I always wondered why I received a monthly update for my Windows PC. I have never had it explained, and I thought whatever it did was automatic. Lo and behold, I manually downloaded an update of the tool, ran it, (took a long time to scan all files on my laptop), and noticed that it cleaned 8 detected threats, which Malware-bytes Pro trial had failed to clean before. Hmmm. So, I’m wondering if this is how this software should be used? Is there an article somewhere in the “Lounge” I could read up on this?
![]() |
There are isolated problems with current patches, but they are well-known and documented on this site. |
SIGN IN | Not a member? | REGISTER | PLUS MEMBERSHIP |
-
Using Windows Malicious Software Removal Tool
Home » Forums » AskWoody support » PC hardware » Questions – Maintenance and backups » Using Windows Malicious Software Removal Tool
- This topic has 6 replies, 6 voices, and was last updated 10 years, 3 months ago.
Viewing 4 reply threadsAuthorReplies-
Paul T
AskWoody MVP -
bbearren
AskWoody MVPJanuary 30, 2015 at 12:30 pm #1487293The Malicious Software Removal Tool is issued periodically with Windows Updates when the tool itself has been updated to remove specific, common malware threats that are known to be in circulation. It is a very targeted tool, which is why it is updated from time to time and re-issued in Windows Updates. Older, past malware threats are dropped from the tool, and newer threats are targeted.
I always let it install and run along with the other Updates.
Always create a fresh drive image before making system changes/Windows updates; you may need to start over!We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.We were all once "Average Users". -
martins2
AskWoody LoungerFebruary 5, 2015 at 12:17 am #1488124A new version of MSRT is issued each month, along with the other updates, on Patch Tuesday. It is always KB890830, but it is a new version each time. It seems to run in the background upon installation, because the installation takes a long time. A new copy of the file MRT.exe is placed into WINDOWSSystem32, and this can be run on demand at any time. You can set up a desktop link to it if you want. When you run it, you will see the month and year of the version, so you will know if it is up to date or not (currently says “Jan. 2015”, next version expected on Tuesday Feb 10th).
-
WSsj_ken
AskWoody LoungerFebruary 7, 2015 at 10:53 pm #1488905The current Malicious Software Removal Tool can be downloaded here :
http://www.microsoft.com/en-us/download/malicious-software-removal-tool-details.aspx
I download it monthly at the Tuesday Windows Update time instead of allowing Windows Update to download it. That way I control when it runs and can run it once a week when I do my usual security scans.
Another good security tool from Microsoft is the Windows Defender Offline stand alone sweeper.
http://windows.microsoft.com/en-us/windows/what-is-windows-defender-offline
After downloading the program, you run it and it loads the scanner and current data file onto a USB flash drive. You boot off the USB flash drive and it runs from there. So every file on your computer can be searched. Careful to us a blank USB flash drive. The program formats the USB flash drive so nothing undesirable is on the USB flash drive. You should run the program to install the updated data file onto the USB flash drive before doing the scan.
-
bbearren
AskWoody MVPFebruary 8, 2015 at 7:38 am #1488970Another good security tool from Microsoft is the Windows Defender Offline stand alone sweeper.
http://windows.microsoft.com/en-us/windows/what-is-windows-defender-offline
After downloading the program, you run it and it loads the scanner and current data file onto a USB flash drive. You boot off the USB flash drive and it runs from there. So every file on your computer can be searched. Careful to us a blank USB flash drive. The program formats the USB flash drive so nothing undesirable is on the USB flash drive. You should run the program to install the updated data file onto the USB flash drive before doing the scan.
The Windows Defender Offline scanner can be run from a CD. It doesn’t require a USB flash drive. When booted, the CD creates a RAM drive and the tool is loaded into the RAM drive. From there, it goes online to get the latest definition updates, and then runs its scan.
Always create a fresh drive image before making system changes/Windows updates; you may need to start over!We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.We were all once "Average Users".
-
-
WSSudo
AskWoody LoungerFebruary 8, 2015 at 7:50 am #1488973I always wondered why I received a monthly update for my Windows PC. I have never had it explained, and I thought whatever it did was automatic. Lo and behold, I manually downloaded an update of the tool, ran it, (took a long time to scan all files on my laptop), and noticed that it cleaned 8 detected threats, which Malware-bytes Pro trial had failed to clean before. Hmmm. So, I’m wondering if this is how this software should be used? Is there an article somewhere in the “Lounge” I could read up on this?
You can run MSRT any time by going Start – type mrt.exe and press enter where it gives you three options.
They are Quick, Full and a Custom one where you can scan a particular file.
When an infection has disabled a 3rd party AV program, this can still be used as a fall back but is questionable as to whether it will snag whatever it is as I believe it’s just loaded with the main current ones.
Viewing 4 reply threads -

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Search Newsletters
Search Forums
View the Forum
Search for Topics
Recent Topics
-
My Simple Word 2010 Macro Is Not Working (Awaiting moderation)
by
mbennett555
5 hours, 12 minutes ago -
Office gets current release
by
Susan Bradley
9 hours, 55 minutes ago -
FBI: Still Using One of These Old Routers? It’s Vulnerable to Hackers
by
Alex5723
1 day, 2 hours ago -
Windows AI Local Only no NPU required!
by
RetiredGeek
10 hours, 58 minutes ago -
Stop the OneDrive defaults
by
CWBillow
1 day, 3 hours ago -
Windows 11 Insider Preview build 27868 released to Canary
by
joep517
1 day, 13 hours ago -
X Suspends Encrypted DMs
by
Alex5723
1 day, 15 hours ago -
WSJ : My Robot and Me AI generated movie
by
Alex5723
1 day, 15 hours ago -
Botnet hacks 9,000+ ASUS routers to add persistent SSH backdoor
by
Alex5723
1 day, 16 hours ago -
OpenAI model sabotages shutdown code
by
Cybertooth
1 day, 16 hours ago -
Backup and access old e-mails after company e-mail address is terminated
by
M W Leijendekker
1 day, 5 hours ago -
Enabling Secureboot
by
ITguy
1 day, 12 hours ago -
Windows hosting exposes additional bugs
by
Susan Bradley
2 days ago -
No more rounded corners??
by
CWBillow
1 day, 20 hours ago -
Android 15 and IPV6
by
Win7and10
1 day, 10 hours ago -
KB5058405 might fail to install with recovery error 0xc0000098 in ACPI.sys
by
Susan Bradley
2 days, 13 hours ago -
T-Mobile’s T-Life App has a “Screen Recording Tool” Turned on
by
Alex5723
2 days, 15 hours ago -
Windows 11 Insider Preview Build 26100.4202 (24H2) released to Release Preview
by
joep517
2 days, 10 hours ago -
Windows Update orchestration platform to update all software
by
Alex5723
2 days, 23 hours ago -
May preview updates
by
Susan Bradley
2 days, 10 hours ago -
Microsoft releases KB5061977 Windows 11 24H2, Server 2025 emergency out of band
by
Alex5723
2 days, 2 hours ago -
Just got this pop-up page while browsing
by
Alex5723
2 days, 15 hours ago -
KB5058379 / KB 5061768 Failures
by
crown
2 days, 12 hours ago -
Windows 10 23H2 Good to Update to ?
by
jkitc
1 day, 14 hours ago -
At last – installation of 24H2
by
Botswana12
3 days, 14 hours ago -
MS-DEFCON 4: As good as it gets
by
Susan Bradley
12 hours, 27 minutes ago -
RyTuneX optimize Windows 10/11 tool
by
Alex5723
4 days, 2 hours ago -
Can I just update from Win11 22H2 to 23H2?
by
Dave Easley
2 days, 1 hour ago -
Limited account permission error related to Windows Update
by
gtd12345
4 days, 16 hours ago -
Another test post
by
gtd12345
4 days, 16 hours ago
Recent blog posts
Key Links
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Mastodon profile for DefConPatch
Mastodon profile for AskWoody
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.