How to clean Windows 10 setup using the Malicious Software Removal Tool (2024)

How to clean Windows 10 setup using the Malicious Software Removal Tool (1)

On Windows 10, the Malicious Software Removal Tool (MSRT) is a utility that Microsoft updates regularly to find and remove specific known threats that could make unwanted changes to help keep your computer running smoothly.

The MSRT sounds like an antivirus, but it is not. It only contains the instructions to deal with a specific scope of malware after the computer has been infected, and it does not provide real-time protection like the Microsoft Defender Antivirus or the ability to remove harmful software that is not actively running. (If you suspect a more harmful malware has infected your computer, you should use the Windows Defender Offline feature.)

Microsoft now pushes new versions of the Malicious Software Removal Tool for Windows 10 devices automatically, roughly every three months, through Windows Update. However, you can always download and run the standalone version to check and remove malicious software manually.

In this Windows 10 guide, we will show you two ways to use the Malicious Software Removal Tool to scan and remove unwanted software from your computer.

  • How to use the Malicious Software Removal Tool on Windows 10
  • How to use the Malicious Software Removal Tool with Command prompt

To scan your computer for malicious software with the Microsoft tool, use these steps:

  1. Open this Microsoft support page.
  2. Click the Download button.
  3. Save the Malicious Software Removal Tool file on your device.

How to clean Windows 10 setup using the Malicious Software Removal Tool (2)

  1. Double-click the file to launch the tool.Quick note: The file name will be different on each new release of the tool.
  2. Click the Next button.
  1. Select one of the scan options:
    • Quick scan: Scans sections of the system likely to have malicious software, but it does not remove any problems. Instead, it will suggest running a full scan in the event malicious software is found.
    • Full scan: Scans the entire device for malicious software, including fixed and removable drives. This process can take many hours because it performs a quick and full scan on all the drives connected to the computer (except network drives).
    • Customize scan: Performs a quick scan and scans the folder location you specified.

How to clean Windows 10 setup using the Malicious Software Removal Tool (4)

  1. (Optional) If you choose the Customized scan option, click the Choose Folder button to select the location you want to scan for malicious code.
  2. Click the Next button.
  3. Click the View detailed results of the scan link to view the scan details.

How to clean Windows 10 setup using the Malicious Software Removal Tool (5)

  1. Click the OK button.

How to clean Windows 10 setup using the Malicious Software Removal Tool (6)

  1. Click the Finish button.

Once you complete the steps, the tool will scan the system for malicious software. If a threat is found, you will be prompted to run a full scan. In the event that a full scan was used, you will be prompted to remove the infection from those files.

If the malicious software modified the browser settings, then you will give directions to restore the original settings (if applicable).

Get the Windows Central Newsletter

All the latest news, reviews, and guides for Windows and Xbox diehards.

The tool may be able to clean the infected files, but it is not perfect, and some data loss could happen depending on the infection. In some cases, the tool may not be able to restore the files to their original state. After the scan, the MSRT also creates a long in

c:\Windows\Debug\mrt.log

file that includes information about the tool, summary, and return codes.

Alternatively, you can also use the security tool with commands, but the options available are more limited than the graphical interface.

To use the Malicious Software Removal Tool with Command Prompt, use these steps:

  1. Open Start.
  2. Search for Command Prompt, right-click the top result, and select the Run as administrator option.
  3. Type the following command start a forced scan, and press Enter:mrt /f
  4. Click the Next button to proceed with full scan.
  5. Type the following command to do a full scan and automatically clean infected files and press Enter:mrt /f:y
  6. Click the Next button to proceed with scan and automatic cleaning.
  7. Type the following command to run a scan quietly (without a visual interface) and press Enter:mrt /qQuick tip: Usually, you would only use this option to run the security utility as scheduled task for other computers in the network.
  8. Type the following command to execute a full scan quietly and press Enter:mrt /f /q

How to clean Windows 10 setup using the Malicious Software Removal Tool (7)

After you complete the steps, the tool will perform a scan on the Windows 10 computer.

If you triggered the quick scan, you would be prompted to run a full scan if a threat is found. If you used the

/f:y

options, then the full scan and automatic cleaning will occur, and if you used the

/q

option, then the tool will run in the background without a user interface. You can always see the complete list of options using the

mrt /?

command.

We are focusing this guide on Windows 10, but the tool is also compatible with previous versions, including Windows 8.1 and Windows 7.

More Windows 10 resources

For more helpful articles, coverage, and answers to common questions about Windows 10, visit the following resources:

  • Windows 10 on Windows Central – All you need to know
  • Windows 10 help, tips, and tricks
  • Windows 10 forums on Windows Central
How to clean Windows 10 setup using the Malicious Software Removal Tool (8)

Mauro Huculak

Mauro Huculak is technical writer for WindowsCentral.com. His primary focus is to write comprehensive how-tos to help users get the most out of Windows 10 and its many related technologies. He has an IT background with professional certifications from Microsoft, Cisco, and CompTIA, and he's a recognized member of the Microsoft MVP community.

How to clean Windows 10 setup using the Malicious Software Removal Tool (2024)

FAQs

How do I use malicious software removal tool in Windows 10? ›

Best practices for running the Microsoft Malicious Software Removal Tool
  1. Download the latest version from the official Microsoft website.
  2. Double-click the executable file and follow the instructions. ...
  3. Launch the tool from your desktop or Start menu.
  4. It will do a quick scan for common types of malware.

How do I completely remove malware from Windows 10? ›

How to remove malware such as a virus, spyware, or rogue security software
  1. Install the latest updates from Microsoft Update. ...
  2. Use the free Microsoft Safety Scanner. ...
  3. Use the Windows Malicious Software Removal Tool. ...
  4. Manually remove the rogue security software. ...
  5. Run Microsoft Defender Offline.

Is Windows Malicious Software Removal Tool Real? ›

Microsoft Windows Malicious Software Removal Tool (MSRT) is a freeware second-opinion malware scanner that Microsoft's Windows Update downloads and runs on Windows computers each month, independent of the install antivirus software.

How do I get rid of malicious software? ›

How to remove malware from a PC
  1. Step 1: Disconnect from the internet. ...
  2. Step 2: Enter safe mode. ...
  3. Step 3: Check your activity monitor for malicious applications. ...
  4. Step 4: Run a malware scanner. ...
  5. Step 5: Fix your web browser. ...
  6. Step 6: Clear your cache.

How do I know if Windows Malicious Software Removal Tool is installed? ›

Can't find where I installed the Malicious Software Removal Tool
  1. · How do you know that you have Malicious Software Removal Tool on the system?
  2. a. Click on Start, Run.
  3. b. Type MRT and Press Enter.
  4. c. Normally, the removal tool runs the Quick Scan, but for more thorough results, choose FULL SCAN and click Next.
  5. d. ...
  6. e. ...
  7. f. ...
  8. g.
Mar 30, 2011

How do I find malicious software on Windows 10? ›

Open your Windows Security settings. Select Virus & threat protection > Scan options. Select Microsoft Defender Antivirus (offline scan), and then select Scan now.

How do I manually remove a Trojan virus from Windows 10? ›

On Windows:
  1. Press Windows+R to bring up the Run menu.
  2. Type “regedit” in the field.
  3. Select HKEY_CURRENT_USER, then expand the Software folder.
  4. Locate the Trojan program.
  5. Right-click its folder and select Delete.

What is the most reliable way to remove malware from your computer? ›

The best malware removal of 2024 in full:
  1. Malwarebytes. The most effective free malware removal software. ...
  2. Avast Antivirus. Anti-malware protection and removal with great detection rates. ...
  3. Kaspersky Antivirus. Solid malware removal tool for beginners and experts alike. ...
  4. Trend Micro Antivirus+ Security. ...
  5. F-Secure SAFE.
Jun 26, 2024

How do I reset my computer to remove malware? ›

On Windows 10
  1. Click the Start button and select Settings.
  2. Go to Update & Security.
  3. Select Recovery, then click the Reset this PC link to get started.
  4. While there is an option to Keep My Files, you should click Remove Everything to perform a factory reset because malware could be embedded within these files.

Why is Windows Malicious Software Removal Tool running? ›

The Malicious Software Removal Tool (or KB890830) is a Windows malware-protection offering that updates and runs once a month, and proceeds to remove any threats it finds without user confirmation. You may need to restart your computer for this update to take effect.

What is secretly installed malicious software that is? ›

Spyware is a type of malware, also known as malicious software, that is installed onto a victim's device without them knowing.

Will a clean install of Windows remove malware? ›

Will reinstalling Windows 10 remove viruses and malware? Reinstalling Windows 10 will remove most viruses and malware from your system since it wipes out everything, including the malicious software.

What is the most common malicious software? ›

The most common types of malware include viruses, keyloggers, worms, trojans, ransomware / crypto-malware, logic bombs, bots/botnets, adware & spyware, and rootkits.

How to find hidden malware? ›

How To Know if You Have Malware
  1. suddenly slows down, crashes, or displays repeated error messages.
  2. won't shut down or restart.
  3. won't let you remove software.
  4. serves up lots of pop-ups, inappropriate ads, or ads that interfere with page content.
  5. shows ads in places you typically wouldn't see them, like government websites.

How to detect spyware in Windows 10? ›

Here are three of the most common ways to detect PC spyware:
  1. Look for spyware using Task Manager. Open Task Manager and navigate to the Processes tab to see all of the apps and processes running on your machine. ...
  2. Search for bloatware programs you didn't download. ...
  3. Download and use security software to scan your PC.
Jan 2, 2024

How do I scan my computer for malicious software? ›

Run a quick scan in Windows Security
  1. Select Start > Settings > Update & Security > Windows Security and then Virus & threat protection. Open Windows Security settings.
  2. Under Current threats, select Quick scan (or in early versions of Windows 10, under Threat history, select Scan now).

Is Windows MRT good? ›

However, you'll want to pity the fool who tries to run malware on your PC if you're running mrt.exe. mrt.exe is the Windows Malicious Software Removal Tool. This handy app made by Microsoft will check your PC for malware, then remove it. The app is freely distributed and built into most Windows versions.

Why is Windows Malicious Software Removal Tool not installing? ›

If you are unable to install Windows Malicious Software Removal Tool, it might be because the uninstall process is interfered with by third-party processes. The solution is to boot your Windows 10 computer into Safe Mode and then install the program in Safe Mode.

Top Articles
Latest Posts
Recommended Articles
Article information

Author: Lilliana Bartoletti

Last Updated:

Views: 5451

Rating: 4.2 / 5 (73 voted)

Reviews: 80% of readers found this page helpful

Author information

Name: Lilliana Bartoletti

Birthday: 1999-11-18

Address: 58866 Tricia Spurs, North Melvinberg, HI 91346-3774

Phone: +50616620367928

Job: Real-Estate Liaison

Hobby: Graffiti, Astronomy, Handball, Magic, Origami, Fashion, Foreign language learning

Introduction: My name is Lilliana Bartoletti, I am a adventurous, pleasant, shiny, beautiful, handsome, zealous, tasty person who loves writing and wants to share my knowledge and understanding with you.