Malwarebytes Premium

About this release

Malwarebytes built its reputation on the machines other scanners had already declared clean. The engine leans on behaviour and structure rather than a list of known signatures, which is why it tends to find the adware bundles, browser hijacks, toolbars and scheduled tasks that a traditional scanner walks past because nothing in its list matches. On a machine that has been slowly getting stranger for months, this is usually the tool that explains why.

The Premium build adds the part the free scanner never had, which is protection that runs before the damage rather than after it. Four layers sit in memory: web protection that stops connections to hosts known to serve malicious content, exploit protection that watches for the memory tricks used against browsers and document readers, application behaviour monitoring, and ransomware protection that spots mass encryption of user files and stops the process mid run.

Scanning is fast because it is targeted. The threat scan checks memory, startup entries, the registry locations that matter and the folders where unwanted software actually lives, and finishes in a few minutes on an ordinary machine rather than grinding through every file on the drive. A custom scan is available when a full sweep of a specific volume is genuinely needed, and removal handles the leftovers properly, clearing scheduled tasks, services and browser extensions rather than deleting one file and leaving the rest to reinstall it.

Everything it removes goes to quarantine first, so a false positive on a legitimate tool is a restore rather than a reinstall. The report view lists exactly what was found, where it was and what was done about it, which matters when the machine belongs to somebody else and they want to know what happened to it.

What it does

Behaviour led detection

Finds adware, hijacks and unwanted bundles that signature matching alone tends to walk past.

Four layer real time protection

Web, exploit, application behaviour and ransomware layers run together in the background.

Ransomware rollback

Mass encryption of user files is spotted mid run, the process stopped and affected files restored.

Targeted threat scan

Memory, startup, registry and the folders that actually matter, finished in minutes rather than hours.

Complete removal

Scheduled tasks, services and browser extensions are cleared alongside the files themselves.

Quarantine and reporting

Everything removed is recoverable, with a plain list of what was found and what was done.

Changed in this version

• Faster threat scan with lower memory use during the registry pass.
• Improved detection of browser extension hijacks across the current browser generation.
• Ransomware layer now recovers a wider set of file types after a blocked attempt.
• Scheduled scan settings moved into a clearer panel.
• Reduced background activity while the machine is on battery.

System requirements

Install order

1. Unpack the archive and run the installer with administrator rights.
2. Let the first update of the detection database finish before scanning.
3. Run a threat scan and review the quarantine list before removing anything.
4. Turn on the protection layers you want from the dashboard and leave the rest off.

Worth knowing before you start

File details