Slashdot Mirror
Microsoft Releases Malicious Software Removal Tool
DaHat writes "Hot on the heels of their release last week of Microsoft AntiSpyware, Microsoft today released their very own Malicious Software Removal Tool with the claim that it will detect and remove infections from specific pieces of malware, including those in the families of Berbew, Doomjuice, Gaobot, Msblast, Mydoom, Nachi, Sassier, and Zindos from your Windows 2000, XP or 2003 machine. Microsoft also promises to release an updated version of the tool on the second Tuesday of each month."
A feeling of having made the same mistake before: Deja Foobar
and some already are but lets face it, to currently reach the masses this sort of stuff needs to be pushed out through windows update.
Do not try to read the dupe, thats impossible. Instead, only try to realize the truth
What truth?
There is no dupe
The malware removal tool is pretty simple. It installs, scans, gives you a clean bill of health or tells you what a dirty infected whore your PC is.
The auto-update features in both applications is nice to see too... Grandma and Grandpa Internet need something to spoonfeed them like this, and if Microsoft keeps them free then grrreat. Now if only we could get them to fix IE so it isn't such a steaming pile...
perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10)'
The reason that they are only going to be doing it once a month has little to do with home users and more to do with corporate ones. Most IT people I know do not have time to search out threats to their network each day and make sure everything is up to date and properly patched... instead, they do so on a schedule. In order to facilitate that, Microsoft has done the same thing. Notice that new security bulletins came out today? Mark your calendar for a month from now and you'll see a similar thing.
Yes, such a system is potentially flawed where if a major exploit is found in the wild and is running loose, taking out systems right and left, the day after Microsoft issues their advisories/patches, things could be bad. However in such a case I have little doubt they would make a special exception for those big ones.
Help Brendan pay off his student loans
"What's this? It says it's a malicious software remover."
"I dunno. Try running it?"
"Okay." (click-click.)
"PLEASE WAIT."
"What's it doing?"
"Dunno... oh, here."
"PROGRAM COMPLETE. FIFTEEN PROGRAMS REMOVED. HAVE FUN FIGURING OUT WHICH ONES, BITCHES."
"Dammit."
You appear to have left out the following key steps:
Draw pentagram
Light candles
Sacrifice a goat
...
Prophet!!!
A feeling of having made the same mistake before: Deja Foobar
I have rebooted. My initial impression is that there is no immediately obvious way to run the removal program. KB890830 points out the web version of the Malicious Software Removal Tool and says that "When you download the tool from Windows Update or from Automatic Updates, the tool always runs in quiet mode." The KB also has a url to download the tool. Whee.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
Yeah, it took me an extra second to parse as well. The funny part is that the editors could have gotten rid of one funny and twenty redundant posts simply by adding one word to the title and saying: "Microsoft Releases Tool to Remove Malicious Software"
No, wait, the funny part is I thought "editing", much less "clarifying confusing sentence structure", was something the editors here did.
The enemies of Democracy are
Yup. You're right. Lot's of subdomain possibilities there!
UNIX? They're not even circumcised! Savages!
When I read that headline, I thought it meant Microsoft released a malicious tool for removing (non-MS) software. I don't know if that's a result of my own prejudices or just the kind of thing I've come to expect from Slashdot headlines....
If you don't want to use IE/ActiveX, you can download the tool directly from http://www.microsoft.com/downloads/details.aspx?F
This tool reports to MS when it cleans. The reporting is anonymous, it says in the EULA.
T \DontReportInfectionInformation as a DWORD, and set the value to 1.
Those of you who detest automatic vendor notifications can disable this function. I just followed a tortuous string of buried references from MS to find out how, so to save you all the hassle, here's the thing:
Using regedit, create registry key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MR