Forum Home
Press F1
 
Thread ID: 139335 2015-04-16 06:43:00 Now that my previous problem is solved.................... Billy T (70) Press F1
Post ID Timestamp Content User
1398696 2015-04-16 06:43:00 Hi Team

I've been looking at an icon at the top of my screen, named Win-MSR, which I have always taken to be the entry point for the Windows Malicious Software removal tool, and I was contemplating giving it a whirl, then a little voice inside my head muttered: " 'expletive deleted me,' don't you ever learn?"

Studied more closely, the icon looks like a coffin sliding out of a computer screen, which gave me a second dose of the wib-wobs! That icon opens C:\WINDOWS\system32\MRT\mrtstub.exe, which a quick search identified as malware. A more prolonged search produced the same result, but also brought up references to the warm and friendly Windows Tool above. Then I found that the Windows tool was MSR.exe, so at this point I sat down in a corner and began sucking my thumb!

It has not been identified as a threat by any AV, and it was neither indicated nor removed during my recent saga involving Cryptoprevent, so what is the real oil on this?

Cheers

Billy 8-{) :badpc:
Billy T (70)
1398697 2015-04-16 07:33:00 Go into its properties if its signed by MS it's safe. Some sites say it is part of MRT Speedy Gonzales (78)
1398698 2015-04-16 11:01:00 Mr T Stub and Mr T exe P can be all over the place. They the remains when Ms R was cleaning but probably got sidetracked with a phone call and forgot to clean up afterwards.

If you want to see treasure, unhide the contents and you may see $ inside too.

I'd safely remove all traces of these folders with those contents as they usually do get automatically deleted but not if interrupted. Many programs don't self clean on interruption and do similar messes.

Mrtstub.exe and mrt.exe_p for those who search.

Cheers,

KK
Kame (312)
1398699 2015-04-17 09:29:00 Don't know what you bin smokin Kame when youse writ that, but you lef me behind 'bout tree days ago!

Had an MS KB file attached 'n all, lookin fr'all th world like the real thing too!

Gunna open it in a text file an see wot it sez frit self.

Cheers

Billy 8-{)

Check: Windows KB90830-V5.18.exe
Billy T (70)
1398700 2015-04-17 09:54:00 When MSR runs, I believe the folder and the files are created as a temporary storage. They are suppose to be automatically removed after MSR finishes but if MSR is interrupted it forgets to do that.

Safe to remove manually if you do encounter them.

Cheers,

KK
Kame (312)
1