1. Download the Anti-Threat Toolkit by clicking on the link below that applies to your infected computers condition:

   For computers with internet connection

   • Online Scan / Clean Tool (32-bit)
   • Online Scan / Clean Tool (64-bit)

   For computers without internet connection

   • Offline Scan / Clean Tool (32-bit)
   • Offline Scan / Clean Tool (64-bit)
2. Read the Trend Micro License Agreement, then click I Accept and download the tool.
3. Choose the preferred directory where the tool will be stored then click Save.
4. Right-click the downloaded file and select Run as administrator.
5. Click Scan Now when the Trend Micro Anti-Threat Toolkit window appears.

   

   ^{Click the image to enlarge.}

    

   You can change the scan type by clicking Settings and selecting the Scan Type.

    

   

   ^{Click the image to enlarge.}

The scan may take some time. The tool will scan your computer and list the threats it finds.

• Click Fix Selected to clean your computer.

  

  ^{Click the image to enlarge.}

  The tool will show a summary of the scan.
• Close the Anti-Threat Toolkit after your computer has been cleaned.

  

  ^{Click the image to enlarge.}

• You will receive a temporary ID number that you can use when you contact Trend Micro Technical Support .

  

  ^{Click the image to enlarge.}

   

  The Trend Micro Anti-Threat Toolkit folder will appear on the same folder where you ran the tool.

   
• Go to the Trend Micro Anti-Threat Toolkit folder > Output . You will find a .ZIP file with the filename containing the timestamp and GUID.

  

  ^{Click the image to enlarge.}

• Do either of the following if you still need help after you have cleaned your computer:
  • If you have an existing case: You can submit the temporary ID number and attach the .ZIP file to the engineer who is handling your case.
  • If you do not have an engineer handling your case: Send the .ZIP file to Trend Micro Technical Support for analysis.

    For more information, you may refer to this article: Submitting malware samples to Trend Micro Technical Support.

1. Download the Anti-Threat Toolkit by clicking your operating system version below:
   • 32-bit
   • 64-bit
2. Read the Trend Micro License Agreement. Once you click I Accept, the download will start.

   

   ^{Click the image to enlarge.}

3. Choose the preferred directory where the tool will be stored then click Save.
4. Right-click the downloaded file and select Run as administrator.
5. Click Yes when the User Account Control window appears.

   A command prompt window will appear to show the system forensic analysis progress.

   

   ^{Click the image to enlarge.}

6. A browser window will appear after the analysis is completed. You will receive a temporary ID number that will be used as a reference ID when you contact Trend Micro Technical Support.

   

   ^{Click the image to enlarge.}

    

   The Trend Micro Anti-Threat Toolkit folder will appear on the same folder where you ran the tool.

    
7. Go to the Trend Micro Anti-Threat Toolkit folder > Output. You will find a .ZIP file with filename including the timestamp and GUID.

   

   ^{Click the image to enlarge.}

8. If you have an existing case with Trend Micro Technical Support, submit the Temporary ID number and attach the output .ZIP file to the engineer(s) handling the case. Otherwise, submit a support request to Trend Micro Technical Support. Make sure to include the Temporary ID number and the output file.