Recurring Windows Malicious Software Removal Tool installation problem

[ThisIsMadness91]

Before I begin, I apologise if this is in the wrong section.

This may be a bad thing, but when Patch Tuesday comes around, I don't think to install the updates right away. Rather, I just keep using my PC as usual until the updates install themselves when I shut my PC down. Last month, the malware removal tool wouldn't install itself. I had to open Windows Update and install it myself. The same thing happened today. My spare laptop doesn't have any problems installing it on shutdown. The problem is only occurring on the PC I use every day.

I'm starting to worry that some sort of malware has crept onto my PC and is preventing the update from installing itself. Any help would be greatly appreciated.

 

[Britton30]

What happens if you try to use Windows Update to check for new updates?
Do you get any error messages? If so post a snip of them.

This is the preferred, best way to upload an image or a file to a post. Press the ALT and PrntScrn keys at the same time, this will capture only the active window to use in Paint or your preferred graphics editor.

http://www.sevenforums.com/tutorials/9733-screenshots-files-upload-post-seven-forums.html#post93869
You may also upload a photo or image you already have as you would a file, without using the Snipping tool.

Option 2 here may help.
http://www.sevenforums.com/tutorials/91738-windows-update-reset.html

 

[paul1149]

I would first run a full scan using Malwarebytes to eliminate the possibility of malware intrusion. After that you've got a Windows problem on your hands if nothing changes.

 

[ThisIsMadness91]

Thanks for the replies. Britton, I don't get any error messages when checking for new updates. Paul, I'll run an MBAM scan later today and let you know if it finds anything, but I'm pretty sure I've run a full scan sometime over the last four weeks and didn't find anything.

 

[Britton30]

I'm very confused, if there's no error, how can you be sure the MRT didn't install? If you don't run a daily scan, you may well be infected with something. You could have picked up something 3 weeks ago.

In the future I strongly recommend installing updates right away. It takes minutes.

 

[ThisIsMadness91]

Sorry, let me see if I can explain the problem better. Basically, if I don't install the updates right away, Windows Update eventually selects, downloads and installs them by itself when I shut my PC down. Yesterday, I had thirteen important updates selected to install (I checked this before going to bed), but when I switched it off, I saw that only twelve were downloaded and installed. I switched the PC back on and saw that the malware removal tool wasn't installed despite having been selected when I switched it off. I had to open Windows Update and install it from there.

It may not be enough, but I run a scan with Avira at the end of each week. I did accidentally visit a dodgy site a couple of months ago and made a thread about it here.

http://www.sevenforums.com/system-s...hort-info-when-trying-visit-certain-site.html

I wonder if that has anything to do with it.

 

[Britton30]

Again I strongly recommend installing updates right away. I do it because I control what goes on my PC, not MS. If I forget and the "Shut down to Install Updates" appears on the shut down options, I will run Windows Update manually instead.

Did you ever uninstall the Ask toolbar? Did you do all the scans that were suggested in the other thread? I asked cottonball to look in again.

 

[ThisIsMadness91]

Thanks for the advice on the updates. Like I said in that thread, I didn't agree to install the Ask toolbar when installing Avira, and I can't find said toolbar on either Firefox or Internet Explorer. It's been a while, but I think I did all of the recommended scans.

 

[Jacee]

Since you abandoned your topic from January, please delete/remove the old version of AdwCleaner ... It's way outdated!


Double click on AdwCleaner.exe to run the tool again. Click on the Uninstall button.
Click Yes when asked are you sure you want to uninstall.
Both AdwCleaner.exe, its folder and all logs will be removed.



Next, download the "current" version of AdwCleanerAdwCleaner by Xplode and save to your Desktop.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator.
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
• The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
• Copy and paste the contents of that logfile in your next reply.
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Do not, click on the "clean" button until I look at the log.

 

[ThisIsMadness91]

# AdwCleaner v3.022 - Report created 14/03/2014 at 07:22:11
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Anthony Powell - ANTHONYPOWELL
# Running from : C:\Users\Anthony Powell\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxps://mail.google.com/mail/?shva=1#inbox

-\\ Mozilla Firefox v27.0 (en-US)

[ File : C:\Users\Anthony Powell\AppData\Roaming\Mozilla\Firefox\Profiles\fkzr39hx.default\prefs.js ]

Line Found : user_pref("browser.startup.homepage", "hxxps://mail.google.com/mail/?shva=1#inbox");

*************************

AdwCleaner[R0].txt - [886 octets] - [14/03/2014 07:22:11]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [945 octets] ##########

 

[Jacee]

That looks good!


Let's flush the DNS cache:
Right click on Command Prompt and choose to run as Administrator.
Copy/paste ipconfig /flushdns in the command and press the 'enter' key. It should show Successful DNS Flush when done. Reboot


Tell me if you're being re-directed after doing the above.

 

[Jacee]

Open Control Panel, then Programs and Features ... see if Microsoft Malicious Software Removal Tool (KB890830)is listed in 'Installed updates' (left hand side). Remove it if it says failed.

 

[ThisIsMadness91]

I don't see the removal tool in my list of installed programs, but it does appear in my list of installed updates, if that's what you mean.

 

[Britton30]

Remove it from Installed updates, there may be more than one instance. It can also be found in C:\Windows\System32 as MRT.exe, and can be deleted.

 

[ThisIsMadness91]

Should I do that anyway or only if the update failed? Also, do I still need AdwCleaner or is it okay to uninstall it?

 

[Jacee]

This is how to remove AdwCleaner.........


Double click on AdwCleaner.exe to run the tool again. Click on the Uninstall button.
Click Yes when asked are you sure you want to uninstall.
Both AdwCleaner.exe, its folder and all logs will be removed.

 

[Britton30]

Should I do that anyway or only if the update failed? Also, do I still need AdwCleaner or is it okay to uninstall it?

It may let next month's MRT install OK.

 

[ThisIsMadness91]

That looks good!


Let's flush the DNS cache:
Right click on Command Prompt and choose to run as Administrator.
Copy/paste ipconfig /flushdns in the command and press the 'enter' key. It should show Successful DNS Flush when done. Reboot


Tell me if you're being re-directed after doing the above.

Just followed your instructions and I'm still getting redirected.

 

[Ex_Brit]

From the OP:

I don't think to install the updates right away. Rather, I just keep using my PC as usual until the updates install themselves

The problem with that is a) updates should be installed as soon as they are become available, if not for security reasons at least to stop them accumulating and b) that method ignores all the dozens of optional updates that are no doubt numbering quite a lot by now. I assume you have, in settings, Windows Update set to install updates for more components using Microsoft Updates, if not you should. The only optional updates that I would avoid are unwanted language packs if offered in your version of 7 and maybe things you prefer to update yourself such as graphics drivers.
I'll leave the question of failed updates to others. Just wanted to add my thoughts on one aspect of your question.

 

[ThisIsMadness91]

Britton30 also advised me to install updates once they're available. I'll be sure to do that in the future, but I may need to set a reminder so that I don't forget when Patch Tuesday comes around. Optional updates haven't been accumulating, though. Most of the updates that are offered to me are either important or recommended. Optional updates don't appear all that often for me, or at least not in high numbers.

I think I have it set to install updates for other components. The "Microsoft Update" option is ticked, if that's what you're referring to.