1
So, a while ago, I saw a weird directory in C:\ and inside it was "MRT.exe" which appears to be the MSRT (Malisious Software Removal Tool), and I scanned it for viruses; it said it was clean, but I still deleted it and the directory. Was that legit, or was that a virus?
PS: I was using Windows 7
PPS: It also happened on a Windows 8 PC, except it said that it was a virus sig. stub, or something, and was digitally signed. Was that also a virus
PPPS: I don't remember downloading/visiting/executing anything malicious back then
PS: I was using Windows 7
PPS: It also happened on a Windows 8 PC, except it said that it was a virus sig. stub, or something, and was digitally signed. Was that also a virus
PPPS: I don't remember downloading/visiting/executing anything malicious back then
Create an account or sign in to comment.
4
1
even though you deleted the file, you'll just end up downloading it next month.
everyone downloads a slimmed down version via windows update. the full version is in the link Kingdomapbuilder provided. MSRT will automatically scan your computer after it's been downloaded via windows update. It will not do a full scan however, it'll only scan for newly discovered viruses/worms/rootkits/ect (hence each month's scan will be vastly different)
this screenshot is from one of my virtual machines (I haven't updated it in ages, so that's why you see win 7 service pack 1 on there, lol)
if you saw it in your root drive, my guess is that you just downloaded it and it was in the progress of scanning.
So much information
PS:
More Info: http://windowsitpro.com/security/q-malicious-software-removal-tool-msrt-used-be-available-download-microsoft-website-it-coul
everyone downloads a slimmed down version via windows update. the full version is in the link Kingdomapbuilder provided. MSRT will automatically scan your computer after it's been downloaded via windows update. It will not do a full scan however, it'll only scan for newly discovered viruses/worms/rootkits/ect (hence each month's scan will be vastly different)
this screenshot is from one of my virtual machines (I haven't updated it in ages, so that's why you see win 7 service pack 1 on there, lol)
if you saw it in your root drive, my guess is that you just downloaded it and it was in the progress of scanning.
So much information
PS:
More Info: http://windowsitpro.com/security/q-malicious-software-removal-tool-msrt-used-be-available-download-microsoft-website-it-coul
1
Im sure it was a virus. Those virus scans are a joke. Never rely on them. You totally did the right thing. Just make sure that there is no left over from that, well, whatever it was. No doubt at all it was a virus.
1
It could be a virus pretending to be MSRT, but MSRT itself is legit. https://www.microsoft.com/en-us/downloa ... tails.aspx
1
But I never visited any website (especially those fake/rouge security/AV software) and downloaded such fake software