Software Review Emsisoft Anti-Malware 2022

[dinosaur07]

I have it installed for over 3 months and it runs flawlessly alongside HMPA. I ticked the memory optimization option and all is well with my lap.Thanks for the review @Shadowra

 

[Betonf]

Emsisoft Slow Windows? Sry my english.

 

[Shadowra]

Emsisoft Slow Windows? Sry my english.

Nope

 

[maximus]

Emsisoft Slow Windows? Sry my english.

I have not noticed anything like that.

 

[BigWrench]

Emsisoft Slow Windows? Sry my english.

Not a bit.

 

[bayasdev]

Emsisoft Slow Windows? Sry my english.

I noticed high CPU usage on my machine after booting, it gets a bit better after idling some minutes.

 

[flaubert1971]

Very difficult test against a variant of Magniber Ramsonware: failed

 

[Shadowra]

Very difficult test against a variant of Magniber Ramsonware: failed

Magniber performs a system injection to set up, not surprisingly.
I even saw Norton being bypassed yesterday....

 

[Trooper]

Magniber performs a system injection to set up, not surprisingly.
I even saw Norton being bypassed yesterday....

Do any other AV's stop it based upon your testing or what you have seen elsewhere?

 

[Shadowra]

Do any other AV's stop it based upon your testing or what you have seen elsewhere?

Very little.
For example, I know that Kaspersky blocks it all the time at my place but not at others.
The same goes for GDATA.
Even F-Secure....

Apparently ESET have done a Hexa detection which I applaud

Spoiler: F-Secure

Spoiler: ESET

 

[Trooper]

Very little.
For example, I know that Kaspersky blocks it all the time at my place but not at others.
The same goes for GDATA.
Even F-Secure....

Apparently ESET have done a Hexa detection which I applaud

Spoiler: F-Secure

Spoiler: ESET

Good to know. Nice to see F-Secure stopping it as well.

 

[Shadowra]

Good to know. Nice to see F-Secure stopping it as well.

No

F-Secure does not block it. Indeed, Magniber encrypts the data, but F-Secure blocks the injected file (UACBypass).
Except that the damage is done....

 

[Trooper]

No

F-Secure does not block it. Indeed, Magniber encrypts the data, but F-Secure blocks the injected file (UACBypass).
Except that the damage is done....

Sorry my bad. I thought your screenshot was showing it blocked it. So basically Kaspersky and ESET are it?

 

[Shadowra]

Sorry my bad. I thought your screenshot was showing it blocked it. So basically Kaspersky and ESET are it?

Yep and Bitdefender too (it detects the TMP file before the injection)

 

[SeriousHoax]

Bitdefender can block it by its behavior blocker, but not before some files get encrypted, and it can't restore those files.

 

[Shadowra]

Bitdefender can block it by its behavior blocker, but not before some files get encrypted, and it can't restore those files.

Exactly
WiseVector too, but I haven't tried it with the new version

 

[SeriousHoax]

Exactly
WiseVector too, but I haven't tried it with the new version

WV's changelog claim they have updated their BB specially for magniber. So looks like they'll succeed. But kudos to Kaspersky and ESET for being able to solve it with heuristics (at the moment at least).

 

[Trooper]

WV's changelog claim they have updated their BB specially for magniber. So looks like they'll succeed. But kudos to Kaspersky and ESET for being able to solve it with heuristics (at the moment at least).

It is indeed impressive. Though at the moment I am not running either AV.

 

[flaubert1971]

I also confirm: i tested with kaspersky free and it blocked Magniber preventing encryption of documents. But no antivirus is perfect: for example, in my latest tests kaspersky is becoming ineffective against pishing.