MSRT, how do you use it?

Learn about Computer Security General Security Questions and Comments
#1

Hi,
Been reading about the new worm going around. So I thought I’d do a double dose of the recent MSRT.

I’ve been a little worried of late as I’m playing around with Win 7, dual boot, a bad time considering a record breaking worm is crawlin about.

I allow MSRT to run on patch Tuesday, and when it does, boy it sure goes fast.

But today I downloaded the Jan version and ran it, again , once on my C drive, took along time, and then the quick scan, still took awhile. Note however, I ran them in safe mode (things go slower in safe mode), but still, I was stunned at how long it took, while just using it through the normal ‘update deal’ nothing seems to happen. In fact, I was able to view the results of today’s scan, while never even getting any notice at all during ‘update’ scans, if a scan occurred.

Have I been using this tool wrong all this time? Lol. Maybe I was supposed to use the exe.

FYI, to let you know my ability, while not bad, in fact not to bad of a debugger and getting better, I was one who clicked ‘allow’ during my first CLT. So I can get it wrong.

Just wondered what you guy’s know about it (the MSRT thing, I did get the CLT down).

Happy to report I’m clean though. Despite myself being a manual type ‘auto’ updater on all my software ('cept for a/v).

#2

Not 100% sure on this but from what ive observed when you do the MSRT update and it does a scan it only seems to scan whats actually active at that time(process wise)

From microsoft

The tool focuses on the detection and removal of active malicious software. Active malicious software is malicious software that is currently running on the computer. The tool cannot remove malicious software that is not running. However, an antivirus product can perform this task.

#3

Ok, that’s what I figured, that it scanned running proc.
I just had never used it ‘intentionally’.
On another puter in the house, I found a log file from the Jan scan that was only used during the download, not manually. So it is doing something.

I never read anywhere to use it manually. I gotta start reading directions.