We looked at the log for the recently downloaded KB890830 (to our Tablet) and
even though no infections found, we got message: sys clean warning - mem scan
get image page from PID (3200) win32 error code: 0x00000057 (87): the
parameter is incorrect (659). We ran a manual of the MRT again, and we didn't
get that message. (Maybe the messge only appeared when the kb890830 was first
downloaded today).

Back in August we received similar message, which read: "sys clean warning -
mem scan get image path from pid (3096) win32 error
code 0x00000057 (87): the parameter is incorrect (65)

Would anyone know if this is serious and if it can be corrected? Thanks for
any definitive help.

Hi Alice,

What I would suggest is running the Malicious Software Removal Tool again.
To see if that error shows up again. I am guessing that the error was the
tool's fault and not a problem on your machine.

To run the tool again, you can go here...
http://www.microsoft.com/security/ma...e/default.mspx

Click on Skip the details and run the tool

The thread from 08-15-2005
http://forums.wugnet.com/modules.php... =Security-Adm

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:64E0D8DB-12D1-40C0-A760-F0FB0EF0D8D3@microsoft.com,
AliceZ <AliceZ@discussions.microsoft.com> hunted and pecked:
> We looked at the log for the recently downloaded KB890830 (to our Tablet)
> and even though no infections found, we got message: sys clean warning -
> mem scan get image page from PID (3200) win32 error code: 0x00000057
> (87): the parameter is incorrect (659). We ran a manual of the MRT again,
> and we didn't get that message. (Maybe the messge only appeared when the
> kb890830 was first downloaded today).
>
> Back in August we received similar message, which read: "sys clean
> warning - mem scan get image path from pid (3096) win32 error
> code 0x00000057 (87): the parameter is incorrect (65)
>
> Would anyone know if this is serious and if it can be corrected? Thanks
> for any definitive help.

Thank you for the reply. We went to the page you suggested, but got the
reply: "We are sorry, but the tool did not work properly on your computer.
Please try again later, or try downloading the tool directly from the
Microsoft.com Download Center. If you cannot get the tool to work, please
consult your antivirus vendor for general antivirus assistance."
We did not want to go any further with the downloading (the tool) as we
already have the MRT.exe in our Winini/Sys32. As we stated, we did click on
that after we did the Run Notepad %.. etc. and got the PID waring. When we
did the second (manual) test by clicking on the MRT.exe, we did not see the
PID problem warning that (2nd) time.
Should we still download the tool as that page suggests?

"Wesley Vogel" wrote:

> Hi Alice,
>
> What I would suggest is running the Malicious Software Removal Tool again.
> To see if that error shows up again. I am guessing that the error was the
> tool's fault and not a problem on your machine.
>
> To run the tool again, you can go here...
> http://www.microsoft.com/security/ma...e/default.mspx
>
> Click on Skip the details and run the tool
>
> The thread from 08-15-2005
> http://forums.wugnet.com/modules.php... =Security-Adm
>
> --
> Hope this helps. Let us know.
>
> Wes
> MS-MVP Windows Shell/User
>
> In news:64E0D8DB-12D1-40C0-A760-F0FB0EF0D8D3@microsoft.com,
> AliceZ <AliceZ@discussions.microsoft.com> hunted and pecked:
> > We looked at the log for the recently downloaded KB890830 (to our Tablet)
> > and even though no infections found, we got message: sys clean warning -
> > mem scan get image page from PID (3200) win32 error code: 0x00000057
> > (87): the parameter is incorrect (659). We ran a manual of the MRT again,
> > and we didn't get that message. (Maybe the messge only appeared when the
> > kb890830 was first downloaded today).
> >
> > Back in August we received similar message, which read: "sys clean
> > warning - mem scan get image path from pid (3096) win32 error
> > code 0x00000057 (87): the parameter is incorrect (65)
> >
> > Would anyone know if this is serious and if it can be corrected? Thanks
> > for any definitive help.
>
>

Just an add-on to say that we did the manual download of the MRT (from the
page your suggested) and ran the test. The result did NOT show a PID warning,
just the results that no infections were found. I wonder if that manual
download we did (and executed) would give the same results as the MRT.exe in
our Sys32? It appears that there is only one log file for all results. One
again we wonder if the KB890830 we download each month is the MRT.exe that
shows in the Sys32? Is the MRT.exe in the Sys32 the current KB890830 that we
download each month (does it cchange to the newest one each month)? What I am
trying to say is - is the MRT.exe in the Sys32 the most current one? Or would
we always have to go to that ddownload page you supplied in case we had to
run the MRT again in the future, or would the one in the Sys32 be okay to
use? Thanks again.

"AliceZ" wrote:

> Thank you for the reply. We went to the page you suggested, but got the
> reply: "We are sorry, but the tool did not work properly on your computer.
> Please try again later, or try downloading the tool directly from the
> Microsoft.com Download Center. If you cannot get the tool to work, please
> consult your antivirus vendor for general antivirus assistance."
> We did not want to go any further with the downloading (the tool) as we
> already have the MRT.exe in our Winini/Sys32. As we stated, we did click on
> that after we did the Run Notepad %.. etc. and got the PID waring. When we
> did the second (manual) test by clicking on the MRT.exe, we did not see the
> PID problem warning that (2nd) time.
> Should we still download the tool as that page suggests?
>
> "Wesley Vogel" wrote:
>
> > Hi Alice,
> >
> > What I would suggest is running the Malicious Software Removal Tool again.
> > To see if that error shows up again. I am guessing that the error was the
> > tool's fault and not a problem on your machine.
> >
> > To run the tool again, you can go here...
> > http://www.microsoft.com/security/ma...e/default.mspx
> >
> > Click on Skip the details and run the tool
> >
> > The thread from 08-15-2005
> > http://forums.wugnet.com/modules.php... =Security-Adm
> >
> > --
> > Hope this helps. Let us know.
> >
> > Wes
> > MS-MVP Windows Shell/User
> >
> > In news:64E0D8DB-12D1-40C0-A760-F0FB0EF0D8D3@microsoft.com,
> > AliceZ <AliceZ@discussions.microsoft.com> hunted and pecked:
> > > We looked at the log for the recently downloaded KB890830 (to our Tablet)
> > > and even though no infections found, we got message: sys clean warning -
> > > mem scan get image page from PID (3200) win32 error code: 0x00000057
> > > (87): the parameter is incorrect (659). We ran a manual of the MRT again,
> > > and we didn't get that message. (Maybe the messge only appeared when the
> > > kb890830 was first downloaded today).
> > >
> > > Back in August we received similar message, which read: "sys clean
> > > warning - mem scan get image path from pid (3096) win32 error
> > > code 0x00000057 (87): the parameter is incorrect (65)
> > >
> > > Would anyone know if this is serious and if it can be corrected? Thanks
> > > for any definitive help.
> >
> >

Hi Alice,

The latest Release Date is October 11, 2005. You can right click your
mrt.exe, select properties and see the date on the General tab. Created or
Modified which ever is newer.

[[The Malicious Software Removal Tool is released on the second Tuesday of
every month. Each release of the tool helps detect and remove current,
prevalent malicious software. This malicious software includes viruses,
worms, and Trojan horses. ]]
Lots more info here..
The Microsoft Windows Malicious Software Removal Tool helps remove specific,
prevalent malicious software from computers that are running Windows Server
2003, Windows XP, or Windows 2000
http://support.microsoft.com/default...b;en-us;890830

I didn't see your error listed here..
You receive an error when you run the Microsoft Windows Malicious Software
Removal Tool
http://support.microsoft.com/default...b;en-us;891717

Delete the mrt.exe in your system32 folder. Get a new one. I suspect that
there may be something wrong with yours. I don't have any idea why, it just
happens sometimes. Hey it's free, get a new one. ;-)

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:4AB1A205-17B4-48C4-9962-6961EFD5EAA5@microsoft.com,
AliceZ <AliceZ@discussions.microsoft.com> hunted and pecked:
> Just an add-on to say that we did the manual download of the MRT (from the
> page your suggested) and ran the test. The result did NOT show a PID
> warning, just the results that no infections were found. I wonder if that
> manual download we did (and executed) would give the same results as the
> MRT.exe in our Sys32? It appears that there is only one log file for all
> results. One again we wonder if the KB890830 we download each month is
> the MRT.exe that shows in the Sys32? Is the MRT.exe in the Sys32 the
> current KB890830 that we download each month (does it cchange to the
> newest one each month)? What I am trying to say is - is the MRT.exe in
> the Sys32 the most current one? Or would we always have to go to that
> ddownload page you supplied in case we had to run the MRT again in the
> future, or would the one in the Sys32 be okay to use? Thanks again.
>
> "AliceZ" wrote:
>
>> Thank you for the reply. We went to the page you suggested, but got the
>> reply: "We are sorry, but the tool did not work properly on your
>> computer. Please try again later, or try downloading the tool directly
>> from the Microsoft.com Download Center. If you cannot get the tool to
>> work, please consult your antivirus vendor for general antivirus
>> assistance."
>> We did not want to go any further with the downloading (the tool) as we
>> already have the MRT.exe in our Winini/Sys32. As we stated, we did click
>> on that after we did the Run Notepad %.. etc. and got the PID waring.
>> When we did the second (manual) test by clicking on the MRT.exe, we did
>> not see the PID problem warning that (2nd) time.
>> Should we still download the tool as that page suggests?
>>
>> "Wesley Vogel" wrote:
>>
>>> Hi Alice,
>>>
>>> What I would suggest is running the Malicious Software Removal Tool
>>> again. To see if that error shows up again. I am guessing that the
>>> error was the tool's fault and not a problem on your machine.
>>>
>>> To run the tool again, you can go here...
>>> http://www.microsoft.com/security/ma...e/default.mspx
>>>
>>> Click on Skip the details and run the tool
>>>
>>> The thread from 08-15-2005
>>>
http://forums.wugnet.com/modules.php... =Security-Adm
>>>
>>> --
>>> Hope this helps. Let us know.
>>>
>>> Wes
>>> MS-MVP Windows Shell/User
>>>
>>> In news:64E0D8DB-12D1-40C0-A760-F0FB0EF0D8D3@microsoft.com,
>>> AliceZ <AliceZ@discussions.microsoft.com> hunted and pecked:
>>>> We looked at the log for the recently downloaded KB890830 (to our
>>>> Tablet) and even though no infections found, we got message: sys clean
>>>> warning - mem scan get image page from PID (3200) win32 error code:
>>>> 0x00000057 (87): the parameter is incorrect (659). We ran a manual of
>>>> the MRT again, and we didn't get that message. (Maybe the messge only
>>>> appeared when the kb890830 was first downloaded today).
>>>>
>>>> Back in August we received similar message, which read: "sys clean
>>>> warning - mem scan get image path from pid (3096) win32 error
>>>> code 0x00000057 (87): the parameter is incorrect (65)
>>>>
>>>> Would anyone know if this is serious and if it can be corrected? Thanks
>>>> for any definitive help.