EmsiSoft Incorporates Anti-Ransomware Into It's BB Technology

[HarborFront]

Where Emsisoft said that the protection is 100 % (silver bullet) ? Please post the link, I doubt that Emsisoft has done such claims.

Read my post

Quote

......sure 100% ALL the time?

A ? at the end of my question, ok?

 

[HarborFront]

I will test this out soon to see if it is or not i will disable everything except anti-ransom

Maybe I missed it.

Actually, there's no need to wait. If this anti-ransomware feature is just based on its BB then it can be tested now.

Testing Emsisoft's BB alone against ransomware say a mix of 20 ransomware samples would be a good test

 

[Nightwalker]

Read my post

Quote

......sure 100% ALL the time?

A ? at the end of my question, ok?

Straw Man fallacy.

I want the reason for this "What if you use Emsisoft software and gets infected with ransomware? Can you sue the company based on their claim?"

Where is their claim for 100 % protection?

You need to learn safe habits, use up to date software, learn to use SUA/UAC/Applocker, do backups, not necessarily install dedicated anti-ransomware.

 

[Nightwalker]

Maybe I missed it.

Actually, there's no need to wait. If this anti-ransomware feature is just based on its BB then it can be tested now.

Testing Emsisoft's BB alone against ransomware say a mix of 20 ransomware samples would be a good test

Like that?



Video done by Leo from The PC Security Channel [TPSC]

 

[HarborFront]

Straw Man fallacy.

I want the reason for this "What if you use Emsisoft software and gets infected with ransomware? Can you sue the company based on their claim?"

Where is their claim for 100 % protection?

You need to learn safe habits, use up to date software, learn to use SUA/UAC/Applocker, do backups, not necessarily install dedicated anti-ransomware.

I'm referring the claim of being able to block ransomware before it even encrypts the first data file. And not 100% ALL the time, ok?

 

[Nightwalker]

I'm referring the claim of being able to block ransomware before it even encrypts the first data file. And not 100% ALL the time, ok?

It does, you can test yourself, you can read the tests done in MalwareHub here on MalwareTips or you can simple watch the video that I posted above that shows Emsisoft doing exactly that (Behavior Blocker blocking Ransomware before it even encrypts the first data file).

The video from Leo has exactly 20 different kind of Ransomware, the video from RejZoR is very good too.

 

[HarborFront]

It does, you can test yourself, you can read the tests done in MalwareHub here on MalwareTips or you can simple watch the video that I posted above that shows Emsisoft doing exactly that (Behavior Blocker blocking Ransomware before it even encrypts the first data file).

The video from Leo has exactly 20 different kind of Ransomware, the video from RejZoR is very good too.

Did they test against Petya?

 

[Huchim]

@MalwareTracker , When you try to disable behavior blocker "anti-ransomware" also is disabled, so that's why I said is a marketing thing

 

[Nightwalker]

Did they test against Petya?

Yes.

 

[simmerskool]

... but this and VS together, man what a combo it would be !

That's what I'm running in vbox, VS & EAM (fwiw)

 

[simmerskool]

Note:
I loaded my backup drive that has EmsiSoft AM on it still, seeing I haven't cloned my drives yet.
They have implemented this module as of today, just update your EmsiSoft AM and it will appear.

EAM is updated and installed here with ransomware module.

 

[HarborFront]

Harbor i love ya brother but really ? come on man.
Anti-Ransomware products fail all the time, look at how many fail in videos by CS, MT, ect
sueing them is not the answer and is useless in helping better the product, in fact is serves
to deplete their resources for improving the product.
Do you even use EmsiSoft ?

Yes, I do have EAM with CFW....previously

 

[frogboy]

I will check this out when I get home from work.

 

[Antimalware18]

would love to see a free stand-alone offering

 

[WinXPert]

That was from the EmsiSoft Blog, go to the site, it may not be ready yet

Got mine when EMSISoft updated earlier. Didn't noticed that until this post

 

[outlawxtorn]

I love EIS, it quickly turned into my favorite program. Glad to see this.

 

[HeiDef]

We felt compelled to respond only because we were mentioned in this thread. Thanks @HarborFront

This is not to knock Emsisoft. It's probably a very good piece of software and by no means is RansomOff perfect...yet. But claiming a non-ransomware specific behavior blocker is going to stop all ransomware is disingenuous to users that rely on it. The video below shows a piece of custom ransomware we developed in house that we use to test other anti-ransom solutions.

We like to think we are pretty smart but the criminals who develop ransomware for a living probably are pretty bright too. And if we can develop a solution that bypasses "advanced" behavior blockers, well then it's probably only a matter of time before others do too. Again, not busting Emsisoft because at the end of the day we are all on the same side, but it's important to understand that solutions not designed specifically for ransomware will fail.

 

[Azure]

would love to see a free stand-alone offering

If you mean a free anti-ransomware, I doubt it will happen. It would be like bringing back the standalone Mamutu, which they won't.

However they do offer free decrypters
Download a free Emsisoft Decrypter for the latest file encryption ransomware
(I recommend everyone to bookmark this page. And hopefully you will never need to use it)

 

[simmerskool]

Got mine when EMSISoft updated earlier. Didn't noticed that until this post

+1

 

[KevinYu0504]

We felt compelled to respond only because we were mentioned in this thread. Thanks @HarborFront

This is not to knock Emsisoft. It's probably a very good piece of software and by no means is RansomOff perfect...yet. But claiming a non-ransomware specific behavior blocker is going to stop all ransomware is disingenuous to users that rely on it. The video below shows a piece of custom ransomware we developed in house that we use to test other anti-ransom solutions.

We like to think we are pretty smart but the criminals who develop ransomware for a living probably are pretty bright too. And if we can develop a solution that bypasses "advanced" behavior blockers, well then it's probably only a matter of time before others do too. Again, not busting Emsisoft because at the end of the day we are all on the same side, but it's important to understand that solutions not designed specifically for ransomware will fail.

Interesting Video ~

No idea how Emsisoft official will response(comment) for this video ?


I remember that there is some of Emsisoft employee are also a member in MalwareTips , right ?