For comprehensive malware detection and removal, consider using Microsoft Safety Scanner. This tool works in a complementary manner with existing antimalware solutions and can be used on most current Windows versions see Properties section.
The information contained in this article is specific to the enterprise deployment of the tool. We recommend that you review the following knowledge base article for more information about the tool:.
The following files are available for download from the Microsoft Download Center:. Download the x86 MSRT package now. Download the x64 MSRT package now. The tool can be deployed in an enterprise environment to enhance existing protection and as part of a defense-in-depth strategy.
To deploy the tool in an enterprise environment, you can use one or more of the following methods:. The current version of this tool does not support the following deployment technologies and techniques:. This article includes information about how you can verify execution of the tool as part of deployment. The script and the steps that are provided here are meant to be only samples and examples.
Customers must test these sample scripts and example scenarios and modify them appropriately to work in their environment. You must change the ServerName and the ShareName according to the setup in your environment. The following code sample does the following things:. Prefixes the log the file name by using the name of the computer from which the tool is run and the user name of the current user Note You must set appropriate permissions on the share according to the instructions in the Initial setup and configuration section.
Note In this code sample, ServerName is a placeholder for the name of your server, and ShareName is a placeholder for the name of your share. This section is intended for administrators who are using a startup script or a logon script to deploy this tool. If you are using SMS, you can continue to the "Deployment methods" section. To configure the server and the share, follow these steps:.
Set up a share on a member server. Then name the share ShareName. Copy the tool and the sample script, RunMRT. See the Code sample section for details. Add the domain user account for the user who is managing this share, and then click Full Control.
If you use the computer startup script method, add the Domain Computers group together with Change and Read permissions. If you use the logon script method, add the Authenticated Users group together with Change and Read permissions.
Remove the Everyone group if it is in the list. Note If you receive an error message when you remove the Everyone group, click Advanced on the Security tab, and then click to clear the Allow inheritable permissions from parent to propagate to this object check box. Under the ShareName folder, create a folder that is named "Logs.
Note Do not change the Share permissions in this step. Note To run this tool, you must have Administrator permissions or System permissions, regardless of the deployment option that you choose. The following example provides step-by-step instructions for using SMS The steps for using SMS 2. Create a. The following is an example. You do not have to disable or remove your antivirus program when you install the MSRT.
However, if prevalent, malicious software has infected your computer, the antivirus program may detect this malicious software and may prevent the removal tool from removing it when the removal tool runs. In this case, you can use your antivirus program to remove the malicious software.
Because the MSRT does not contain a virus or a worm, the removal tool alone should not trigger your antivirus program. However, if malicious software infected the computer before you installed an up-to-date antivirus program, your antivirus program may not detect this malicious software until the tool tries to remove it. Turning on Automatic Updates guarantees that you receive the tool automatically. If you have Automatic Updates turned on, you have already been receiving new versions of this tool.
The tool runs in Quiet mode unless it finds an infection. If you have not been notified of an infection, no malicious software has been found that requires your attention. To turn on Automatic Updates yourself, follow the steps in the following table for the operating system that your computer is running. If you want to check for updates manually, select Check for updates.
Select Advanced options , and then under Choose how updates are installed , select Automatic recommended. Note Windows 10 is a service. This means that automatic updates are turned on by default and your PC always has the latest and best features. If you want to check for updates manually, select Check now. Select Choose how updates get installed , and then under Important updates , select Install updates automatically recommended. Under Recommended updates , select the Give me recommended updates the same way I receive important updates check box.
Under Microsoft Update , select the Give me updates for other Microsoft products when I update Windows check box, and then select Apply. Under Recommended updates , click to select the Give me recommended updates the same way I receive important updates check box, and then click OK. If you are prompted for an administrative password or for confirmation, type the password or provide confirmation. Go to step 3. Download the MSRT. You must accept the Microsoft Software License Terms.
The license terms are only displayed for the first time that you access Automatic Updates. Note After you accept the one-time license terms, you can receive future versions of the MSRT without being logged on to the computer as an administrator.
If it detects malicious software on your computer, the next time that you log on to your computer as a computer administrator, a balloon appears in the notification area to make you aware of the detection. If the tool finds malicious software, you may be prompted to perform a full scan.
We recommend that you perform this scan. A full scan performs a quick scan and then a full scan of the computer, regardless of whether malicious software is found during the quick scan.
This scan can take several hours to complete because it will scan all fixed and removable drives. However, mapped network drives are not scanned. If malicious software has modified infected files on your computer, the tool prompts you to remove the malicious software from those files. If the malicious software modified your browser settings, your homepage may be changed automatically to a page that gives you directions on how to restore these settings.
You can clean specific files or all the infected files that the tool finds. Be aware that some data loss is possible during this process.
Also, be aware that the tool may be unable to restore some files to the original, pre-infection state. The removal tool may request that you restart your computer to complete the removal of some malicious software, or it may prompt you to perform manual steps to complete the removal of the malicious software.
To complete the removal, you should use an up-to-date antivirus product. Reporting infection information to Microsoft The MSRT sends basic information to Microsoft if the tool detects malicious software or finds an error.
This information will be used for tracking virus prevalence. No identifiable personal information that is related to you or to the computer is sent together with this report. The MSRT does not use an installer. Typically, when you run the MSRT, it creates a randomly named temporary directory on the root drive of the computer. This directory contains several files, and it includes the Mrtstub.
Most of the time, this folder is automatically deleted after the tool finishes running or after the next time that you start the computer. However, this folder may not always be automatically deleted.
In these cases, you can manually delete this folder, and this has no adverse effect on the computer. Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center. Help installing updates: Support for Microsoft Update. Local support according to your country: International Support. The following files are available for download from the Microsoft Download Center: For bit xbased systems:. Download the x86 MSRT package now.
Download the x64 MSRT package now. Because computers can appear to function normally when infected, Microsoft advises you to run this tool even if your computer seems to be fine. You should also use up-to-date antivirus software to help protect your computer from other malicious software. You can also perform an online scan of your computer using the Windows Live OneCare safety scanner.
Download Certified Similar to 3. Windows bit Windows bit. Last updated:. Microsoft offers a partially tested beta definition update that you can download before the fully tested version is available. The beta definition update is not meant for enterprise-wide deployment. Beta definition updates are explicitly created for malicious software threats.
You should not deploy a beta definition update if you are not experiencing a threat for which it was explicitly created. Note After additional testing, certain beta packages will be released as regular signatures. The same binary file that was used for the beta malicious software definition may be used for the released definition. To download the Microsoft Forefront Client Security beta malicious software definition update for bit xbased versions of Windows, click the following link:.
Or, click Save to save the update to the computer. If you click Save , remember the folder where you save the update. To install the saved update, click Start , click Run , locate the folder where you saved the update, double-click the update file, and then click OK.
NoteTo install the update on a computer that is running Windows Vista, right-click the file, and then click Run As Administrator. If you are prompted for an administrator password or for confirmation, type the password, or click Continue.
When the update runs, a file extraction dialog box appears.
0コメント