MBAM scan, in normal startup or safe mode?

[Lebowsky]

Which is more effective option?
Yesterday i cleaned up a pc that had a worm infection.
No popups or redirects, just MBAM wouldnt update, and sites of avg and avast wouldnt open.
i went to download.com, and got the avg installer, ran it from desktop, but it got some connection errors when it tried to download the whole application.

I have managed to clean the pc.
i turned off system restore, booted in safe mode, ram mbam and updated it from my USB stick, did a scan with Syperantispyware updated from USB, then ran combofix.
After seeing it was clean with no more redirects, and mbam etc. updating normally, i turned back system restore.

My question is, should i directly go into safe mode and do a scan, to save time? I do malware cleanup for my friends, im not a professional.

[Brocke]

if the pc is infected and you can get into safe mode and the app has to be able to run in safe mode i would always run in safe mode a scan to clean.

that will make sure most of the time the threat cant run (most of the time)

[EliteKiller]

http://www.wilderssecurity.com/showt...mbam+safe+mode

[Lebowsky]

http://www.wilderssecurity.com/showp...80&postcount=5

Have the developers said MBAM works better in Normal mode than Safe mode?
(instead of signing up at mbam forums, just to ask this question, i thought i should get the experts opinion here)

[Judge Dee]

Originally Posted by Lebowsky

Have the developers said MBAM works better in Normal mode than Safe mode?

http://forums.malwarebytes.org/index...howtopic=17979
See especially post #8, where the Admin says mbam is designed for normal mode.

[G1111]

Different product, but they recommend every so often scanning in safe mode:
http://www.misec.net/forum/board/Tro...ter/1148542869

[fcukdat]

Originally Posted by Lebowsky

My question is, should i directly go into safe mode and do a scan, to save time? I do malware cleanup for my friends, im not a professional.

Hi Lebowsky,

I can answer specifically to these questions with reguards MBAM,

MBAM operates at its optimum when run from regular mode whenever possible as safe mode operations inhibit certain parts of our engines functions.

The only time MBAM should be used in safe mode is when regular mode is not available.Then it is highly recommended that after the initial safe mode scan you rerun a quick scan in regular mode with MBAM firing on all cylinders

[Lebowsky]

Originally Posted by fcukdat

Hi Lebowsky,

I can answer specifically to these questions with reguards MBAM,

MBAM operates at its optimum when run from regular mode whenever possible as safe mode operations inhibit certain parts of our engines functions.

The only time MBAM should be used in safe mode is when regular mode is not available.Then it is highly recommended that after the initial safe mode scan you rerun a quick scan in regular mode with MBAM firing on all cylinders

Awesome, thanks for the clarification, and thanks to all the guys in this thread for replying. My doubts have been cleared.

[kjdemuth]

Hey kcukdat,
Is it possible to run malwarebytes with protection on and not have the IP blocker?

[TheIgster]

Originally Posted by kjdemuth

Hey kcukdat,
Is it possible to run malwarebytes with protection on and not have the IP blocker?

Yes, you can create a registry key that disables it all the time. Just do a Google search. I can't remember off the top of my head, but I have mine disabled all the time now.

[kjdemuth]

yeah I like MBAM but I have that the IP blocker slows down my browsing at times.

[Franklin]

Section "G" :
http://forums.malwarebytes.org/index...&st=0&p=162100

[kjdemuth]

Thanks franklin!