Subj : Malicious Software Removal Tool MRT.exe bogus infected files?
To   : All
From : [email protected]
Date : Thu Jan 31 2019 07:14 pm

Path:
eternal-september.org!mx02.eternal-september.org!feeder.eternal-september.org!n
ews.glorb.com!Xl.tags.giganews.com!border1.nntp.dca1.giganews.com!nntp.giganews
.com!local2.nntp.dca.giganews.com!nntp.earthlink.com!news.earthlink.com.POSTED!
not-for-mail
NNTP-Posting-Date: Sat, 11 Jun 2016 10:12:20 -0500
Message-ID: <[email protected]>
Date: Sat, 11 Jun 2016 11:12:23 -0400
From: Ron Hardin <[email protected]>
X-Mailer: Mozilla 2.02 (WinNT; I)
MIME-Version: 1.0
Newsgroups: microsoft.public.windowsxp.help_and_support
Subject: Malicious Software Removal Tool MRT.exe bogus infected files?
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 17
X-Usenet-Provider: http://www.giganews.com
NNTP-Posting-Host: 71.54.71.88
X-Trace:
sv3-1KyLJ+ynrQXNOeHrFwBJ1UA7hfwSHl0wV8ORxOfbQeSsdeLBgQZGuSaR7JVjOxqUS/9rwf/V9HO
vtnO!g+9BFDyDK+c6i8Y2c3iO7ISABxfsQVThK89T9pAR/tjtoDkXI8saCZjBOc0QY82cfPPahqzGCV
ht!mkZ1x4Lg
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint
properly
X-Postfilter: 1.3.40
X-Original-Bytes: 1523
Xref: mx02.eternal-september.org
microsoft.public.windowsxp.help_and_support:31850

MRT.exe, if you run it explicitly (say download it
after the second Tuesday from Microsoft instead of
getting it from Windows Update) during its scan
reports 4 infected files, but at the end reports
no files infected.

Apparently it does this on any XP machine.

I'd guess some standard files match the virus
pattern and they ignore those matches at the end.

It's a little quick but it seems to be in the
JavaScript general area of quick scan.
--
[email protected]

On the internet, nobody knows you're a jerk.
--- Platinum Xpress/Win/WINServer v3.1
* Origin: Prison Board BBS Mesquite Tx  //telnet.RDFIG.NET www. (1:124/5013)