We have a script that declines KB890830 updates for our on-premise Windows Update Server, but we recently found someone approved one of the monthly updates before the script could run and the Malicious Software Removal Tool (MRT) was installed on all of our servers.
We've had issues with MRT in the past and want to remove it, but now the script has declined the update and we cannot find anything under the
View installed updates section to remove it. We also tried running
wusa.exe /uninstall /KB:890830 but it returned the error:
The update KB890830 is not installed on this computer.
According to the
C:\Windows\System32\MRT.exe is being run daily during the "Automatic Maintenance" window defined in the Action Center section of the control panel. So it is definitely installed and being run daily.
I tried using SysInternals AutoRuns and looking at the Scheduled Tasks but was not able to find where it was being started.
How can we disable or uninstall the Malicious Software Removal Tool on our Windows Servers to prevent it from running?