Microsoft Ships March 2026 MSRT Update (KB890830) as Version 5.122
The routine monthly MSRT refresh arrives via Windows Update as KB890830; several widely circulated technical claims about the release remain unverified.
On this page
Key takeaways
- KB890830 is the standing knowledge base ID for the monthly MSRT update; the March 2026 build is listed as version 5.122.
- MSRT is delivered through Windows Update, Microsoft Update, WSUS and the Microsoft Update Catalog, and requires no restart.
- MSRT is a post-infection cleanup tool, not a real-time antimalware replacement.
- Several circulating claims — a specific new-family count and AI/behavioral detection features — are not confirmed by an official Microsoft source in the provided material.
What to do now
Low urgency- Ensure Windows Update or WSUS delivery of MSRT is enabled.
- Validate against Microsoft's official KB890830 page before acting on detailed claims.
Microsoft's monthly Windows Malicious Software Removal Tool (MSRT) update is delivered under KB890830, and the March 2026 release follows the usual cadence of shipping alongside Patch Tuesday security updates. MSRT is a targeted, post-infection cleanup utility that runs automatically after delivery and is not a replacement for a full antivirus product.
For IT teams, the MSRT refresh is a routine maintenance item — but the dossier around this month's release includes several specific technical claims that are not backed by a verifiable Microsoft source and should be treated cautiously.
Microsoft's March 2026 MSRT update ships as KB890830 (version 5.122) through the usual Windows Update channels with no restart required.
KB890830 delivers the March 2026 MSRT update automatically; treat unverified detail claims with caution and confirm against Microsoft's official advisory.
Affected & context
Microsoft's March 2026 Malicious Software Removal Tool update is distributed as KB890830. The source dossier lists version 5.122 and a range of detection additions, but many specifics are unverified by an official Microsoft source.
MSRT runs on the vast Windows install base and is delivered automatically, so its monthly refresh is relevant to admins even though it is not a substitute for full antimalware.
Windows client and server systems receiving Microsoft security updates.
- Vendors
- Microsoft
- Products
- Windows Malicious Software Removal Tool (MSRT)
- Geography
- Global
What KB890830 is
KB890830 is the long-standing knowledge base identifier Microsoft reuses each month for the Windows Malicious Software Removal Tool (MSRT). The March 2026 release is listed in the source material as version 5.122. Like previous MSRT releases, it is designed to detect and remove prevalent, specific malware families from already-infected systems.
MSRT is not an antivirus
MSRT runs a targeted scan for a defined set of prevalent threats and removes what it finds. It does not provide real-time protection and does not replace Microsoft Defender Antivirus or a third-party endpoint product.
Delivery and installation
MSRT ships on the second Tuesday of each month with Microsoft's regular security updates. According to the source material, the March 2026 build is roughly 85 MB, requires no restart, and can be deployed manually from the Microsoft Update Catalog for offline scenarios.
- Windows Update / Microsoft Update: automatic delivery during regular cycles.
- WSUS: distribution to managed enterprise environments.
- Manual: download from the Microsoft Update Catalog for offline deployment.
- Enterprise tooling: deployable via Configuration Manager or Intune, with silent install using /quiet.
To confirm the tool is present, administrators can query the hotfix record in PowerShell.
Get-HotFix -Id KB890830What is unverified
The source dossier makes several specific claims about the March 2026 update that are not backed by a verifiable Microsoft advisory in the provided material. These include a precise count of "47 new malware families," AI-powered and behavioral/memory detection capabilities, container and WSL2 scanning routines, and named detections for specific variants such as Lockbit.AZ, Emotet.BX, Qakbot.CY and CoinMiner.ZX.
Treat detailed claims with caution
Historically, MSRT release notes are brief and list a small number of newly covered families rather than dozens. Until confirmed against Microsoft's official KB890830 page, the detailed feature and detection claims in circulation should not be republished as fact.
What to check next
- Confirm the exact version number and covered families against Microsoft's official KB890830 documentation.
- Verify any performance, false-positive or memory-usage claims in your own test ring before enterprise rollout.
- Ensure automatic updates are enabled so MSRT refreshes each month without manual action.
Impact
A routine monthly refresh of MSRT detection and removal capabilities delivered automatically to Windows systems.
Business impact
Minimal; standard maintenance item within the monthly update cycle.
Technical impact
MSRT runs a quick scan after installation; no restart is required.
Security impact
Incremental improvement to post-infection cleanup coverage.
Affected audience: IT admins, Windows end users
Technical details
- Patched versions
- MSRT 5.122 (per source material, unverified)
Technical references
Response
Customer guidance
Microsoft recommends keeping automatic updates enabled so MSRT receives its monthly refresh; the tool runs a quick scan after installation, and full scans can be started manually via mrt.exe.
Response status: Acknowledged
Patch available: Yes
Workaround available: No
FAQ
What is KB890830?
KB890830 is the recurring knowledge base ID Microsoft uses for the monthly Windows Malicious Software Removal Tool (MSRT) update, which detects and removes specific prevalent malware from infected Windows systems.
Does the March 2026 MSRT update require a restart?
According to the source material, no restart is required; MSRT runs a quick scan automatically after installation.
Is MSRT a replacement for antivirus?
No. MSRT is a post-infection cleanup tool for a defined set of prevalent threats and does not provide real-time protection.
How do I check whether KB890830 is installed?
Run Get-HotFix -Id KB890830 in PowerShell, which returns the patch details if the update is present.
The bottom line
KB890830 delivers the March 2026 MSRT update (version 5.122) through standard Windows Update channels with no restart required.
The update itself is routine — the detailed technical claims circulating around it are the part worth verifying.
What happens next
Microsoft will continue shipping monthly MSRT updates; admins should confirm this release's specifics against the official KB890830 page.
What to do
Confirm the release against Microsoft's official documentation and keep automatic updates enabled.
Sources
Microsoft · Primary source
Claims supported
- KB890830 is the monthly MSRT update ID delivered via Windows Update.
Microsoft · Primary source
Claims supported
- Get-HotFix can verify whether KB890830 is installed.