desire to be in control of the software that you run on

> your computer, but in this particular case I'd ask that you not worry about

> the MSRT. It installs with each monthly update, runs the next time you

> reboot, then deletes itself. Worldwide the tool has executed over two

> billion times and has removed about 60 million infections from 25 million

> computers. So while it's admirable that you're practicing safe computing and

> have avoided malware, we believe that one way to help reduce everyone's

> exposure is to have a consistent, repeatable scan for some of the most

> dangerous stuff happen automatically. Think of it as a public service for

> all computers running Windows.

>

> --

> Steve Riley

> steve.riley@microsoft.com

> http://blogs.technet.com/steriley

> http://www.protectyourwindowsnetwork.com

>

>

>

> "Costin Gusa" <Costin Gusa@discussions.microsoft.com> wrote in message

> news:5BCC64B2-8E3B-4604-BB55-49FD75B98D17@microsoft.com...<span style="color:green">

> > Does anyone know how to permanently decline installation of Malware

> > Removal

> > Tool ? In 15 years of computer use I have never been infected and I don't

> > need the MRT to be offered as an update. If i click 'don't show this

> > update

> > again', it will dissapear, but it will prompt me to install the previous'

> > month MRT, and then I would have to repeat this for all months since MRT

> > has

> > been released. I want to decline this tool ONCE and FOREVER!

> > No, disabling automatic updates is not an option.

> > And no, using WSUS for a approving updates for a single home computer is

> > also not an option. </span>

> </span>

Guest Kerry Brown
Posted

Set Windows Updates to off, then check manually. This gives you almost total

control over what gets downloaded. The only things that will be downloaded

without approval are updates to WU itself when you check for new updates.

 

If you are that worried about a 16 MB file "eating" disk space then you have

other problems with the system. There are far more egregious "eaters" of

disk space than MRT. If you are down to where one 16 MB file is a problem

the system is already disastrously low on resources.

 

--

Kerry Brown

MS-MVP - Windows Desktop Experience: Systems Administration

http://www.vistahelp.ca/phpBB2/

 

 

 

"Costin Gusa" <CostinGusa@discussions.microsoft.com> wrote in message

news:DEA0BD0A-DA75-4CDE-ABC4-D1A6E08DB0B2@microsoft.com...<span style="color:blue">

> Hi Steve,

>

> I would understand and tolerate the tool if it had deleted itself.

> However, I do get irritated everytime I run Spacemonger (free tool) to

> check

> who's eating my/(other peoples') disk space and always find MRT.EXE

> sitting

> there in %SystemRoot%System32...

> Could you (or you all other reading this thread) check your and a couple

> of

> your friends' computers for the presence of %SystemRoot%System32MRT.EXE

> ?

>

> Many thanks,

> Costin

>

>

> "Steve Riley [MSFT]" wrote:

><span style="color:green">

>> I can understand the desire to be in control of the software that you run

>> on

>> your computer, but in this particular case I'd ask that you not worry

>> about

>> the MSRT. It installs with each monthly update, runs the next time you

>> reboot, then deletes itself. Worldwide the tool has executed over two

>> billion times and has removed about 60 million infections from 25 million

>> computers. So while it's admirable that you're practicing safe computing

>> and

>> have avoided malware, we believe that one way to help reduce everyone's

>> exposure is to have a consistent, repeatable scan for some of the most

>> dangerous stuff happen automatically. Think of it as a public service for

>> all computers running Windows.

>>

>> --

>> Steve Riley

>> steve.riley@microsoft.com

>> http://blogs.technet.com/steriley

>> http://www.protectyourwindowsnetwork.com

>>

>>

>>

>> "Costin Gusa" <Costin Gusa@discussions.microsoft.com> wrote in message

>> news:5BCC64B2-8E3B-4604-BB55-49FD75B98D17@microsoft.com...<span style="color:darkred">

>> > Does anyone know how to permanently decline installation of Malware

>> > Removal

>> > Tool ? In 15 years of computer use I have never been infected and I

>> > don't

>> > need the MRT to be offered as an update. If i click 'don't show this

>> > update

>> > again', it will dissapear, but it will prompt me to install the

>> > previous'

>> > month MRT, and then I would have to repeat this for all months since

>> > MRT

>> > has

>> > been released. I want to decline this tool ONCE and FOREVER!

>> > No, disabling automatic updates is not an option.

>> > And no, using WSUS for a approving updates for a single home computer

>> > is

>> > also not an option.</span>

>> </span></span>

Posted

Its 16.5 Mbyte. You folks running on small drives?

 

Doesn't it have the dont show this update again checkbox?

 

 

 

Costin Gusa wrote:<span style="color:blue">

> Hi Steve,

>

> I would understand and tolerate the tool if it had deleted itself.

> However, I do get irritated everytime I run Spacemonger (free tool) to check

> who's eating my/(other peoples') disk space and always find MRT.EXE sitting

> there in %SystemRoot%System32...

> Could you (or you all other reading this thread) check your and a couple of

> your friends' computers for the presence of %SystemRoot%System32MRT.EXE ?

>

> Many thanks,

> Costin

>

>

> "Steve Riley [MSFT]" wrote:

> <span style="color:green">

>> I can understand the desire to be in control of the software that you run on

>> your computer, but in this particular case I'd ask that you not worry about

>> the MSRT. It installs with each monthly update, runs the next time you

>> reboot, then deletes itself. Worldwide the tool has executed over two

>> billion times and has removed about 60 million infections from 25 million

>> computers. So while it's admirable that you're practicing safe computing and

>> have avoided malware, we believe that one way to help reduce everyone's

>> exposure is to have a consistent, repeatable scan for some of the most

>> dangerous stuff happen automatically. Think of it as a public service for

>> all computers running Windows.

>>

>> --

>> Steve Riley

>> steve.riley@microsoft.com

>> http://blogs.technet.com/steriley

>> http://www.protectyourwindowsnetwork.com

>>

>>

>>

>> "Costin Gusa" <Costin Gusa@discussions.microsoft.com> wrote in message

>> news:5BCC64B2-8E3B-4604-BB55-49FD75B98D17@microsoft.com...<span style="color:darkred">

>>> Does anyone know how to permanently decline installation of Malware

>>> Removal

>>> Tool ? In 15 years of computer use I have never been infected and I don't

>>> need the MRT to be offered as an update. If i click 'don't show this

>>> update

>>> again', it will dissapear, but it will prompt me to install the previous'

>>> month MRT, and then I would have to repeat this for all months since MRT

>>> has

>>> been released. I want to decline this tool ONCE and FOREVER!

>>> No, disabling automatic updates is not an option.

>>> And no, using WSUS for a approving updates for a single home computer is

>>> also not an option. </span></span></span>

Guest Costin Gusa
Posted

"Kerry Brown" wrote:

<span style="color:blue">

> Set Windows Updates to off, then check manually. This gives you almost total

> control over what gets downloaded. The only things that will be downloaded

> without approval are updates to WU itself when you check for new updates.

> </span>

 

I'm sorry I am forced to repeat myself to people who cannot read:

"No, disabling automatic updates is not an option. "

<span style="color:blue">

> If you are that worried about a 16 MB file "eating" disk space then you have

> other problems with the system. There are far more egregious "eaters" of

> disk space than MRT. If you are down to where one 16 MB file is a problem

> the system is already disastrously low on resources.</span>

 

 

 

You are completely offtopic. RE-READ my posts and find the questions (there

are 2 - "TWO") I asked for.

 

 

Offtopic: Yes, I am worried about the disk space, but since you have already

thrown down the gauntlet: those 16MB of free space are MINE, i have PAID for

them and therefore is my RIGHT to KNOW how my MONEY are used.

Upgrading storage just because you are unable to identify the cause for

disk consumption? Replacing things (read 'from a small drive to a larger

drive') because you simply cannot handle them and not because of real storage

needs? No thanks. At least not until my brain is still performing well.

FYI, my system volume has 30Gb with over 20Gb free.

 

[old crap deleted]

Guest Kerry Brown
Posted

I know you said that disabling automatic updates isn't an option. I was

trying to tell you it is the only option that will accomplish what you want

to do.

 

Life is about choices. You don't always get to choose which options are

available. You do get to choose which option out of the available ones you

want to use. Pick an available option.

 

1. Disable windows updates. This puts the onus on you to check for updates,

then pick which ones to install.

 

2. Choose the option to notify you when updates are available. When notified

peruse the list, pick the updates you want, and decline the rest.

 

3. Enable automatic updates and live the fact that once a month you will

have to delete mrt.exe to reclaim 16 MB of hard drive space.

 

Those are the available choices. You may not like the choices but those are

the choices available.

 

Personally I think you're crazy for declining mrt. The time and disk space

involved are minimal. Just because none of your antimalware programs have

ever detected an infection doesn't mean you haven't been infected or won't

be infected at some future date. Allowing mrt to do it's thing once a month

adds another level of protection for the cost of a few seconds of time.

 

--

Kerry Brown

MS-MVP - Windows Desktop Experience: Systems Administration

http://www.vistahelp.ca/phpBB2/

 

 

 

"Costin Gusa" <CostinGusa@discussions.microsoft.com> wrote in message

news:77DE868B-FBB4-4308-B9C5-502889E8DF3A@microsoft.com...<span style="color:blue">

> "Kerry Brown" wrote:

><span style="color:green">

>> Set Windows Updates to off, then check manually. This gives you almost

>> total

>> control over what gets downloaded. The only things that will be

>> downloaded

>> without approval are updates to WU itself when you check for new updates.

>></span>

>

> I'm sorry I am forced to repeat myself to people who cannot read:

> "No, disabling automatic updates is not an option. "

><span style="color:green">

>> If you are that worried about a 16 MB file "eating" disk space then you

>> have

>> other problems with the system. There are far more egregious "eaters" of

>> disk space than MRT. If you are down to where one 16 MB file is a problem

>> the system is already disastrously low on resources.</span>

>

>

>

> You are completely offtopic. RE-READ my posts and find the questions

> (there

> are 2 - "TWO") I asked for.

>

>

> Offtopic: Yes, I am worried about the disk space, but since you have

> already

> thrown down the gauntlet: those 16MB of free space are MINE, i have PAID

> for

> them and therefore is my RIGHT to KNOW how my MONEY are used.

> Upgrading storage just because you are unable to identify the cause for

> disk consumption? Replacing things (read 'from a small drive to a larger

> drive') because you simply cannot handle them and not because of real

> storage

> needs? No thanks. At least not until my brain is still performing well.

> FYI, my system volume has 30Gb with over 20Gb free.

>

> [old crap deleted] </span>

Guest Costin Gusa
Posted

"Kerry Brown" wrote:

<span style="color:blue">

> I know you said that disabling automatic updates isn't an option. I was

> trying to tell you it is the only option that will accomplish what you want

> to do.

>

> Life is about choices. You don't always get to choose which options are

> available. You do get to choose which option out of the available ones you

> want to use. Pick an available option.

>

> 1. Disable windows updates. This puts the onus on you to check for updates,

> then pick which ones to install.

>

> 2. Choose the option to notify you when updates are available. When notified

> peruse the list, pick the updates you want, and decline the rest.

>

> 3. Enable automatic updates and live the fact that once a month you will

> have to delete mrt.exe to reclaim 16 MB of hard drive space.

>

> Those are the available choices. You may not like the choices but those are

> the choices available.

> </span>

 

I completely agree with that. I came here hoping for a less than obvious

solution, other than those three (which by the way, #2 throws you into a

semi-loop declining may, then april, then march, and so on back to the

first-born son) style_emoticons/

<span style="color:blue">

> Personally I think you're crazy for declining mrt. The time and disk space

> involved are minimal. Just because none of your antimalware programs have

> ever detected an infection doesn't mean you haven't been infected or won't

> be infected at some future date. Allowing mrt to do it's thing once a month

> adds another level of protection for the cost of a few seconds of time.

> </span>

 

Maybe I am style_emoticons/

Forgot to mention that beside not catching any virus I also have never used

an antivirus/antimalware product except for finger-counted occasions (I do

admit that for a couple of times I have scanned some exotic executable when

virtual machine testing was not and option). Don't read me wrong: I've never

used them _for me_ , but I am forced to keep one AV product alive in the

company network.

I know allowing mrt once a month it's generally a good thing, thinking about

the millions of innocents. I personally don't need mrt; I just happen to be

an exception, and have to live with that.

  • 2 weeks later...
Guest Ben M. Schorr - MVP (OneNote)
Posted

Well, personally I think it's foolish to worry about it and sort of

arrogant to assume that any machine connected to a network (especially

the Internet) could never get infected. I've never been hit by a bus

but I still stop and look both ways before crossing the street.

 

However, if it's really that important to you why not write a script

that deletes the file and use Scheduled Tasks to execute it every 2nd

Wednesday.

 

--

-Ben-

Ben M. Schorr, MVP

Roland Schorr & Tower

http://www.rolandschorr.com

http://www.officeforlawyers.com

 

 

 

"Costin Gusa" <CostinGusa@discussions.microsoft.com> wrote in message

news:DEA0BD0A-DA75-4CDE-ABC4-D1A6E08DB0B2@microsoft.com:

<span style="color:blue">

> Hi Steve,

>

> I would understand and tolerate the tool if it had deleted itself.

> However, I do get irritated everytime I run Spacemonger (free tool) to check

> who's eating my/(other peoples') disk space and always find MRT.EXE sitting

> there in %SystemRoot%System32...

> Could you (or you all other reading this thread) check your and a couple of

> your friends' computers for the presence of %SystemRoot%System32MRT.EXE ?

>

> Many thanks,

> Costin

>

>

> "Steve Riley [MSFT]" wrote:

>

><span style="color:green">

> > I can understand the desire to be in control of the software that you run on

> > your computer, but in this particular case I'd ask that you not worry about

> > the MSRT. It installs with each monthly update, runs the next time you

> > reboot, then deletes itself. Worldwide the tool has executed over two

> > billion times and has removed about 60 million infections from 25 million

> > computers. So while it's admirable that you're practicing safe computing and

> > have avoided malware, we believe that one way to help reduce everyone's

> > exposure is to have a consistent, repeatable scan for some of the most

> > dangerous stuff happen automatically. Think of it as a public service for

> > all computers running Windows.

> >

> > --

> > Steve Riley

> > steve.riley@microsoft.com

> > http://blogs.technet.com/steriley

> > http://www.protectyourwindowsnetwork.com

> >

> >

> >

> > "Costin Gusa" <Costin Gusa@discussions.microsoft.com> wrote in message

> > news:5BCC64B2-8E3B-4604-BB55-49FD75B98D17@microsoft.com...</span>

><span style="color:green"><span style="color:darkred">

> > > Does anyone know how to permanently decline installation of Malware

> > > Removal

> > > Tool ? In 15 years of computer use I have never been infected and I don't

> > > need the MRT to be offered as an update. If i click 'don't show this

> > > update

> > > again', it will dissapear, but it will prompt me to install the previous'

> > > month MRT, and then I would have to repeat this for all months since MRT

> > > has

> > > been released. I want to decline this tool ONCE and FOREVER!

> > > No, disabling automatic updates is not an option.

> > > And no, using WSUS for a approving updates for a single home computer is

> > > also not an option.</span></span>

><span style="color:green">

> ></span></span>

Guest Costin Gusa
Posted

"Ben M. Schorr - MVP (OneNote)" wrote:

<span style="color:blue">

> Well, personally I think it's foolish to worry about it and sort of

> arrogant to assume that any machine connected to a network (especially

> the Internet) could never get infected. </span>

 

true, except that I have never said that.

I'm not worrying about it, I am DISTURBED by it's presence and ANNOYED by

automatic updates behaviour in relation with it's approval.

<span style="color:blue">

> I've never been hit by a bus

> but I still stop and look both ways before crossing the street.</span>

 

yes, and i've never been infected but i still turn on firewall, execute

non-trusted/testing code on virtual machines without network interfaces, surf

the internet with other browser than internet explorer (firefox), with

javascript turned off (noscript extension), with my account deprived of

privileges (runasadmin)

<span style="color:blue">

>

> However, if it's really that important to you why not write a script

> that deletes the file and use Scheduled Tasks to execute it every 2nd

> Wednesday.

> </span>

 

that would only solve the effect but not remove the cause.

from http://support.microsoft.com/kb/890830

 

"How to remove the Malicious Software Removal Tool

The Malicious Software Removal Tool does not use an installer. Typically,

when you run the Malicious Software Removal Tool, it creates a randomly named

temporary directory on the root drive of the computer"

 

....but it doesn't say anything about %systemroot%\system32\mrt.exe !!!

 

[...]

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...