Windows 10: Malicious Removal Tool (MRT) Blocked by System Administrator

Hello Friends!

I attempted to 'run' a quick scan of Microsoft's 'Malicious Removal Tool', however, when I try to, a window appears on my laptop which says 'This App has been blocked by your System Administrator. Contact your System Administrator for more info'.

I am running Windows 10 Home x64 and I am the local Administrator.

I'd appreciate it if someone could please provide instructions on how I can unblock MRT so I can run a quick scan.

Thank you in advance for your assistance.

:)

 

Cant run Microsoft Malicious Software removal tool. Blocked by Adminstrative group policy

I've tried to run the Malicious Software removal tool that I've downloaded to my Computer using the Administrator command but it wont run. I've typed in MRT in the search box but it says it has been blocked by your system administrator, Which I happen
to be. It used to run by just clicking on the short cut. Anybody know what's going on and how to set the group policies to run it or get around it?

 

Malicious Software Removal Tool (MRT)

ca_9,

What anti-virus application
or security suite
is installed
?

What other anti-malware products
are installed and running ?

`~`

 

Issue Solved. Found previous post from 'Brink' with solution.

 

Could you please send me the link?

 

Software restriction policies are stored in the registry keys below. You might check to see if it may be listed in either. If so, delete it and restart the PC to apply.



How Software Restriction Policies Work: Group Policy

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer

HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Window

 

Thank you, I'll try that

 

I'll add to this thread as this seemed to be the best way to deal with the issue, I have 4 Win 10 devices, all now on Creators edition 2017-08 Cumulative Update for Windows 10 Version 1703 (KB4034674) and have had different solutions to the same issue of the Admin blocking MRT

(1). Asus Zenbook (64 bit) and (2) Cheap Win Tablet(32 bit) - Issue disappeared with update above (MRT now not blocked)
(3) Compaq 3230 Core 2 Duo Laptop (64bit) (Win 8.0-8.1-10 upgrades) registry keys as described above found and deleted (MRT now not blocked)
(4) Current desktop (32 bit) (Sandy Bridge i5 2500) Win 7 to 10 upgrade now on Creators 1703, no mention of MRT or keys in Brinks suggested locations and still blocked by the Administrator (who I am).

I've added the 32-bit and 64bit descriptions as KB4034674 comes in both flavours. I've not tried nuking the policies registry on my desktop as I'm not confident with RegEdit and that that I might inadvertently do damage. Has anybody seen issue 4 and have they managed to solve it?

 

Hi VicdeB

Sorry I'm not sure what's going on with your issue number 4. I'll have to leave that to someone here who has more expertise in this area than I do. BTW though, have you downloaded the August edition of MRT through Windows Update and I'm assuming MRT does appear in your C:\Windows\System32 Folder?

Cheers, Neil.

 

Thanks Neil,
I was hoping that someone who helped you could help me but you might have helped me, yes MRT is in the folder as a 9th August 2017 application file. I note also that there is an MRT folder and in it there is a folder named 677022D4-7EC2-4F65-A906-10FD5BBCB34C, I need to look at my registry again to see if that's in either of the HK_Local or User entries under Policies. Might be a while as I have another problem with my desktop after yesterday's Nvidia update to Driver.385.28, the dreaded Bad Pool caller blue screen of death, if it happens again, I'll probably need to do a roll back and hope for stability before playing with MRT (sigh!). My fault I suppose, built this computer in 2010, it started with Win 7 Pro and has been updated to the very current Win 10 in all the steps since the free upgrade in July 2016, it also runs a few programmes on XP virtualisation and runs a Wacom ET-04050 tablet off an RS-232 connector (great to find on a 2010 LGA-1155 board) .This year the graphics card (Asus 6850) blew up and I went for a NVidia 1050Ti but have had issues
with driver problems on both with every OS upgrade. It looks as though MRT will have to wait and we're also expecting the Fall update later this year, which is a features update so no idea what else will stop working. I guess my Registry is carrying a whole load of gumpf from 2010 and MRT usability might be an issue because of this. I will keep you informed of the out come for interest (assuming no more blue screens)

 

UPDATE

From another solution, these registry settings weren't available to delete

reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /f
reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /f
reg delete "HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /f
reg delete "HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /f
reg delete "HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /

I could not find the MRT folder mentioned in my previous post, so to reiterate Brink's solution that worked for Neal and for me on Win 10 machine Nr 3, has been the best solution so far but not applicable to my desktop.

 

Probably this tutorial.

Bypass This app has been blocked for your protection in Windows 10

 

Bree,

Sorry, your guess was incorrect it's not that thread you have referenced that worked for device 3 for me,it was simply deleting the MRT references from my laptop's registry specifically under

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer

HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Window

Hope this helps , it's desktop Device 4 (where the entries above don't exist) that I'm drawing a blank on.