Emsisoft feedback thread

  • Thread starter Thread starter Deleted member 178
  • Start date Start date

Do you often give feedbacks to vendors?

  • Yes

    Votes: 24 57.1%

  • No

    Votes: 18 42.9%
  • Total voters
    42
Status
Not open for further replies.
Build in a good whitelisting solution and I might give it a try. At the moment, Emsisoft doesn't have much to offer from other manufacturers.Work on the pricing too. Need a 10 user license? ...$200...ouch ;(

Wasn't trying to bash Emsisoft, sorry if it came off that way.
 
  • Like
Reactions: Sunshine-boy, Deleted member 178 and vtqhtr413
If an unsigned application adds itself to startup, Emsisoft immediately shows a "suspicious application" warning with quarantine option. While this is very bad if the program executes malicious code, adding itself to startup is in itself not dangerous. So, IMO Emsisoft should show what suspicious thing the application is trying to do in the warning so you can decide for yourself. Otherwise the BB is really good
 
Last edited:
  • Like
Reactions: Deleted Member 3a5v73x and Deleted member 178
steel9 said:
I think the BB is a little bit too sensitive for unsigned applications. If an unsigned application adds itself to startup, Emsisoft immediately shows a "suspicious application" warning with quarantine option. IMO Emsisoft should show what suspicious thing the application is trying to do in the warning. Otherwise the BB is really good
Click to expand...
That is the point of the Behavior Blocker?

It is common for malware to add itself to start-up so it can run its code on the next boot and not just for that session where the infection was initially deployed, therefore it alerts you of a monitored program doing just that - it is down to you as the user to make a decision.

You can manually white-list programs you trust whether they are signed or not if the Emsisoft BB is intervening.
 
  • Like
Reactions: Deleted Member 3a5v73x, mlnevese, Andy Ful and 5 others
Opcode said:
That is the point of the Behavior Blocker?

It is common for malware to add itself to start-up so it can run its code on the next boot and not just for that session where the infection was initially deployed, therefore it alerts you of a monitored program doing just that - it is down to you as the user to make a decision.

You can manually white-list programs you trust whether they are signed or not if the Emsisoft BB is intervening.
Click to expand...

Maybe implement interactive and smart (automatic) mode for Behaviour Blocker?
 
  • Like
Reactions: Deleted Member 3a5v73x, mlnevese, Deleted member 178 and 1 other person
Opcode said:
That is the point of the Behavior Blocker?

It is common for malware to add itself to start-up so it can run its code on the next boot and not just for that session where the infection was initially deployed, therefore it alerts you of a monitored program doing just that - it is down to you as the user to make a decision.

You can manually white-list programs you trust whether they are signed or not if the Emsisoft BB is intervening.
Click to expand...
Yeah, but the BB should in my opinion display what suspicious thing the application is trying to do. Adding itself to start-up itself is not dangerous itself, but combined with malicious code it is. That's what I meant with my post basically

/steel9
 
  • Like
Reactions: Deleted Member 3a5v73x, frogboy, mlnevese and 1 other person
steel9 said:
If an unsigned application adds itself to startup, Emsisoft immediately shows a "suspicious application" warning with quarantine option. While this is very bad if the program executes malicious code, adding itself to startup is in itself not dangerous. So, IMO Emsisoft should show what suspicious thing the application is trying to do in the warning so you can decide for yourself. Otherwise the BB is really good
Click to expand...
The BB by default is set to "Auto-Resolve", but nothing forbid you to set it to '"Alert".
 
  • Like
Reactions: XhenEd, frogboy and Andy Ful
I seriously do not know from where the Emisosft hype comed. Emsisoft isn't a innovation in my eyes.
Please don't understand me wrong. Emsisoft isn't "perfect" but many members of this forum are blessing this software. No software is perfect but Kaspersky Lab is more perfect for less money. You can say to me that Emsisoft has a good behavior blocker. So it is. But the competitors are offering better software for fewer money. Or do you want to say me that Avast and Kaspersky Lab are not so good (...like Emsisoft)? Emsisoft needs finally a feature that is standing out. It could be that Emsisoft uses better technologies but the customer isn't interrested for it if a second company has nearly the same feature.
 
  • Like
Reactions: enaph, Sunshine-boy, catjc and 2 others
steel9 said:
Yeah, but the BB should in my opinion display what suspicious thing the application is trying to do. Adding itself to start-up itself is not dangerous itself, but combined with malicious code it is. That's what I meant with my post basically

/steel9
Click to expand...

Creating an auto-run entry itself is suspicious. The BB detects and alerts to various auto-run creations. The user is expected to pay attention to what is happening on the system within the context of what the user is doing - and figure out whether it is potentially malicious or safe.

An auto-run alert out of nowhere is a red flag. It's common sense. An auto-run alert while installing a program that is widely accepted as safe and is known to run at system startup is not suspicious. It's common sense.

Asking for malicious code to be displayed in alerts is ridiculous. I am not being abrasive, but you don't know what you're asking for.
 
  • Like
Reactions: Deleted member 178, Schank873, Deleted Member 3a5v73x and 4 others
Status
Not open for further replies.

You may also like...