Malwarebytes Anti-Malware Free

Anti-Malware Free


Malwarebytes Anti-Malware Free (Mbam) version 2.0 is an on-demand scanner that, in addition to your real-time Anti-Virus (AV) software, protects your system against malware.

Malwarebytes is not an Anti-Virus (AV) program, it addresses other types of malware often overlooked by AV programs. No single application can identify and eradicate all types of malware.

Your first line of defense against infection is a real time AV program with an up-to-date engine and virus definitions actively protecting your system with periodic scans scheduled.

Your second line of defense against malware are on-demand scanners. If it is suspected that malware is on your system, an n-demand scanners can check for and clean any malware it detects.

It is good practice to run Mbam once a week.

---

1. Read the online documentation for Malwarebytes:

• FAQs (link is also available in Mbam Settings Help)
• Malwarebytes User Guide
• Malwarebytes Support: Guides and Videos

2. Mbam requires administrator privileges

• your user profile must be an administrator, or
• you must elevate the privileges when you launch Mbam.

3. If you require assistance, SevenForums (SF) members helping you need feedback (log files, screen shots) from the processes you will run.
See: How to attach files and screen shots

---

Malwarebytes Anti-Malware Free
4. On the Do you want to run or save ... Action Bar
Select Save
The file is placed in your default save location, normally the Downloads folder under your user profile.


5. On the The ... download has completed Action Bar

• If your user profile is an Administrator User Account:
  Select Run
  
  
  
• If your user profile is a Standard User Account:
  • Select Open folder
    
  • Launch Mbam with elevated privileges (Right click, pick Run as administrator from the context menu)

---

Allow the application to run (Yes or Run) if Windows User Access Control (UAC) requests permission

• Read the End User Licenses Agreement, then
  Tick I accept... and press the Next button
  
• Read the Information window and press press the Next button
• Accept the default install location and press the Next button
• Accept the default Start Menu folder and press the Next button
• Accept Create a desktop icon and press the Next button
• Verify the install parameters and press the Install button

Malwarebytes offers you a free trial of the Premium version. This guide suggests that you decline the initial offer made at install time and use the Malwarebytes Free version. The Start Free Trial and the Buy Premuium options are always available to you on the Mbam Dashboard window.
Set the final install options as shown below:

Enable free trial...
Launch Malwarebytes Anti-Malware
Press the Finish button to launch Mbam and update the database definitions.
:note:If the malware prevents launching Mbam, watch: How to use Malwarebytes Chameleon from the Malwarebytes Youtube channel

---

6. After the Mbam database definitions are updated, the Dashboard Main window presents the initial status:




Press the Fix Now >> button to run the initial scan on your system with the default Mbam settings.

---

7. Threat detection results are presented in the main window of the Scan menu.
If no threats were are detected, you can close the utility. This does not mean that your system is clean, it only means that Mbam did not detect any malware. Additional scans using different on-demand scanners might be advised by SF members. Each scanner has a particular focus of design and detects malware using different criteria.



If SF members are assisting you, let them know that Mbam did not find any threats

Threats detected during an Mbam scan are reported and automatically moved into quarantine. The threat(s) are isolated in the Mbam quarantine and can remain there until you are certain of the correct disposition of the file(s). Note that other malware scanners or AV applications might report the quarantined file as a threat.
Mbam Scanning History Log | Detected threat table.


If there are more than just a few objects stop here and seek the assistance of a SF member knowledgeable in malware remediation.


Occasionally a scanner will identify a legitimate file as malware (false positive).
Check each suspicious file by following the instructions in:
Analyze suspicious files with VirusTotal

---

8. Disposition of malicious objectsIn the above analyze phase of the review scan results, you used VirusTotal to determine if the threat detected was a true threat or a false positive. Use the VirusTotal analysis information to determine whether you Restore, Delete, or Retain the object in the
Mbam History Quarantine widow

Tick the checkbox next to the file(s) that VirusTotal confirmed as a true threat.

Clear the checkbox for any file that VirusTotal reported as probably harmless or the analysis was inconclusive.

Press the delete button.
:warn: Caution!! Do not press Delete All



After you have processed (deleted, restored, or retained in quarantine) all of the files detected, it is advised that you restart your machine.

Restart your machine to complete the Mbam malware removal process

---

9. Run the Windows System File Checker (SFC) to repair any system files that the malware might have corrupted.
See: How to Repair Windows 7 System Files with System File Checker

If SF members are assisting you, attach the sfc_detail.txt file as described in the System File Checker tutorial.

---

10. Attach any logs, reports, or screen shots that were created during this exercise to a new post on your thread.
See: How to attach files and screen shots

Mbam logs: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs
Mbam log naming convention:
mbam-log-YYYY-MM-DD (HH-MM-SS).xml
example: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs\mbam-log-2014-03-17 (18-11-35).xml

protection-log-YYYY-MM-DD.xml
example: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs\protection-log-2014-03-17.xml

• The log files are in XML format and must be viewed inside the utility (History menu Application Logs)
  
  
  
  
  
• Protection Logs contain update information (database, program, etc)
• Scan Logs contain the results of a scan
  Once you open the log for viewing, you can export it to a text file.
  
  
  • Export the log, select Text file(*.txt) as the output format
  • Specify a filename and location for the exported log and press save
    
    

If SF members are assisting you, attach the exported Scan Log text file to a new post on your thread.

Related Tutorials

---

• http://www.sevenforums.com/tutorials/338681-virustotal-uploader.html
• http://www.sevenforums.com/tutorials/38779-microsoft-security-essentials.html
• http://www.sevenforums.com/tutorials/24076-malicious-software-removal-tool.html
• http://www.sevenforums.com/tutorials/157118-microsoft-safety-scanner.html
• How to Scan Suspicious Files using Online Scanners
• http://www.sevenforums.com/tutorial...r-detect-repair-tdss-rookits.html#post2836778

 

[andrew129260]

Absolutely beautiful tutorials.

 

[ThrashZone]

Yea it is
My post template just got shorter thanks for that

 

[Samzter]

thanks for the tip. now i know, maybe it wont conflict with my AV (avira premium 2014) right? good day.

 

[Gator]

Yea it is
My post template just got shorter thanks for that

Yes, I just saved this link for that very reason. Great tutorial.

 

[fireberd]

I installed Malwarebytes on a client's computer last week. I notice it is now a yearly subscription. When I bought it, it was a "lifetime" subscription.

 

[derekimo]

I installed Malwarebytes on a client's computer last week. I notice it is now a yearly subscription. When I bought it, it was a "lifetime" subscription.

Yeah, that's the Pro or Premium version. This basically just covers the free version.

 

[ThrashZone]

Where did you buy it from mbam's site hasn't offered the lifetime license for some time now,
Although other sites like Newegg... have but the licenses dried up pretty fast

 

[Tookeri]

Great tutorial!

Just referenced it in a post, but I noticed the screenshots indicate that "Scan for Rootkits" is enabled but AFAIK it's off by default. A note on that would be great!
https://www.malwarebytes.org/support/guides/mbam/Detection.html

 

[Slartybart]

..... I noticed the screenshots indicate that "Scan for Rootkits" is enabled but AFAIK it's off by default. A note on that would be great!
https://www.malwarebytes.org/support/guides/mbam/Detection.html

Thanks Tookeri - good catch

I intentionally left the default values undefined in this tutorial. Mbam can change them at any time and rather than chase any changes they make, I simply say run with the default settings.

Links to Mbam docs and videos are provided in step 1.

The scan log image in step 10 was replaced with one showing the default scan options (rootkits disabled)

 

[mjf]

I still find the definitions confusing given virus is a subset of malware. I found this article helpful in trying to understand what some of the key vendors are claiming to offer.
The Difference Between Antivirus and Anti-Malware (and Which to Use)

 

[yargd]

what is the best alternative for Malwarebyte Premium?

 

[Layback Bear]

what is the best alternative for Malwarebyte Premium?

In my opinion their isn't any.
That is why I use Malwarebytes Premium.

 

[ThrashZone]

Malwarebytes free

 

[mjf]

Malwarebytes free

I use it but decided to stick with V 1.75.0.1300 until they shut it down. I don't know if the latest free version is considered stable.

 

[ThrashZone]

2.2.0.1014 ? Yes it's stable that I know of
All mine are pro versions though but all are up to date and pretty good as far as I've noticed.