David H. Lipman wrote:

> From: "Ed Mc" <namvtn@noway.com>
>
> | I'm using WindowsXP. The auto update feature
> | wants to install some kinda "malicious software"
> | removal tool. What is this for if I have adequate
> | protection already in place. Is it really
> | necessary? Thanks for replies.
>
> The Malicious Software Removal Tool (MRT) is an "On Demand" ant virus scanner (covers some
> Trojans and RootKits as well) and is updated monthly. It also can be executed manually
> after you download it.
>
> The utility is...
> %windir%\system32\MRT.exe
>
> Command line switches...
>
> /? or /HELP = displays the command line switches
> /Q = quiet
> /N = detect only
> /F = force extended scan
> /F:Y = force extended scan and automatically clean infected files
>
> The following is the resultant log file...
>
> %windir%\Debug\mrt.log
>
> As an "On Demand" scanner it affords no defense against getting infected but acts to allow
> their subsequent removal/detection. While it is not the sharpest tool in the toolbox it is
> however and excellent supplement to a fully installed anti virus application. I have not
> seen an False Positives associated to the MRT and I have seen no negative consequences to
> its use.

In addition to Dave's remarks, the MSRT runs automatically each month on
Patch Tuesday if you have your /supported/ Windows box set for Automatic
Updates (not recommended). You will get a warning only if it finds
something.

http://www.microsoft.com/security/ma...e/default.mspx

As Dave suggests, download the MSRT manually, and run a quick scan at
least once manually. It will show you what it does each month when you
let MU download and run it, and you can get a display of the current
list of its signatures (89 as of April 2007).

Ron