This tutorial applies to version 1 of Malwarebytes Anti-Malware. To read about the current version, see Malwarebytes Anti-Malware 2 on-demand scan guide instead.
In case you need to check just one item (a file or a folder), right-click it and then click Scan with Malwarebytes Anti-Malware.
Windows Vista, 7, 8 and 8.1 users will see a User Account Control warning about MBAM making changes to this computer. Click Continue or Yes.
Malwarebytes Anti-Malware opens and scans the item. If something malicious is detected, move down here to read about removing the detected items.
Running and updating Malwarebytes Anti-Malware
If Malwarebytes Anti-Malware is not running, Windows XP users can start it by opening Start menu, All Programs, finding Malwarebytes Anti-Malware folder and clicking Malwarebytes Anti-Malware.
Windows Vista and 7 users can open Start menu, type "malware" into Search box and click Malwarebytes Anti-Malware.
Windows 8 and 8.1 users should press Windows Key+Q to open Apps search/Search everywhere, type "malware" and click Malwarebytes Anti-Malware.
Windows Vista, 7, 8 and 8.1 users will then see a User Account Control warning. Click Continue or Yes.
Before scanning it would be wise to update malware definitions first - just in case your computer is infected with some new malware. Malware database is updated several times a day, so updating guarantees best detection rate.
Click Update tab and then click Check for Updates:
If there are no updates available, you will see the following message. Click OK.
In most cases, there are database updates available. Updating Malwarebytes Anti-Malware window opens, stand by until download is complete.
After database update is complete, a window opens. Click OK.
In case there is a program update available, MBAM will download it and notify you. Click OK to close program and update it to the latest version.
Wait until the program is updated.
After program update, a database update will be performed again. Please stand by.
After successful program update, the following message appears. Click OK to open Malwarebytes Anti-Malware again.
After updating is complete, open Scanner tab to select the type of scan you want to run.
Quick scan takes up to ten minutes only and it checks for malware in memory, running programs and startup items. This type of scan is recommended for casual checks.
Full scan takes up to several hours and it checks everything on your computer. This scan should be run once a month to ensure your Windows computer is clean of malware.
Click Perform quick scan or Perform full scan and then click the Scan button.
Please note that the third option, Perform flash scan, is not available in free version of Malwarebytes Anti-Malware.
In case you selected the full scan option, a disk drives selection dialog appears. By default, all hard disk drives are selected, but you can also include any USB flash drives or external drives in the scan. Please note that large USB drives take a long time to scan!
Now just wait for the scan to complete. In case you need to do something processor-intensive meanwhile, click Pause scan. Do your stuff and then continue scanning by clicking Resume scan.
If your computer is clean, you will see the following message after the scan is complete. Click OK. You can then close MBAM using keyboard shortcut Alt+F4 or by clicking Exit button in Malwarebytes Anti-Malware window.
Click Show Results button in the lower right part of MBAM window.
A list of detected items will be displayed in Scanner tab.
To remove all detected items, click Remove Selected button.
After disinfecting and quarantining is complete, a message will inform you of results. Often a restart is required to make sure the malware is really gone. Click Yes to restart your computer.
For really nasty malware (active threats) that have created Windows services or other ways of restoring themselves quickly, Malwarebytes Anti-Malware reminds you to reboot your computer ASAP. Always click Yes if "URGENT" is specified in the dialog!
If the same malware still reappears, use RKill for detecting and stopping active malware services and processes (the scan takes only about 5 minutes!). This helps MBAM to work properly. The last resort is to use ComboFix.