When compared to other security tools the advantage of Malwarebytes Anti-Malware
is that it uses a proprietary low level driver
similar to some anti-rootkit (ARK) scanners to locate hidden files and special techniques
which enable it to detect a wide spectrum of threats including active rootkits. The new scanning engine in version 2.0 has some enhancements to deal with current threats that the old version did not have. Malwarebytes's technology in the Premimum version runs in real-time at startup where it monitors every process and helps stop malicious processes before they can infect your computer
Malwarebytes is designed to remove malware effectively with a THREAT SCAN (QUICK SCAN) which checks memory, looks at the most prevalent places and known launch points for active malware infections. Areas and methods tested include: Memory Objects, Startup Objects, Registry Objects, and Filesystem Objects. The THREAT SCAN also detects any running malicious files regardless of its location so even if the malware is running from a location not checked by the file system portion of the scan, the THREAT SCAN would still detect it. This check includes not only running processes, but also loaded modules such as .DLLs injected into other processes. Malwarebytes uses heuristics
that bypasses polymorphic blackhat packers & encryption, MD5
, check memory (loaded .exes and .dlls), unique strings, autostart load points and hotspots (everywhere current malware is known to load from) and multiple other malware checks which are not discussed in public to safeguard the program from malware writers who would use that information for nefarious purposes.
Enabling Advanced Heuristics Engine (Shuriken)
under the 'Detection and Protection' Option section enables a second method of heuristic analysis to Malwarebytes detection techniques. Heuristic analysis is always employed, even when this option is not selected.Malicious Website Blocking
(IP Protection) is part of the Protection Module in the Premium version and works after it is enabled. When attempting to go to a potential malicious website, Malwarebytes will block the attempt and provide an alert. IP Protection is also designed to block incoming connections
it determines to be malicious. For information about Malicious Website Blocking (IP Protection), please refer to:
For any issues with Malwarebytes Anti-Malware 2.0 the development team recommend you start a new topic in the Malwarebytes Anti-Malware Help Forum
and report them there.
I recommend using SUPERAntiSpyware Free
as a separate stand-alone on-demand scanner
. The free version does not provide real-time protection, auto-Scanning, auto-updates or scheduled scanning so there is no need for it to run at startup and waste system resources. Although it does offer technology to deal with some rootkit infections, the Pro version is no where near as effective as Malwarebytes Premium in providing maximum protection. As such I would not recommend spending money on the paid version just to use its real-time protection.