Jack.is » Tech support » Tech tips » Mbam

Malwarebytes' Anti-Malware

MBAM serves well for quick removal of all types of malware, but some malware can stop it working properly. Common problems:

MBAM Won't Run
Update Fails

MBAM won't run

• Go to C:\Program Files\Malwarebytes' Anti-Malware\ and make sure that mbam.exe exists. If it doesn't:
  1. Download MBAM again (direct link). Save the file to the desktop as explorer.exe.
  2. Run the MBAM installer (explorer.exe). Uncheck the options to run and update MBAM before finishing.
  3. Go to C:\Program Files\Malwarebytes' Anti-Malware\ and make sure that mbam.exe exists. If it doesn't:
     1. Using another computer, download and install MBAM.
     2. Go to C:\Program Files\Malwarebytes' Anti-Malware\ and locate mbam.exe.
     3. Right-click mbam.exe and select Rename. Rename the file to bmab.exe.
     4. Using a USB drive, CD, floppy disk, or e-mail, if you can access it on the infected computer, move bmab.exe to the same location on the infected computer.
     5. Run bmab.exe.
     6. Go to the Update tab and run the update.
     7. Return to the Scanner tab and begin a quick scan.
     If it does exist:
     1. Right-click mbam.exe and select Rename. Rename the file to bmab.exe.
     2. Run bmab.exe.
     3. Go to the Update tab and run the update.
     4. Return to the Scanner tab and begin a quick scan.
• If it doesn't run after that, boot to Safe Mode with Networking and try again.
• If it still doesn't run, try renaming mbam.exe or bmab.exe to one of the following:
  • explorer.exe
  • iexplore.exe
  • winlogon.exe
  • userinit.exe
  • svchost.exe
• If it still doesn't run, you may have a rootkit on your system. Consult a tech support forum for assistance. They'll have you run appropriate tools to help diagnose and fix the issue.

Update Fails

MBAM can't communicate with the update server, usually due to malware interference. If you can't update the malware database, you can't detect the latest malware. To remedy this, try one of the following:

MBAM Forum Recommendation

• Some systems may have an issue where the Automatically detect settings checkbox is not checked in Internet Explorer 8 in the LAN Settings, and thus receive an error code 732.
  
  Here are some quick steps to see if this is what is causing the error for you:
  1. Click the Start button.
  2. Click on Control Panel.
  3. Double-click on Internet Options (you may have to switch the Control Panel to Classic view to find it).
  4. Click on the Connections tab.
  5. Click on the LAN settings button.
  6. Put a check mark in the box labeled Automatically detect settings.
  7. Click OK.
  8. Click OK.
  9. Try the update again (you may need to close any open Internet Explorer windows before trying).
• Copy the database from another computer
  1. Using another computer, install MBAM and update to the latest version and database. Go to the appropriate location to find the rules.ref file:
     • Windows XP: C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\
     • Windows Vista and 7: C:\Users\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\
     You may find yourself unable to browse to these locations due to permissions issues or hidden folders. It may prove easiest to paste them into the address bar after opening My Computer, or paste them into the Run box at Start » [All] Programs » Accessories » Run.
  2. Close MBAM on the infected computer.
  3. Use a USB drive, CD, floppy disk, etc., or e-mail, if you can access it on the infected computer, to move the rules.ref file to the appropriate place on the infected computer. Paste the new rules.ref file and choose to replace the old file.
  4. Start MBAM again and check the date in the Update tab.
• Try accessing http://www.malwarebytes.org/mbam/database/rules.ref directly. Malware sometimes allows direct file downloads while not allowing browsing to the site itself.
• Boot to Safe Mode with Networking and try again. If it fails in Safe Mode with Networking, try the following:
  1. Go to Start » [All] Programs » Accessories.
     • In Windows XP, click Command Prompt.
     • In Windows Vista or 7, right-click Command Prompt and select Run As Administrator.
  2. In the Command Prompt, type the following:
     netsh w r
     Press Enter.
  3. In the same Command Prompt window, type the following:
     netsh i i r log.txt
     Press Enter.
  4. Reboot to Safe Mode with Networking and try again.