Trend Micro Anti-Threat Toolkit or ATTK, clean suspicious files even when you do not have Internet connection.

  1. Check if your computer is running a 32-bit or 64-bit version of Windows.
  2. Download Anti-Threat Toolkit depending on your Windows version type and your Internet connection access:
  3. Read the Trend Micro License Agreement. Once you click I Accept, the download will start.
  4. Log on to the computer with malware infection. Copy the downloaded file to the infected computer.
  5. Right-click on the tool, then click Run as administrator.
  6. Click Yes when the User Account Control window appears.
  7. Click Scan Now.

    Click Scan Now

    The tool will scan your computer and list the threats it finds.

    Fix Problems

  8. The tool will show a summary of the scan. Click Fix Now to clean your computer.
  9. Once done, click Close.
  10. Click Proceed to send the information the tool collected to Trend Micro Technical Support.


    You will receive a temporary ID number that you can use when you contact Trend Micro Technical Support and a Trend Micro Anti-Threat Toolkit folder will appear on the same folder where you ran the tool.
  11. Go to Trend Micro Anti-Threat Toolkit folder > Output.
    You will find a .ZIP file with the filename containing the timestamp and GUID.

    Time Stamp and GUID

  12. If you still need help after you cleaned your computer:
    • If you have an existing case, send the .ZIP file together with the temporary ID number to the Support Representative who is handling your case.
    • If you do not have an existing case, send the .ZIP file to our Technical Support for analysis.
Comments (0)
Add a comment