Windows Malicious Software-Permissions to Remove

[Bill211]

I think I have a virus or other malicious software. It's on a users computer, which does not have Administrative permissions.

A box does come up, indicating it wants to remove something. However, this box is asking for Administrator user name and password. I could enter my Admin name and password. However, I'm a little hesitant, thinking it could be a fake Windows Malicious Software Removal software, since there are some of those around.

Question: Is this normal behavior for the real Windows Malicious Software Removal Tool? If it wants to remove a virus, but it's running on a standard users login, Does it need to ask permission? Does the real program need an Admin password to remove a virus?

Thank you,
Bill

 

[spamjim]

You'd need to look at the running processes to see if it is a legitimate task.

And, yes, admin level control is typically necessary to remove garbage.

 

[linney]

It is normal that you be logged on as an Administrator to run the Microsoft Malicious Software Removal Tool.

If you want to manually run the tool just launch it via MRT.exe in the Start Run Box.



Malicious Software Removal Tool

http://www.microsoft.com/en-au/security/pc-security/malware-removal.aspx

 

[goombawaho]

I would also add that MSRT is really not much of a malware remover. You can run it and feel better about things but it's not going to do much. Make sure you have other layers of defense.

I thought our little wild time had just begun.

 

[ANFPS26]

I always suspected that tool was to remove operating system cracks (such as genuine advantage removal checks) and didn't have anything to do with malware as such.

Jim

 

[linney]

The MRT was created to remove the most dangerous of Worms and Virus (not all) on user's machines that failed to protect themselves by not running any Anti Virus software.

I think that the MSblaster worm threat was involved in the MRT creation and development.


The Microsoft Windows Malicious Software Removal Tool helps remove specific, prevalent malicious software from computers that are running supported versions of Windows.

http://support.microsoft.com/kb/890830