MS Windows Malicious Software Removal Tool

[jslater25]

Okay, I hate this thing. I am trying to setup several computers and then configuring the Auto Update for the OS. The problem is I don't want to download and install the MSRT. Is there a way to banish it forever?

Please note: if I tell Auto Updates to ignore the most recent version of the tool, it then pops up with last months version. Ignoring that causes the previous version to pop up. Its never ending!

[SpywareDr]

The problem is I don't want to download and install the MSRT. ...

Why?

[jslater25]

Why?
Because we have other tools that we install in its place. Because its a Microsoft product that has had some speculation in the past (GAIN was allowed at one point, for example). We don't see any reason on installing a product that we are unable to control.

We believe its much like the WinXP firewall. Rather useless, especially when we have another software/hardware package that we prefer.

[Steve R Jones]

The removal tool doesn't really install. It just "runs" from the update site.

Might have to bite the bullet and tell it to ignore till it runs out of previous versions...

[HAN]

Maybe I am misunderstanding the MSRT but I thought it just sat there until ran manually. I thought all the Win Update did was bring the tool up to the current version. Am I wrong here???

[jslater25]

Hmm, maybe I should do more research on this thing. I really thought the MSRT was similar to Ad-Aware (at least in concept). I thought it was a program that needed to be installed onto the computer, and then it would run in a similar fashion. I would prefer to use something like Spybot S&D (or if outside the office, Ad-Aware) or some similar program.

[Cyber Akuma]

As far as I know....

The MSRT isnt their spyware remover, that is a seeprate optional application, the MSRT just runs once when doing updates to make sure your system is ok, it dosent install as far as I know.

[Welshjim]

I think almost all statements above are correct.
MSMSRT can be downloaded and run manually
http://www.microsoft.com/downloads/d...displaylang=en
It can be run from a MS site manually
http://www.microsoft.com/security/ma...e/default.mspx
It is not downloaded but runs in the background every month when you get Windows Updates
http://support.microsoft.com/?id=890830
MS does not really recommend it for "enterprise" environments
http://support.microsoft.com/?kbid=891716
It is a substitute for an antivirus program, not a spyware detector or firewall.

[jslater25]

Thanks WelshJim. Good links to read.
Looks like I will continue with the procedure I have been doing: choose custom install, then deselect the MSRT, then tell it to ignore forever, then cancel the previous month's version. Royal pain in the buttocks, but doesn't seem to be any other answer.

[Cyber Akuma]

Why are you so opposed to running it?

[Tuttle]

Just to be clear: the version which comes down in Automatic Updates / Windows Update / Microsoft Update isn't "installed". It gets downloaded, it runs, it deletes/logs a very limited subset of malware (mainly Blaster/Sasser type worms) and then it disappears.

I don't quite get why you don't want it downloaded unless Internet bandwidth is a huge issue, in which case you should be looking at something like WSUS for patch distribution.

[jslater25]

I don't want it downloaded/run simply due to company policy (our network admin's request). I would prefer pushing out updates as well, however certain circumstances prevent this from effectively working.

The computers that are an issue are the remote laptops outside the building. We typically push out the updates while the computers are connected to our network, but before being deployed we turn on Automatic Updates to make sure they get the latest updates. Not all computers on our network use Auto Update because we prefer to test the update (for compatibility issues more than anything else) before pushing it out.
The laptops are a unique situation. We prefer to have them as secure as possible, and therefore the Auto Update is turned on. This allows the laptop to update Windows even if they are not connected to our network via VPN or other means.

Other than that, I could not explain why the network admin prefers to NOT use this tool. But the policy is set NOT to use this tool, therefore I look for easy ways to avoid it. There doesn't seem to be any easy way to avoid it, other than going through the routine of cancelling the install.