890830 MSRT keeps wanting to download

Discussion in 'Windows Update' started by Alan B, Oct 30, 2006.

  1. Alan B

    Alan B Guest

    I keep getting a prompt to download the Malicious Software Removal Tool for
    October, I go to Microsoft Update to download it, click on Run etc. Shortly
    after I get a new prompt to download the same tool ! Update history shows it
    as downloaded numerous times,my registry only shows September as last tool.
    After I have clicked "Run" nothing else happens, is this correct.
    Alan B, Oct 30, 2006
    1. Advertisements

  2. Alan B

    Anton Pegan Guest

    Hi Alan,

    The registry key, where versions of MSRT are stored, is probably corrupted.
    First you should clean the update database:

    Click Start, Run, type: cmd and press Enter

    --> net stop WuAuServ

    --> Click Start, Run, type: %windir% and press

    --> In the opened folder, rename the folder
    SoftwareDistribution to SDold.

    --> Click Start, Run, type: cmd and press Enter.

    --> net start WuAuServ.

    Then open the registry and clean the current version entry:

    Click Start, Run type regedit and press Enter

    --> open the registry key

    --> right click MRT key and choose Export

    --> name the key MRT and save it on the desktop

    --> remove all the entries, except the Default entry

    --> download the tool from the link below and save
    it to the disk:

    MicrosoftR WindowsR Malicious Software Removal Tool (KB890830)


    --> run the tool from your computer

    If this does not help, you can try installing it in Safe mode (restart your
    computer, press F8, select Safe mode and press Enter).


    Anton Pegan
    Anton Pegan, Oct 30, 2006
    1. Advertisements

  3. Alan B

    Alan B Guest

    Hi Anton,
    I have tried that and for a few hours it seemed to have done the trick.
    However... I have just had a prompt to download updates and guess what it is
    for KB890830, I downloaded it again and two minutes later I get another
    prompt !
    Any more ideas ?

    many thanks,
    Alan B
    Alan B, Oct 30, 2006
  4. Alan B

    Anton Pegan Guest

    Hi Alan,

    If you already saved the update on the disk, run the computer in safe mode
    (restart your computer, press F8, select Safe mode and press Enter). Logon
    to the computer, using the local administrator account. Rename the folder
    C:\Windows\SoftwareDistribution and run the tool from your computer. It
    should run a system scan. After the scan completes, open the registry editor
    (Start/Run/regedit) and open
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemovalTools\MRT. On the right side
    you should see the following values:




    If the values do not match, just change the values to the ones above. Then
    restart your computer, open the Windows Update site and run an update check.

    If the tool scanned the computer successfully and it is reoffered again, you
    can click to select Do not offer this update again.

    If the tool did not scan the computer successfully, try installing it from
    the Windows Update site and check the C:\Windows\WindowsUpdate.log for


    Anton Pegan
    Anton Pegan, Oct 31, 2006
  5. Alan B

    Alan B Guest

    Hi Anton,
    I'm still having problems...
    Had notification today for 2 downloads, 890830 and KB915597. 915597
    installed ok.
    Have saved a new 890830 to disk and tried running in safe mode. How do I
    know if it IS scanning and when it is finished ?
    I have then opened regedit and the only values are ;
    (Default) REG_SZ (value not set)
    GUID REG_SZ E10B4189-7FEC- .....etcetc
    there is no "EULA" or "Version"
    I have looked through the pages of WindowsUpdate.log and can't see anything
    obvious. There is no evidence of the MRT being run only installed. I did see
    a few messages ;
    "WARNING: Update Service : Failed to update backup store."

    Is this important ?

    Not sure whether the problem is installation or if the tool actually runs,
    if it doesn't run then will there be any records in the log or registry ?
    PS I have been using a PC for years but delving in to the registry is a new
    experience for me so apologies if I do not understand very well.
    Alan B, Nov 2, 2006
  6. Alan B

    Anton Pegan Guest

    Hi Alan,

    The tool works like an ordinary virus scanner. When you run the tool you
    must first accept the agreement, then select Full Scan and click next (it
    takes few minutes to scan the whole system). Did you select the
    administrator account when you run your computer in safe mode? If not, try
    running the tool in safe mode with the local administrator account. There is
    obviously some permission issue, because the tool cannot update the registry
    entries that it needs. This is what we can try:

    1. Open the Notepad

    2. Paste in this lines:

    Windows Registry Editor Version 5.00





    3. Click Save As

    4. In the File name dialog box write "MRT.reg" (do not forget the " signs)

    5. Run your computer in Safe mode and log on with the administrator account

    6. Double-click the file MRT.reg

    Are there any errors? Also check the permissions on that registry key. Right
    click on MRT an select Permissions and check if the System account has Full
    control, Administrators group has full control (if not, assign them full
    control permissions).


    Anton Pegan
    Anton Pegan, Nov 3, 2006
  7. Alan B

    Alan B Guest

    Hi Anton,
    I have updated the registry, no errors. There seems to be a problem in
    running the tool.
    When I double-click the file saved on the desk-top I then click "Run",
    there is a pop-up box which stays up for about a second which says something
    like "extracting files; mrt.exe and mrtstub.exe" then there is nothing else

    If I right-click the file and click "Run" I get a pop-up box with an error
    message ;
    A device attached to the system is not functioning"

    I have tried Administrator and my account which is an administrator
    account.(in safe mode)

    I have never had an "agreement" or "full scan" to click !

    many thanks,

    Alan B, Nov 3, 2006
  8. Alan B

    Alan B Guest

    More info...

    A few weeks ago I got (PC not me !) infected with Adware.Spy.Sheriff. As far
    as I know its all been removed with various software including Norton which
    has since been un-installed due to ongoing problems, but looking at the list
    of files that were infected one was ;

    would this have anything to do with it ?

    Also if I do a search for the file using Windows Explorer it doesn't find it.

    Alan B, Nov 5, 2006
  9. Alan B

    Anton Pegan Guest

    Hi Alan,

    Did you check the permissions on the registry key as I mentioned in the
    previous post? Did you check the values? Do they match the once I have
    posted? Is the update still reoffered? Do you receive any errors when you
    try to install the tool from the Windows Update site? Do other updates get
    installed? Are there any errors in the Event Log regarding this update? Can
    you find any errors in WindowsUpdate.log regarding this update

    Sorry for all this questions, but the answers could be helpful.


    Anton Pegan

    Anton Pegan, Nov 6, 2006
  10. Alan B

    Alan B Guest

    Hi Anton sorry for the delay in replying, the answers to your questions in
    order are;
    yes, yes, yes, yes, no, yes, no, no.

    The problem has just gone away however...
    I have just installed IE6, IE5.5 and IE5 along side IE7 as I design web
    sites and they are useful to check web page behaviour. Immediately after the
    install I noticed that the update was no longer being offered, this morning I
    was offered one for Defender. I am only guessing that something missing from
    IE has been reinstalled !
    Will wait to see what happens with November MSRT !

    Many thanks for all your help...

    Alan B, Nov 10, 2006
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.