MSRT

I got the msrt tool as usual with today's updates.
This is the scan report;
"No infection found.
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
13:38:49 2016
Return code: 0 (0x0)"

What the dickens is that "Successfully Submitted Heartbeat Report"? I've
never seen that before.

Ed

"Ed Cryer" schreef in bericht
...
I got the msrt tool as usual with today's updates.
This is the scan report;
"No infection found.
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
13:38:49 2016
Return code: 0 (0x0)"

What the dickens is that "Successfully Submitted Heartbeat Report"? I've
never seen that before.

Ed





It's your free medical diagnose.





--


|\ /|
| \/ |@rk
\../
\/os

Ed Cryer wrote:
I got the msrt tool as usual with today's updates.
This is the scan report;
"No infection found.
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
13:38:49 2016
Return code: 0 (0x0)"

What the dickens is that "Successfully Submitted Heartbeat Report"? I've
never seen that before.

Ed



I always hide that update as it never finds anything and takes a long
time to scan.

--
Z

On Wed, 10 Aug 2016 14:05:37 +0100, Ed Cryer wrote:
I got the msrt tool as usual with today's updates.
This is the scan report;
"No infection found.
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
13:38:49 2016
Return code: 0 (0x0)"

What the dickens is that "Successfully Submitted Heartbeat Report"? I've
never seen that before.

Ed

What a malicious thing to do...

On Wed, 10 Aug 2016 16:20:07 +0200, Z wrote:

I always hide that update as it never finds anything and takes a long
time to scan.

And you don't have time? I always let it be. Can't hurt.

--
s|b

Ed Cryer wrote:
I got the msrt tool as usual with today's updates.
This is the scan report;
"No infection found.
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
13:38:49 2016
Return code: 0 (0x0)"

What the dickens is that "Successfully Submitted Heartbeat Report"? I've
never seen that before.

Ed



I decided to run a manual full scan;
"No infection found.
Successfully Submitted MAPS Report
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
19:29:10 2016
Return code: 0 (0x0)"

Submitted both a Heartbeat & a MAPS report.

It's phoning home. It's speaking to MS.
Who gave it permission to do that?

Ed

On 10/08/2016 20:02, Ed Cryer wrote:


Submitted both a Heartbeat & a MAPS report.

It's phoning home. It's speaking to MS.
Who gave it permission to do that?

Ed



Next month run it in offline mode to see if it still calls my house in
Redmond!!!!! Worth a try.

--

If you want to filter all of my posts then please read this article:
https://support.mozilla.org/en-US/kb/organize-your-messages-using-filters
In step 7 select "Delete"

With over 350 million devices now running Windows 10, customer
satisfaction is higher than any previous version of windows.

Wolf K wrote:
On 2016-08-10 15:02, Ed Cryer wrote:
Ed Cryer wrote:
I got the msrt tool as usual with today's updates.
This is the scan report;
"No infection found.
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
13:38:49 2016
Return code: 0 (0x0)"

What the dickens is that "Successfully Submitted Heartbeat Report"? I've
never seen that before.

Ed



I decided to run a manual full scan;
"No infection found.
Successfully Submitted MAPS Report
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
19:29:10 2016
Return code: 0 (0x0)"

Submitted both a Heartbeat & a MAPS report.

It's phoning home. It's speaking to MS.
Who gave it permission to do that?

Ed

You did, by running it.


I've been running it for years, and I always check the reports.
This is the first month it's done that.
What else have they amended to phone home?
They're putting into Win7 the nasty tricks they put in Win10.

Ed

Ed Cryer wrote:
Wolf K wrote:
On 2016-08-10 15:02, Ed Cryer wrote:
Ed Cryer wrote:
I got the msrt tool as usual with today's updates.
This is the scan report;
"No infection found.
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed
Aug 10
13:38:49 2016
Return code: 0 (0x0)"

What the dickens is that "Successfully Submitted Heartbeat Report"?
I've
never seen that before.

Ed



I decided to run a manual full scan;
"No infection found.
Successfully Submitted MAPS Report
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
19:29:10 2016
Return code: 0 (0x0)"

Submitted both a Heartbeat & a MAPS report.

It's phoning home. It's speaking to MS.
Who gave it permission to do that?

Ed

You did, by running it.


I've been running it for years, and I always check the reports.
This is the first month it's done that.
What else have they amended to phone home?
They're putting into Win7 the nasty tricks they put in Win10.

Ed



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MpGears

SOAP:https://spynet2.microsoft.com/AntiMa...eportSrvc.asmx
SOAP:https://spynetalt.microsoft.com/Anti...eportSrvc.asmx
REST:https://spynet2.microsoft.com/spyNet.svc/submitReport
REST:https://spynetalt.microsoft.com/spyNet.svc/submitReport
BOND:https://spynet2.microsoft.com/spyNet...d/submitreport
BOND:https://spynetalt.microsoft.com/spyN...d/submitreport

*******

This info could well be out of date, but there is at least
one registry key to control it.

http://support.microsoft.com/kb/891716/

A3. An administrator can choose to disable the
infection-reporting component of the tool by adding
the following registry key value to computers. If
this registry key value is set, the tool will not
report infection information back to Microsoft.

Subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MRT
Entry name: \DontReportInfectionInformation
Type: REG_DWORD
Value data: 1

Since the MRT key doesn't exist, maybe this isn't a supported
method any more ?

And the recommendation near the end of this article, is
to use the Firewall.

http://www.ghacks.net/2007/12/16/pre...-phoning-home/

The EULA for MSRT is worded to allow just about anything :-)

HTH,
Paul

FredW wrote:
On Wed, 10 Aug 2016 21:22:57 +0100, Ed Cryer
wrote:
Wolf K wrote:
On 2016-08-10 15:02, Ed Cryer wrote:
Ed Cryer wrote:
I got the msrt tool as usual with today's updates.
This is the scan report;
"No infection found.
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
13:38:49 2016
Return code: 0 (0x0)"

What the dickens is that "Successfully Submitted Heartbeat Report"? I've
never seen that before.

I decided to run a manual full scan;
"No infection found.
Successfully Submitted MAPS Report
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
19:29:10 2016
Return code: 0 (0x0)"

Submitted both a Heartbeat & a MAPS report.

It's phoning home. It's speaking to MS.
Who gave it permission to do that?

Ed

You did, by running it.


I've been running it for years, and I always check the reports.
This is the first month it's done that.

Msrt reports every month to the home base.
It has done so since its beginning.


What else have they amended to phone home?
They're putting into Win7 the nasty tricks they put in Win10.

The trick - as you call it - has always been there.
Amazing that you did not notice earlier.


In previous logs they didn't mention it.
Now they do. Why?

No infection found.
Microsoft Windows Malicious Software Removal Tool Finished On Wed May 11
15:46:32 2016
Return code: 0 (0x0)

No infection found.
Microsoft Windows Malicious Software Removal Tool Finished On Wed Jun 15
14:20:01 2016
Return code: 0 (0x0)

No infection found.
Microsoft Windows Malicious Software Removal Tool Finished On Wed Jul 13
09:31:44 2016
Return code: 0 (0x0)

Ed

Ed Cryer wrote:
I got the msrt tool as usual with today's updates.
This is the scan report;
"No infection found.
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
13:38:49 2016
Return code: 0 (0x0)"

What the dickens is that "Successfully Submitted Heartbeat Report"? I've
never seen that before.

Ed




Thanks for posting the latest MS "feature" that's for our "benefit" ...

Did you agree to the EULA for the MSRT version that was released in July
? Apparently, that's when MS "changed" things. Never read it here so,
that's purely expectorating

The following article explains MAPS and Heartbeat -

MAPS in the cloud: How can it help your enterprise?
https://blogs.technet.microsoft.com/...ur-enterprise/

What is MAPS?

The Microsoft Active Protection Service is the cloud service that enables:

Clients to report key telemetry events and suspicious malware queries to the cloud
Cloud to provide real-time blocking responses back to the client
The MAPS service is available for all Microsoft’s antivirus products and services,
including:

Microsoft Forefront Endpoint Protection
Microsoft Security Essentials
System Center Endpoint Protection
Windows Defender on Windows 8 and later versions

snippoid

Heartbeat – to check the system’s pulse to know if the antivirus application is
still running, and if it has the updated version

Those new entries also appeared in the MRT.log for the August release of
the MSRT on my Win 7 box, too.

As the Stones use to say ... " Hey, you, get offa MY cloud "

MowGreen
================
*-343-* FDNY
Never Forgotten
================

MowGreen expressed precisely :

[...]

As the Stones use to say ... " Hey, you, get offa MY cloud "

Okay, now I'll have to get that song 'outta my head'. I haven't seen a
post from you for quite a while, maybe just because I don't read where
you post. Good to see your nym again.

MowGreen wrote:
Ed Cryer wrote:
I got the msrt tool as usual with today's updates.
This is the scan report;
"No infection found.
Successfully Submitted Heartbeat Report
Microsoft Windows Malicious Software Removal Tool Finished On Wed Aug 10
13:38:49 2016
Return code: 0 (0x0)"

What the dickens is that "Successfully Submitted Heartbeat Report"? I've
never seen that before.

Ed




Thanks for posting the latest MS "feature" that's for our "benefit" ...

Did you agree to the EULA for the MSRT version that was released in July
? Apparently, that's when MS "changed" things. Never read it here so,
that's purely expectorating

The following article explains MAPS and Heartbeat -

MAPS in the cloud: How can it help your enterprise?
https://blogs.technet.microsoft.com/...ur-enterprise/


What is MAPS?

The Microsoft Active Protection Service is the cloud service that
enables:

Clients to report key telemetry events and suspicious malware queries
to the cloud
Cloud to provide real-time blocking responses back to the client
The MAPS service is available for all Microsoft’s antivirus products
and services,
including:

Microsoft Forefront Endpoint Protection
Microsoft Security Essentials
System Center Endpoint Protection
Windows Defender on Windows 8 and later versions

snippoid

Heartbeat – to check the system’s pulse to know if the antivirus
application is
still running, and if it has the updated version

Those new entries also appeared in the MRT.log for the August release of
the MSRT on my Win 7 box, too.

As the Stones use to say ... " Hey, you, get offa MY cloud "

MowGreen
================
*-343-* FDNY
Never Forgotten
================


Thanks for that. I guess it's my fault for not reading the EULA.
I wonder what else I may have said "yes" to.
I have a suspicion that MS have a new strategy for pushing us over to Win10.
In a nutshell; make Win7 as undesirable as Win10.

Ed

FromTheRafters wrote:
MowGreen expressed precisely :

[...]

As the Stones use to say ... " Hey, you, get offa MY cloud "

Okay, now I'll have to get that song 'outta my head'. I haven't seen a
post from you for quite a while, maybe just because I don't read where
you post. Good to see your nym again.


TY. I keep an extremely low profile and post very little these days as
MS has decided that

Uno - their MVPS should be cheerleaders and/or "evangelists"
Dos - their Users should not be allowed to "muck" with their latest OS
unless they purchase a Pro/Enterprise edition
Tres - their future in desktop OS has almost reached the end o' the road

Yo, MS " take this cloud and shove it "

MowGreen
================
*-343-* FDNY
Never Forgotten
================