Secunia
Login
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Forum Thread: Related Problem With Microsoft Removal Tool: False Positive
You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.This thread was submitted in the following forum:
Programs
|
Relating to this vendor: Microsoft |
And, this specific program: Microsoft Removal Tool: Blaster/Nachi |
| Jack87505 | Related Problem With Microsoft Removal Tool: False Positive |
|---|---|
 |
6th Oct, 2012 18:25 |
|
Ranking: 0 Posts: 3 User Since: 7th Dec, 2009 System Score: N/A Location: N/A |
Today's scan showed that my Microsoft Removal Tool KB890830 needed to be updated. I followed the link to the updated program and updated it. A rescan showed that it still needed to be updated. Rebooted. Updated again and rescanned again. Same result. Checked back and found that the tool was up to date when the first scan was done. Looks like a problem with the scans to me. Anyone else? Running Windows 7 if that makes a difference. |
Post "RE: Related Problem With Microsoft Removal Tool: False Positive" has been selected as an answer.
| Maurice Joyce | RE: Related Problem With Microsoft Removal Tool: False Positive | ||||||||
|
6th Oct, 2012 19:17 | ||||||||
| Score: 10493 Posts: 8,055 User Since: 4th Jan 2009 System Score: 100% Location: UK |
Which version of PSI are you running? What path does PSI give you? FINDING A FILE PATH USING PSI VERSION 2 From the DASHBOARD page click on SCAN RESULTS. 1. This will list all your programmes with a + to the left of each programme. 2. Click the + sign next to the item that U want help with. 3. This will reveal the path under DETECTED INSTANCES. 4. Below DETECTED INSTANCES you will see this You can double click this row for additional information & options>double click it>a box will appear>look to the RIGHT & U will see TROUBLESHOOT REPORT in BLUE writing under the heading TOOLBOX> click TroubleShoot Report & it will reveal some information in a box>highlight the information revealed from ---START--- to ---END--- & copy it (CTRL+C) then post it to the Forum (CTRL+V) VERSION 3 This version does not have such an easy method to publish the path. Open PSI>once open select Show Programs. U will now see a page full of programme icons or a list. Right click on the programme in error>select Show Details - that will open a box showing the path & version number of the offending file. U now have 2 options: 1. Write down the exact file path & install version - return to the Forum & type that information. 2. Take a screen shot & publish that. Update 34 18:17 06/10/2012 -- Maurice Windows 7 SP1 64 Bit OS HP Intel Pentium i7 IE 10 for Windows 7 16GB RAM |
||||||||
|
|||||||||
| Jack87505 | RE: Related Problem With Microsoft Removal Tool: False Positive | ||||||||
|
|
6th Oct, 2012 20:03 | ||||||||
| Score: 0 Posts: 3 User Since: 7th Dec 2009 System Score: N/A Location: N/A |
Thanks, Maurice. I'm running PSI 3 The file location is C:\Windows\System32\blastcln.exe and the installed version is 5.12600.5512 Jack |
||||||||
|
|||||||||
| Maurice Joyce | RE: Related Problem With Microsoft Removal Tool: False Positive | ||||||||
|
|
6th Oct, 2012 21:13 | ||||||||
| Score: 10493 Posts: 8,055 User Since: 4th Jan 2009 System Score: 100% Location: UK |
Jack, Not sure how that file got on your system. It is not part of Windows 7 & never has been. That file belongs to this: http://support.microsoft.com/kb/833330 which you will see was superseded by this http://www.microsoft.com/en-gb/security/pc-securit... The Malicious Software Removal Tool does not show in PSI & is run via Windows Update. If you right click on the Windows 7 Action Centre in the task bar>Open Windows Update>View Update history you should see this: https://akkkug.bay.livefilestore.com/y1p8uO3AMycZP... If the item highlighted in yellow is present you are up to date. There are things you can try to remove or stop that file from showing. 1. Create an Ignore Rule for that file from within PSI. 2. Navigate back to where you found it at C:\Windows\System32\blastcln.exe - right click on blastcln.exe>select RENAME & then rename it blastcln.exe-OLD 3. Rather than rename it right click on it & select DELETE (this option may not work). Whichever one you choose run a full PSI rescan & the notification should have been removed. Hope this helps. -- Maurice Windows 7 SP1 64 Bit OS HP Intel Pentium i7 IE 10 for Windows 7 16GB RAM |
||||||||
|
|||||||||
