Windows Malicious Software Removal Tool

The Microsoft Windows Malicious Software Removal Tool checks computers running Windows Vista, Windows XP, Windows 2000, and Windows Server 2003 for infections by specific, prevalent malicious software - including Blaster, Sasser, and Mydoom - and helps remove any infection found.

When the detection and removal process is complete, the tool displays a report describing the outcome, including which, if any, malicious software was detected and removed.

Microsoft releases an updated version of this tool on the second Tuesday of each month, and as needed to respond to security incidents. The tool is available from Microsoft Update, Windows Update and the Microsoft Download Center.

Note: The version of the tool delivered by Microsoft Update and Windows Update runs in the background and then reports if an infection is found. To run this tool more than once a month, use the version on this Web page or install the version that is available in the Download Center.

Because computers can appear to function normally when infected, it's a good idea to run this tool regularly even if your computer seems to be fine. You should also use up-to-date antivirus software to help protect your computer from other malicious software.

The Microsoft Malicious Software Removal Tool does not replace an antivirus product. It is strictly a post-infection removal tool. Therefore, I strongly recommend that you install and use an up-to-date antivirus product.

The Microsoft Malicious Software Removal Tool differs from an antivirus product in three key ways:

1) The tool removes malicious software from an already-infected computer. Antivirus products block malicious software from running on a computer. It is significantly more desirable to block malicious software from running on a computer than to remove it after infection.

2) The tool removes only specific prevalent malicious software. Specific prevalent malicious software is a small subset of all the malicious software that exists today.

3) The tool focuses on the detection and removal of active malicious software. Active malicious software is malicious software that is currently running on the computer. The tool cannot remove malicious software that is not running. However, an antivirus product can perform this task.


To download the latest version of this tool, visit the Microsoft Download Center.

Manually Run The Tool...

Having downloaded the file using the link above, double click the file and the software will start.

You should then be presented with a screen like the following one:

Now click the NEXT button to be taken to the next screen:

Now choose which type of scan you wish to perform:

When the scan has finished you will be presented with a screen that either tells you all is Ok or that there was an issue and it has been dealt with/where to go for more assistance!

Windows NT4 and Windows 2000

In compliance with the Microsoft Support Lifecycle policy, the Windows Malicious Software Removal Tool (MSRT) will no longer be offered to or supported on Windows 2000-based systems after July 13, 2010. This date coincides with the end of the Extended Support phase for Windows 2000. For more information about the Support Lifecycle policy, please visit the following Microsoft Web site:

http://support.microsoft.com/lifecycle