Microsoft Malicious Software Removal Tool runs multiple times daily - not once per month as expected

Anonymous
2016-01-02T22:29:43+00:00

Since, it seems, the 1151 Windows 10 Home 64b upgrade, my laptop has been running MRT on a more than daily basis, producing high disk usage. At least twice, I've run it manually, which allows me to see the details, and noticed MRT detecting 97 malicious files, but then, continuing to run, looping and scanning the same set of files repeatedly, until it finally quits with no malicious files detected.

Norton Internet Security, Norton Power Eraser, and Malware Bytes, all current, have detected no malicious files, but I am thinking it is obvious there are malicious files. Not sure what else to do at this point, any advice would be appreciated.

Moved from Windows

Original title: Microsoft Software Removal Tool running more than daily, with high disk usage

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

44 answers

Sort by: Newest
  1. Anonymous
    2016-05-15T23:08:41+00:00

    @Brian, you might want to see my last post in my thread. See: http://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning/mrthb-or-mrterrorhb-or-mrtexe-runs-daily-instead/f823ac2e-3971-4561-a139-3b140772c047?page=2

    Susan MillerVA---edited same day as post---May 15, 2016 7:15 Eastern Spring Forward time

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2016-05-07T14:12:45+00:00

    @Susan That is an interesting point. As it was recommended in this thread, and by Microsoft tech support, when addressing a different, network, issue, I have so far not installed any anti-virus or firewall app. No Comcast version of Norton, or anything else, just Windows Defender (and Firewall). Also, my old laptop did run the Home version of Windows 10 64, whereas my two desktops run the Pro version, as does the new laptop.

    However, just to confuse matters, my desktops do run Comcast Norton Internet Security. I guess I should (re?)check their logs, though I don't recall any issues with them and MRT. It could simply be they are so much more powerful than the old laptop that I just never noticed. My old laptop bogged down horribly. It was far older than both my desktops.

    Getting the new laptop was a rather expensive 'solution' but very worth it to me - the old laptop was Old.

    Brian, I am looking forward to hearing about your results. No more information from PaulSey has been received about his research as of May 3. See more of my reply at my thread http://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning/mrthb-or-mrterrorhb-or-mrtexe-runs-daily-instead/f823ac2e-3971-4561-a139-3b140772c047?tm=1458872277533.

    Susan MillerVA  May 7, 2016 at 10:12 AM Eastern Spring Forward Time

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2016-04-17T22:21:20+00:00

    @Susan That is an interesting point. As it was recommended in this thread, and by Microsoft tech support, when addressing a different, network, issue, I have so far not installed any anti-virus or firewall app. No Comcast version of Norton, or anything else, just Windows Defender (and Firewall). Also, my old laptop did run the Home version of Windows 10 64, whereas my two desktops run the Pro version, as does the new laptop.

    However, just to confuse matters, my desktops do run Comcast Norton Internet Security. I guess I should (re?)check their logs, though I don't recall any issues with them and MRT. It could simply be they are so much more powerful than the old laptop that I just never noticed. My old laptop bogged down horribly. It was far older than both my desktops.

    Getting the new laptop was a rather expensive 'solution' but very worth it to me - the old laptop was Old.

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2016-04-17T19:50:48+00:00

    @Brian: I am glad your problem seems to be solved.  In case this has a bearing on why your new laptop doesn't have the old laptop's problem, I'd like to know if you are using Norton on this new laptop (You did use Norton on your old one, right?). I am still using Comcast Norton on my Dell 755 computer with Windows 10 Home.

    Susan MillerVA

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2016-04-17T19:23:27+00:00

    Hi @RickCP @PaulSey @SusanMillerVA

    I'm currently back up in Maine, away from my old laptop. When I get back tomorrow, I can run my old laptop at least once more, to update it to the April patch, and see the behavior in the log.

    However, I did finally upgrade my laptop. I chose an Alienware (Dell) laptop, running Windows 10 Pro 64. So far, so good. MRT ran once on April 8th, probably when I ran my first Windows Update on receiving the laptop. MRT ran again on the 12th, when the April patch was released. It has not run since! The total log so far:


    Microsoft Windows Malicious Software Removal Tool v5.34, March 2016 (build 5.34.12400.0)

    Started On Fri Apr  8 11:56:16 2016

    Engine: 1.1.12400.0

    Signatures: 1.213.7173.0

    Results Summary:


    No infection found.

    Microsoft Windows Malicious Software Removal Tool Finished On Fri Apr  8 11:57:16 2016

    Return code: 0 (0x0)


    Microsoft Windows Malicious Software Removal Tool v5.35, April 2016 (build 5.35.12524.0)

    Started On Tue Apr 12 15:39:47 2016

    Engine: 1.1.12603.0

    Signatures: 1.217.515.0

    Results Summary:


    No infection found.

    Microsoft Windows Malicious Software Removal Tool Finished On Tue Apr 12 15:41:39 2016

    Return code: 0 (0x0)


    The above was the entire log. I'm thinking the run times are so quick because there isn't much on the new HD's yet, either apps or data. I guess this issue is resolved for me, if only because I upgraded my laptop.

    Thanks to everyone for their time, effort and communication. I do have to state, at least the situation was steadily improving on my old laptop. When I first posted this thread, MRT was monopolizing my CPU, and making my poor, old laptop nonfunctional. I had to restart it in order to be able to use it. Since February or so, I actually had to check the log to even notice MRT was still running daily on the old laptop. Both the number of times it ran, and the length of time each instance ran greatly decreased.

    Best of luck to those still dealing with this issue @SusanMillerVA . I'll keep my eye on all my logs, 3 computers, just in case.

    Was this answer helpful?

    0 comments No comments