In MBAM's settings I have rootkit set to scan for rootkits on every scan.
Yet the last 5 or 6 times it ran the logs show rootkit scan is disabled.
A glitch or do you think some malware has been able to change it??
There is a known issue with logging that particular setting on some systems; it is due to be fixed with a future build.
If ARK is enabled in the settings, then it is taking place, even if it does not show in the log.
Having said that, there are 2 places to enable ARK (anti-rootkit) scanning.
1 is in the GUI/Dashboard > Settings > Detection and Protection
The other is in the Advanced Settings for the scheduled scan task in the Automated Scheduler.
Each time it scans it useually finds and quarentene a few things. A few have proved to be false positives. Which is normal for most scanners.
That is absolutely NOT the case for MBAM, either the ARK or routine malware scanning. False positives are actually few, far between and rapidly fixed by the MBAM Research Team.
If you are seeing MBAM hit on files that you think should not be detected (aka "False Positives"), then I suggest the following:
1) First, please read the informational sticky topic HERE.
2) Then, please post the requested information in a new, separate post in the File Detections F/P section of the MBAM forum HERE.
The Research Team will analyze the information and adjust the rules database accordingly, as needed.
OTOH, if you think you might be infected, I suggest following @QM7's advice from your other topic HERE, to seek a bit of expert help with scanning and cleanup.
Edited by MoxieMomma, 14 November 2015 - 05:58 PM.