JSI Tip 8954. How do I deploy the Microsoft Windows Malicious Software Removal Tool in an enterprise environment?

Jerold Schulman

January 19, 2005

2 Min Read
ITPro Today logo in a gray background | ITPro Today


Microsoft Knowledge Base Article 891716 contains the following summary:

Microsoft has released the Microsoft Windows Malicious Software Removal Tool to help you remove specific, prevalent malicious software from your computer.

The information that is contained in this article is specific to the enterprise deployment of the tool. It is highly recommended that you review the following Microsoft Knowledge Base article, which contains general information about the tool and download locations:

890830 The Microsoft Windows Malicious Software Removal Tool helps remove specific, prevalent malicious software from computers that are running Windows Server 2003, Windows XP, or Windows 2000

The tool is primarily intended for non-corporate users without an existing, up-to-date antivirus product installed on their systems. However, the tool can also be deployed in an enterprise environment to enhance existing protection and as part of a defense-in-depth strategy. To deploy the tool in an enterprise environment, you can use one or more of the following methods:

  • SMS Software Package

  • Group Policy-based computer startup script

  • Group Policy-based user logon script

For additional information about deploying the tool through Windows Update and Automatic Updates, click the following article number to view the article in the Microsoft Knowledge Base:

890830 The Microsoft Windows Malicious Software Removal Tool helps remove specific, prevalent malicious software from computers that are running Windows Server 2003, Windows XP, or Windows 2000


The current version of this tool does not support the following deployment technologies and techniques:

  • Software Update Services (SUS)

  • Windows Update Services (WUS)

  • Windows Update Catalog

  • Execution of the tool against a remote computer

Additionally, the Microsoft Baseline Security Analyzer (MBSA) does not detect execution of the tool. This article includes information about how you can verify execution of the tool as part of deployment.



Read more about:

Microsoft
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like