[Merged] MS Anti-Spyware/Virus

[Paul K]

Don't forget boy and girls, today is the day that Microsoft are supposedly launching their new anti-virus/ malware removal tool.
Yes in true NTL sytylee it's "Coming Soon" Now it's anybodys guess if this will occur today as at the moment both locations for the tool have yet to show any sign of it but at least you will have a bit if warning on where to look
From other sites out there on the web it seems that the tool will release through
Windows Update and
Microsofts' Malware site
as usual though it's the afternoon here in Blighty and no sign of the tool yet, no change there though I'm expecting the tool to hit the servers sometime this evening and for the servers to become swamped very quickly
Have fun if you decide to try it out, probably won't miss much if you don't

[AndrewJ]

Get Anti Virus tool.

Install Anti Virus tool.

Awaits critical security flaw update.

[Paul K]

Originally Posted by AndrewJames

Get Anti Virus tool.

Install Anti Virus tool.

Awaits critical security flaw update.

More likely:
Installs tool
Can no longer access windows update due to active x components
Awaits hammer

[Aragorn]

A, somewhat sceptical, review of the tool is on ElReg:

http://www.theregister.co.uk/2005/01...clean-up_tool/

[AndrewJ]

Originally Posted by Paul

More likely:
Installs tool
Can no longer access windows update due to active x components
Awaits hammer

[Neil]

Originally Posted by Paul

Windows Update and
Microsofts' Malware site

Weâ₠¬ÃƒÂ¢Ã¢â‚¬Å¾Ã‚¢re sorry, but we were unable to service your request. You may wish to choose from the links below for information about Microsoft products and services.

[Paul K]

Originally Posted by Neil

I know lol MS strike again
Try here
linky
There's more info available now too:

Microsoft has released the Microsoft Windows Malicious Software Removal Tool to help remove specific, prevalent malicious software from computers that are running Microsoft Windows Server 2003, Microsoft Windows XP, or Microsoft Windows 2000. The Malicious Software Removal Tool supersedes all virus-cleaner tools that were previously released by Microsoft. You can download the Malicious Software Removal Tool from the Microsoft Download Center. You can also run an online version of the tool from the Malicious Software Removal Tool Web site on Microsoft.com. To run the Malicious Software Removal Tool from either location, you must log on to your computer with an account that is a member of the Administrators group. If you are running Windows XP, you can also run the Malicious Software Removal Tool from the Windows Update Web site or by using Automatic Updates.
MORE INFORMATION
Download and setup information
If you are an IT administrator who wants more information about deploying the tool in an enterprise environment, view the following article in the Microsoft Knowledge Base:
891716 Deployment of the Microsoft Windows Malicious Software Removal Tool in an enterprise environment
This article includes information about Microsoft Systems Management Server (SMS), Microsoft Software Update Services (SUS), and Microsoft Baseline Security Analyzer (MBSA) support.
Windows Update Web site and Automatic Updates
If you use Microsoft Windows XP, you can use Automatic Updates to download and run the tool, or you can visit the Windows Update Web site:
http://www.windowsupdate.com
The tool is offered as a critical update through these mechanisms.

Notes
†¢ Currently, only Windows XP users can download and run the tool by using Windows Update or Automatic Updates. Support for computers that are running Windows 2000 or Windows Server 2003 will be added in a future release. If you are using Windows 2000 or Windows Server 2003, you can run the tool through the other mechanisms that are described in this article.
†¢ The first time that you download and run the tool by using Windows Update or Automatic Updates, you must accept a specific end user license agreement (EULA). The EULA is displayed when you log on as a member of the Administrators group and then access Automatic Updates or the Windows Update site.
†¢ A new version of the tool will be released each month and will be made available from Automatic Updates and from the Windows Update site.
For more information about Automatic Updates, click the following article number to view the article in the Microsoft Knowledge Base::
294871 Description of the Automatic Updates feature in Windows Microsoft Download Center
You can download the Malicious Software Removal Tool manually from the Microsoft Download Center.

[downquark1]

Originally Posted by Paul

I know lol MS strike again
Try here
linky
There's more info available now too:

Are we sure that's it - it only scans for 8 things

[Paul K]

Erm I would expect that's it till next month when they release the next tool.
Anyone interested in what 8 things it scans for should read:
MS KB
I'm hoping that MS are having a laf here but then I'm thinking this is the malware tool and not the anti-virus as is being reported otherwise this is a p*ss poor anti-virus tool To be honest I think that the BBC etc have all misunderstood when told a tool was being released today as this would seem to be nothing to do with the anti-virus tool that they are developing. Maybe a title change is needed here team since it was merged into this thread earlier ???
By the way the online version of this wonderful tool is now live
http://www.microsoft.com/security/ma...e/default.mspx

[Raistlin]

Just installed the tool, any idea where I can find it so that I can run it?

Can't see any entry on any of the menus.

Thanx.

[Paul K]

It ran on installation for me, flashed up a message that my system is clean of all 8, yes count them, 8, pieces of malware oh and you have to running an admin account for it to run.

[Raistlin]

I got no visual confirmation that it had run.....

I cannot find this program anywhere, on any menu or setting.....

I have no way of knowing what it is doing in the background.....

The program runs "silently" and is capable of sending reports back to Microsoft, apparently with no intervention being possible from me.....

Perhaps there was a typo, "Malicious Software Removal Tool" should have read "Malicious, Software Removal Tool". This new program has all the features, and exhibits a lot of the behaviours, of spyware..........

Nice one MS - where's that Add/Remove Programs button?

[Paul K]

I think it's stand alone tool that you have to invoke to run, try the online one or download the tool and try again. To run it again here I had to run the file that was downloaded.
edit: if you downloaded the file from the link in post 52 it is a stand alone tool and does not install to your operating system. If you read the EULA it states you must agree with the EULA to run the tool not install the software. I think the version that will come through windows update will most likely be an installed version of it.
http://www.microsoft.com/security/ma...e/default.mspx
as to sending information back to MS I would read the MS KB in post 54 where it states:

Q20: Does this tool send back any information to Microsoft?
A20: Yes. If the tool finds an infection or an error, anonymous information is sent back to Microsoft. See the "Reporting component" section for more information.
†¢ Q21: Can I prevent this tool from sending information back to Microsoft?
A21: Yes. The reporting component can be disabled by setting a specific registry key. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
891716 Deployment of the Microsoft Windows Malicious Software Removal Tool in an enterprise environment

and from the same MS KB article

Q2: What installer does this tool use?
A2: The tool does not install or update files on a computer. Therefore the tool does not use an installer, such as Windows Installer or Update.exe. It is packaged within a self-extracting CAB executable to reduce the size of the package.
†¢Q3: How do I remove this tool?
A3: The tool does not have to be removed because the tool is never installed. No Programs folder entry or Add/Remove Programs entry is created when the tool is run. However, there may be a temporary folder left in the root of one of your disks. This folder will be removed on next restart.

which is why you cannot find it in the menu or add/ remove programmes

As I understand it, the tool runs once a month (or whatever) as part of Windows Update, and its only function to the check for/clear the most prevalent pests (e.g. blaster).

Way to go Microsoft, some "anti-virus" tool