- Home
- Data Migration Tools
- Windows Malicious Software Removal Tool
Windows Malicious Software Removal Tool
Windows Malicious Software Removal Tool · Redmond, Washington, USA · founded 1975
What it is
Windows Malicious Software Removal Tool (MSRT) is a free Windows utility that targets prevalent malware threats, removes them, and reverses changes they made. It is generally distributed monthly through Windows Update or as a standalone download. With automatic updates enabled, Windows Update downloads and runs MSRT in the background; the standalone version can be launched on demand. After a standalone scan, the tool displays a report of threats found and removed and writes a log to %windir%\debug folder\mrt.log. It must be run with local administrator privileges. Microsoft generally delivers the tool on the second Tuesday of each month. Its coverage focuses on prevalent malware families, so Microsoft says it is not a replacement for full-fledged antimalware such as Windows Defender Antivirus. The download page lists Windows 10, Windows 11, Windows 7, Windows 8.1, and specified Windows Server releases as supported. MSRT supports multiple languages, using United States English if the operating system language is unsupported. The listed download is version 5.145, published September 11, 2026, with a file size of 84.0 MB.
For and against
For
- Free to use.
- Can run through Windows Update in the background.
- Standalone scans show found and removed threats.
- Supports multiple languages.
Against
- Targets prevalent malware families only.
- Requires local administrator privileges.
- Windows-only software.
The verdict
MSRT provides targeted malware removal and can run through Windows Update or as a standalone scan. Its limited threat coverage and administrator requirement matter: Microsoft positions it as a supplement, not a replacement for full-fledged antimalware.
Who it suits
MSRT may suit Windows users seeking a tool for prevalent malware cleanup, either through Windows Update or an on-demand standalone scan. It is not a replacement for full-fledged antimalware.
Plans and prices
Windows Malicious Software Removal Tool
Windows only · targets prevalent malware families · requires local administrator privileges
Read 12 Oct 2026 · microsoft.com
On the record
- Administrator requirement
- The tool must be run with local administrator privileges.microsoft.com · read 12 Oct 2026
- Background operation
- With Windows automatic updates enabled, Windows Update downloads and runs MSRT in the background.microsoft.com · read 12 Oct 2026
- Current download
- The page lists version 5.145, published September 11, 2026, with a file size of 84.0 MB.microsoft.com · read 12 Oct 2026
- Delivery
- It is generally released monthly through Windows Update or as a standalone download.microsoft.com · read 12 Oct 2026
- IT administration
- Microsoft provides information for IT administrators about command-line switches, deployment, covered malware families, and removing the tool.microsoft.com · read 12 Oct 2026
- Language support
- MSRT supports multiple languages and uses United States English when the operating system language is unsupported.microsoft.com · read 12 Oct 2026
- Log file
- The standalone tool generates a log at %windir%\debug folder\mrt.log.microsoft.com · read 12 Oct 2026
- On-demand use
- The standalone version can be run on demand after downloading it.microsoft.com · read 12 Oct 2026
- Purpose
- MSRT finds and removes prevalent malware threats and reverses changes they made.microsoft.com · read 12 Oct 2026
- Release timing
- Microsoft generally delivers MSRT on the second Tuesday of each month.microsoft.com · read 12 Oct 2026
- Scan report
- After a standalone scan, MSRT displays a report listing the threats it found and removed.microsoft.com · read 12 Oct 2026
- Supported systems
- The download page lists Windows 10, Windows 11, Windows 7, Windows 8.1, and specified Windows Server releases as supported operating systems.microsoft.com · read 12 Oct 2026
- Threat coverage limit
- MSRT targets prevalent malware families only and is not a replacement for full-fledged antimalware such as Windows Defender Antivirus.microsoft.com · read 12 Oct 2026