Malwarebytes is an anti-malware and device security program that finds and removes malware, adware and potentially unwanted programs. Its paid edition blocks threats before they run. It is available for Windows, macOS, Android and iOS, with the widest set of tools on Windows. The free version is a cleanup scanner for infections already on a device; real-time protection, scheduled scanning and most extra tools need a paid subscription. A new installation starts with a temporary trial of the paid features.
Free scanner and paid protection
The split between editions is about timing. Free Malwarebytes works after the fact: you start a scan, review what it found and quarantine it. It can also run one full scheduled scan a month, but nothing watches the system between scans. The paid edition keeps protection layers running in the background and adds a scan scheduler, extra scan types and tools such as Tamper Protection.
Scan types on Windows
- Threat Scan checks the common hiding places, including memory, startup items, the registry and the file system, with heuristic analysis on top. The main Scan button runs it.
- Quick Scan looks only at memory and startup programs. It is faster, less thorough and paid-only.
- Custom Scan covers the files, folders or drives you select.
- Deep Scan compares system locations against Malwarebytes’ most comprehensive malware database. It runs longer and uses more resources, so it serves as a follow-up after malware has been found.
Rootkit scanning is off by default because it slows scans, while archive scanning opens ZIP, RAR, 7z, CAB and MSI files two levels deep. Potentially unwanted programs can be ignored, reported with a warning or treated as malware. Paid users can schedule scans daily, weekly or monthly, optionally waiting until the PC is idle.
Quarantine and exclusions
Malwarebytes moves detected items into quarantine, where they can no longer run. An item later identified as a false positive is restored automatically. If automatic quarantine is turned off, each detection asks whether to ignore it once, ignore it permanently or quarantine it. Permanent exclusions go to the Allow list, which accepts files and folders, websites, internet-connected applications and previously flagged exploits.
Real-time protection layers
Paid Malwarebytes for Windows runs several layers, each with its own switch. It shows how many threats it stopped in the last 30 days. Web Protection blocks phishing pages, scam sites and sites hosting ransomware. Malware and PUP Protection stops malicious and unwanted programs as they appear, and Ransomware Protection targets software that tries to lock you out of the device or your files.
Exploit Protection guards installed applications against attacks that abuse software bugs; programs installed later can be added by file path and program type. Brute Force Protection watches Remote Desktop logins and blocks the source IP address after repeated failed attempts. You can adjust the limits for attempts, time frame and block length. Tamper Protection puts a separate password on the subscription, scheduled scans and chosen settings.
Privacy controls
The Windows app gathers privacy toggles in one panel. These cover the advertising ID, ads in notifications, web results in Start menu search and, on Windows 11, promotional content and diagnostic data. One button disables them all. Webcam Monitoring alerts you when an app gets camera access, and Remote Desktop Monitoring flags remote access programs, which you can uninstall or mark as recognized.
Firewall and system tools
Windows Firewall Control in Malwarebytes is a front end for the built-in Windows Defender Firewall. Its Low profile, the default, blocks inbound connections; Medium blocks outbound traffic except allowed connections; High cuts off all internet access. File Shredder permanently erases files and folders so they cannot be recovered. Startup Applications decides which programs launch with Windows, and System Tweaks adjusts a set of Windows 11 performance and privacy settings.
Trusted Advisor and Scam Guard
Trusted Advisor shows a protection score from Poor to Excellent, based on which available features are enabled. You can resolve or ignore its recommendations. Scam Guard, on Windows and macOS, is a chat assistant. You paste a suspicious message or attach a screenshot of an email, pop-up or link. It checks the item against Malwarebytes’ threat databases and reports whether it looks suspicious or matches a known threat.
Browser Guard and mobile apps
Browser Guard is a free Malwarebytes extension for Chrome, Firefox, Edge and Safari. It blocks intrusive ads and pop-ups, stops third-party tracking cookies and flags sites known for malware or phishing. On Windows its detections appear in the main app’s statistics.
Features differ by operating system. Malwarebytes for Mac and Android include malware, ransomware and web protection. The mobile apps detect scam text messages, and the iOS app can block spam and scam calls.
