890830 MSRT keeps wanting to download

I keep getting a prompt to download the Malicious Software Removal Tool for
October, I go to Microsoft Update to download it, click on Run etc. Shortly
after I get a new prompt to download the same tool ! Update history shows it
as downloaded numerous times,my registry only shows September as last tool.
After I have clicked "Run" nothing else happens, is this correct.

Hi Alan,

The registry key, where versions of MSRT are stored, is probably corrupted.
First you should clean the update database:

Click Start, Run, type: cmd and press Enter

--> net stop WuAuServ

--> Click Start, Run, type: %windir% and press
Enter.

--> In the opened folder, rename the folder
SoftwareDistribution to SDold.

--> Click Start, Run, type: cmd and press Enter.

--> net start WuAuServ.

Then open the registry and clean the current version entry:

Click Start, Run type regedit and press Enter

--> open the registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT

--> right click MRT key and choose Export

--> name the key MRT and save it on the desktop

--> remove all the entries, except the Default entry

--> download the tool from the link below and save
it to the disk:

MicrosoftR WindowsR Malicious Software Removal Tool (KB890830)

http://www.microsoft.com/downloads/d...displaylang=en

--> run the tool from your computer

If this does not help, you can try installing it in Safe mode (restart your
computer, press F8, select Safe mode and press Enter).

Regards,

Anton Pegan

"Alan B" <Alan > wrote in message
news:A5BCF62C-72D3-42FE-985D-...
>I keep getting a prompt to download the Malicious Software Removal Tool for
> October, I go to Microsoft Update to download it, click on Run etc.
> Shortly
> after I get a new prompt to download the same tool ! Update history shows
> it
> as downloaded numerous times,my registry only shows September as last
> tool.
> After I have clicked "Run" nothing else happens, is this correct.

Hi Anton,
I have tried that and for a few hours it seemed to have done the trick.
However... I have just had a prompt to download updates and guess what it is
for KB890830, I downloaded it again and two minutes later I get another
prompt !
Any more ideas ?

many thanks,
Alan B

"Anton Pegan" wrote:

> Hi Alan,
>
> The registry key, where versions of MSRT are stored, is probably corrupted.
> First you should clean the update database:
>
> Click Start, Run, type: cmd and press Enter
>
> --> net stop WuAuServ
>
> --> Click Start, Run, type: %windir% and press
> Enter.
>
> --> In the opened folder, rename the folder
> SoftwareDistribution to SDold.
>
> --> Click Start, Run, type: cmd and press Enter.
>
> --> net start WuAuServ.
>
> Then open the registry and clean the current version entry:
>
> Click Start, Run type regedit and press Enter
>
> --> open the registry key
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT
>
> --> right click MRT key and choose Export
>
> --> name the key MRT and save it on the desktop
>
> --> remove all the entries, except the Default entry
>
> --> download the tool from the link below and save
> it to the disk:
>
> MicrosoftR WindowsR Malicious Software Removal Tool (KB890830)
>
> http://www.microsoft.com/downloads/d...displaylang=en
>
> --> run the tool from your computer
>
> If this does not help, you can try installing it in Safe mode (restart your
> computer, press F8, select Safe mode and press Enter).
>
> Regards,
>
> Anton Pegan
>
> "Alan B" <Alan > wrote in message
> news:A5BCF62C-72D3-42FE-985D-...
> >I keep getting a prompt to download the Malicious Software Removal Tool for
> > October, I go to Microsoft Update to download it, click on Run etc.
> > Shortly
> > after I get a new prompt to download the same tool ! Update history shows
> > it
> > as downloaded numerous times,my registry only shows September as last
> > tool.
> > After I have clicked "Run" nothing else happens, is this correct.
>
>
>

Hi Alan,

If you already saved the update on the disk, run the computer in safe mode
(restart your computer, press F8, select Safe mode and press Enter). Logon
to the computer, using the local administrator account. Rename the folder
C:\Windows\SoftwareDistribution and run the tool from your computer. It
should run a system scan. After the scan completes, open the registry editor
(Start/Run/regedit) and open
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT. On the right side
you should see the following values:

"EULA"=dword:00000001

"Version"="79e385d0-5d28-4743-aeb3-ed101c828abd"

"GUID"="E4440C8D-656C-4495-9F34-C83E4B0ECA7B"

If the values do not match, just change the values to the ones above. Then
restart your computer, open the Windows Update site and run an update check.

If the tool scanned the computer successfully and it is reoffered again, you
can click to select Do not offer this update again.

If the tool did not scan the computer successfully, try installing it from
the Windows Update site and check the C:\Windows\WindowsUpdate.log for
errors.

Regards,

Anton Pegan

"Alan B" <> wrote in message
news:94CC9732-5460-4205-BB6B-...
> Hi Anton,
> I have tried that and for a few hours it seemed to have done the trick.
> However... I have just had a prompt to download updates and guess what it
> is
> for KB890830, I downloaded it again and two minutes later I get another
> prompt !
> Any more ideas ?
>
> many thanks,
> Alan B
>
> "Anton Pegan" wrote:
>
>> Hi Alan,
>>
>> The registry key, where versions of MSRT are stored, is probably
>> corrupted.
>> First you should clean the update database:
>>
>> Click Start, Run, type: cmd and press Enter
>>
>> --> net stop WuAuServ
>>
>> --> Click Start, Run, type: %windir% and press
>> Enter.
>>
>> --> In the opened folder, rename the folder
>> SoftwareDistribution to SDold.
>>
>> --> Click Start, Run, type: cmd and press Enter.
>>
>> --> net start WuAuServ.
>>
>> Then open the registry and clean the current version entry:
>>
>> Click Start, Run type regedit and press Enter
>>
>> --> open the registry key
>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT
>>
>> --> right click MRT key and choose Export
>>
>> --> name the key MRT and save it on the desktop
>>
>> --> remove all the entries, except the Default
>> entry
>>
>> --> download the tool from the link below and
>> save
>> it to the disk:
>>
>> MicrosoftR WindowsR Malicious Software Removal Tool (KB890830)
>>
>> http://www.microsoft.com/downloads/d...displaylang=en
>>
>> --> run the tool from your computer
>>
>> If this does not help, you can try installing it in Safe mode (restart
>> your
>> computer, press F8, select Safe mode and press Enter).
>>
>> Regards,
>>
>> Anton Pegan
>>
>> "Alan B" <Alan > wrote in message
>> news:A5BCF62C-72D3-42FE-985D-...
>> >I keep getting a prompt to download the Malicious Software Removal Tool
>> >for
>> > October, I go to Microsoft Update to download it, click on Run etc.
>> > Shortly
>> > after I get a new prompt to download the same tool ! Update history
>> > shows
>> > it
>> > as downloaded numerous times,my registry only shows September as last
>> > tool.
>> > After I have clicked "Run" nothing else happens, is this correct.
>>
>>
>>

Hi Anton,
I'm still having problems...
Had notification today for 2 downloads, 890830 and KB915597. 915597
installed ok.
Have saved a new 890830 to disk and tried running in safe mode. How do I
know if it IS scanning and when it is finished ?
I have then opened regedit and the only values are ;
(Default) REG_SZ (value not set)
GUID REG_SZ E10B4189-7FEC- .....etcetc
there is no "EULA" or "Version"
I have looked through the pages of WindowsUpdate.log and can't see anything
obvious. There is no evidence of the MRT being run only installed. I did see
a few messages ;
"WARNING: Update Service : Failed to update backup store."

Is this important ?

Not sure whether the problem is installation or if the tool actually runs,
if it doesn't run then will there be any records in the log or registry ?
PS I have been using a PC for years but delving in to the registry is a new
experience for me so apologies if I do not understand very well.
"Anton Pegan" wrote:

> Hi Alan,
>
> If you already saved the update on the disk, run the computer in safe mode
> (restart your computer, press F8, select Safe mode and press Enter). Logon
> to the computer, using the local administrator account. Rename the folder
> C:\Windows\SoftwareDistribution and run the tool from your computer. It
> should run a system scan. After the scan completes, open the registry editor
> (Start/Run/regedit) and open
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT. On the right side
> you should see the following values:
>
> "EULA"=dword:00000001
>
> "Version"="79e385d0-5d28-4743-aeb3-ed101c828abd"
>
> "GUID"="E4440C8D-656C-4495-9F34-C83E4B0ECA7B"
>
> If the values do not match, just change the values to the ones above. Then
> restart your computer, open the Windows Update site and run an update check.
>
> If the tool scanned the computer successfully and it is reoffered again, you
> can click to select Do not offer this update again.
>
> If the tool did not scan the computer successfully, try installing it from
> the Windows Update site and check the C:\Windows\WindowsUpdate.log for
> errors.
>
> Regards,
>
> Anton Pegan
>
> "Alan B" <> wrote in message
> news:94CC9732-5460-4205-BB6B-...
> > Hi Anton,
> > I have tried that and for a few hours it seemed to have done the trick.
> > However... I have just had a prompt to download updates and guess what it
> > is
> > for KB890830, I downloaded it again and two minutes later I get another
> > prompt !
> > Any more ideas ?
> >
> > many thanks,
> > Alan B
> >
> > "Anton Pegan" wrote:
> >
> >> Hi Alan,
> >>
> >> The registry key, where versions of MSRT are stored, is probably
> >> corrupted.
> >> First you should clean the update database:
> >>
> >> Click Start, Run, type: cmd and press Enter
> >>
> >> --> net stop WuAuServ
> >>
> >> --> Click Start, Run, type: %windir% and press
> >> Enter.
> >>
> >> --> In the opened folder, rename the folder
> >> SoftwareDistribution to SDold.
> >>
> >> --> Click Start, Run, type: cmd and press Enter.
> >>
> >> --> net start WuAuServ.
> >>
> >> Then open the registry and clean the current version entry:
> >>
> >> Click Start, Run type regedit and press Enter
> >>
> >> --> open the registry key
> >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT
> >>
> >> --> right click MRT key and choose Export
> >>
> >> --> name the key MRT and save it on the desktop
> >>
> >> --> remove all the entries, except the Default
> >> entry
> >>
> >> --> download the tool from the link below and
> >> save
> >> it to the disk:
> >>
> >> MicrosoftR WindowsR Malicious Software Removal Tool (KB890830)
> >>
> >> http://www.microsoft.com/downloads/d...displaylang=en
> >>
> >> --> run the tool from your computer
> >>
> >> If this does not help, you can try installing it in Safe mode (restart
> >> your
> >> computer, press F8, select Safe mode and press Enter).
> >>
> >> Regards,
> >>
> >> Anton Pegan
> >>
> >> "Alan B" <Alan > wrote in message
> >> news:A5BCF62C-72D3-42FE-985D-...
> >> >I keep getting a prompt to download the Malicious Software Removal Tool
> >> >for
> >> > October, I go to Microsoft Update to download it, click on Run etc.
> >> > Shortly
> >> > after I get a new prompt to download the same tool ! Update history
> >> > shows
> >> > it
> >> > as downloaded numerous times,my registry only shows September as last
> >> > tool.
> >> > After I have clicked "Run" nothing else happens, is this correct.
> >>
> >>
> >>
>
>
>

Hi Alan,

The tool works like an ordinary virus scanner. When you run the tool you
must first accept the agreement, then select Full Scan and click next (it
takes few minutes to scan the whole system). Did you select the
administrator account when you run your computer in safe mode? If not, try
running the tool in safe mode with the local administrator account. There is
obviously some permission issue, because the tool cannot update the registry
entries that it needs. This is what we can try:

1. Open the Notepad

2. Paste in this lines:




Windows Registry Editor Version 5.00



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT]

"EULA"=dword:00000001

"Version"="79e385d0-5d28-4743-aeb3-ed101c828abd"

"GUID"="E4440C8D-656C-4495-9F34-C83E4B0ECA7B"



3. Click Save As

4. In the File name dialog box write "MRT.reg" (do not forget the " signs)

5. Run your computer in Safe mode and log on with the administrator account

6. Double-click the file MRT.reg

Are there any errors? Also check the permissions on that registry key. Right
click on MRT an select Permissions and check if the System account has Full
control, Administrators group has full control (if not, assign them full
control permissions).

Regards,

Anton Pegan

"Alan B" <> wrote in message
news:E8098298-7A5F-4083-B779-...
> Hi Anton,
> I'm still having problems...
> Had notification today for 2 downloads, 890830 and KB915597. 915597
> installed ok.
> Have saved a new 890830 to disk and tried running in safe mode. How do I
> know if it IS scanning and when it is finished ?
> I have then opened regedit and the only values are ;
> (Default) REG_SZ (value not set)
> GUID REG_SZ E10B4189-7FEC- .....etcetc
> there is no "EULA" or "Version"
> I have looked through the pages of WindowsUpdate.log and can't see
> anything
> obvious. There is no evidence of the MRT being run only installed. I did
> see
> a few messages ;
> "WARNING: Update Service : Failed to update backup store."
>
> Is this important ?
>
> Not sure whether the problem is installation or if the tool actually runs,
> if it doesn't run then will there be any records in the log or registry ?
> PS I have been using a PC for years but delving in to the registry is a
> new
> experience for me so apologies if I do not understand very well.
> "Anton Pegan" wrote:
>
>> Hi Alan,
>>
>> If you already saved the update on the disk, run the computer in safe
>> mode
>> (restart your computer, press F8, select Safe mode and press Enter).
>> Logon
>> to the computer, using the local administrator account. Rename the folder
>> C:\Windows\SoftwareDistribution and run the tool from your computer. It
>> should run a system scan. After the scan completes, open the registry
>> editor
>> (Start/Run/regedit) and open
>> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT. On the right side
>> you should see the following values:
>>
>> "EULA"=dword:00000001
>>
>> "Version"="79e385d0-5d28-4743-aeb3-ed101c828abd"
>>
>> "GUID"="E4440C8D-656C-4495-9F34-C83E4B0ECA7B"
>>
>> If the values do not match, just change the values to the ones above.
>> Then
>> restart your computer, open the Windows Update site and run an update
>> check.
>>
>> If the tool scanned the computer successfully and it is reoffered again,
>> you
>> can click to select Do not offer this update again.
>>
>> If the tool did not scan the computer successfully, try installing it
>> from
>> the Windows Update site and check the C:\Windows\WindowsUpdate.log for
>> errors.
>>
>> Regards,
>>
>> Anton Pegan
>>
>> "Alan B" <> wrote in message
>> news:94CC9732-5460-4205-BB6B-...
>> > Hi Anton,
>> > I have tried that and for a few hours it seemed to have done the trick.
>> > However... I have just had a prompt to download updates and guess what
>> > it
>> > is
>> > for KB890830, I downloaded it again and two minutes later I get another
>> > prompt !
>> > Any more ideas ?
>> >
>> > many thanks,
>> > Alan B
>> >
>> > "Anton Pegan" wrote:
>> >
>> >> Hi Alan,
>> >>
>> >> The registry key, where versions of MSRT are stored, is probably
>> >> corrupted.
>> >> First you should clean the update database:
>> >>
>> >> Click Start, Run, type: cmd and press Enter
>> >>
>> >> --> net stop WuAuServ
>> >>
>> >> --> Click Start, Run, type: %windir% and press
>> >> Enter.
>> >>
>> >> --> In the opened folder, rename the folder
>> >> SoftwareDistribution to SDold.
>> >>
>> >> --> Click Start, Run, type: cmd and press
>> >> Enter.
>> >>
>> >> --> net start WuAuServ.
>> >>
>> >> Then open the registry and clean the current version entry:
>> >>
>> >> Click Start, Run type regedit and press Enter
>> >>
>> >> --> open the registry key
>> >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT
>> >>
>> >> --> right click MRT key and choose Export
>> >>
>> >> --> name the key MRT and save it on the
>> >> desktop
>> >>
>> >> --> remove all the entries, except the Default
>> >> entry
>> >>
>> >> --> download the tool from the link below and
>> >> save
>> >> it to the disk:
>> >>
>> >> MicrosoftR WindowsR Malicious Software Removal Tool (KB890830)
>> >>
>> >> http://www.microsoft.com/downloads/d...displaylang=en
>> >>
>> >> --> run the tool from your computer
>> >>
>> >> If this does not help, you can try installing it in Safe mode (restart
>> >> your
>> >> computer, press F8, select Safe mode and press Enter).
>> >>
>> >> Regards,
>> >>
>> >> Anton Pegan
>> >>
>> >> "Alan B" <Alan > wrote in message
>> >> news:A5BCF62C-72D3-42FE-985D-...
>> >> >I keep getting a prompt to download the Malicious Software Removal
>> >> >Tool
>> >> >for
>> >> > October, I go to Microsoft Update to download it, click on Run etc.
>> >> > Shortly
>> >> > after I get a new prompt to download the same tool ! Update history
>> >> > shows
>> >> > it
>> >> > as downloaded numerous times,my registry only shows September as
>> >> > last
>> >> > tool.
>> >> > After I have clicked "Run" nothing else happens, is this correct.
>> >>
>> >>
>> >>
>>
>>
>>

Hi Anton,
I have updated the registry, no errors. There seems to be a problem in
running the tool.
When I double-click the file saved on the desk-top I then click "Run",
there is a pop-up box which stays up for about a second which says something
like "extracting files; mrt.exe and mrtstub.exe" then there is nothing else
whatsoever.

If I right-click the file and click "Run" I get a pop-up box with an error
message ;
"C:\.......\Windows-KB890830-V1.21.exe
A device attached to the system is not functioning"

I have tried Administrator and my account which is an administrator
account.(in safe mode)

I have never had an "agreement" or "full scan" to click !

many thanks,
Alan

"Anton Pegan" wrote:

> Hi Alan,
>
> The tool works like an ordinary virus scanner. When you run the tool you
> must first accept the agreement, then select Full Scan and click next (it
> takes few minutes to scan the whole system). Did you select the
> administrator account when you run your computer in safe mode? If not, try
> running the tool in safe mode with the local administrator account. There is
> obviously some permission issue, because the tool cannot update the registry
> entries that it needs. This is what we can try:
>
> 1. Open the Notepad
>
> 2. Paste in this lines:
>
>
>
>
> Windows Registry Editor Version 5.00
>
>
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT]
>
> "EULA"=dword:00000001
>
> "Version"="79e385d0-5d28-4743-aeb3-ed101c828abd"
>
> "GUID"="E4440C8D-656C-4495-9F34-C83E4B0ECA7B"
>
>
>
> 3. Click Save As
>
> 4. In the File name dialog box write "MRT.reg" (do not forget the " signs)
>
> 5. Run your computer in Safe mode and log on with the administrator account
>
> 6. Double-click the file MRT.reg
>
> Are there any errors? Also check the permissions on that registry key. Right
> click on MRT an select Permissions and check if the System account has Full
> control, Administrators group has full control (if not, assign them full
> control permissions).
>
> Regards,
>
> Anton Pegan
>
> "Alan B" <> wrote in message
> news:E8098298-7A5F-4083-B779-...
> > Hi Anton,
> > I'm still having problems...
> > Had notification today for 2 downloads, 890830 and KB915597. 915597
> > installed ok.
> > Have saved a new 890830 to disk and tried running in safe mode. How do I
> > know if it IS scanning and when it is finished ?
> > I have then opened regedit and the only values are ;
> > (Default) REG_SZ (value not set)
> > GUID REG_SZ E10B4189-7FEC- .....etcetc
> > there is no "EULA" or "Version"
> > I have looked through the pages of WindowsUpdate.log and can't see
> > anything
> > obvious. There is no evidence of the MRT being run only installed. I did
> > see
> > a few messages ;
> > "WARNING: Update Service : Failed to update backup store."
> >
> > Is this important ?
> >
> > Not sure whether the problem is installation or if the tool actually runs,
> > if it doesn't run then will there be any records in the log or registry ?
> > PS I have been using a PC for years but delving in to the registry is a
> > new
> > experience for me so apologies if I do not understand very well.
> > "Anton Pegan" wrote:
> >
> >> Hi Alan,
> >>
> >> If you already saved the update on the disk, run the computer in safe
> >> mode
> >> (restart your computer, press F8, select Safe mode and press Enter).
> >> Logon
> >> to the computer, using the local administrator account. Rename the folder
> >> C:\Windows\SoftwareDistribution and run the tool from your computer. It
> >> should run a system scan. After the scan completes, open the registry
> >> editor
> >> (Start/Run/regedit) and open
> >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT. On the right side
> >> you should see the following values:
> >>
> >> "EULA"=dword:00000001
> >>
> >> "Version"="79e385d0-5d28-4743-aeb3-ed101c828abd"
> >>
> >> "GUID"="E4440C8D-656C-4495-9F34-C83E4B0ECA7B"
> >>
> >> If the values do not match, just change the values to the ones above.
> >> Then
> >> restart your computer, open the Windows Update site and run an update
> >> check.
> >>
> >> If the tool scanned the computer successfully and it is reoffered again,
> >> you
> >> can click to select Do not offer this update again.
> >>
> >> If the tool did not scan the computer successfully, try installing it
> >> from
> >> the Windows Update site and check the C:\Windows\WindowsUpdate.log for
> >> errors.
> >>
> >> Regards,
> >>
> >> Anton Pegan
> >>
> >> "Alan B" <> wrote in message
> >> news:94CC9732-5460-4205-BB6B-...
> >> > Hi Anton,
> >> > I have tried that and for a few hours it seemed to have done the trick.
> >> > However... I have just had a prompt to download updates and guess what
> >> > it
> >> > is
> >> > for KB890830, I downloaded it again and two minutes later I get another
> >> > prompt !
> >> > Any more ideas ?
> >> >
> >> > many thanks,
> >> > Alan B
> >> >
> >> > "Anton Pegan" wrote:
> >> >
> >> >> Hi Alan,
> >> >>
> >> >> The registry key, where versions of MSRT are stored, is probably
> >> >> corrupted.
> >> >> First you should clean the update database:
> >> >>
> >> >> Click Start, Run, type: cmd and press Enter
> >> >>
> >> >> --> net stop WuAuServ
> >> >>
> >> >> --> Click Start, Run, type: %windir% and press
> >> >> Enter.
> >> >>
> >> >> --> In the opened folder, rename the folder
> >> >> SoftwareDistribution to SDold.
> >> >>
> >> >> --> Click Start, Run, type: cmd and press
> >> >> Enter.
> >> >>
> >> >> --> net start WuAuServ.
> >> >>
> >> >> Then open the registry and clean the current version entry:
> >> >>
> >> >> Click Start, Run type regedit and press Enter
> >> >>
> >> >> --> open the registry key
> >> >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT
> >> >>
> >> >> --> right click MRT key and choose Export
> >> >>
> >> >> --> name the key MRT and save it on the
> >> >> desktop
> >> >>
> >> >> --> remove all the entries, except the Default
> >> >> entry
> >> >>
> >> >> --> download the tool from the link below and
> >> >> save
> >> >> it to the disk:
> >> >>
> >> >> MicrosoftR WindowsR Malicious Software Removal Tool (KB890830)
> >> >>
> >> >> http://www.microsoft.com/downloads/d...displaylang=en
> >> >>
> >> >> --> run the tool from your computer
> >> >>
> >> >> If this does not help, you can try installing it in Safe mode (restart
> >> >> your
> >> >> computer, press F8, select Safe mode and press Enter).
> >> >>
> >> >> Regards,
> >> >>
> >> >> Anton Pegan
> >> >>
> >> >> "Alan B" <Alan > wrote in message
> >> >> news:A5BCF62C-72D3-42FE-985D-...
> >> >> >I keep getting a prompt to download the Malicious Software Removal
> >> >> >Tool
> >> >> >for
> >> >> > October, I go to Microsoft Update to download it, click on Run etc.
> >> >> > Shortly
> >> >> > after I get a new prompt to download the same tool ! Update history
> >> >> > shows
> >> >> > it
> >> >> > as downloaded numerous times,my registry only shows September as
> >> >> > last
> >> >> > tool.
> >> >> > After I have clicked "Run" nothing else happens, is this correct.
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

More info...

A few weeks ago I got (PC not me !) infected with Adware.Spy.Sheriff. As far
as I know its all been removed with various software including Norton which
has since been un-installed due to ongoing problems, but looking at the list
of files that were infected one was ;
C:\WINDOWS\xpupdate.exe

would this have anything to do with it ?

Also if I do a search for the file using Windows Explorer it doesn't find it.


"Alan B" wrote:

> Hi Anton,
> I have updated the registry, no errors. There seems to be a problem in
> running the tool.
> When I double-click the file saved on the desk-top I then click "Run",
> there is a pop-up box which stays up for about a second which says something
> like "extracting files; mrt.exe and mrtstub.exe" then there is nothing else
> whatsoever.
>
> If I right-click the file and click "Run" I get a pop-up box with an error
> message ;
> "C:\.......\Windows-KB890830-V1.21.exe
> A device attached to the system is not functioning"
>
> I have tried Administrator and my account which is an administrator
> account.(in safe mode)
>
> I have never had an "agreement" or "full scan" to click !
>
> many thanks,
> Alan
>
> "Anton Pegan" wrote:
>
> > Hi Alan,
> >
> > The tool works like an ordinary virus scanner. When you run the tool you
> > must first accept the agreement, then select Full Scan and click next (it
> > takes few minutes to scan the whole system). Did you select the
> > administrator account when you run your computer in safe mode? If not, try
> > running the tool in safe mode with the local administrator account. There is
> > obviously some permission issue, because the tool cannot update the registry
> > entries that it needs. This is what we can try:
> >
> > 1. Open the Notepad
> >
> > 2. Paste in this lines:
> >
> >
> >
> >
> > Windows Registry Editor Version 5.00
> >
> >
> >
> > [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT]
> >
> > "EULA"=dword:00000001
> >
> > "Version"="79e385d0-5d28-4743-aeb3-ed101c828abd"
> >
> > "GUID"="E4440C8D-656C-4495-9F34-C83E4B0ECA7B"
> >
> >
> >
> > 3. Click Save As
> >
> > 4. In the File name dialog box write "MRT.reg" (do not forget the " signs)
> >
> > 5. Run your computer in Safe mode and log on with the administrator account
> >
> > 6. Double-click the file MRT.reg
> >
> > Are there any errors? Also check the permissions on that registry key. Right
> > click on MRT an select Permissions and check if the System account has Full
> > control, Administrators group has full control (if not, assign them full
> > control permissions).
> >
> > Regards,
> >
> > Anton Pegan
> >
> > "Alan B" <> wrote in message
> > news:E8098298-7A5F-4083-B779-...
> > > Hi Anton,
> > > I'm still having problems...
> > > Had notification today for 2 downloads, 890830 and KB915597. 915597
> > > installed ok.
> > > Have saved a new 890830 to disk and tried running in safe mode. How do I
> > > know if it IS scanning and when it is finished ?
> > > I have then opened regedit and the only values are ;
> > > (Default) REG_SZ (value not set)
> > > GUID REG_SZ E10B4189-7FEC- .....etcetc
> > > there is no "EULA" or "Version"
> > > I have looked through the pages of WindowsUpdate.log and can't see
> > > anything
> > > obvious. There is no evidence of the MRT being run only installed. I did
> > > see
> > > a few messages ;
> > > "WARNING: Update Service : Failed to update backup store."
> > >
> > > Is this important ?
> > >
> > > Not sure whether the problem is installation or if the tool actually runs,
> > > if it doesn't run then will there be any records in the log or registry ?
> > > PS I have been using a PC for years but delving in to the registry is a
> > > new
> > > experience for me so apologies if I do not understand very well.
> > > "Anton Pegan" wrote:
> > >
> > >> Hi Alan,
> > >>
> > >> If you already saved the update on the disk, run the computer in safe
> > >> mode
> > >> (restart your computer, press F8, select Safe mode and press Enter).
> > >> Logon
> > >> to the computer, using the local administrator account. Rename the folder
> > >> C:\Windows\SoftwareDistribution and run the tool from your computer. It
> > >> should run a system scan. After the scan completes, open the registry
> > >> editor
> > >> (Start/Run/regedit) and open
> > >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT. On the right side
> > >> you should see the following values:
> > >>
> > >> "EULA"=dword:00000001
> > >>
> > >> "Version"="79e385d0-5d28-4743-aeb3-ed101c828abd"
> > >>
> > >> "GUID"="E4440C8D-656C-4495-9F34-C83E4B0ECA7B"
> > >>
> > >> If the values do not match, just change the values to the ones above.
> > >> Then
> > >> restart your computer, open the Windows Update site and run an update
> > >> check.
> > >>
> > >> If the tool scanned the computer successfully and it is reoffered again,
> > >> you
> > >> can click to select Do not offer this update again.
> > >>
> > >> If the tool did not scan the computer successfully, try installing it
> > >> from
> > >> the Windows Update site and check the C:\Windows\WindowsUpdate.log for
> > >> errors.
> > >>
> > >> Regards,
> > >>
> > >> Anton Pegan
> > >>
> > >> "Alan B" <> wrote in message
> > >> news:94CC9732-5460-4205-BB6B-...
> > >> > Hi Anton,
> > >> > I have tried that and for a few hours it seemed to have done the trick.
> > >> > However... I have just had a prompt to download updates and guess what
> > >> > it
> > >> > is
> > >> > for KB890830, I downloaded it again and two minutes later I get another
> > >> > prompt !
> > >> > Any more ideas ?
> > >> >
> > >> > many thanks,
> > >> > Alan B
> > >> >
> > >> > "Anton Pegan" wrote:
> > >> >
> > >> >> Hi Alan,
> > >> >>
> > >> >> The registry key, where versions of MSRT are stored, is probably
> > >> >> corrupted.
> > >> >> First you should clean the update database:
> > >> >>
> > >> >> Click Start, Run, type: cmd and press Enter
> > >> >>
> > >> >> --> net stop WuAuServ
> > >> >>
> > >> >> --> Click Start, Run, type: %windir% and press
> > >> >> Enter.
> > >> >>
> > >> >> --> In the opened folder, rename the folder
> > >> >> SoftwareDistribution to SDold.
> > >> >>
> > >> >> --> Click Start, Run, type: cmd and press
> > >> >> Enter.
> > >> >>
> > >> >> --> net start WuAuServ.
> > >> >>
> > >> >> Then open the registry and clean the current version entry:
> > >> >>
> > >> >> Click Start, Run type regedit and press Enter
> > >> >>
> > >> >> --> open the registry key
> > >> >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT
> > >> >>
> > >> >> --> right click MRT key and choose Export
> > >> >>
> > >> >> --> name the key MRT and save it on the
> > >> >> desktop
> > >> >>
> > >> >> --> remove all the entries, except the Default
> > >> >> entry
> > >> >>
> > >> >> --> download the tool from the link below and
> > >> >> save
> > >> >> it to the disk:
> > >> >>
> > >> >> MicrosoftR WindowsR Malicious Software Removal Tool (KB890830)
> > >> >>
> > >> >> http://www.microsoft.com/downloads/d...displaylang=en
> > >> >>
> > >> >> --> run the tool from your computer
> > >> >>
> > >> >> If this does not help, you can try installing it in Safe mode (restart
> > >> >> your
> > >> >> computer, press F8, select Safe mode and press Enter).
> > >> >>
> > >> >> Regards,
> > >> >>
> > >> >> Anton Pegan
> > >> >>
> > >> >> "Alan B" <Alan > wrote in message
> > >> >> news:A5BCF62C-72D3-42FE-985D-...
> > >> >> >I keep getting a prompt to download the Malicious Software Removal
> > >> >> >Tool
> > >> >> >for
> > >> >> > October, I go to Microsoft Update to download it, click on Run etc.
> > >> >> > Shortly
> > >> >> > after I get a new prompt to download the same tool ! Update history
> > >> >> > shows
> > >> >> > it
> > >> >> > as downloaded numerous times,my registry only shows September as
> > >> >> > last
> > >> >> > tool.
> > >> >> > After I have clicked "Run" nothing else happens, is this correct.
> > >> >>
> > >> >>
> > >> >>
> > >>
> > >>
> > >>
> >
> >
> >

Hi Alan,

Did you check the permissions on the registry key as I mentioned in the
previous post? Did you check the values? Do they match the once I have
posted? Is the update still reoffered? Do you receive any errors when you
try to install the tool from the Windows Update site? Do other updates get
installed? Are there any errors in the Event Log regarding this update? Can
you find any errors in WindowsUpdate.log regarding this update
(0x800yyyyyy)?

Sorry for all this questions, but the answers could be helpful.

Regards,

Anton Pegan

"Alan B" <> wrote in message
news:76D23F2C-9667-4980-B576-...
> More info...
>
> A few weeks ago I got (PC not me !) infected with Adware.Spy.Sheriff. As
> far
> as I know its all been removed with various software including Norton
> which
> has since been un-installed due to ongoing problems, but looking at the
> list
> of files that were infected one was ;
> C:\WINDOWS\xpupdate.exe
>
> would this have anything to do with it ?
>
> Also if I do a search for the file using Windows Explorer it doesn't find
> it.
>
>
> "Alan B" wrote:
>
>> Hi Anton,
>> I have updated the registry, no errors. There seems to be a problem in
>> running the tool.
>> When I double-click the file saved on the desk-top I then click "Run",
>> there is a pop-up box which stays up for about a second which says
>> something
>> like "extracting files; mrt.exe and mrtstub.exe" then there is nothing
>> else
>> whatsoever.
>>
>> If I right-click the file and click "Run" I get a pop-up box with an
>> error
>> message ;
>> "C:\.......\Windows-KB890830-V1.21.exe
>> A device attached to the system is not functioning"
>>
>> I have tried Administrator and my account which is an administrator
>> account.(in safe mode)
>>
>> I have never had an "agreement" or "full scan" to click !
>>
>> many thanks,
>> Alan
>>
>> "Anton Pegan" wrote:
>>
>> > Hi Alan,
>> >
>> > The tool works like an ordinary virus scanner. When you run the tool
>> > you
>> > must first accept the agreement, then select Full Scan and click next
>> > (it
>> > takes few minutes to scan the whole system). Did you select the
>> > administrator account when you run your computer in safe mode? If not,
>> > try
>> > running the tool in safe mode with the local administrator account.
>> > There is
>> > obviously some permission issue, because the tool cannot update the
>> > registry
>> > entries that it needs. This is what we can try:
>> >
>> > 1. Open the Notepad
>> >
>> > 2. Paste in this lines:
>> >
>> >
>> >
>> >
>> > Windows Registry Editor Version 5.00
>> >
>> >
>> >
>> > [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT]
>> >
>> > "EULA"=dword:00000001
>> >
>> > "Version"="79e385d0-5d28-4743-aeb3-ed101c828abd"
>> >
>> > "GUID"="E4440C8D-656C-4495-9F34-C83E4B0ECA7B"
>> >
>> >
>> >
>> > 3. Click Save As
>> >
>> > 4. In the File name dialog box write "MRT.reg" (do not forget the "
>> > signs)
>> >
>> > 5. Run your computer in Safe mode and log on with the administrator
>> > account
>> >
>> > 6. Double-click the file MRT.reg
>> >
>> > Are there any errors? Also check the permissions on that registry key.
>> > Right
>> > click on MRT an select Permissions and check if the System account has
>> > Full
>> > control, Administrators group has full control (if not, assign them
>> > full
>> > control permissions).
>> >
>> > Regards,
>> >
>> > Anton Pegan
>> >
>> > "Alan B" <> wrote in message
>> > news:E8098298-7A5F-4083-B779-...
>> > > Hi Anton,
>> > > I'm still having problems...
>> > > Had notification today for 2 downloads, 890830 and KB915597. 915597
>> > > installed ok.
>> > > Have saved a new 890830 to disk and tried running in safe mode. How
>> > > do I
>> > > know if it IS scanning and when it is finished ?
>> > > I have then opened regedit and the only values are ;
>> > > (Default) REG_SZ (value not set)
>> > > GUID REG_SZ E10B4189-7FEC- .....etcetc
>> > > there is no "EULA" or "Version"
>> > > I have looked through the pages of WindowsUpdate.log and can't see
>> > > anything
>> > > obvious. There is no evidence of the MRT being run only installed. I
>> > > did
>> > > see
>> > > a few messages ;
>> > > "WARNING: Update Service : Failed to update backup store."
>> > >
>> > > Is this important ?
>> > >
>> > > Not sure whether the problem is installation or if the tool actually
>> > > runs,
>> > > if it doesn't run then will there be any records in the log or
>> > > registry ?
>> > > PS I have been using a PC for years but delving in to the registry is
>> > > a
>> > > new
>> > > experience for me so apologies if I do not understand very well.
>> > > "Anton Pegan" wrote:
>> > >
>> > >> Hi Alan,
>> > >>
>> > >> If you already saved the update on the disk, run the computer in
>> > >> safe
>> > >> mode
>> > >> (restart your computer, press F8, select Safe mode and press Enter).
>> > >> Logon
>> > >> to the computer, using the local administrator account. Rename the
>> > >> folder
>> > >> C:\Windows\SoftwareDistribution and run the tool from your computer.
>> > >> It
>> > >> should run a system scan. After the scan completes, open the
>> > >> registry
>> > >> editor
>> > >> (Start/Run/regedit) and open
>> > >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT. On the right
>> > >> side
>> > >> you should see the following values:
>> > >>
>> > >> "EULA"=dword:00000001
>> > >>
>> > >> "Version"="79e385d0-5d28-4743-aeb3-ed101c828abd"
>> > >>
>> > >> "GUID"="E4440C8D-656C-4495-9F34-C83E4B0ECA7B"
>> > >>
>> > >> If the values do not match, just change the values to the ones
>> > >> above.
>> > >> Then
>> > >> restart your computer, open the Windows Update site and run an
>> > >> update
>> > >> check.
>> > >>
>> > >> If the tool scanned the computer successfully and it is reoffered
>> > >> again,
>> > >> you
>> > >> can click to select Do not offer this update again.
>> > >>
>> > >> If the tool did not scan the computer successfully, try installing
>> > >> it
>> > >> from
>> > >> the Windows Update site and check the C:\Windows\WindowsUpdate.log
>> > >> for
>> > >> errors.
>> > >>
>> > >> Regards,
>> > >>
>> > >> Anton Pegan
>> > >>
>> > >> "Alan B" <> wrote in message
>> > >> news:94CC9732-5460-4205-BB6B-...
>> > >> > Hi Anton,
>> > >> > I have tried that and for a few hours it seemed to have done the
>> > >> > trick.
>> > >> > However... I have just had a prompt to download updates and guess
>> > >> > what
>> > >> > it
>> > >> > is
>> > >> > for KB890830, I downloaded it again and two minutes later I get
>> > >> > another
>> > >> > prompt !
>> > >> > Any more ideas ?
>> > >> >
>> > >> > many thanks,
>> > >> > Alan B
>> > >> >
>> > >> > "Anton Pegan" wrote:
>> > >> >
>> > >> >> Hi Alan,
>> > >> >>
>> > >> >> The registry key, where versions of MSRT are stored, is probably
>> > >> >> corrupted.
>> > >> >> First you should clean the update database:
>> > >> >>
>> > >> >> Click Start, Run, type: cmd and press Enter
>> > >> >>
>> > >> >> --> net stop WuAuServ
>> > >> >>
>> > >> >> --> Click Start, Run, type: %windir% and
>> > >> >> press
>> > >> >> Enter.
>> > >> >>
>> > >> >> --> In the opened folder, rename the
>> > >> >> folder
>> > >> >> SoftwareDistribution to SDold.
>> > >> >>
>> > >> >> --> Click Start, Run, type: cmd and press
>> > >> >> Enter.
>> > >> >>
>> > >> >> --> net start WuAuServ.
>> > >> >>
>> > >> >> Then open the registry and clean the current version entry:
>> > >> >>
>> > >> >> Click Start, Run type regedit and press Enter
>> > >> >>
>> > >> >> --> open the registry key
>> > >> >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT
>> > >> >>
>> > >> >> --> right click MRT key and choose Export
>> > >> >>
>> > >> >> --> name the key MRT and save it on the
>> > >> >> desktop
>> > >> >>
>> > >> >> --> remove all the entries, except the
>> > >> >> Default
>> > >> >> entry
>> > >> >>
>> > >> >> --> download the tool from the link below
>> > >> >> and
>> > >> >> save
>> > >> >> it to the disk:
>> > >> >>
>> > >> >> MicrosoftR WindowsR Malicious Software Removal Tool (KB890830)
>> > >> >>
>> > >> >> http://www.microsoft.com/downloads/d...displaylang=en
>> > >> >>
>> > >> >> --> run the tool from your computer
>> > >> >>
>> > >> >> If this does not help, you can try installing it in Safe mode
>> > >> >> (restart
>> > >> >> your
>> > >> >> computer, press F8, select Safe mode and press Enter).
>> > >> >>
>> > >> >> Regards,
>> > >> >>
>> > >> >> Anton Pegan
>> > >> >>
>> > >> >> "Alan B" <Alan > wrote in message
>> > >> >> news:A5BCF62C-72D3-42FE-985D-...
>> > >> >> >I keep getting a prompt to download the Malicious Software
>> > >> >> >Removal
>> > >> >> >Tool
>> > >> >> >for
>> > >> >> > October, I go to Microsoft Update to download it, click on Run
>> > >> >> > etc.
>> > >> >> > Shortly
>> > >> >> > after I get a new prompt to download the same tool ! Update
>> > >> >> > history
>> > >> >> > shows
>> > >> >> > it
>> > >> >> > as downloaded numerous times,my registry only shows September
>> > >> >> > as
>> > >> >> > last
>> > >> >> > tool.
>> > >> >> > After I have clicked "Run" nothing else happens, is this
>> > >> >> > correct.
>> > >> >>
>> > >> >>
>> > >> >>
>> > >>
>> > >>
>> > >>
>> >
>> >
>> >

Hi Anton sorry for the delay in replying, the answers to your questions in
order are;
yes, yes, yes, yes, no, yes, no, no.

The problem has just gone away however...
I have just installed IE6, IE5.5 and IE5 along side IE7 as I design web
sites and they are useful to check web page behaviour. Immediately after the
install I noticed that the update was no longer being offered, this morning I
was offered one for Defender. I am only guessing that something missing from
IE has been reinstalled !
Will wait to see what happens with November MSRT !

Many thanks for all your help...

"Anton Pegan" wrote:

> Hi Alan,
>
> Did you check the permissions on the registry key as I mentioned in the
> previous post? Did you check the values? Do they match the once I have
> posted? Is the update still reoffered? Do you receive any errors when you
> try to install the tool from the Windows Update site? Do other updates get
> installed? Are there any errors in the Event Log regarding this update? Can
> you find any errors in WindowsUpdate.log regarding this update
> (0x800yyyyyy)?
>
> Sorry for all this questions, but the answers could be helpful.
>
> Regards,
>
> Anton Pegan
>
> "Alan B" <> wrote in message
> news:76D23F2C-9667-4980-B576-...
> > More info...
> >
> > A few weeks ago I got (PC not me !) infected with Adware.Spy.Sheriff. As
> > far
> > as I know its all been removed with various software including Norton
> > which
> > has since been un-installed due to ongoing problems, but looking at the
> > list
> > of files that were infected one was ;
> > C:\WINDOWS\xpupdate.exe
> >
> > would this have anything to do with it ?
> >
> > Also if I do a search for the file using Windows Explorer it doesn't find
> > it.
> >
> >
> > "Alan B" wrote:
> >
> >> Hi Anton,
> >> I have updated the registry, no errors. There seems to be a problem in
> >> running the tool.
> >> When I double-click the file saved on the desk-top I then click "Run",
> >> there is a pop-up box which stays up for about a second which says
> >> something
> >> like "extracting files; mrt.exe and mrtstub.exe" then there is nothing
> >> else
> >> whatsoever.
> >>
> >> If I right-click the file and click "Run" I get a pop-up box with an
> >> error
> >> message ;
> >> "C:\.......\Windows-KB890830-V1.21.exe
> >> A device attached to the system is not functioning"
> >>
> >> I have tried Administrator and my account which is an administrator
> >> account.(in safe mode)
> >>
> >> I have never had an "agreement" or "full scan" to click !
> >>
> >> many thanks,
> >> Alan
> >>
> >> "Anton Pegan" wrote:
> >>
> >> > Hi Alan,
> >> >
> >> > The tool works like an ordinary virus scanner. When you run the tool
> >> > you
> >> > must first accept the agreement, then select Full Scan and click next
> >> > (it
> >> > takes few minutes to scan the whole system). Did you select the
> >> > administrator account when you run your computer in safe mode? If not,
> >> > try
> >> > running the tool in safe mode with the local administrator account.
> >> > There is
> >> > obviously some permission issue, because the tool cannot update the
> >> > registry
> >> > entries that it needs. This is what we can try:
> >> >
> >> > 1. Open the Notepad
> >> >
> >> > 2. Paste in this lines:
> >> >
> >> >
> >> >
> >> >
> >> > Windows Registry Editor Version 5.00
> >> >
> >> >
> >> >
> >> > [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT]
> >> >
> >> > "EULA"=dword:00000001
> >> >
> >> > "Version"="79e385d0-5d28-4743-aeb3-ed101c828abd"
> >> >
> >> > "GUID"="E4440C8D-656C-4495-9F34-C83E4B0ECA7B"
> >> >
> >> >
> >> >
> >> > 3. Click Save As
> >> >
> >> > 4. In the File name dialog box write "MRT.reg" (do not forget the "
> >> > signs)
> >> >
> >> > 5. Run your computer in Safe mode and log on with the administrator
> >> > account
> >> >
> >> > 6. Double-click the file MRT.reg
> >> >
> >> > Are there any errors? Also check the permissions on that registry key.
> >> > Right
> >> > click on MRT an select Permissions and check if the System account has
> >> > Full
> >> > control, Administrators group has full control (if not, assign them
> >> > full
> >> > control permissions).
> >> >
> >> > Regards,
> >> >
> >> > Anton Pegan
> >> >
> >> > "Alan B" <> wrote in message
> >> > news:E8098298-7A5F-4083-B779-...
> >> > > Hi Anton,
> >> > > I'm still having problems...
> >> > > Had notification today for 2 downloads, 890830 and KB915597. 915597
> >> > > installed ok.
> >> > > Have saved a new 890830 to disk and tried running in safe mode. How
> >> > > do I
> >> > > know if it IS scanning and when it is finished ?
> >> > > I have then opened regedit and the only values are ;
> >> > > (Default) REG_SZ (value not set)
> >> > > GUID REG_SZ E10B4189-7FEC- .....etcetc
> >> > > there is no "EULA" or "Version"
> >> > > I have looked through the pages of WindowsUpdate.log and can't see
> >> > > anything
> >> > > obvious. There is no evidence of the MRT being run only installed. I
> >> > > did
> >> > > see
> >> > > a few messages ;
> >> > > "WARNING: Update Service : Failed to update backup store."
> >> > >
> >> > > Is this important ?
> >> > >
> >> > > Not sure whether the problem is installation or if the tool actually
> >> > > runs,
> >> > > if it doesn't run then will there be any records in the log or
> >> > > registry ?
> >> > > PS I have been using a PC for years but delving in to the registry is
> >> > > a
> >> > > new
> >> > > experience for me so apologies if I do not understand very well.
> >> > > "Anton Pegan" wrote:
> >> > >
> >> > >> Hi Alan,
> >> > >>
> >> > >> If you already saved the update on the disk, run the computer in
> >> > >> safe
> >> > >> mode
> >> > >> (restart your computer, press F8, select Safe mode and press Enter).
> >> > >> Logon
> >> > >> to the computer, using the local administrator account. Rename the
> >> > >> folder
> >> > >> C:\Windows\SoftwareDistribution and run the tool from your computer.
> >> > >> It
> >> > >> should run a system scan. After the scan completes, open the
> >> > >> registry
> >> > >> editor
> >> > >> (Start/Run/regedit) and open
> >> > >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT. On the right
> >> > >> side
> >> > >> you should see the following values:
> >> > >>
> >> > >> "EULA"=dword:00000001
> >> > >>
> >> > >> "Version"="79e385d0-5d28-4743-aeb3-ed101c828abd"
> >> > >>
> >> > >> "GUID"="E4440C8D-656C-4495-9F34-C83E4B0ECA7B"
> >> > >>
> >> > >> If the values do not match, just change the values to the ones
> >> > >> above.
> >> > >> Then
> >> > >> restart your computer, open the Windows Update site and run an
> >> > >> update
> >> > >> check.
> >> > >>
> >> > >> If the tool scanned the computer successfully and it is reoffered
> >> > >> again,
> >> > >> you
> >> > >> can click to select Do not offer this update again.
> >> > >>
> >> > >> If the tool did not scan the computer successfully, try installing
> >> > >> it
> >> > >> from
> >> > >> the Windows Update site and check the C:\Windows\WindowsUpdate.log
> >> > >> for
> >> > >> errors.
> >> > >>
> >> > >> Regards,
> >> > >>
> >> > >> Anton Pegan
> >> > >>
> >> > >> "Alan B" <> wrote in message
> >> > >> news:94CC9732-5460-4205-BB6B-...
> >> > >> > Hi Anton,
> >> > >> > I have tried that and for a few hours it seemed to have done the
> >> > >> > trick.
> >> > >> > However... I have just had a prompt to download updates and guess
> >> > >> > what
> >> > >> > it
> >> > >> > is
> >> > >> > for KB890830, I downloaded it again and two minutes later I get
> >> > >> > another
> >> > >> > prompt !
> >> > >> > Any more ideas ?
> >> > >> >
> >> > >> > many thanks,
> >> > >> > Alan B
> >> > >> >
> >> > >> > "Anton Pegan" wrote:
> >> > >> >
> >> > >> >> Hi Alan,
> >> > >> >>
> >> > >> >> The registry key, where versions of MSRT are stored, is probably
> >> > >> >> corrupted.
> >> > >> >> First you should clean the update database:
> >> > >> >>
> >> > >> >> Click Start, Run, type: cmd and press Enter
> >> > >> >>
> >> > >> >> --> net stop WuAuServ
> >> > >> >>
> >> > >> >> --> Click Start, Run, type: %windir% and
> >> > >> >> press
> >> > >> >> Enter.
> >> > >> >>
> >> > >> >> --> In the opened folder, rename the
> >> > >> >> folder
> >> > >> >> SoftwareDistribution to SDold.
> >> > >> >>
> >> > >> >> --> Click Start, Run, type: cmd and press
> >> > >> >> Enter.
> >> > >> >>
> >> > >> >> --> net start WuAuServ.
> >> > >> >>
> >> > >> >> Then open the registry and clean the current version entry:
> >> > >> >>
> >> > >> >> Click Start, Run type regedit and press Enter
> >> > >> >>
> >> > >> >> --> open the registry key
> >> > >> >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools \MRT
> >> > >> >>
> >> > >> >> --> right click MRT key and choose Export
> >> > >> >>
> >> > >> >> --> name the key MRT and save it on the
> >> > >> >> desktop
> >> > >> >>
> >> > >> >> --> remove all the entries, except the
> >> > >> >> Default
> >> > >> >> entry
> >> > >> >>
> >> > >> >> --> download the tool from the link below
> >> > >> >> and
> >> > >> >> save
> >> > >> >> it to the disk:
> >> > >> >>
> >> > >> >> MicrosoftR WindowsR Malicious Software Removal Tool (KB890830)
> >> > >> >>
> >> > >> >> http://www.microsoft.com/downloads/d...displaylang=en
> >> > >> >>
> >> > >> >> --> run the tool from your computer
> >> > >> >>
> >> > >> >> If this does not help, you can try installing it in Safe mode
> >> > >> >> (restart
> >> > >> >> your
> >> > >> >> computer, press F8, select Safe mode and press Enter).
> >> > >> >>
> >> > >> >> Regards,
> >> > >> >>
> >> > >> >> Anton Pegan
> >> > >> >>
> >> > >> >> "Alan B" <Alan > wrote in message
> >> > >> >> news:A5BCF62C-72D3-42FE-985D-...
> >> > >> >> >I keep getting a prompt to download the Malicious Software
> >> > >> >> >Removal
> >> > >> >> >Tool
> >> > >> >> >for
> >> > >> >> > October, I go to Microsoft Update to download it, click on Run
> >> > >> >> > etc.
> >> > >> >> > Shortly
> >> > >> >> > after I get a new prompt to download the same tool ! Update
> >> > >> >> > history
> >> > >> >> > shows
> >> > >> >> > it
> >> > >> >> > as downloaded numerous times,my registry only shows September
> >> > >> >> > as
> >> > >> >> > last
> >> > >> >> > tool.
> >> > >> >> > After I have clicked "Run" nothing else happens, is this
> >> > >> >> > correct.
> >> > >> >>