

This is a relatively fast “multimedia” 500 GB hard drive that’s almost full, so this is a relatively slow process.īe warned, if you happen to have a couple of Linux ISO image files on your hard drive, MSRT won’t be happy until it’s disassembled everything in the image and peered at it. In the image below, the scan had been running slightly over an hour. To manually run a full scan, click the “Next” button and select “Full Scan.” This is operating under the assumption that if you have one threat, others may also be present. MSRT is designed to run automatically, usually on or shortly after the second Tuesday of each month when the newest version of the database is downloaded by Windows Update or Microsoft Update.By default, this will be a “Quick Scan.” MSRT will rarely request that a full scan be run unless it finds an active threat. (Hover over the image to read the caption or click it to enlarge.) (MSRT is designed to cohabitate with your existing antivirus service.) In other words, it has no ability to block infections. A point to take away is that MSRT removes threats from a computer that is already infected. This takes you to Microsoft Knowledgebase article 890830 which does a pretty good job of explaining what MSRT is and what it is not. The first thing you’ll notice in the MSRT window is the link to the documentation. The actual application name is “mrt.exe.” It should appear at the top of the list, so press Enter to start it. That’s right - if you search for “MSRT,” you won’t find it.

To access MSRT in Vista, click the Start button/orb and enter “mrt” in the search entry field. You’ll want to run the scan when you have some time to spare or can leave your PC on overnight.

Let’s see what we can do with MSRT and Windows Defender. MSRT and Windows Defender only deal with threats that have been identified and for which a removal method is known, which is good for those who are not running any other protection at all. Anti-virus tools must be more robust and smarter because they have to deal with threats that are unknown, just arising, or actively evolving in the wild. Both have a list of items that they will look for and can remove, often without requiring a reboot. Think of MSRT and Windows Defender as “after the fact” utilities. (The default is a Quick Scan, and that is what runs after Windows Update.) Similarly, the Windows Defender scan runs automatically and can be run by hand, but it has some interesting features that are not normally accessible to the user, too. MS MSRT even has a deeper scan function that you can run manually. That’s not their function, but both are easy to use, have graphical interfaces, and can be run on demand.

The Microsoft Malicious Software Removal Tool and the Windows Defender anti-spyware, anti-adware removal tools are sometimes maligned because they offer limited usability and don’t act as antivirus or protective tools.
