ie8 fix
madison

Hardware 2.0

Adrian Kingsley-Hughes

Microsoft Safety Scanner

By | May 11, 2011, 7:53am PDT

Think you got a virus? Microsoft to the rescue!

A few weeks ago, with little fanfare, Microsoft released a new downloadable on-demand security scanner to help techies deal with malware outbreaks

The tool, called Microsoft SafetyScanner, is a 70+MB, self-contained security scanner package that you download and run.

On running the tool (and being told that this tool is not a replacement for a proper anti-malware solution) you’re given three options:

  • Quick scan - Likely spots that malware might be lurking
  • Full scan - Whole system … just in case
  • Customized scan - Scan a specific folder

And that’s it.

I had to throw a little something in the scanner’s way (just the simple EICAR test file):

Some drawbacks:

  • There are not updates provided for the tool - you have to redownload the package
  • The download is only valid for 10 days, after which you have to redownload the package
  • The progress bar seems to mean nothing

Handy if you want a quick anti-malware scanner.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Adrian Kingsley-Hughes is an internationally published technology author who has devoted over a decade to helping users get the most from technology.

Disclosure

Adrian Kingsley-Hughes

All opinions expressed on Hardware 2.0 are those of Adrian Kingsley-Hughes. Every effort is made to ensure that the information posted is accurate. If you have any comments, queries or corrections, please contact Adrian via the email link here. Any possible conflicts of interest will be posted below. [Updated: February 23, 2010] - Adrian Kingsley-Hughes has no business relationships, affiliations, investments, or other actual/potential conflicts of interest relating to the content posted so far on this blog.

Biography

Adrian Kingsley-Hughes

Adrian Kingsley-Hughes is an internationally published technology author who has devoted over a decade to helping users get the most from technology -- whether that be by learning to program, building a PC from a pile of parts, or helping them get the most from their new MP3 player or digital camera.

Adrian has authored/co-authored technical books on a variety of topics, ranging from programming to building and maintaining PCs. His most recent books include "Build the Ultimate Custom PC", "Beginning Programming" and "The PC Doctor's Fix It Yourself Guide". He has also written training manuals that have been used by a number of Fortune 500 companies.

Adrian also runs a popular blog under the name The PC Doctor, where he covers a range of computer-related topics -- from security to repairing and upgrading.

Related Discussions on TechRepublic

Did you know you can take part in these discussions with your ZDNet membership?
39
Comments

Join the conversation!

Just In

RE: Microsoft Safety Scanner
Cannabis Seed 27th Oct
@John Zern
This looks interesting, though MSRT was a big let down for its footprint. How would this compare to the current industry standard MBAM?
cannabis seed
0 Votes
+ -
RE: Microsoft Safety Scanner
jmiller1978 11th May 2011
Makes sense for it to be non-updateable, it's designed to go on read-only media. Why put it on writeable media when that could get infected also and just help to spread it?

As far as the progress bar is concerned, do they ever mean anything?
0 Votes
+ -
I was thinking the same thing
John Zern 11th May 2011
@jmiller1978

As far as the progress bar is concerned, do they ever mean anything?
0 Votes
+ -
RE: Microsoft Safety Scanner
Cannabis Seed 27th Oct
@John Zern
This looks interesting, though MSRT was a big let down for its footprint. How would this compare to the current industry standard MBAM?
cannabis seed
0 Votes
+ -
RE: Microsoft Safety Scanner
g@... 11th May 2011
@jmiller1978
Also ,Isn't this The Malicious software removal tool rebranded as Safety Scanner? I've used it a couple of times
0 Votes
+ -
RE: Microsoft Safety Scanner
newkansan 11th May 2011
@g@...it has the components of the malicious software removal tool in addition to a virus scanner (presumably Security Essentials engine?). It looks like MRT, but has bits of Security Essentials added on top.
0 Votes
+ -
Actually Used this last night
bobiroc 11th May 2011
Customer got one of those Fake Antivirus Scareware apps installed. Had expired A/V and no other protection and only on XP Sp1. Found lots of stuff. I also used a couple other Anti-Malware applications to clean it all out.

Now time to patch up and install MSE and other updates. I am pretty positive had the computer been up to date and had proper AV he would have been OK. Of course I did find quite a bit of questionable content in his internet history.
0 Votes
+ -
RE: Microsoft Safety Scanner
Cylon Centurion 11th May 2011
@bobiroc

I'd like to know how that machine sat online all this time and was only up to date circa Sept. 9th 2002.


Poor machine.
0 Votes
+ -
RE: Microsoft Safety Scanner
bobiroc 11th May 2011
@Cylon Centurion 0005

I have no idea to be honest. The customer insisted that I do my best to not just format the whole thing as he has software he no longer has the installs for that he "needs" Told him I cannot make that guarantee and it will cost extra to do it this way. So far I think it is OK. I have to do some other checks this evening when I get off of work.

I guess I am still surprised that basic computer care like updates and patching are still so widely overlooked. Not just on Windows either. I have taken in a few Macs that are way behind on their patching. I have had a few people say that they purposely cancel it sometimes because they cannot be bothered with that to which I ask well do you just not bother with changing the oil in your car and other car maintenance. They always reply No way that is stupid. Well so is not patching your computer.
0 Votes
+ -
RE: Microsoft Safety Scanner
Cylon Centurion Updated - 11th May 2011
@bibiroc

To be fair, Windows XP was always funny with updates, only because it never had a baked in system that Vista and 7 have, but even with AU turned on, they would still install and prompt a reboot. The only way your customer would be that out of date would be if AU was turned off. That's going to be a tough repair without nuking it from orbit.

I can almost picture what kind of machine it is too. Dell Dimension desktop running with 256MB of RAM, and most likely filled with dust. A lot of dust. Lol

But, what I think it boils down to is laziness. Which is surprising as most updates can silently install, and when finished wait for a reboot at a later time if one is needed. Maybe on the days of dial up would it be OK to cancel them, but not with today's high speed Internet.
0 Votes
+ -
RE: To Be Fair
bobiroc 11th May 2011
@Cylon Centurion 0005

It is an eMachine Celeron 2.2Ghz with 512MB ram. He said he always told it to shut down without installing the updates and a friend eventually showed him how to shut it off because they were only needed if you were having a problem with the computer. So Autoupdates was not set to automatic. It would download them but not install them automatically and he purposely ignored them because it would take too much time.

It is rather dusty too so there will be a charge for that clean out as well.
0 Votes
+ -
RE: Microsoft Safety Scanner
pc_techs_ct@... 12th May 2011
@bobiroc said "I am pretty positive had the computer been up to date and had proper AV he would have been OK"

I had a customer's pc that was fully up-to-date (Avast A/V, SuperAntiSpyware; both paid versions)

He clicked on a scareware pop-up and the machine was promptly infected with one of the rogue security scanner variants.
0 Votes
+ -
Nothing stops the user from saying
Will Pharaoh 12th May 2011
@pc_techs_ct@...
"Sure, Go ahead!"
0 Votes
+ -
Ah, the oldest vulnerability in existence ..
thx-1138_@... 19th May 2011
@pc_techs_ct@ ... the sure to get PWNED vulnerability ..

.. the bit at the end of the keyboard.
0 Votes
+ -
Self Contained Pros & Cons
robertr@... Updated - 11th May 2011
I like the idea it is "Self-Contained" if that means it will run from a USB Flash Drive with no Registry modification. I have removed close to 100 Malware infections on client computers over the last year or so. I have noticed that some infected computer prevent the installation of MALWARE Scanners, so I always try to install one to have on hand if the machine gets infected. I have seen some malicious behavior prevent known scanners executables from running (some require using RENAMED .EXE files, does not always work). This may be the drawback to this approach. Other issues I have noticed is Malware installs a PROXY preventing infected computer from visiting sights that contain MALWARE scanners, so the danger here is unless you have another machine, you have no-way access a site that allows you to download a scanner. If only good for 10 days, then I can't keep it in my arsenal of tools (I keep my flash drive with me all the time with a compliment of scanners I rely on).

Don't get me wrong, I will try this but I have had to run resident scanners to kill TSR programs that prevent me from running known Malware Scanners. I think a Self-contained on a USB that can be updated is a better approach.

Anyone use this tool yet to get rid of Fake Anti-Virus (looks like bobiroc answered that question while I was typing....I will grab a copy to mess with in my spare time, of course that might be 2-weeks from now and it won't run after 10 days).
0 Votes
+ -
RE: Microsoft Safety Scanner
Cylon Centurion 11th May 2011
@robertr@...

In that case, don't install it till you need to. I'm pretty sure that 10 days begins when the software is installed and not downloaded.
0 Votes
+ -
From download date
VBJackson 12th May 2011
@Cylon Centurion 0005

I expect it IS from date of download.
The whole idea is that you download the latest version right when you need it so that it has the latest signatures.
0 Votes
+ -
10 days...
pgit 12th May 2011
@Cylon Centurion 0005 Isn't that basically the "upgrade" method? The 10 day limit is so you won't keep using a tool with outdated databases.

At least that's the way I read it. I don't think they are enforcing licensing so much as having a way to keep the tool up to date 'in the wild.'
0 Votes
+ -
RE: Microsoft Safety Scanner
orenkuhn@... 12th May 2011
@robertr@...
If you find that the computer is rerouting you to other sites when you try to download malware scanners, try using TOR with firefox running off a flash drive. That has gotten me past the blocked stuff and let me download whatever software I needed.
0 Votes
+ -
Message has been deleted.
maoim Updated - 11th May 2011
0 Votes
+ -
Allow me to say it
facebook@... 11th May 2011
But what about the attack vectors? The DLLs will be injected and there is no LSM.

There. job done.
0 Votes
+ -
Really?
paul.watson 11th May 2011
The last time I used a Microsoft "virus" product (admittedly some time ago) it knew so little about viruses that all it did was spread viruses when it opened every file to look at it.
0 Votes
+ -
RE: Microsoft Safety Scanner
pc_techs_ct@... 12th May 2011
@paul.watson huh?
0 Votes
+ -
Security Essentials...
jessiethe3rd 11th May 2011
Free... very good... why this?
0 Votes
+ -
RE: Microsoft Safety Scanner
bobiroc 12th May 2011
@jessiethe3rd

Because this is a self contained executable. It can be very useful if a virus, trojan, or some other malware has taken over the computer and you cannot do much let alone install an actual program. You can download this on another PC and run it independently.
0 Votes
+ -
RE: Microsoft Safety Scanner
Romas27 11th May 2011
Used it to fix a computer with an unknown virus. Guess what, it worked perfectly and the computer was usuable again.
0 Votes
+ -
RE: Microsoft Safety Scanner
dachba 11th May 2011
I have the complete Norton Security Suite (part of my Comcast subscription). Does anyone know if this product has any advantages over the Norton product?
0 Votes
+ -
RE: Microsoft Safety Scanner
lcloria2 11th May 2011
I strongly suggest this to my friends. It doesn't replace a proper Antivirus app or proper updates but, it doe's work well.
0 Votes
+ -
RE: Microsoft Safety Scanner
harrist001@... 11th May 2011
You're far better off to start the system in 'Safe Mode With Networking' and install MBAM from a thumb-drive, update if possible or just run it if you can't update. MS antivirus anything misses so often that it's hardly worth the effort.
0 Votes
+ -
RE: Microsoft Safety Scanner
d_j_owen2002@... 11th May 2011
I prefered the previous tool as it did so much more. I scanned for viruses and other malware, cleaned up your hard disc and defragged it, cleaned up your registry and I always found it so much more reliable than other registry cleaners I have tried and carried out a security port scan among other things. I found it was a good tune up tool MS Live One care free Scanner points at this now and it is so much less. Not impressed I have other tools that provide the funtion this does.
0 Votes
+ -
took over 3.5 hours but...
cutting@... 11th May 2011
it found one that my other programs missed! It partially uninstalled it but I had to go in and finish it up. Very nice!
0 Votes
+ -
RE: Microsoft Safety Scanner
abookcliff@... 12th May 2011
A WATERED DOWN VERSION OF WINDOWS LIVE ONLINE ONECARE SAFETY SCANNER BETA,WHICH I WAS VERY FOND OF.
0 Votes
+ -
RE: Microsoft Safety Scanner
mixx24@... 12th May 2011
Actually I wish they'd offer a boot disk of the Standalone System Sweeper for the MsDart toolset. Same MSE/FEP engine but able to download updates (or accept from USB) and scan from outside the OS. Sadly this wonderful tool is only available to Volume License Software Assurance customers.
0 Votes
+ -
RE: Microsoft Safety Scanner
Hot Face Updated - 12th May 2011
Neighbor's laptop infected with xp 2011. Scanner took care of it after the virus knocked out McAfee Security Center and Microsoft update capability. The scanner ran for several hours and found two infections.
0 Votes
+ -
AVG Rescue CD
robajoseph15 12th May 2011
Prefer this as it boots into Linux so the bad stuff can't block your removal efforts. But not for your mother to use...

http://www.avg.com/us-en/avg-rescue-cd
0 Votes
+ -
RE: Microsoft Safety Scanner
Stupid User 14th May 2011
Have you seen many meaningful progress bars? I haven't seen any.
0 Votes
+ -
10 day limit.
roddic 18th May 2011
if i delete its regedit profile can i fool it and make it reinstall?
0 Votes
+ -
RE: Microsoft Safety Scanner
bobiroc 19th May 2011
@roddic

Why? Then your scanning definitions are 10+ days old.
0 Votes
+ -
RE: Microsoft Safety Scanner
John Thomas_889 29th May
I was directed by Microsoft support recently to use a new antimalware tool called Microsoft Standalone System Sweeper beta. Microsoft seems to be beta testing this tool hosted at - http://connect.microsoft.com/systemsweeper. I have not seen any reference of this tool in the web but it works great. It lets you create a bootable media like CD, DVD, USB or ISO which can be used to start the computer in an offline environment for cleanup. I was able to create a bootable DVD and worked great in cleaning my infected computer. Based on my limited research, I believe Standalone System Sweeper was earlier part of DART but glad that Microsoft has released it for consumers and tool works great.
0 Votes
+ -
RE: Microsoft Safety Scanner
BitTwiddler 26th Oct
web site down more than it's up. Useless if you can't get to it.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
Click Here
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix