Reply to thread

Message

<blockquote data-quote="Emsisoft" data-source="post: 540134" data-attributes="member: 10447">A few remarks we want to add to this video review (as posted on youtube): 1. It seems most of the tested files originated from the same ransomware campaign. They all use the same .wsf file extension, which is currently not being monitored by the File Guard component. We&#039;ll fix that with the upcoming update. But as you can see&nbsp; the scripts themselves were not able to perform any malicious action - that&#039;s why the Behavior Blocker didn&#039;t alert them either. 2. We&#039;ll also fix the scanner window glitch with the result list. Both detected items were part of the same archive file, so after cleaning the first, the other finding couldn&#039;t be deleted as the archive file was already removed before. The list item staying on screen doesn&#039;t have any impact on the actual removal - that worked just fine. Side note: EAM/EIS v12 pulic beta will be out soon. Stay tuned. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" /></blockquote>

[QUOTE="Emsisoft, post: 540134, member: 10447"] A few remarks we want to add to this video review (as posted on youtube): 1. It seems most of the tested files originated from the same ransomware campaign. They all use the same .wsf file extension, which is currently not being monitored by the File Guard component. We'll fix that with the upcoming update. But as you can see the scripts themselves were not able to perform any malicious action - that's why the Behavior Blocker didn't alert them either. 2. We'll also fix the scanner window glitch with the result list. Both detected items were part of the same archive file, so after cleaning the first, the other finding couldn't be deleted as the archive file was already removed before. The list item staying on screen doesn't have any impact on the actual removal - that worked just fine. Side note: EAM/EIS v12 pulic beta will be out soon. Stay tuned. :) [/QUOTE]

Verification