Emsisoft feedback thread

Do you often give feedbacks to vendors?

  • Yes

    Votes: 24 57.1%
  • No

    Votes: 18 42.9%

  • Total voters
    42
Status
Not open for further replies.

motox781

Level 10
Verified
Well-known
Apr 1, 2015
483
Build in a good whitelisting solution and I might give it a try. At the moment, Emsisoft doesn't have much to offer from other manufacturers.Work on the pricing too. Need a 10 user license? ...$200...ouch ;(

Wasn't trying to bash Emsisoft, sorry if it came off that way.
 

CoherentCrayon

Level 4
Verified
Jun 23, 2017
183
If an unsigned application adds itself to startup, Emsisoft immediately shows a "suspicious application" warning with quarantine option. While this is very bad if the program executes malicious code, adding itself to startup is in itself not dangerous. So, IMO Emsisoft should show what suspicious thing the application is trying to do in the warning so you can decide for yourself. Otherwise the BB is really good
 
Last edited:
D

Deleted member 65228

Thread author
I think the BB is a little bit too sensitive for unsigned applications. If an unsigned application adds itself to startup, Emsisoft immediately shows a "suspicious application" warning with quarantine option. IMO Emsisoft should show what suspicious thing the application is trying to do in the warning. Otherwise the BB is really good
That is the point of the Behavior Blocker?

It is common for malware to add itself to start-up so it can run its code on the next boot and not just for that session where the infection was initially deployed, therefore it alerts you of a monitored program doing just that - it is down to you as the user to make a decision.

You can manually white-list programs you trust whether they are signed or not if the Emsisoft BB is intervening.
 

RoboMan

Level 35
Verified
Top Poster
Content Creator
Well-known
Jun 24, 2016
2,400
That is the point of the Behavior Blocker?

It is common for malware to add itself to start-up so it can run its code on the next boot and not just for that session where the infection was initially deployed, therefore it alerts you of a monitored program doing just that - it is down to you as the user to make a decision.

You can manually white-list programs you trust whether they are signed or not if the Emsisoft BB is intervening.

Maybe implement interactive and smart (automatic) mode for Behaviour Blocker?
 

CoherentCrayon

Level 4
Verified
Jun 23, 2017
183
That is the point of the Behavior Blocker?

It is common for malware to add itself to start-up so it can run its code on the next boot and not just for that session where the infection was initially deployed, therefore it alerts you of a monitored program doing just that - it is down to you as the user to make a decision.

You can manually white-list programs you trust whether they are signed or not if the Emsisoft BB is intervening.
Yeah, but the BB should in my opinion display what suspicious thing the application is trying to do. Adding itself to start-up itself is not dangerous itself, but combined with malicious code it is. That's what I meant with my post basically

/steel9
 
D

Deleted member 178

Thread author
If an unsigned application adds itself to startup, Emsisoft immediately shows a "suspicious application" warning with quarantine option. While this is very bad if the program executes malicious code, adding itself to startup is in itself not dangerous. So, IMO Emsisoft should show what suspicious thing the application is trying to do in the warning so you can decide for yourself. Otherwise the BB is really good
The BB by default is set to "Auto-Resolve", but nothing forbid you to set it to '"Alert".
 

insanity

Level 5
Verified
Oct 9, 2016
216
Emsisoft changed the BB default to auto-resolve a few months ago and I actually approved. Before, we were presented with a conspicuous and large window with three options popping up all of a sudden. Now there is much less annoyance.
 

AlanOstaszewski

Level 16
Verified
Top Poster
Malware Hunter
Jul 27, 2017
775
I seriously do not know from where the Emisosft hype comed. Emsisoft isn't a innovation in my eyes.
Please don't understand me wrong. Emsisoft isn't "perfect" but many members of this forum are blessing this software. No software is perfect but Kaspersky Lab is more perfect for less money. You can say to me that Emsisoft has a good behavior blocker. So it is. But the competitors are offering better software for fewer money. Or do you want to say me that Avast and Kaspersky Lab are not so good (...like Emsisoft)? Emsisoft needs finally a feature that is standing out. It could be that Emsisoft uses better technologies but the customer isn't interrested for it if a second company has nearly the same feature.
 
5

509322

Thread author
Yeah, but the BB should in my opinion display what suspicious thing the application is trying to do. Adding itself to start-up itself is not dangerous itself, but combined with malicious code it is. That's what I meant with my post basically

/steel9

Creating an auto-run entry itself is suspicious. The BB detects and alerts to various auto-run creations. The user is expected to pay attention to what is happening on the system within the context of what the user is doing - and figure out whether it is potentially malicious or safe.

An auto-run alert out of nowhere is a red flag. It's common sense. An auto-run alert while installing a program that is widely accepted as safe and is known to run at system startup is not suspicious. It's common sense.

Asking for malicious code to be displayed in alerts is ridiculous. I am not being abrasive, but you don't know what you're asking for.
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top