Subj : Malicious Software Removal Tool MRT.exe bogus infected files?
To   : All
From : rhhardin@mindspring.com
Date : Thu Jan 31 2019 19:14:23

Path:
eternal-september.org!mx02.eternal-september.org!feeder.eternal-september.org!n
ews.glorb.com!Xl.tags.giganews.com!border1.nntp.dca1.giganews.com!nntp.giganews
..com!local2.nntp.dca.giganews.com!nntp.earthlink.com!news.earthlink.com.POSTED!
not-for-mail
NNTP-Posting-Date: Sat, 11 Jun 2016 10:12:20 -0500
Message-ID: <575C2A57.708F@mindspring.com>
Date: Sat, 11 Jun 2016 11:12:23 -0400
From: Ron Hardin <rhhardin@mindspring.com>
X-Mailer: Mozilla 2.02 (WinNT; I)
MIME-Version: 1.0
Newsgroups: microsoft.public.windowsxp.help_and_support
Subject: Malicious Software Removal Tool MRT.exe bogus infected files?
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 17
X-Usenet-Provider: http://www.giganews.com
NNTP-Posting-Host: 71.54.71.88
X-Trace:
sv3-1KyLJ+ynrQXNOeHrFwBJ1UA7hfwSHl0wV8ORxOfbQeSsdeLBgQZGuSaR7JVjOxqUS/9rwf/V9HO
vtnO!g+9BFDyDK+c6i8Y2c3iO7ISABxfsQVThK89T9pAR/tjtoDkXI8saCZjBOc0QY82cfPPahqzGCV
ht!mkZ1x4Lg
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint
properly
X-Postfilter: 1.3.40
X-Original-Bytes: 1523
Xref: mx02.eternal-september.org
microsoft.public.windowsxp.help_and_support:31850

MRT.exe, if you run it explicitly (say download it 
after the second Tuesday from Microsoft instead of 
getting it from Windows Update) during its scan 
reports 4 infected files, but at the end reports 
no files infected.

Apparently it does this on any XP machine.

I'd guess some standard files match the virus 
pattern and they ignore those matches at the end.

It's a little quick but it seems to be in the 
JavaScript general area of quick scan.
-- 
rhhardin@mindspring.com

On the internet, nobody knows you're a jerk.
--- Platinum Xpress/Win/WINServer v3.1
 * Origin: Prison Board BBS Mesquite Tx  //telnet.RDFIG.NET www. (1:124/5013)

.