Microsoft Windows Malicious Software Removal Tool

Content Authoring
1

I’m assuming since these fixlets are updated each month that this is still a supported function.

That being said, I looked into the Analysis results and the Property “Scanning Results - Microsoft Windows Malicious Software Removal Tool”, the results were one of the three show below:

  1. N/A (1.9%)
  2. Results Unknown (2.4%)
  3. No infection found. Successfully Submitted Heartbeat Report Microsoft Windows Malicious Software Removal Tool Finished On DDD MMM ## HH:MM:SS YYYY (95.6%)

I’m unsure on the first two items and would ask if the Analysis needs to be updated address. If it does need to be updated, I would also ask that the results for #3 simply return “No infection found.”, allowing you to use the information easily in a Pivot Table.

2

1 and 2 are intentional.

“N/A” means the value “Results” of the registry key “HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\MSTools\RemovalTool\Statistics” does not exist. Value “Results” is entered into the registry when you deploy the “Windows Security: Microsoft Windows Malicious Software Removal Tool - Run” fixlet.

“Results Unknown” means value “Results” exists but there is no data in it.

For item 3, that is just a raw dump of the msrt scan results which is ultimately sourced from “C:\Windows\debug\mrt.log”.