The Microsoft Windows Malicious Software Removal Tool (MSRT) helps remove malicious software from your computers that are running Windows 10 Technical Preview, Windows 8.1, Windows Server 2012 R2, Windows 8, Windows Server 2012, Windows 7, Windows Vista, Windows Server 2003, Windows Server 2008, or Windows XP.
The Microsoft Malicious Software Removal Tool does not replace an antivirus product. It is strictly a post-infection removal tool. Therefore, we strongly recommend that you install and use an up-to-date antivirus product. If you like, Windows 10 already has Windows Defender included for antivirus.
The Microsoft Malicious Software Removal Tool differs from an antivirus product in three key ways:
â€˘The tool removes malicious software from an already-infected computer. Antivirus products block malicious software from running on a computer. It is significantly more desirable to block malicious software from running on a computer than to remove it after infection.
â€˘The tool removes only specific prevalent malicious software. Specific prevalent malicious software is a small subset of all the malicious software that exists today.
â€˘The tool focuses on the detection and removal of active malicious software. Active malicious software is malicious software that is currently running on the computer. The tool cannot remove malicious software that is not running. However, an antivirus product can perform this task.
This tutorial will show you how to open and use the Malicious Software Removal Tool (MSRT) to scan and remove specific prevalent malicious software in Windows.
Shutdown Event Tracker is a tool that prompts users to record a reason why they restart or shut down the computer. This information is available for review in the event log. If a computer running Windows is connected to a domain that uses monitoring tools, you can collect this information as part of network reporting.
When Shutdown Event Tracker is enabled, users cannot shut down or restart the computer without providing a reason. If the computer is shut down or restarted unexpectedly, either as a result of power interruption or hardware failure, the user is prompted to enter a reason in Shutdown Event Tracker when the computer is started again.
This tutorial will show you how to enable or disable Shutdown Event Tracker for when users restart or shut down Vista, Windows 7, Windows 8, or Windows Server 2003 and above.
One commonly asked question is can I delete the WinSxS folder to regain some disk space? The short answer is no. (see warning box below) However, there are ways to reduce the size of the WinSxS folder.
Windows 8.1 and Windows Server 2012 R2 automatically reduces the size of the WinSxS by using methods similar to the ones described in this tutorial, however these methods also include internal processes, such as uninstalling and deleting packages with components that have been replaced by other components with newer versions. Previous versions of some components are kept on the system for a period of time, allowing you to rollback if necessary. After a period of time, these components are removed from the installation.
This tutorial will show you a number of ways to start the cleanup of the component store (WinSxS folder) to free up a large amount of disk space in Windows 8.1 and Windows Server 2012 R2.
Why is the WinSxS folder so big? The short answer to this commonly asked question is that the component store (WinSxS folder) contains all the components that make-up Windows to allow you operate your system. These components are kept to rollback any problematic change or to repair a file that becomes corrupted.
The WinSxS folder isnâ€™t as large as it may appear at first glance because size calculations can include Windows binaries located elsewhere which makes the WinSxS folder seem larger than it really is.
This tutorial will help show you how to determine the actual size of the component store (WinSxS folder) and if you should clean it up in Windows 8.1 and Windows Server 2012 R2.