Quirky

Member
  • Content Count

    95
  • Joined

  • Last visited

  • Days Won

    2

Everything posted by Quirky

  1. Ok, you got me a bit confused now. The difference here is not between how the Exclusions module and Behavior Blocker module work, but between Exclusion (single process) and Exclusion (folder). Exclusion (single process) reports in the UI: Monitored (No) (correct) Exclusion (folder) reports in the UI: Monitored (Yes) (wrong) I would still consider this a bug, and definitively not a cosmetic issue unless the folder exclusion is supposed to do something different, other than to exclude ALL processes inside the excluded folder and subfolders. Exactly, the new system (first listbox) now excludes BOTH scans AND File Guard. The previous version allowed a separate selection (Scans and/or File Guard). The new version seems a more "all or nothing" approach which I think is less secure. I hope this is reconsidered.
  2. Please remember that the UI wrongly reports "Yes", so it's not a mere matter of changing "No" to "No (exclusions)", but from "Yes" to "No" - or "No (exclusions)" which is even better.
  3. Quirky

    Behavior Blocker

    It'd be good to know which component is preferred to temporarily disable to minimize such alerts during installation/uninstallation of programs while maintaining an acceptable amount of system security. File Guard? Behavior Blocker? Both? Disabling everything seems excessive (Pause protection). Perhaps it'd be an interesting idea to create a special quick/tray setting/shortcut for this ("Pause for install/uninstall" or sth.)
  4. Ok, I think I've confirmed this, there are no Behavior alerts in this case. I switched folder exclusion on/off and managed to identify such alerts. Please fix the UI issue though since it reports the wrong status and we can't be sure on what's been monitored and what not. Also, I think that while the new exclusion system is indeed simpler to use, it seems there is also less control over it? In the previous version there were three type of exclusions (in the form of tick-boxes), Scanning, File Guard and Behaviour (I could be wrong on the terminology), now there are only two (Scanning and Monitoring). Can you please confirm this and let me know exactly what is being excluded in each of these two categories and how it relates to the previous versions' exclusion system? Thanks.
  5. Ok, I replaced all of my single .exe exclusions with folder exclusions and report back if required but this is probably something you need to test internally. Please note that all these processes are now being reported as monitored ('Yes'), contrary to what happened before when they were excluded as individual processes. I cannot tell for sure whether the real-time monitoring is actually taking place or not, I can only rely on what the UI reports.
  6. Also, even just toggling "Hide fully trusted applications" will send the CPU usage to 25% momentarily.
  7. Ok, but I'm not sure how to try and trigger those alerts. I tried with a program that I thought could trigger them, deleted its application rule but not getting any alerts, whether its folder is excluded or not.
  8. Quirky

    CLOSED Suggestion: delay updates during startup

    Ok, but please understand that we are talking about default/automatic behaviour here that potentially affects several users. You can't expect everyone with a slow or non-SSD hard drive to have to adjust custom update schedules and turn on their PC on a specific time like you do.
  9. No, it's not UI-related. What you are describing (Behavior Alert? - this is not about alerts) seems differrent from what I'm reporting here. Firstly, let me say that I see no relation between the Behavior Blocker setting in the Application Rules, and the Monitored status in the Behavior Blocker window. They seem unrelated because there are many processes in the latter that are reported as Monitored (Yes) and they also have everything allowed in their respective Application Rule (Behavior Blocker/Firewall In/Firewall Out - All Allowed). Back to this issue, here is an example. Let's say we have a folder named "My Program" inside Program Files and that this folder contains "myp1.exe" and "myp2.exe". If I go to Settings/Exclusions/Exclude from Monitoring and add myp1.exe and myp2.exe separately by using the "Add Program" button, then these processes will not be monitored after being restarted, which is correct (Monitored/No in the Behavior Blocker window) Now, if I remove these two processes from the Exclusions and use the "Add folder" button to add the "My Program" folder to the exclusions, then these two process will still be Monitored/Yes in the Behavior Blocker window - which basically means that folder exclusion doesn't do anything, at least in the Monitoring section (I think the Scanning folder exclusions work normally but this is about Monitoring exclusions).
  10. In a few places of the interface, multiple selections are not allowed and item deletion can be tedious with large numbers of entries. (Application Rules list, Surf Protection list, Exclusion lists)
  11. Quirky

    CLOSED Suggestion: delay updates during startup

    I guess you mean Fast Startup - does having it on or off make any difference on when EIS installs its updates? I never noticed any, it always seems to update during startup whether FS is on or off but I could be wrong. I usually have it enabled and this is the default Windows 10 setting anyway (Fast Startup=enabled) so the issue still needs to be addressed, regardless of the Fast Startup status.
  12. The .chm help file could be expanded a bit with more details. Also, it's missing the helpful search tab (there's only Contents/Index), I think that should be easy to add.
  13. Hello everyone, I usually turn logging off (and had it off for quite some time), but today I've enabled it for a bit of troubleshooting. I now see in the logs that there are many entries from several days back. Does this mean that logging keeps... logging even when disabled? I thought turning it off -completely- might be a good idea for an SSD.
  14. Quirky

    Logging works even if disabled?

    Ok thank you. You mentioned earlier that this could be intended behaviour, so if this setting is expected to work like that (as the QA Manager also said) I hope you'll reconsider and make the logging=off setting to indeed disable logging completely. Currently, it doesn't work as described at all (at least on my system).
  15. Quirky

    Logging works even if disabled?

    Please don't ask me to do more testing on this... I thought the issue was confirmed. I tried yet one more time on a fresh Windows (and of course EIS) installation. I disabled the logging option, cleared all logs (within the UI as usual) and only imported a host file I usually use in Surf Protection and changed a few settings in File Guard (Scan level: fast and unticked "Only scan files with specific..." and "Protect the computer even..."). Give EIS a few minutes (or just restart the PC) and logs will start to appear in the UI. The "disable logging" setting clearly doesn't work, there's nothing more I can do.
  16. Quirky

    Logging works even if disabled?

    I can't test much now, but after a quick check I think the issue happens after restarting like that, too.
  17. Quirky

    Logging works even if disabled?

    I now see logs in the UI (same three categories) with the option still disabled. I hope you can make this work as described (logging disabled), to prevent them from both displaying and saving to the HDD.
  18. Quirky

    emsisoft firewall

    This is one fairly important 'bug' that Microsoft seems to be ignoring for years I think, don't know why. As brau said, if a 3rd party firewall is installed, the Security and Maintenance window will correctly report that everything is ok. The Windows Firewall should be turned off at this point (it should turn off automatically during the installation of another firewall, like EIS). But... if you then go to the Windows Firewall settings, you will see: ...and the even more alarming, red-danger-only window: So, the terrified user presses the big, shiny "Use recommended settings" button. The system should be fine now, right? Not at all. Go back to Security and Maintenance (there is no notification or warning btw) and this is what's really happening:
  19. Quirky

    Logging works even if disabled?

    The ones mentioned earlier, except for Scan but that's probably because there were no scans in that short time frame.
  20. Quirky

    Logging works even if disabled?

    Wasn't 100% sure so I cleared all logs yesterday (always from within the UI) and disabled the setting. I've turned it on now and several entries from yesterday appear.
  21. Quirky

    Logging works even if disabled?

    That's the setting. I can see older logs in: Behavior Blocker, Firewall and Scan. It's a recent Windows install so the other categories could be 'affected' too, not 100% sure.
  22. Hello, noticed that exporting the settings creates not one, but five .ini and a .dat file. Is the correct import procedure to import all of them, one by one? Thanks.
  23. Ok thanks. Are any of these files not related to user-configured settings, and best left alone during import for example in a new Windows installation?
  24. I successfully imported the whitelist but not my application rules (located in a2rules.ini). I have moved some of these applications so the target locations for some app rules are no longer valid, could this be the cause of the problem? Most of them did not move though. And a related question... what happens to such redundant rules? For example, when a program is uninstalled or when portable applications are moved as above? Does EIS somehow clean these rules up or are they a source of clutter? Thanks.
  25. Quirky

    CLOSED App lock issue/question

    Ok did some more testing, and it seems to work globally. If I unlock an app, no pin will be required for all apps (not just the one previously unlocked) in the next 30 secs. so this has probably misled me. I tested Gmail some more and the lock seems to work consistently as above. Consider this solved, I will post if it comes up again. Sorry for the time-waste.