PDA

View Full Version : MBAM scan, in normal startup or safe mode?


Lebowsky
March 22nd, 2010, 03:34 AM
Which is more effective option?
Yesterday i cleaned up a pc that had a worm infection.
No popups or redirects, just MBAM wouldnt update, and sites of avg and avast wouldnt open.
i went to download.com, and got the avg installer, ran it from desktop, but it got some connection errors when it tried to download the whole application.

I have managed to clean the pc.
i turned off system restore, booted in safe mode, ram mbam and updated it from my USB stick, did a scan with Syperantispyware updated from USB, then ran combofix.
After seeing it was clean with no more redirects, and mbam etc. updating normally, i turned back system restore.

My question is, should i directly go into safe mode and do a scan, to save time? I do malware cleanup for my friends, im not a professional.

Brocke
March 22nd, 2010, 03:42 AM
if the pc is infected and you can get into safe mode and the app has to be able to run in safe mode i would always run in safe mode a scan to clean.

that will make sure most of the time the threat cant run (most of the time)

EliteKiller
March 22nd, 2010, 04:45 AM
http://www.wilderssecurity.com/showthread.php?t=266263&highlight=mbam+safe+mode

Lebowsky
March 22nd, 2010, 05:29 AM
http://www.wilderssecurity.com/showpost.php?p=1629780&postcount=5

Have the developers said MBAM works better in Normal mode than Safe mode?
(instead of signing up at mbam forums, just to ask this question, i thought i should get the experts opinion here)

Judge Dee
March 22nd, 2010, 07:31 AM
-{ Quote: "
Have the developers said MBAM works better in Normal mode than Safe mode?
" }-
http://forums.malwarebytes.org/index.php?showtopic=17979
See especially post #8, where the Admin says mbam is designed for normal mode.

G1111
March 22nd, 2010, 11:21 AM
Different product, but they recommend every so often scanning in safe mode:
http://www.misec.net/forum/board/TrojanHunter/1148542869

fcukdat
March 22nd, 2010, 11:33 AM
-{ Quote: "

My question is, should i directly go into safe mode and do a scan, to save time? I do malware cleanup for my friends, im not a professional." }-

Hi Lebowsky,

I can answer specifically to these questions with reguards MBAM,

MBAM operates at its optimum when run from regular mode whenever possible as safe mode operations inhibit certain parts of our engines functions.

The only time MBAM should be used in safe mode is when regular mode is not available.Then it is highly recommended that after the initial safe mode scan you rerun a quick scan in regular mode with MBAM firing on all cylinders:thumb:

Lebowsky
March 22nd, 2010, 12:24 PM
-{ Quote: "Hi Lebowsky,

I can answer specifically to these questions with reguards MBAM,

MBAM operates at its optimum when run from regular mode whenever possible as safe mode operations inhibit certain parts of our engines functions.

The only time MBAM should be used in safe mode is when regular mode is not available.Then it is highly recommended that after the initial safe mode scan you rerun a quick scan in regular mode with MBAM firing on all cylinders:thumb:" }-

Awesome, thanks for the clarification, and thanks to all the guys in this thread for replying. My doubts have been cleared.

kjdemuth
March 22nd, 2010, 01:34 PM
Hey kcukdat,
Is it possible to run malwarebytes with protection on and not have the IP blocker?

TheIgster
March 22nd, 2010, 01:51 PM
-{ Quote: "Hey kcukdat,
Is it possible to run malwarebytes with protection on and not have the IP blocker?" }-

Yes, you can create a registry key that disables it all the time. Just do a Google search. I can't remember off the top of my head, but I have mine disabled all the time now.

kjdemuth
March 22nd, 2010, 02:18 PM
yeah I like MBAM but I have that the IP blocker slows down my browsing at times.

Franklin
March 22nd, 2010, 08:22 PM
Section "G" :
http://forums.malwarebytes.org/index.php?showtopic=10138&st=0&p=162100

kjdemuth
March 22nd, 2010, 08:45 PM
Thanks franklin!