KB890830 Windows Malicious Software Removal Tool 5.48 - May 2017

[Brink]

Windows Malicious Software Removal Tool 5.48 update available for Windows 7, Windows 8.1, and Windows 10 via Windows Update.

You can also manually download at Microsoft Update Catalog.

See also: Malicious Software Removal Tool in Windows Windows 10 Security System Tutorials

Update 5/22/2017: Today, we released an update to the Microsoft Malicious Software Removal Tool (MSRT) to detect and remove WannaCrypt malware. For customers that run Windows Update, the tool will detect and remove WannaCrypt and other prevalent malware infections. Customers can also manually download and run the tool by following the guidance here. The MSRT tool runs on all supported Windows machines where automatic updates are enabled, including those that aren’t running other Microsoft security products.

Source: Customer Guidance for WannaCrypt attacks MSRC

 

[Layback Bear]

Thanks Brink for the reminder.
I just took a peak and there it was. I looked about a half hour ago when I did a MSE scan and it wasn't there.

Of course I downloaded it. I use MRT on both of my systems. Just another tool to fight the bad guys and it's free and easy to use.

Jack

 

[CADesertRat]

Updated MSRT has a WannaCry detector

I already ran MSRT a couple of days ago but it looks like MS updated the MSRT yesterday to detect any traces of "WannaCry".
https://www.********.com/2017/the-new-xp-patch-kb-982316-is-a-dud-but-the-new-msrt-is-for-real/

Update 5/22/2017: Today, we released an update to the Microsoft Malicious Software Removal Tool (MSRT) to detect and remove WannaCrypt malware. For customers that run Windows Update, the tool will detect and remove WannaCrypt and other prevalent malware infections. Customers can also manually download and run the tool by following the guidance here. The MSRT tool runs on all supported Windows machines where automatic updates are enabled, including those that aren’t running other Microsoft security products.

Customer Guidance for WannaCrypt attacks MSRC

 

[Anak]

Same here, I'm on check for updates and it showed up as optional an I ran it. Result, good.

 

[Anak]

Thanks for the merge Shawn!

 

[ThrashZone]

Hi,
I saw it listed as Important not optional
I have not ran it or loaded it for that matter.

 

[CADesertRat]

I'm not sure that I see the point in the MSRT checking for "WannaCry".
Once you have it, your files are locked. It's a bit late isn't it??

 

[Lady Fitzgerald]

Hi,
I saw it listed as Important not optional
I have not ran it or loaded it for that matter.

Same here. I'll wait until the weekend to download and install it to make sure there are no reports of problems with it.

 

[ThrashZone]

I'm not sure that I see the point in the MSRT checking for "WannaCry".
Once you have it, your files are locked. It's a bit late isn't it??

Hi,
Pretty much what I was thinking too

 

[mjf]

I haven't had any problems with KB890830.

I've been installing all updates except optional including the full roundups. I make an image before installing the updates in case of a problem and don't leave security updates too long. I haven't had an update problem for a long time and if I do I'll just do a system image restore.

 

[ThrashZone]

Hi,
Yep MS just missed the updating windows so I'll wait until next month but in all honesty I have never used the tool anyway and I doubt I will use this one either.
If it's anything like windows defender or mse I haven't got all day to run a full scan to find nothing

 

[Anak]

I'll admit that occasionally the older msrt's would extend the update process, and the ones I ran never throwed a warning either but this one took all of 8 minutes from download to finish it's scan on my machine (sans warning), I don't know, maybe I had karma on my side for once...

 

[Layback Bear]

I use MRT every month. It only takes a few minutes. This time it found nothing.
Which I liked.

My other security programs I scanned with also found nothing.
I like it when I'm not infected. That is a good thing.

Jack

 

[parrish]

Thank you...

 

[ThrashZone]

I use MRT every month. It only takes a few minutes.

Jack

Hi,
Clearly you're indeed using the quick scan this update on full is still scanning now at 1:20:22 on my acer
It took about 30:00 on my asus.

 

[Layback Bear]

No, I use complete (full) scans.
One can run MRT in the background and go on about your business if one cares.
My scans take a about 20 minutes.
I do the scans on one computer while I using the other computer so it's no big deal.
Security takes time and effort and I'm willing to use both to try and be safe.

I also use Eset free online scans, which also takes about 20 or 30 minutes.
What ever time it takes is what I'm willing to do.

If one can find time to be on Facebook, watch movies or play games surly finding a little time for security isn't asking much.

Jack

 

[Mellon Head]

My scans take a about 20 minutes.

I have to get a computer like yours, Jack.

I ran it last night and it ran 14 hours then crashed. Now I'm looking for logs to check out the infections it found before crashing.

 

[mjf]

I thought this tool ran in the background automatically. Anyway I ran it manually on C and it took ~30 min. Along the way it stated 7 infections. When complete it says no malicious software was detected and "View detailed results of the scan" produces a list like (8) Option One of Brink's tutorial all not infected.
eg. DOS / Alureon Not Infected

The log file states "No infection found"
I'm a bit confused - what were the 7 infections reported along the way then

 

[Layback Bear]

I get almost the same results as (mjf) and I have yet to figure out why.
The only thing I can think of is a (?) was found at the beginning of the scan and fixed later in the scan.
Problem is the report doesn't show "WHAT". I believing that MRT is picking up definitions installed by other security programs.

Yes, my systems are fast plus they both run well overclocked. That does make scans very fast.

mjf could you post the tutorial by Brink that you are referring to. I would like to read it.

Jack

 

[mjf]

mjf could you post the tutorial by Brink that you are referring to. I would like to read it.

Jack

The link in post #1
https://www.tenforums.com/tutorials/6027-malicious-software-removal-tool-windows.html
on Windows 10 Forums but I believe it applies also to Windows 7.