FRST (Farbar Recovery Scan Tool)

Overview

Farbar Recovery Scan Tool (FRST) is a powerful system diagnostic and malware analysis tool developed by Farbar. It is widely used by security professionals and malware removal experts to detect, analyze, and fix issues caused by malware infections, corrupted system files, and registry modifications.

FRST generates detailed logs that provide in-depth system information, allowing experts to create custom scripts to repair infections, restore settings, and remove malware remnants.

Features

Generates detailed logs of system configurations, startup programs, and services.
Detects and analyzes malware-infected registry entries and system modifications.
Supports custom fix scripts to remove malware and repair system issues.
Works in both Normal and Recovery Mode (via Windows Recovery Environment).
Portable and does not require installation.

Compatibility

FRST is compatible with:

Windows 7, Windows 8, Windows 10, Windows 11
Windows Recovery Environment (WinRE)

Usage

Download FRST from the official BleepingComputer website.
Run the executable as an administrator.
Click "Scan" to generate detailed logs of system configurations.
Upload the FRST.txt and Addition.txt logs to a security forum for expert analysis.
If provided, apply a custom fix script by loading it in the "Fix" section.

Pros & Cons

Pros

✔ Powerful diagnostic tool for malware analysis.
✔ Portable and does not require installation.
✔ Supports custom scripts for targeted repairs.

Cons

✘ Requires expertise to interpret logs and create fixes.
✘ Incorrect use of fix scripts can damage system stability.
✘ Not a standalone malware removal tool—requires manual review.

Alternative Software

HijackThis – An older system diagnostics tool for malware analysis.
RogueKiller – A malware removal tool with system analysis features.
Autoruns – A Microsoft tool for managing startup programs and registry entries.

Developer

Author: Farbar
Status: Actively maintained and regularly updated.