Microsoft Safety Scanner is a free, portable on-demand scanning tool from Microsoft that finds and removes malware, spyware, and unwanted software from Windows PCs without installing anything.
Microsoft Safety Scanner is a free, single-use scanning utility built by Microsoft to detect and remove viruses, spyware, and other malicious software from Windows systems. The workflow is deliberately simple: obtain the executable, run it with administrative rights, pick a scan type, and review the results. Scans can check common infection points quickly or sweep entire drives and selected folders in depth, and detected items can be cleaned, quarantined, or deleted on the spot. Because it is built for on-demand checks, Microsoft Safety Scanner runs alongside whatever antivirus product is already installed rather than replacing it, making it a practical way to verify a machine after a suspicious download, an unexpected pop-up, or a shared USB drive.
Where the tool fits best is as a second opinion. Microsoft Safety Scanner uses the same security intelligence Microsoft ships to its security products, yet it adds no background service, no startup entry, and nothing left behind once a scan ends. That makes it convenient on machines you do not manage, such as a client laptop, a family computer, or a workstation borrowed from another team. Technicians often keep the executable on a USB stick beside other portable repair utilities, including tools like Remote Desktop MMRService, so a suspected infection can be checked without installing anything. Every run writes a log so you can see exactly what was found and what action was taken.
The main benefit of Microsoft Safety Scanner is trustworthiness without cost. It comes directly from the vendor of Windows, so there is no bundled toolbar, no trial countdown, and no upsell page waiting at the end of a scan. It is also unobtrusive: nothing is installed, no service is left running, and existing security software is not disturbed, which means you can use it on a locked-down work machine without asking for an exception. Speed matters too, since quick scans finish in minutes and give an immediate answer when something feels wrong. For technicians and support staff, the command-line options turn Microsoft Safety Scanner into a repeatable step inside a repair routine, and the generated log provides evidence for tickets and handover notes. Above all, it answers one narrow question well: is this computer clean right now?
Key capabilities and highlights.
The scanner runs from a single executable that never installs itself, creates no Start menu shortcut or desktop icon, and vanishes completely once the file is deleted. That makes it simple to carry on a USB drive and use on any Windows PC you have permission to check.
Choose a quick scan for the locations malware most often occupies, a full scan that reads every drive and system area, or a customized scan aimed only at a specific folder or file you already suspect. Quick scans return answers fastest when you only need reassurance.
Detected items can be cleaned, quarantined, or deleted as the scan moves through your files, and the tool attempts to reverse changes made by the threats it identifies. That means registry edits, startup entries, and stubborn files left behind by an infection are addressed rather than simply reported.
Every run writes a detailed log that records what was found and which action was taken for each detection. That detailed record is useful for support tickets, handover notes between technicians, or simply confirming that a machine was clean when it was checked.
Scans start only when you launch the tool, so it never competes with your primary antivirus for processor time and never runs unexpectedly in the background during a meeting, a rendering job, or a large overnight file transfer. You decide when a check happens, which keeps the system responsive for other work.
The Microsoft Safety Scanner executable accepts command-line switches for quiet, full, or targeted scans, letting technicians fold a malware check into a repair script, a deployment checklist, or a remote support routine without clicking through the graphical interface at all. That makes repeated checks across several machines far faster than manual runs.
Each downloadable build of Microsoft Safety Scanner carries anti-malware definitions current at the time it was published, so a newly obtained copy can detect recent threats without a separate update step, definition refresh, or configuration routine before the first scan begins. That keeps the workflow short: download, run, and review the results.
Running it with elevated permissions lets the scan inspect system directories, memory, startup items, and other protected locations where infections commonly hide, areas a standard user account cannot fully reach, examine, or clean on its own. Without those rights, some detections can be reported but left in place.
Browse historical releases and previous builds.
Common questions about Microsoft Safety Scanner.
No. It is an on-demand scanning tool only, with no real-time protection and no automatic updates. Microsoft positions it as a supplement to an installed anti-malware product such as Microsoft Defender Antivirus, which handles continuous, always-on protection.
No installation is required. Microsoft Safety Scanner is a portable executable, so you obtain the file, run it directly, and delete it when you are finished. It adds no Start menu entry, desktop icon, or uninstall entry to the system.
A downloaded copy stops working after a short validity window, which exists to push you toward current detection definitions. To scan again, obtain a fresh copy and run it, then delete the old file whenever you like.
Yes. Because it installs no service or driver, it works next to a third-party or Microsoft antivirus product without conflicting with it. Just avoid running two full antivirus scans at the same time, since that slows the machine noticeably.
The Microsoft Safety Scanner window shows detections and actions as the scan proceeds. A log file is also written to the system debug folder, listing each detected item and the action taken, so you can review it later or share it with support staff.
Not from inside the tool, because it only runs when you launch it. Recurring scans must be triggered externally, for example by a script or a Windows scheduled task that calls the executable with command-line switches.
A full scan reads every drive and can take anywhere from a few minutes to well over an hour depending on how much data is stored, disk speed, and system load. Quick scans finish far sooner because they check only the locations infections commonly use.
Running it with administrative privileges is strongly recommended. Elevated rights let the scanner inspect protected system areas and remove or quarantine threats; without them, some detections cannot be cleaned and will be reported but left in place.
Microsoft Safety Scanner is a free, portable on-demand scanning tool from Microsoft that finds and removes malware, spyware, and unwanted software from Windows PCs without installing anything.
The AppLocker Policy Converter is a Microsoft command-line utility that translates existing AppLocker policy files into App Control for Business policies, giving administrators a practical starting point for migrating away from the older application control feature.
The Microsoft App Control Wizard is Microsoft's open-source desktop tool for building, editing and merging Application Control for Business policies, giving administrators a guided way to define exactly which applications and drivers may run on managed Windows devices.
Malwarebytes is Windows antivirus and anti-malware software for finding and removing threats, with free scanning tools and paid real-time protection against malicious files, ransomware, exploits, and dangerous websites.
AdwCleaner is a lightweight cleanup utility that scans a Windows PC for adware, browser hijackers, toolbars, and unwanted preinstalled software, then quarantines what it finds so the change can be reversed.
Comments