Strange file name for MRT.EXE

[Guest Susie1001]

Hi everyone,

 

Checking through my AVG for which files have 'Allow' next to them for internet connection, I came across the file for MRT.EXE but the actual name of it says:

 

 

أداة إزالة البرامج الضارة لـ Microsoft Windows and underneath it says: C:\WINDOWS\SYSTEM32\MRT.EXE

 

 

To be on the safe side until I know what this file is, I have changed the settings rule to 'Block' and Logged any occurrences of this file.

 

 

All of the other Microsoft files just have Windows or Microsoft and 'Product name' after it, so why would there be some Arabic text before it.

 

Does anyone have a clue as to why this is and could it be a virus?

 

I have done numerous scans and the special ones because of these two new threats we've heard about just lately.

 

I chatted with Microsoft Support and they think it is a virus but if I wanted to go further, it would cost $99 (Phew)!, so decided against that, especially as no virus has been found on my very new system.

 

I have a Dell system and their support didn't know what it was either...... can anyone help or throw some light on this peculiarity?

 

 

:()

 

.......side note: I checked the translation and it says: 'Malicious Software Removal Tool for' so that appears to make it look genuine, apart from the fact that it is in Arabic.

 

Also, I checked through my Updates for the MRT.exe that Microsoft has supposed to have downloaded and it isn't in there.

 

When I check the official download file from Microsoft's site it states this:

 

1. Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

 

and it is only 26.5MB where as the file on my system reads as over 91Mb

 

 

Any help would be very welcome.....

 

Continue reading...