MBAM free. Does it install any resident processes?

[AllenG]

Hi.

I have recently cleaned up my PC from one or more unknown Malwares. During the process I installed MBAM (unregistered), and after rebooting the PC, Spybot S&D Teatimer warned that it had "detected a registry change to startup item Malwarebytes".

I have (with assistance from one of the Bleepingcomputer.com forum helpers) now got a clean PC (Hopefully )

I have removed and reinstalled MBAM, but I don't see any processes in Takmanager that relate to MBAM. Should there be?

Also, no systemtray icon, should there be?

Your advice would be appreciated.

Regards, Allen.

[exile360]

Greetings AllenG. Nope, the free version has absolutely no resident processes . No tray icon either.

[Insomniac]

Doesn't the free version do somthing in the background when you reboot the first time after installing? I'm sure I've read somthing to that effect around here. Somthing to do with it not yet knowing if it is registered or not?

[exile360]

It adds the startup of MBAMGUI after install (in case it's the paid version) since the installer is the same for both, but I don't think it even executes if you're using the free version. I've seen it added after updating and deleted it with Autoruns and MBAM still functioned normally. I've also left it there, rebooted, and it wasn't running so I think it only becomes active after first boot if you've got a paid license (I think MBAMGUI.exe is the tray application).

[coppertrail]

It adds the startup of MBAMGUI after install (in case it's the paid version) since the installer is the same for both, but I don't think it even executes if you're using the free version. I've seen it added after updating and deleted it with Autoruns and MBAM still functioned normally. I've also left it there, rebooted, and it wasn't running so I think it only becomes active after first boot if you've got a paid license (I think MBAMGUI.exe is the tray application).

It adds something to the "RunOnce" registry hive after an installation (free or paid). I've not paid much attention to what it adds, I've just noticed that it's there.

[AllenG]

Cool.

That's anwered my question. Thanks.

Rergards Allen.

[AdvancedSetup]

Yes an HKLM run once entry is placed in the Registry during the installation. %path to mbam%\mbamgui.exe /install /silent and it is for the Registered version. If it's not registered then the key runs after reboot but is ignored by the program.