one-time permanent blocking of MRT

[Costin Gusa]

Does anyone know how to permanently decline installation of Malware Removal
Tool ? In 15 years of computer use I have never been infected and I don't
need the MRT to be offered as an update. If i click 'don't show this update
again', it will dissapear, but it will prompt me to install the previous'
month MRT, and then I would have to repeat this for all months since MRT has
been released. I want to decline this tool ONCE and FOREVER!
No, disabling automatic updates is not an option.
And no, using WSUS for a approving updates for a single home computer is
also not an option.

 

[Steve Riley [MSFT]]

I can understand the desire to be in control of the software that you run on
your computer, but in this particular case I'd ask that you not worry about
the MSRT. It installs with each monthly update, runs the next time you
reboot, then deletes itself. Worldwide the tool has executed over two
billion times and has removed about 60 million infections from 25 million
computers. So while it's admirable that you're practicing safe computing and
have avoided malware, we believe that one way to help reduce everyone's
exposure is to have a consistent, repeatable scan for some of the most
dangerous stuff happen automatically. Think of it as a public service for
all computers running Windows.

--
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com



"Costin Gusa" <Costin Gusa@discussions.microsoft.com> wrote in message
news:5BCC64B2-8E3B-4604-BB55-49FD75B98D17@microsoft.com...
> Does anyone know how to permanently decline installation of Malware
> Removal
> Tool ? In 15 years of computer use I have never been infected and I don't
> need the MRT to be offered as an update. If i click 'don't show this
> update
> again', it will dissapear, but it will prompt me to install the previous'
> month MRT, and then I would have to repeat this for all months since MRT
> has
> been released. I want to decline this tool ONCE and FOREVER!
> No, disabling automatic updates is not an option.
> And no, using WSUS for a approving updates for a single home computer is
> also not an option.

 

[Costin Gusa]

Hi Steve,

I would understand and tolerate the tool if it had deleted itself.
However, I do get irritated everytime I run Spacemonger (free tool) to check
who's eating my/(other peoples') disk space and always find MRT.EXE sitting
there in %SystemRoot%\System32...
Could you (or you all other reading this thread) check your and a couple of
your friends' computers for the presence of %SystemRoot%\System32\MRT.EXE ?

Many thanks,
Costin


"Steve Riley [MSFT]" wrote:

> I can understand the desire to be in control of the software that you run on
> your computer, but in this particular case I'd ask that you not worry about
> the MSRT. It installs with each monthly update, runs the next time you
> reboot, then deletes itself. Worldwide the tool has executed over two
> billion times and has removed about 60 million infections from 25 million
> computers. So while it's admirable that you're practicing safe computing and
> have avoided malware, we believe that one way to help reduce everyone's
> exposure is to have a consistent, repeatable scan for some of the most
> dangerous stuff happen automatically. Think of it as a public service for
> all computers running Windows.
>
> --
> Steve Riley
> steve.riley@microsoft.com
> http://blogs.technet.com/steriley
> http://www.protectyourwindowsnetwork.com
>
>
>
> "Costin Gusa" <Costin Gusa@discussions.microsoft.com> wrote in message
> news:5BCC64B2-8E3B-4604-BB55-49FD75B98D17@microsoft.com...
> > Does anyone know how to permanently decline installation of Malware
> > Removal
> > Tool ? In 15 years of computer use I have never been infected and I don't
> > need the MRT to be offered as an update. If i click 'don't show this
> > update
> > again', it will dissapear, but it will prompt me to install the previous'
> > month MRT, and then I would have to repeat this for all months since MRT
> > has
> > been released. I want to decline this tool ONCE and FOREVER!
> > No, disabling automatic updates is not an option.
> > And no, using WSUS for a approving updates for a single home computer is
> > also not an option.
>

 

[Kerry Brown]

Set Windows Updates to off, then check manually. This gives you almost total
control over what gets downloaded. The only things that will be downloaded
without approval are updates to WU itself when you check for new updates.

If you are that worried about a 16 MB file "eating" disk space then you have
other problems with the system. There are far more egregious "eaters" of
disk space than MRT. If you are down to where one 16 MB file is a problem
the system is already disastrously low on resources.

--
Kerry Brown
MS-MVP - Windows Desktop Experience: Systems Administration
http://www.vistahelp.ca/phpBB2/



"Costin Gusa" <CostinGusa@discussions.microsoft.com> wrote in message
newsEA0BD0A-DA75-4CDE-ABC4-D1A6E08DB0B2@microsoft.com...
> Hi Steve,
>
> I would understand and tolerate the tool if it had deleted itself.
> However, I do get irritated everytime I run Spacemonger (free tool) to
> check
> who's eating my/(other peoples') disk space and always find MRT.EXE
> sitting
> there in %SystemRoot%\System32...
> Could you (or you all other reading this thread) check your and a couple
> of
> your friends' computers for the presence of %SystemRoot%\System32\MRT.EXE
> ?
>
> Many thanks,
> Costin
>
>
> "Steve Riley [MSFT]" wrote:
>
>> I can understand the desire to be in control of the software that you run
>> on
>> your computer, but in this particular case I'd ask that you not worry
>> about
>> the MSRT. It installs with each monthly update, runs the next time you
>> reboot, then deletes itself. Worldwide the tool has executed over two
>> billion times and has removed about 60 million infections from 25 million
>> computers. So while it's admirable that you're practicing safe computing
>> and
>> have avoided malware, we believe that one way to help reduce everyone's
>> exposure is to have a consistent, repeatable scan for some of the most
>> dangerous stuff happen automatically. Think of it as a public service for
>> all computers running Windows.
>>
>> --
>> Steve Riley
>> steve.riley@microsoft.com
>> http://blogs.technet.com/steriley
>> http://www.protectyourwindowsnetwork.com
>>
>>
>>
>> "Costin Gusa" <Costin Gusa@discussions.microsoft.com> wrote in message
>> news:5BCC64B2-8E3B-4604-BB55-49FD75B98D17@microsoft.com...
>> > Does anyone know how to permanently decline installation of Malware
>> > Removal
>> > Tool ? In 15 years of computer use I have never been infected and I
>> > don't
>> > need the MRT to be offered as an update. If i click 'don't show this
>> > update
>> > again', it will dissapear, but it will prompt me to install the
>> > previous'
>> > month MRT, and then I would have to repeat this for all months since
>> > MRT
>> > has
>> > been released. I want to decline this tool ONCE and FOREVER!
>> > No, disabling automatic updates is not an option.
>> > And no, using WSUS for a approving updates for a single home computer
>> > is
>> > also not an option.
>>

 

[Lon]

Its 16.5 Mbyte. You folks running on small drives?

Doesn't it have the dont show this update again checkbox?



Costin Gusa wrote:
> Hi Steve,
>
> I would understand and tolerate the tool if it had deleted itself.
> However, I do get irritated everytime I run Spacemonger (free tool) to check
> who's eating my/(other peoples') disk space and always find MRT.EXE sitting
> there in %SystemRoot%\System32...
> Could you (or you all other reading this thread) check your and a couple of
> your friends' computers for the presence of %SystemRoot%\System32\MRT.EXE ?
>
> Many thanks,
> Costin
>
>
> "Steve Riley [MSFT]" wrote:
>
>> I can understand the desire to be in control of the software that you run on
>> your computer, but in this particular case I'd ask that you not worry about
>> the MSRT. It installs with each monthly update, runs the next time you
>> reboot, then deletes itself. Worldwide the tool has executed over two
>> billion times and has removed about 60 million infections from 25 million
>> computers. So while it's admirable that you're practicing safe computing and
>> have avoided malware, we believe that one way to help reduce everyone's
>> exposure is to have a consistent, repeatable scan for some of the most
>> dangerous stuff happen automatically. Think of it as a public service for
>> all computers running Windows.
>>
>> --
>> Steve Riley
>> steve.riley@microsoft.com
>> http://blogs.technet.com/steriley
>> http://www.protectyourwindowsnetwork.com
>>
>>
>>
>> "Costin Gusa" <Costin Gusa@discussions.microsoft.com> wrote in message
>> news:5BCC64B2-8E3B-4604-BB55-49FD75B98D17@microsoft.com...
>>> Does anyone know how to permanently decline installation of Malware
>>> Removal
>>> Tool ? In 15 years of computer use I have never been infected and I don't
>>> need the MRT to be offered as an update. If i click 'don't show this
>>> update
>>> again', it will dissapear, but it will prompt me to install the previous'
>>> month MRT, and then I would have to repeat this for all months since MRT
>>> has
>>> been released. I want to decline this tool ONCE and FOREVER!
>>> No, disabling automatic updates is not an option.
>>> And no, using WSUS for a approving updates for a single home computer is
>>> also not an option.

 

[Costin Gusa]

"Kerry Brown" wrote:

> Set Windows Updates to off, then check manually. This gives you almost total
> control over what gets downloaded. The only things that will be downloaded
> without approval are updates to WU itself when you check for new updates.
>

I'm sorry I am forced to repeat myself to people who cannot read:
"No, disabling automatic updates is not an option. "

> If you are that worried about a 16 MB file "eating" disk space then you have
> other problems with the system. There are far more egregious "eaters" of
> disk space than MRT. If you are down to where one 16 MB file is a problem
> the system is already disastrously low on resources.


********************************************************
You are completely offtopic. RE-READ my posts and find the questions (there
are 2 - "TWO") I asked for.
********************************************************

Offtopic: Yes, I am worried about the disk space, but since you have already
thrown down the gauntlet: those 16MB of free space are MINE, i have PAID for
them and therefore is my RIGHT to KNOW how my MONEY are used.
Upgrading storage just because you are unable to identify the cause for
disk consumption? Replacing things (read 'from a small drive to a larger
drive') because you simply cannot handle them and not because of real storage
needs? No thanks. At least not until my brain is still performing well.
FYI, my system volume has 30Gb with over 20Gb free.

[old crap deleted]

 

[Kerry Brown]

I know you said that disabling automatic updates isn't an option. I was
trying to tell you it is the only option that will accomplish what you want
to do.

Life is about choices. You don't always get to choose which options are
available. You do get to choose which option out of the available ones you
want to use. Pick an available option.

1. Disable windows updates. This puts the onus on you to check for updates,
then pick which ones to install.

2. Choose the option to notify you when updates are available. When notified
peruse the list, pick the updates you want, and decline the rest.

3. Enable automatic updates and live the fact that once a month you will
have to delete mrt.exe to reclaim 16 MB of hard drive space.

Those are the available choices. You may not like the choices but those are
the choices available.

Personally I think you're crazy for declining mrt. The time and disk space
involved are minimal. Just because none of your antimalware programs have
ever detected an infection doesn't mean you haven't been infected or won't
be infected at some future date. Allowing mrt to do it's thing once a month
adds another level of protection for the cost of a few seconds of time.

--
Kerry Brown
MS-MVP - Windows Desktop Experience: Systems Administration
http://www.vistahelp.ca/phpBB2/



"Costin Gusa" <CostinGusa@discussions.microsoft.com> wrote in message
news:77DE868B-FBB4-4308-B9C5-502889E8DF3A@microsoft.com...
> "Kerry Brown" wrote:
>
>> Set Windows Updates to off, then check manually. This gives you almost
>> total
>> control over what gets downloaded. The only things that will be
>> downloaded
>> without approval are updates to WU itself when you check for new updates.
>>
>
> I'm sorry I am forced to repeat myself to people who cannot read:
> "No, disabling automatic updates is not an option. "
>
>> If you are that worried about a 16 MB file "eating" disk space then you
>> have
>> other problems with the system. There are far more egregious "eaters" of
>> disk space than MRT. If you are down to where one 16 MB file is a problem
>> the system is already disastrously low on resources.
>
>
> ********************************************************
> You are completely offtopic. RE-READ my posts and find the questions
> (there
> are 2 - "TWO") I asked for.
> ********************************************************
>
> Offtopic: Yes, I am worried about the disk space, but since you have
> already
> thrown down the gauntlet: those 16MB of free space are MINE, i have PAID
> for
> them and therefore is my RIGHT to KNOW how my MONEY are used.
> Upgrading storage just because you are unable to identify the cause for
> disk consumption? Replacing things (read 'from a small drive to a larger
> drive') because you simply cannot handle them and not because of real
> storage
> needs? No thanks. At least not until my brain is still performing well.
> FYI, my system volume has 30Gb with over 20Gb free.
>
> [old crap deleted]

 

[Costin Gusa]

"Kerry Brown" wrote:

> I know you said that disabling automatic updates isn't an option. I was
> trying to tell you it is the only option that will accomplish what you want
> to do.
>
> Life is about choices. You don't always get to choose which options are
> available. You do get to choose which option out of the available ones you
> want to use. Pick an available option.
>
> 1. Disable windows updates. This puts the onus on you to check for updates,
> then pick which ones to install.
>
> 2. Choose the option to notify you when updates are available. When notified
> peruse the list, pick the updates you want, and decline the rest.
>
> 3. Enable automatic updates and live the fact that once a month you will
> have to delete mrt.exe to reclaim 16 MB of hard drive space.
>
> Those are the available choices. You may not like the choices but those are
> the choices available.
>

I completely agree with that. I came here hoping for a less than obvious
solution, other than those three (which by the way, #2 throws you into a
semi-loop declining may, then april, then march, and so on back to the
first-born son)

> Personally I think you're crazy for declining mrt. The time and disk space
> involved are minimal. Just because none of your antimalware programs have
> ever detected an infection doesn't mean you haven't been infected or won't
> be infected at some future date. Allowing mrt to do it's thing once a month
> adds another level of protection for the cost of a few seconds of time.
>

Maybe I am
Forgot to mention that beside not catching any virus I also have never used
an antivirus/antimalware product except for finger-counted occasions (I do
admit that for a couple of times I have scanned some exotic executable when
virtual machine testing was not and option). Don't read me wrong: I've never
used them _for me_ , but I am forced to keep one AV product alive in the
company network.
I know allowing mrt once a month it's generally a good thing, thinking about
the millions of innocents. I personally don't need mrt I just happen to be
an exception, and have to live with that.

 

[Ben M. Schorr - MVP (OneNote)]

Well, personally I think it's foolish to worry about it and sort of
arrogant to assume that any machine connected to a network (especially
the Internet) could never get infected. I've never been hit by a bus
but I still stop and look both ways before crossing the street.

However, if it's really that important to you why not write a script
that deletes the file and use Scheduled Tasks to execute it every 2nd
Wednesday.

--
-Ben-
Ben M. Schorr, MVP
Roland Schorr & Tower
http://www.rolandschorr.com
http://www.officeforlawyers.com



"Costin Gusa" <CostinGusa@discussions.microsoft.com> wrote in message
newsEA0BD0A-DA75-4CDE-ABC4-D1A6E08DB0B2@microsoft.com:

> Hi Steve,
>
> I would understand and tolerate the tool if it had deleted itself.
> However, I do get irritated everytime I run Spacemonger (free tool) to check
> who's eating my/(other peoples') disk space and always find MRT.EXE sitting
> there in %SystemRoot%\System32...
> Could you (or you all other reading this thread) check your and a couple of
> your friends' computers for the presence of %SystemRoot%\System32\MRT.EXE ?
>
> Many thanks,
> Costin
>
>
> "Steve Riley [MSFT]" wrote:
>
>
> > I can understand the desire to be in control of the software that you run on
> > your computer, but in this particular case I'd ask that you not worry about
> > the MSRT. It installs with each monthly update, runs the next time you
> > reboot, then deletes itself. Worldwide the tool has executed over two
> > billion times and has removed about 60 million infections from 25 million
> > computers. So while it's admirable that you're practicing safe computing and
> > have avoided malware, we believe that one way to help reduce everyone's
> > exposure is to have a consistent, repeatable scan for some of the most
> > dangerous stuff happen automatically. Think of it as a public service for
> > all computers running Windows.
> >
> > --
> > Steve Riley
> > steve.riley@microsoft.com
> > http://blogs.technet.com/steriley
> > http://www.protectyourwindowsnetwork.com
> >
> >
> >
> > "Costin Gusa" <Costin Gusa@discussions.microsoft.com> wrote in message
> > news:5BCC64B2-8E3B-4604-BB55-49FD75B98D17@microsoft.com...
>
> > > Does anyone know how to permanently decline installation of Malware
> > > Removal
> > > Tool ? In 15 years of computer use I have never been infected and I don't
> > > need the MRT to be offered as an update. If i click 'don't show this
> > > update
> > > again', it will dissapear, but it will prompt me to install the previous'
> > > month MRT, and then I would have to repeat this for all months since MRT
> > > has
> > > been released. I want to decline this tool ONCE and FOREVER!
> > > No, disabling automatic updates is not an option.
> > > And no, using WSUS for a approving updates for a single home computer is
> > > also not an option.
>
> >

 

[Costin Gusa]

"Ben M. Schorr - MVP (OneNote)" wrote:

> Well, personally I think it's foolish to worry about it and sort of
> arrogant to assume that any machine connected to a network (especially
> the Internet) could never get infected.

true, except that I have never said that.
I'm not worrying about it, I am DISTURBED by it's presence and ANNOYED by
automatic updates behaviour in relation with it's approval.

> I've never been hit by a bus
> but I still stop and look both ways before crossing the street.

yes, and i've never been infected but i still turn on firewall, execute
non-trusted/testing code on virtual machines without network interfaces, surf
the internet with other browser than internet explorer (firefox), with
javascript turned off (noscript extension), with my account deprived of
privileges (runasadmin)

>
> However, if it's really that important to you why not write a script
> that deletes the file and use Scheduled Tasks to execute it every 2nd
> Wednesday.
>

that would only solve the effect but not remove the cause.
from http://support.microsoft.com/kb/890830

"How to remove the Malicious Software Removal Tool
The Malicious Software Removal Tool does not use an installer. Typically,
when you run the Malicious Software Removal Tool, it creates a randomly named
temporary directory on the root drive of the computer"

....but it doesn't say anything about %systemroot%\system32\mrt.exe !!!

[...]