running mset security

Question

II ran the MSET security checker & it found 54 infected files while running. it stopped runing short of completion & then said no infected files found. what's the problem?

Answer 1

Hi. I'm David, and I'm happy to help you.

---

Based on your description, you are likely using the Microsoft Safety Scanner (MSERT). Don't worry, what you are seeing is actually completely normal behavior for this tool.

The scanner may report that it found threats while running, but then show no detections once it finishes. This happens because the tool flags suspected files using heuristic analysis during the live scan (acting like a temporary counter for "suspicious" items).

At the very end of the process, it performs a final, thorough check of these specific items against Microsoft's official malware database. If the tool determines they were just false positives, they are dismissed.

Therefore, if the final report states that no threats were found, no actual malware was detected, and your system is considered clean by the scanner.

---

Feel free to ask any questions you may have.

Answer 2

The behavior described typically means the malware scan did detect suspicious or infected items while running, but was unable to fully clean or complete the process, and the final status message is summarizing only what was successfully removed.

For Microsoft’s malware tools, “partially removed” or “infection found but not removed” are normal outcomes when some components cannot be cleaned automatically. The Windows Malicious Software Removal Tool (MSRT) and other Microsoft scanners can report:

• Infections found and removed
• Infections found but not removed
• Infections found and partially removed

If the scan stopped short of completion and then reported no infected files, likely outcomes are:

1. The tool removed or quarantined what it could, but:
   • Some files could not be removed, or
   • The scan did not complete, so the final summary only shows what is currently detected (which may be “none” if the remaining items are not being flagged in that pass).
2. There may be persistent or hidden components that require additional steps or a different tool to fully remove.

Recommended actions:

1. Run the Windows Malicious Software Removal Tool (MSRT) manually and perform a full scan:
   • Press Windows key + R, type %windir%\system32\mrt.exe, select OK, then follow the prompts for a full scan.
2. If the tool reports an infection as “not removed” or “partially removed,” or if malware keeps coming back:
   • Run a Microsoft Defender Offline scan so Windows can scan outside the normal Windows environment and catch hidden threats.
3. If scans still cannot complete or threats persist:
   • Follow the advanced troubleshooting guidance for detecting and removing malware, including checking disk space, closing other apps, and re-running scans.
4. Ensure Windows and antivirus definitions are fully up to date after cleaning.

If the same malware continues to reappear after these steps, it indicates an undetected component is reinstalling it, and an offline scan is strongly recommended.

---

References:

• Antivirus and antimalware software: FAQ
• Remove specific prevalent malware with Windows Malicious Software Removal Tool (KB890830)
• Troubleshoot problems with detecting and removing malware