Microsoft Malicious Software Removal Tool

The Microsoft Windows Malicious Software Removal Tool checks computers running Windows 10, Windows 8, Windows XP, Windows 2000, and Windows Server 2003 for infections by specific, prevalent malicious software—including Blaster, Sasser, and Mydoom—and helps remove any infection found. When the detection and removal process is complete, the tool displays a report describing the outcome, including which, if any, malicious software was detected and removed.

Microsoft releases an updated version of this tool on the second Tuesday of each month, and as needed to respond to security incidents. The tool is available from Microsoft Update, Windows Update, and the Microsoft Download Center.

Use this tool:

• If you have automatic updates for Windows turned off. Windows Update automatically downloads and runs MSRT in the background.
• If you suspect an infection from prevalent malware families
• To complement your antimalware product. This tool does not replace full-fledged antimalware such as Windows Defender Antivirus.

MSRT targets prevalent malware families only. For comprehensive malware detection and removal, consider using Microsoft Safety Scanner.

Integration with automatic updates
Enable automatic updates to regularly get MSRT with Windows Update. The integrated version automatically runs in the background. If you would like to run MSRT on demand, run the standalone version.

Release schedule
Microsoft generally delivers MSRT with Windows Update the second Tuesday of the month. The standalone version available on this page is delivered at the same time.

Removal results and log file
After the standalone version of MSRT scans the computer and removes threats, it displays a report that lists the threats. It also generates the following log file:
%windir%\debug folder\mrt.log