Program file
msert.exe: the Microsoft Safety Scanner
msert.exe is the Microsoft Support Emergency Response Tool, known as the Microsoft Safety Scanner. It finds and removes malware, and Microsoft limits each downloaded copy to ten days. It is not a critical Windows file, so you can delete it. A copy in C:\Windows or System32 needs checking.
Prefer to check it yourself? The manual checks follow.
The genuine msert.exe is Microsoft's own malware scanner. Delete it freely when you have finished, because Windows does not need it.
The old report says a copy in C:\Windows or C:\Windows\System32 can be a sign of infection. Check the folder and the digital signature before you trust the file.
- Full name
- Microsoft Support Emergency Response Tool (Microsoft Safety Scanner)
- Publisher
- Microsoft
- Belongs to
- Microsoft Anti-Malware Signature Package, Microsoft Safety Scanner or Microsoft Malware Protection
- Purpose
- Finds and removes malware
- Normal folder
- C:\Program Files or another subfolder of C:\
- Suspect folders
- C:\Windows and C:\Windows\System32, according to the old report
- Validity
- A downloaded copy can be used for ten days, then a newer one is needed
- Needed by Windows
- No, it is not a critical Windows file
What msert.exe does
msert.exe is a Microsoft Support Emergency Response Tool that belongs to the Microsoft Anti-Malware Signature Package, the Microsoft Safety Scanner or Microsoft Malware Protection. It is a legitimate executable, although it often causes problems for Windows users, and malware can affect it.
Microsoft Safety Scanner is a program that is compatible with all major Windows versions, from Windows Server 2008 to Windows 10. The tool is used for finding and removing malware.
It can be used only for ten days after download. After that period the executable might start causing problems, and Microsoft recommends always using the latest version of the program.
About .exe files. An .exe file is a program. It runs as a process you can see in Task Manager, so its name, folder and publisher are what to check.
How to check msert.exe
The folder, the signature and the behaviour separate Microsoft's scanner from a fake.
- Check the folder Open Task Manager (Ctrl + Shift + Esc), choose the Details tab, right-click msert.exe and choose Open file location. The genuine file is in C:\Program Files or another subfolder of C:\.
- Check the digital signature Right-click the file, choose Properties > Digital Signatures and confirm that the signer is Microsoft Corporation and the signature is valid.
- Check the age of the download A copy of the Safety Scanner older than ten days is out of date. Download a new one from Microsoft, not from a third-party site.
- Check the CPU use The scanner is busy while it scans. If msert.exe uses a lot of CPU when you did not start a scan, treat it as suspicious.
A valid Microsoft signature in an ordinary folder is good evidence. A missing signature or a copy in the Windows folders is not.
Do you need msert.exe?
Only while you are scanning. It is not a critical Windows file, so users can remove msert.exe from the machine.
- Keep it only for a scan Run the Safety Scanner, read the result and then delete it. Download a fresh copy next time, since each copy stops being valid after ten days.
- Uninstall it if it is listed as a program Open Settings > Apps > Installed apps. If Microsoft Safety Scanner appears there, select it and choose Uninstall, as for an ordinary application. The old page said to do this in Control Panel.
- Delete the file if it is not listed Microsoft distributes the scanner as a single downloaded file. If there is no entry in Apps, delete msert.exe and empty the Recycle Bin.
- If you suspect a fake, scan the PC Run a full Microsoft Defender scan and a Microsoft Defender Offline scan from Windows Security > Virus & threat protection > Scan options. A full system scan cleans an infection entirely.
Warning signs
| What you see | What it means |
|---|---|
| msert.exe in C:\Windows or C:\Windows\System32 | The genuine scanner lives in C:\Program Files or another subfolder. Another location can be a sign of infection. |
| msert.exe using a lot of CPU in Task Manager | Possibly a trojan using the name; the real scanner uses the CPU only while it scans. |
| Files that you can no longer open because of an unknown extension | A symptom of infection listed by the old report. |
| Unknown programs or browser extensions installed without your knowledge | A symptom of infection; the file may be related to a trojan horse. |
| More ads, redirects to questionable websites, general sluggishness or unknown errors | Further symptoms from the old report. They point to malware, not to the file name alone. |
Everyday problems
msert.exe stops working after some days
The Microsoft Safety Scanner can be used only for ten days after download. After that period the executable might start causing problems.
Delete the old copy and download the current version from Microsoft. Microsoft recommends always using the latest version of the program.
How does a fake msert.exe get onto a PC?
The legitimate and safe msert.exe arrives together with a Microsoft application. A corrupted version spreads like a trojan horse and might trick users into downloading it, presented as a useful program, an update or similar content.
Malicious software often hides in freeware or shareware download sites. Stay away from such sources and use the official developer's website. Never click ads or pop-ups that warn about available software updates, detected viruses or suggest a system scan with unknown tools. These ads are usually malware-laden.
Is it a trojan if the file causes trouble?
Not necessarily. The old report says a trojan horse might be related to the file, but it is better to make sure that the file is responsible for the activity by scanning Windows with Microsoft Defender.
Computers can catch infections because of incorrect behaviour online, so the path of the file and its signature matter more than the name.
Questions people ask
What is msert.exe?
msert.exe is the Microsoft Support Emergency Response Tool, which belongs to the Microsoft Safety Scanner, the Microsoft Anti-Malware Signature Package or Microsoft Malware Protection. It is a malware finding and removal tool from Microsoft. It was built for all major Windows versions from Windows Server 2008 to Windows 10.
Is msert.exe a virus?
No, the original file is legitimate and published by Microsoft. It can still cause problems for users, and malware can imitate or affect it. Check that it sits in C:\Program Files or another subfolder of C:\ and carries a valid Microsoft signature. A copy in C:\Windows or System32 may be a sign of infection.
Can I delete msert.exe?
Yes. It is not a critical Windows file, so users can remove it from the machine. If Microsoft Safety Scanner is listed in Settings > Apps, uninstall it there. Otherwise delete the file. Nothing in Windows depends on it, and you can download a fresh copy whenever you want to scan again.
Why does msert.exe stop working after ten days?
The Safety Scanner can be used only for ten days after download. When the period ends the executable might start causing problems. Download the latest version from Microsoft instead of reusing the old file. Microsoft recommends always using the latest version of the program.
Why is msert.exe using so much CPU?
A scan is demanding, so msert.exe uses much of the CPU while it runs. If it uses a lot of CPU when you did not start a scan, check the folder and the digital signature. A suspicious file can be a trojan horse, so run a Microsoft Defender full scan to confirm.
How do I avoid a fake msert.exe?
Download it only from the official developer's website, never from freeware or shareware sites. Do not click ads or pop-ups that warn about updates or detected viruses, because they are usually malware-laden. Keep the Safety Scanner current and delete it when finished.
Sources
Version data read on Oct 5, 2026.
Questions and experiences
Ask about this page: members and our editors answer. Reading is open; writing needs a free account.
…