stapp

Win 10 1909.

Update went in smoothly.

Please upload the files here and post the result.

https://id-ransomware.malwarehunterteam.com

Win 10 1909  manually updated to 9869 ok.

@JeremyNicoll

Why do you have C:\Program Files\Emsisoft Internet Security and not C:\Program Files\Emsisoft Anti-Malware?

@Claude Bader

sollte Ihnen helfen können.

1 hour ago, Frank H said:

just download the eicar virus testfile

http://www.eicar.org/download/eicar.com.txt

after download, IE/EDGE/CHROME (not supported by FF) calls EAM and the the browser deletes the file when tagged as malicious by EAM. 
EAM will show a notification and adds a record to forensics.

 

Win10 1909

Confirmed as working in Vivaldi (Vivaldi deletes the file and entry shows in Forensics) 

However I can download the file Sandboxied without Vivaldi deleting it 

How has this improved from last year?

Quote

What we changed in 2018.7 is that we enhanced the OnExecution scan in a way that allows third-party programs and the Windows operating system to access our scanner technology too. Microsoft created specific interfaces called IOfficeAntivirus and AMSI that are used by most modern browsers, script interpreters, and Office programs to make sure the documents that are downloaded and opened do not contain any malware.

Taken from

https://blog.emsisoft.com/en/31683/new-in-2018-7-improved-file-guard-performance/

8 minutes ago, ciprian milu said:

The guy’s from http://www.fastdatarecovery.com.au  says that they can decrypt. Someone now something about them? The amount is the approximately same as the ransom. 

See this thread

https://support.emsisoft.com/topic/32182-company-fast-data-recovery-ransomware/

Haben Sie Claud's skin.ini jetzt in den Programmordner gestellt, nachdem Sie den Selbstschutz ausgeschaltet haben?

Haben Sie die neue skin.ini in die Emsi-Programmdateien eingefügt, nachdem Sie den Selbstschutz deaktiviert und die ursprüngliche skin.ini umbenannt haben?
Haben Sie die Maschine neu gestartet?
Neuer Feed sollte hier angezeigt werden

Download Image

3 minutes ago, Frank H said:

FYI; 9803 is the EAM stable version since Oct 31st 

Thanks for your feedback anyway

Frank I was reporting that 9803 was running fine with the new 1909

I posted the info here in beta because I don't know if you read the EAM public forum

Just to let you know EAM beta is working well on Win 10 1909

Give this a try.

https://www.tenforums.com/tutorials/5662-reset-notification-area-icons-windows-10-a.html

 Do you mean Emsisoft Anti Malware (EAM) ?

Also note

Emsisoft Emergency Kit doesn’t require installation. Version 11 of the program can’t be executed on operating systems prior to Windows 7.

 https://help.emsisoft.com/en/1805/why-can-t-i-install-an-emsisoft-product-on-windows-xp-vista/

@marko

Did you zip the logs first? (you know, select them, right-click and select send to compressed zip)

If not, try that.

I have no problem with a context menu scan on a desktop file.

Is this on Win 10 1903?

Bitte schön.
Schönes Wochenende 

Versuchen Sie Einstellungen ... Erweitert ... Sprache der Benutzeroberfläche

Copy and paste license number still doesn't work on 9795

Please attach the original file of ransom note and several encrypted files to your message so that one of our experts can examine them.

Please attach the original file of ransom note and several encrypted files to your message so that one of our experts can examine them.

Just wondering what type of scan it was Jeremy.. a malware scan?

Any confirmation of this issue Frank?

On main page of GUI click 'View details' for licence.

Click 'show licence'

Right-click  and select copy.

You cannot paste it anywhere, so that right-click option doesn't work.

EDIT.. I've already mentioned this issue to GT500 but thought I'd post it here as well to make it 'official' !!

Can you upload a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with to this site here:
https://id-ransomware.malwarehunterteam.com/

You can paste a link to the results into a reply so that one of our experts can review them.