Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Using the Trend Micro Anti-Threat Toolkit to analyze malware issues and clean infections

    • Updated:
    • 1 Jun 2016
    • Product/Version:
    • Core Protection Module 10.5
    • Core Protection Module 10.6
    • Deep Security 8.0
    • Deep Security 9.0
    • OfficeScan 10.6
    • OfficeScan 11.0
    • Worry-Free Business Security Services 5.8
    • Worry-Free Business Security Standard/Advanced 7.0
    • Worry-Free Business Security Standard/Advanced 8.0
    • Worry-Free Business Security Standard/Advanced 9.0
    • Platform:
    • Windows 2003 Datacenter 64-bit
    • Windows 2003 Enterprise
    • Windows 2003 Server R2
    • Windows 2003 Standard 64-bit
    • Windows 2008 Datacenter
    • Windows 2008 Datacenter 64-bit
    • Windows 2008 Enterprise
    • Windows 2008 Enterprise 64-bit
    • Windows 2008 Server R2 Enterprise
    • Windows 2008 Standard
    • Windows 2008 Standard 64-bit
    • Windows 2008 Web Server Edition
    • Windows 2008 Web Server Edition 64-bit
    • Windows 2012 Datacenter R2
    • Windows 2012 Server Essential R2
    • Windows 2012 Server Essentials
    • Windows 2012 Standard
    • Windows 2012 Standard R2
Summary

Use the Trend Micro Anti-Threat Toolkit (ATTK) to analyze malware issues and clean infected computers.

Details
Public
  1. Download the Anti-Threat Toolkit by clicking whether the infected computer has a connection to the Internet or not:

    For computers with internet connection

    For computers without internet connection

  2. Read the Trend Micro License Agreement, then click I Accept and download the tool.
  3. Click Save when the File Download window appears.
  4. Select Desktop as the location of your download, then click Save .
  5. Double-click the downloaded file to run it.
  6. Click Scan Now when the Trend Micro Anti-Threat Toolkit window appears.

    Scan Now

     
    You can change the scan type by clicking Settings and selecting the Scan Type.

    Select the Scan Type

The scan may take some time. The tool will scan your computer and list the threats it finds.

  • Click Fix Now to clean your computer.

    Fix Now

    The tool will show a summary of the scan.
  • Close the Anti-Threat Toolkit after your computer has been cleaned.

    Scan results summary

  • Click Proceed to send the information collected to Trend Micro Technical Support. You will receive a temporary ID number that you can use when you contact Trend Micro Technical Support .

    Smart Protection Network

    The Trend Micro Anti-Threat Toolkit folder will appear on the same folder where you ran the tool.
  • Go to Trend Micro Anti-Threat Toolkit folder > Output . You will find a .ZIP file with the filename containing the timestamp and GUID.

    Send to Trend Micro Technical Support

  • Do either of the following if you still need help after you have cleaned your computer:
    • If you have an existing case: You can submit the temporary ID number and attach the .ZIP file to the engineer who is handling your case.
    • If you do not have an engineer handling your case: Send the .ZIP file to Trend Micro Technical Support for analysis.
 
If Trend Micro product, ATTK scan and other Trend Micro anti-malware tools did not find or detect any malwares, do the procedure below.
  1. Download the Anti-Threat Toolkit by clicking your operating system version below:
  2. Read the Trend Micro License Agreement. Once you click I Accept, the download will start.

    License Agreement

  3. Choose the preferred directory where the tool will be stored then click Save.
  4. Double-click the downloaded file to run it.
  5. Click Yes when the User Account Control window appears.

    A command prompt window will appear to show the system forensic analysis progress.

    command prompt

  6. A browser window will appear after the analysis is completed. You will receive a temporary ID number that will be used as a reference ID when you contact Trend Micro Technical Support.

    temporary ID

  7. A Trend Micro Anti-Threat Toolkit folder will be created inside the directory where the tool was executed. Inside is a subfolder named Output. You will find a .ZIP file with filename including the timestamp and GUID.

    zip file icon

  8. If you have an existing case with Trend Micro Technical Support, submit the Temporary ID number and attach the output .ZIP file to the engineer(s) handling the case. Otherwise, submit a support request to Trend Micro Technical Support. Make sure to include the Temporary ID number and the output file.
    1. Download the Anti-Threat Toolkit by clicking your operating system version below:
    2. Read the Trend Micro License Agreement. Once you click I Accept, the download will start.

      License Agreement

    3. Choose the preferred directory where the tool will be stored then click Save.
    4. Double-click the downloaded file to run it.
    5. Click Yes when the User Account Control window appears.

      A command prompt window will appear to show the system forensic analysis progress.

      command prompt

    6. A browser window will appear after the analysis is completed. You will receive a temporary ID number that will be used as a reference ID when you contact Trend Micro Technical Support.

      temporary ID

    7. A Trend Micro Anti-Threat Toolkit folder will be created inside the directory where the tool was executed. Inside is a subfolder named Output. You will find a .ZIP file with filename including the timestamp and GUID.

      zip file icon

    8. If you have an existing case with Trend Micro Technical Support, submit the Temporary ID number and attach the output .ZIP file to the engineer(s) handling the case. Otherwise, submit a support request to Trend Micro Technical Support. Make sure to include the Temporary ID number and the output file.
Premium
Internal
Rating:
Category:
Troubleshoot; Remove a Malware / Virus
Solution Id:
1059565
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.