• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Solved Windows malicious software stopped working


werty

Member
Member
Posts
187
#1
Hi, after installing Windows Malicious Software Removal Tool for Windows 8.1 - February 2014 (KB890830) every time I start my computer in the Action center - reliability history there`s an error:
How can I solve this problem? Thanks for your help!
Capture.PNG
 

My Computer

System One

  • OS
    Windows 8.1 Pro/ Windows 8 Enterprise
    Computer type
    Laptop
    System Manufacturer/Model
    Dell Inspiron 1545/ Asus F5V
Posts
1,360
#2

My Computer

System One

  • OS
    Windows 8.1 Enterprise

my2cents

Veni, Vidi, Vici
VIP Member
Guru
Posts
2,191
#3
Hello werty,

The information you provided indicates the following:

MRT.exe is the Malicious Software Removal Tool (latest version). The mpgear.dll is the module causing the issue. It is supposed to be a valid dll that is signed by MS but I can't find what program is using it because it is not present on my Win 8.1 x64 PC. Maybe it is a file that is used by Windows Defender (because I have defender disabled)? I'm guessing that the Malicious Software Removal Tool is respawning a new request (at each startup) in an attempt to complete the unfinished scan (just a guess). Now, according to this website, that mpgear.dll is a valid MS dll so I would check to make sure it is signed by MS (right click the dll and check for signature). However, if it is not signed by MS then it could be malware. At this time, I cannot offer any fix because you need to verify that mpgear.dll is a valid MS dll. See here for more information:

Malware scan of MpGear.dll (Microsoft Malware Protection) de90878932bf40c9232268f2815a2833be076d17 - herdProtect
 

My Computer

System One

  • OS
    Windows 8.1
    Computer type
    PC/Desktop
    CPU
    Intel G2020
    Motherboard
    ASRock B75M-DGS R2.0
    Memory
    8GBs @ 1333 MHz
    Hard Drives
    Samsung 840 EVO
    PSU
    400w
    Internet Speed
    57/11

werty

Member
Member
Posts
187
#4
I checked and it is signed by Microsoft and I also downloaded a fresh copy from the Microsoft download center but to no avail. Another failure today after the automatic maintenance finished. Another suggestions?
 

My Computer

System One

  • OS
    Windows 8.1 Pro/ Windows 8 Enterprise
    Computer type
    Laptop
    System Manufacturer/Model
    Dell Inspiron 1545/ Asus F5V
Posts
1,883
#5
MRT.exe = spyware.

Best to never install that when doing WU. Uncheck it.
 

My Computer

System One

  • OS
    7601.18247.x86fre.win7sp1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Self-built Intel based
    CPU
    Pentium D 925 3.0 GHz socket 775, Presler @ ~ 3.2 GHz
    Motherboard
    Intel DQ965MT
    Memory
    Hyundai 2 GB DDR2 @ 333 MHz
    Graphics Card(s)
    ASUS DirectCU II HD7790-DC2OC-2GD5 Radeon HD 7790 2GB 128-Bit GDDR5
    Sound Card
    MOTU Traveler firewire interface
    Hard Drives
    1 Seagate Barracuda SATA II system/boot drive 80 GB, 2 Western Digital hdds - 1 is SATA II Caviar Black 1 TB attached to card (assorted media, page, temp), other is SATA I 420 GB (games, media, downloads)
    PSU
    Thermaltake 450W
    Cooling
    stock Gateway cooling, extra large fan in rear of case
    Keyboard
    Alienware/Microsoft Internet kb
    Mouse
    Logitech M510
    Internet Speed
    Optimum Online, fast for US
    Browser
    Pale Moon
    Antivirus
    Kaspersky integrated into ZoneAlarm+Antivirus

Borg 386

ADHD member
VIP Member
Pro User
#6
Try running a SFC /Scannow to see if there are any problems in your system that need repaired.

http://www.eightforums.com/tutorials/3047-sfc-scannow-command-run-windows-8-a.html

Try d/l ing from here (save to desktop), r click & run as administrator.

Download Malicious Software Removal Tool from Official Microsoft Download Center

If you still have problems, there may be temp files that need to be cleaned out. You can either run MS's built in disk cleanup or d/l CCleaner.

Disk Cleanup - Open and Use - Windows 7 Help Forums

https://www.piriform.com/ccleaner/download

Another good tool is TFC, although I have not used it on Win 8 so I am unsure if it will work (anyone out there used it on 8 yet?)

TFC Download
 

My Computer

System One

  • OS
    Win 7 32, Win 7 64 Pro, Win 8.1 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    It's a Dell, Dude.
    CPU
    Intel Caffinated Core Duo
    Motherboard
    Father is bored too.
    Memory
    4 GB
    Graphics Card(s)
    NVidia something-or-another
    Monitor(s) Displays
    24" HD TV/Monitor/Alternative Dimensional Viewing Portal
    Screen Resolution
    Fuzzy after a couple drinks
    Hard Drives
    2 or 3, depending on if it's a night they're arguing about having a "split personality crisis" because I partitioned the drive.
    Case
    Don't get on my case....man
    Cooling
    Scotch on the rocks on the weekends..
    Keyboard
    Mad Catz Cyborg V7. Or maybe Cyborg Catz Are Mad At V7's??? I know it lights up...far out.
    Mouse
    currently being stalked by the cat...
    Internet Speed
    Never fast enough...
    Browser
    Defeated by Mario...wait...OH...BRowser...
    Antivirus
    Various

werty

Member
Member
Posts
187
#7
Unfortunatelly today another error relating to mpgear.dll :(
 
Last edited:

My Computer

System One

  • OS
    Windows 8.1 Pro/ Windows 8 Enterprise
    Computer type
    Laptop
    System Manufacturer/Model
    Dell Inspiron 1545/ Asus F5V

RonnieJP

Member
Member
Posts
43
#8
Unfortunatelly today another error relating to mpgear.dll :(
Hi Werty,

I get the same error in the Windows 8.1 Event Viewer as Event 1000 Application error:
Faulting application name: MRT.exe, version: 5.9.9902.0, time stamp: 0x52f1a7d9
Faulting module name: mpgear.dll, version: 1.1.1224.0, time stamp: 0x528c12f6
Exception code: 0xc0000005
Fault offset: 0x0001b48a
Faulting process id: 0x22c
Faulting application start time: 0x01cf31980937a6b2
Faulting application path: C:\WINDOWS\system32\MRT.exe
Faulting module path: C:\WINDOWS\Temp\mpgear.dll
Report Id: 4a4345c8-9d8b-11e3-b729-0019d138fd8e
Faulting package full name:
Faulting package-relative application ID:

It doesn't happen on every boot, but usually once a day. Seems to happen a few minutes after automatic maintenance is performed, according to the time stamp. Tried the above suggestions, but no joy.
 

My Computer

System One

  • OS
    Windows 8.1 Pro 32-bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Homebuilt
    CPU
    Intel Xeon X3230
    Motherboard
    Intel D975XBX2
    Memory
    4 GB
    Graphics Card(s)
    nVidia GT-240
    Monitor(s) Displays
    Dell P2714T Touchscreen
Posts
1,883
#9
You likely have some kind of malware causing that to happen. It's a good guess anyway.

Have you scanned with Malwarebytes and ADWCleaner?

If some nasty stuff is found, use Killdisk on the drive to wipe it entirely clean.

This means "access violation" - Exception code: 0xc0000005 - Maybe malware protecting itself.
 

My Computer

System One

  • OS
    7601.18247.x86fre.win7sp1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Self-built Intel based
    CPU
    Pentium D 925 3.0 GHz socket 775, Presler @ ~ 3.2 GHz
    Motherboard
    Intel DQ965MT
    Memory
    Hyundai 2 GB DDR2 @ 333 MHz
    Graphics Card(s)
    ASUS DirectCU II HD7790-DC2OC-2GD5 Radeon HD 7790 2GB 128-Bit GDDR5
    Sound Card
    MOTU Traveler firewire interface
    Hard Drives
    1 Seagate Barracuda SATA II system/boot drive 80 GB, 2 Western Digital hdds - 1 is SATA II Caviar Black 1 TB attached to card (assorted media, page, temp), other is SATA I 420 GB (games, media, downloads)
    PSU
    Thermaltake 450W
    Cooling
    stock Gateway cooling, extra large fan in rear of case
    Keyboard
    Alienware/Microsoft Internet kb
    Mouse
    Logitech M510
    Internet Speed
    Optimum Online, fast for US
    Browser
    Pale Moon
    Antivirus
    Kaspersky integrated into ZoneAlarm+Antivirus

RonnieJP

Member
Member
Posts
43
#10
You likely have some kind of malware causing that to happen. It's a good guess anyway.

Have you scanned with Malwarebytes and ADWCleaner?

If some nasty stuff is found, use Killdisk on the drive to wipe it entirely clean.

This means "access violation" - Exception code: 0xc0000005 - Maybe malware protecting itself.
Nah, it's not malware. Both MRT.exe and mpgear.dll scanned with Hitman Pro, MalwareBytes and Webroot.
Also, the digital signatures and hashes match Microsoft's information. They are part of Microsoft's Malicious Software Removal Tool.
Started happening just after the February updates, so it may go away when the March updates come out.
 

My Computer

System One

  • OS
    Windows 8.1 Pro 32-bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Homebuilt
    CPU
    Intel Xeon X3230
    Motherboard
    Intel D975XBX2
    Memory
    4 GB
    Graphics Card(s)
    nVidia GT-240
    Monitor(s) Displays
    Dell P2714T Touchscreen
Posts
1,883
#11
Nah, it's not malware. Both MRT.exe and mpgear.dll scanned with Hitman Pro, MalwareBytes and Webroot.
Also, the digital signatures and hashes match Microsoft's information. They are part of Microsoft's Malicious Software Removal Tool.
Started happening just after the February updates, so it may go away when the March updates come out.
lol 2 files scanned?

That's not very prudent. I think it's malware.

Recommend Killdisk then install Windows, regardless if it is or not.
 

My Computer

System One

  • OS
    7601.18247.x86fre.win7sp1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Self-built Intel based
    CPU
    Pentium D 925 3.0 GHz socket 775, Presler @ ~ 3.2 GHz
    Motherboard
    Intel DQ965MT
    Memory
    Hyundai 2 GB DDR2 @ 333 MHz
    Graphics Card(s)
    ASUS DirectCU II HD7790-DC2OC-2GD5 Radeon HD 7790 2GB 128-Bit GDDR5
    Sound Card
    MOTU Traveler firewire interface
    Hard Drives
    1 Seagate Barracuda SATA II system/boot drive 80 GB, 2 Western Digital hdds - 1 is SATA II Caviar Black 1 TB attached to card (assorted media, page, temp), other is SATA I 420 GB (games, media, downloads)
    PSU
    Thermaltake 450W
    Cooling
    stock Gateway cooling, extra large fan in rear of case
    Keyboard
    Alienware/Microsoft Internet kb
    Mouse
    Logitech M510
    Internet Speed
    Optimum Online, fast for US
    Browser
    Pale Moon
    Antivirus
    Kaspersky integrated into ZoneAlarm+Antivirus

RonnieJP

Member
Member
Posts
43
#12
I did a complete scan, but I scanned those 2 files independently as well, just in case the respective A/V programs did not include them. Luckily, I saved system image backups of my C: drive from before the Windows updates, so if it causes any problems (other than the event log errors), I can always restore. Thanks, but I think I'll take a more conservative approach for now.
 

My Computer

System One

  • OS
    Windows 8.1 Pro 32-bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Homebuilt
    CPU
    Intel Xeon X3230
    Motherboard
    Intel D975XBX2
    Memory
    4 GB
    Graphics Card(s)
    nVidia GT-240
    Monitor(s) Displays
    Dell P2714T Touchscreen
Posts
5
#13
Just wanted to let you know that I, too, suffer from the same problem.
My computer is 100% clean and no malware is present.

I consider myself an advanced user and can assure you there's probably nothing wrong with your computer.
I started receiving the same errors just after applying last February security updates.
I hope this issue will be resolved by the time Microsoft will release security updates for March (including the Malicious Software Removal tool).

It sure does generate lots of errors, though.
Untitled.jpg
 

My Computer

System One

  • OS
    Windows 8.1
Posts
1,883
#14

My Computer

System One

  • OS
    7601.18247.x86fre.win7sp1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Self-built Intel based
    CPU
    Pentium D 925 3.0 GHz socket 775, Presler @ ~ 3.2 GHz
    Motherboard
    Intel DQ965MT
    Memory
    Hyundai 2 GB DDR2 @ 333 MHz
    Graphics Card(s)
    ASUS DirectCU II HD7790-DC2OC-2GD5 Radeon HD 7790 2GB 128-Bit GDDR5
    Sound Card
    MOTU Traveler firewire interface
    Hard Drives
    1 Seagate Barracuda SATA II system/boot drive 80 GB, 2 Western Digital hdds - 1 is SATA II Caviar Black 1 TB attached to card (assorted media, page, temp), other is SATA I 420 GB (games, media, downloads)
    PSU
    Thermaltake 450W
    Cooling
    stock Gateway cooling, extra large fan in rear of case
    Keyboard
    Alienware/Microsoft Internet kb
    Mouse
    Logitech M510
    Internet Speed
    Optimum Online, fast for US
    Browser
    Pale Moon
    Antivirus
    Kaspersky integrated into ZoneAlarm+Antivirus
Posts
1,883
#16
And?
 

My Computer

System One

  • OS
    7601.18247.x86fre.win7sp1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Self-built Intel based
    CPU
    Pentium D 925 3.0 GHz socket 775, Presler @ ~ 3.2 GHz
    Motherboard
    Intel DQ965MT
    Memory
    Hyundai 2 GB DDR2 @ 333 MHz
    Graphics Card(s)
    ASUS DirectCU II HD7790-DC2OC-2GD5 Radeon HD 7790 2GB 128-Bit GDDR5
    Sound Card
    MOTU Traveler firewire interface
    Hard Drives
    1 Seagate Barracuda SATA II system/boot drive 80 GB, 2 Western Digital hdds - 1 is SATA II Caviar Black 1 TB attached to card (assorted media, page, temp), other is SATA I 420 GB (games, media, downloads)
    PSU
    Thermaltake 450W
    Cooling
    stock Gateway cooling, extra large fan in rear of case
    Keyboard
    Alienware/Microsoft Internet kb
    Mouse
    Logitech M510
    Internet Speed
    Optimum Online, fast for US
    Browser
    Pale Moon
    Antivirus
    Kaspersky integrated into ZoneAlarm+Antivirus
Posts
5
#17
Do the math.
You have two people who report the same issue. Plus another (myself) using a machine that can't access the Internet...

There are probably more, but not everyone bothers to check the Reliability history.
 

My Computer

System One

  • OS
    Windows 8.1

werty

Member
Member
Posts
187
#18
For the record another failure today- MRT.exe stopped working. I don't know if it`s related but windows defender definitions won`t install- neither through Windows update nor through Windows defender itself. This is the error: Capture.PNG
 

My Computer

System One

  • OS
    Windows 8.1 Pro/ Windows 8 Enterprise
    Computer type
    Laptop
    System Manufacturer/Model
    Dell Inspiron 1545/ Asus F5V

Users Who Are Viewing This Thread (Users: 0, Guests: 1)