Good message to spread. Now if we could also get through to people that MBAM works best in normal mode, not safe mode! In addition, the MBAM quick scan option will catch every bit of live malware that the full scan will detect and 99% of the traces.
Quick scan scans:
1. Memory of the current user.
2. Registry for all users.
3. File system for all users (using a list of locations).
In addition, when running a full scan, MBAM (and A/V programs) scans System Restore. If it does not completely clean the file, the user may not have a good restore point. At a minimum, they will be returned to the state prior to the restore, which could be defective due to a f/p or incorrect user action.
Thus, if running a full scan, I do not recommending removing anything found in System Restore. System Restore is not an endless repository and as new restore points are created, older points are cycled out. Thus, an infected restore point is only a threat if the computer is restored to that point. Clearing System Restore should only be done after the computer is clean. Having an infected restore point is better than none should an error be made in the clean-up process.
