Installing Malware Bytes from USB Drive in Safe Mode

[sbentjies]

I have a scenario where I will want to boot into safe mode (FBI Virus) and run Malware Bytes from a USB drive. My concern is that in Safe Mode I will not be able to execute the install because of the limited functionality. Will this work?

 

[Tookeri]

Hi and welcome to SevenForums!

Don't know, haven't tried. But Malwarebytes have a special program for this kind of scenario: Malwarebytes | Chameleon - Free Malware Removal Tool

"Malwarebytes Chameleon technologies gets Malwarebytes Anti-Malware installed and running when blocked by malicious programs."

 

[sbentjies]

Hi and welcome to SevenForums!

Don't know, haven't tried. But Malwarebytes have a special program for this kind of scenario: Malwarebytes | Chameleon - Free Malware Removal Tool

"Malwarebytes Chameleon technologies gets Malwarebytes Anti-Malware installed and running when blocked by malicious programs."

I think Chameleon only installs a trial version and will nag to register/pay later. Feel free to correct me if I'm wrong.

 

[Tookeri]

Don't know. But that shouldn't be a big problem as long as your primary concern is to clean the machine. You can always uninstall MBAM after.

The only thing I know about MBAM and Safe Mode is that it can't load and use 100% of its capacity. I think scanning for rootkits for example. It's preferred to use MBAM in normal mode if possible.

 

[sbentjies]

Don't know. But that shouldn't be a big problem as long as your primary concern is to clean the machine. You can always uninstall MBAM after.

The only thing I know about MBAM and Safe Mode is that it can't load and use 100% of its capacity. I think scanning for rootkits for example. It's preferred to use MBAM in normal mode if possible.

That would be my preference but the FBI Virus has taken functional control of the machine over

 

[Tookeri]

Found this: https://helpdesk.malwarebytes.org/h...warebytes-Anti-Malware-on-an-infected-system-

Method B describes Safe Mode.

 

[PSCO2007]

You can also get rid of that FBI warning by going to Task Manager and stopping process.

 

[MoxieMomma]

MBAM is designed to be run best in Normal Mode from the OS boot drive (not from a USB stick).
In fact, running the consumer version from a USB stick or drive is not supported.

As was already suggested, there are some troubleshooting steps, including running from Safe Mode (not ideal) or using Chameleon

HTH

 

[DonnaB]

Hi sbentjies,

If that fails, there is another way. Please follow the instructions below:

You will need a USB drive and a clean computer:

On the clean computer;

Download McShield2 to your desktop and install with default settings.
In the control center, select scanner and check unhide items on flash drives
Anytime you plug in a USB drive, McShield will scan the device.

Next:

On a working computer:

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.
For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
• Click on Repair your computer menu item.
• Select US as the keyboard language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account and click Next.

On the System Recovery Options menu you will get the following options:

Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt​

• Select Command Prompt
  
  
  Next:
  
  
  ​
• In the command window type in notepad and press Enter.
• The notepad opens. Under File menu select Open.
• Select "Computer" and find your flash drive letter and close the notepad.
• In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
  Note: Replace letter e with the drive letter of your flash drive.
• The tool will start to run.
• When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the flash drive. Please copy and paste this log in your Topic.
  
  If that fails, let me know, and I we'll try the other trick I have up my sleeve.

 

[MDRI]

@Donna,

Upon reviewing your thread. I uploaded the FRST.txt on my thread

Win 7: Black screen on boot up, before login screen?

Do you mind, sharing your insight?