Scanning with Malwarebytes Anti-Malware in safe or normal mode will work but removal functions are not as powerful in safe mode
. MBAM is designed to be at full power when malware is running so safe mode is not necessary when using it. In fact, MBAM loses some effectiveness
for detection & removal when used in safe mode because the program includes a special driver which does not work in safe mode. Further, scanning in safe mode prevents some types of malware from running so it may be missed during the detection process. Additionally, there are various types of malware infections which target the safeboot keyset so booting into safe mode is not always possible. For optimal removal, normal mode is recommended
so it does not limit the abilities of MBAM. Doing a safe mode scan should only
be done when a regular mode scan fails or you cannot boot up normally. If that is the case, after completing a safe mode scan, reboot normally and try rescanning again.
Depending on what you are infected with will determine whether or not to disconnect from the Internet. When dealing with backdoor Trojans
, you should because they compromise system integrity
by making changes that allow it to be used by the attacker for malicious purposes.
With some fix tools, that may be necessary but others may require you to update first, then disconnect.