PCbanter

PCbanter (http://www.pcbanter.net/index.php)
-   Windows XP Help and Support (http://www.pcbanter.net/forumdisplay.php?f=15)
-   -   Malicious Software Removal Tool MRT.exe bogus infected files? (http://www.pcbanter.net/showthread.php?t=1095597)

Ron Hardin June 11th 16 04:12 PM

Malicious Software Removal Tool MRT.exe bogus infected files?
 
MRT.exe, if you run it explicitly (say download it
after the second Tuesday from Microsoft instead of
getting it from Windows Update) during its scan
reports 4 infected files, but at the end reports
no files infected.

Apparently it does this on any XP machine.

I'd guess some standard files match the virus
pattern and they ignore those matches at the end.

It's a little quick but it seems to be in the
JavaScript general area of quick scan.
--


On the internet, nobody knows you're a jerk.

JJ[_11_] June 11th 16 05:46 PM

Malicious Software Removal Tool MRT.exe bogus infected files?
 
On Sat, 11 Jun 2016 11:12:23 -0400, Ron Hardin wrote:
MRT.exe, if you run it explicitly (say download it
after the second Tuesday from Microsoft instead of
getting it from Windows Update) during its scan
reports 4 infected files, but at the end reports
no files infected.


It's glitch that proofs anti viruses use white-listing.

Ron Hardin June 11th 16 08:40 PM

Malicious Software Removal Tool MRT.exe bogus infected files?
 
JJ wrote:

On Sat, 11 Jun 2016 11:12:23 -0400, Ron Hardin wrote:
MRT.exe, if you run it explicitly (say download it
after the second Tuesday from Microsoft instead of
getting it from Windows Update) during its scan
reports 4 infected files, but at the end reports
no files infected.


It's glitch that proofs anti viruses use white-listing.


That's not a mistake. The legitimate files do something that would be suspicious
in an imported file so they check for it. If it's the legitimate file, they
ignore it.

But that's guesswork.

I can't run the modern AVG antivirus because it quarantines some .dll components
of the old Cygwin version I use, which defeats the whole point of the computer.

That needs whitelisting.
--


On the internet, nobody knows you're a jerk.


All times are GMT +1. The time now is 08:11 AM.

Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright © 2004 - 2006 PCbanter
Comments are property of their posters