I always wondered why I received a monthly update for my Windows PC. I have never had it explained, and I thought whatever it did was automatic. Lo and behold, I manually downloaded an update of the tool, ran it, (took a long time to scan all files on my laptop), and noticed that it cleaned 8 detected threats, which Malware-bytes Pro trial had failed to clean before. Hmmm. So, I’m wondering if this is how this software should be used? Is there an article somewhere in the “Lounge” I could read up on this?
![]() |
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
SIGN IN | Not a member? | REGISTER | PLUS MEMBERSHIP |
-
Using Windows Malicious Software Removal Tool
Home » Forums » AskWoody support » PC hardware » Questions – Maintenance and backups » Using Windows Malicious Software Removal Tool
- This topic has 6 replies, 6 voices, and was last updated 10 years, 3 months ago.
Viewing 4 reply threadsAuthorReplies-
Paul T
AskWoody MVP -
bbearren
AskWoody MVPJanuary 30, 2015 at 12:30 pm #1487293The Malicious Software Removal Tool is issued periodically with Windows Updates when the tool itself has been updated to remove specific, common malware threats that are known to be in circulation. It is a very targeted tool, which is why it is updated from time to time and re-issued in Windows Updates. Older, past malware threats are dropped from the tool, and newer threats are targeted.
I always let it install and run along with the other Updates.
Always create a fresh drive image before making system changes/Windows updates; you may need to start over!We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.We were all once "Average Users". -
martins2
AskWoody LoungerFebruary 5, 2015 at 12:17 am #1488124A new version of MSRT is issued each month, along with the other updates, on Patch Tuesday. It is always KB890830, but it is a new version each time. It seems to run in the background upon installation, because the installation takes a long time. A new copy of the file MRT.exe is placed into WINDOWSSystem32, and this can be run on demand at any time. You can set up a desktop link to it if you want. When you run it, you will see the month and year of the version, so you will know if it is up to date or not (currently says “Jan. 2015”, next version expected on Tuesday Feb 10th).
-
WSsj_ken
AskWoody LoungerFebruary 7, 2015 at 10:53 pm #1488905The current Malicious Software Removal Tool can be downloaded here :
http://www.microsoft.com/en-us/download/malicious-software-removal-tool-details.aspx
I download it monthly at the Tuesday Windows Update time instead of allowing Windows Update to download it. That way I control when it runs and can run it once a week when I do my usual security scans.
Another good security tool from Microsoft is the Windows Defender Offline stand alone sweeper.
http://windows.microsoft.com/en-us/windows/what-is-windows-defender-offline
After downloading the program, you run it and it loads the scanner and current data file onto a USB flash drive. You boot off the USB flash drive and it runs from there. So every file on your computer can be searched. Careful to us a blank USB flash drive. The program formats the USB flash drive so nothing undesirable is on the USB flash drive. You should run the program to install the updated data file onto the USB flash drive before doing the scan.
-
bbearren
AskWoody MVPFebruary 8, 2015 at 7:38 am #1488970Another good security tool from Microsoft is the Windows Defender Offline stand alone sweeper.
http://windows.microsoft.com/en-us/windows/what-is-windows-defender-offline
After downloading the program, you run it and it loads the scanner and current data file onto a USB flash drive. You boot off the USB flash drive and it runs from there. So every file on your computer can be searched. Careful to us a blank USB flash drive. The program formats the USB flash drive so nothing undesirable is on the USB flash drive. You should run the program to install the updated data file onto the USB flash drive before doing the scan.
The Windows Defender Offline scanner can be run from a CD. It doesn’t require a USB flash drive. When booted, the CD creates a RAM drive and the tool is loaded into the RAM drive. From there, it goes online to get the latest definition updates, and then runs its scan.
Always create a fresh drive image before making system changes/Windows updates; you may need to start over!We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.We were all once "Average Users".
-
-
WSSudo
AskWoody LoungerFebruary 8, 2015 at 7:50 am #1488973I always wondered why I received a monthly update for my Windows PC. I have never had it explained, and I thought whatever it did was automatic. Lo and behold, I manually downloaded an update of the tool, ran it, (took a long time to scan all files on my laptop), and noticed that it cleaned 8 detected threats, which Malware-bytes Pro trial had failed to clean before. Hmmm. So, I’m wondering if this is how this software should be used? Is there an article somewhere in the “Lounge” I could read up on this?
You can run MSRT any time by going Start – type mrt.exe and press enter where it gives you three options.
They are Quick, Full and a Custom one where you can scan a particular file.
When an infection has disabled a 3rd party AV program, this can still be used as a fall back but is questionable as to whether it will snag whatever it is as I believe it’s just loaded with the main current ones.
Viewing 4 reply threads -

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Search Newsletters
Search Forums
View the Forum
Search for Topics
Recent Topics
-
Login screen icon
by
CWBillow
24 minutes ago -
AI coming to everything
by
Susan Bradley
2 hours, 1 minute ago -
Mozilla : Pocket shuts down July 8, 2025, Fakespot shuts down on July 1, 2025
by
Alex5723
4 hours, 11 minutes ago -
No Screen TurnOff???
by
CWBillow
4 hours, 33 minutes ago -
Identify a dynamic range to then be used in another formula
by
BigDaddy07
5 hours, 6 minutes ago -
InfoStealer Malware Data Breach Exposed 184 Million Logins and Passwords
by
Alex5723
16 hours, 43 minutes ago -
How well does your browser block trackers?
by
n0ads
3 hours ago -
You can’t handle me
by
Susan Bradley
7 hours, 25 minutes ago -
Chrome Can Now Change Your Weak Passwords for You
by
Alex5723
2 hours, 29 minutes ago -
Microsoft: Over 394,000 Windows PCs infected by Lumma malware, affects Chrome..
by
Alex5723
1 day, 4 hours ago -
Signal vs Microsoft’s Recall ; By Default, Signal Doesn’t Recall
by
Alex5723
7 hours, 35 minutes ago -
Internet Archive : This is where all of The Internet is stored
by
Alex5723
1 day, 4 hours ago -
iPhone 7 Plus and the iPhone 8 on Vantage list
by
Alex5723
1 day, 4 hours ago -
Lumma malware takedown
by
EyesOnWindows
16 hours, 50 minutes ago -
“kill switches” found in Chinese made power inverters
by
Alex5723
1 day, 13 hours ago -
Windows 11 – InControl vs pausing Windows updates
by
Kathy Stevens
1 day, 13 hours ago -
Meet Gemini in Chrome
by
Alex5723
1 day, 17 hours ago -
DuckDuckGo’s Duck.ai added GPT-4o mini
by
Alex5723
1 day, 17 hours ago -
Trump signs Take It Down Act
by
Alex5723
2 days, 1 hour ago -
Do you have a maintenance window?
by
Susan Bradley
6 hours, 9 minutes ago -
Freshly discovered bug in OpenPGP.js undermines whole point of encrypted comms
by
Nibbled To Death By Ducks
1 day, 3 hours ago -
Cox Communications and Charter Communications to merge
by
not so anon
2 days, 4 hours ago -
Help with WD usb driver on Windows 11
by
Tex265
13 hours, 11 minutes ago -
hibernate activation
by
e_belmont
2 days, 13 hours ago -
Red Hat Enterprise Linux 10 with AI assistant
by
Alex5723
2 days, 17 hours ago -
Windows 11 Insider Preview build 26200.5603 released to DEV
by
joep517
2 days, 20 hours ago -
Windows 11 Insider Preview build 26120.4151 (24H2) released to BETA
by
joep517
2 days, 20 hours ago -
Fixing Windows 24H2 failed KB5058411 install
by
Alex5723
1 day, 16 hours ago -
Out of band for Windows 10
by
Susan Bradley
3 days, 1 hour ago -
Giving UniGetUi a test run.
by
RetiredGeek
3 days, 8 hours ago
Recent blog posts
Key Links
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Mastodon profile for DefConPatch
Mastodon profile for AskWoody
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.