Search the Community

My PC worked as usual and suddenly I found I couldn't open any program - so I can't start with Emsisoft! The reboot didn't help. Maybe it's a virus but I'm not a programmer, just a user of Windows and I don't know how to get access to my files...

so i dont know which decryptor to download all i can say is i downloaded the anti-malware thing from your website i did a quick scan and found two malwares Adware.Generic.1831217 Adware.Linkury.CX Adware.Linkury.CT Adware.Agent.VXN please help me to find which one i need to download kindest regards - Patrik

guevara virus is there any toolto remove this guevara virus from my hard drive

Hello, I had a ransomware on my computer. So I restarted the computer in safe mode, then I did a scan with malwarebytes, roguekiller and hitmanpro. I deleted all positive results and txt files from the cryptolocker and made a restaration of the computer before the installation of the virus. Luckily I had all my documents on an external drive so I did not lose anything, but I was wondering if I had to completely reinitialize the computer or if I'm safe now? I have several expensive and super long to install software so if it is not necessary I would prefer not to have to do it.Thank you!

Just for info, released build of Win 10 1903 upgraded with EAM installed and running without any issues at all.

Laptop computer is (extremely) slow, both in function and boot up and shut down . I've been fighting it for a while now. Started with a Firefox update (66.0.3 I think) , ran through the browser update function. Several years old Toshiba Satellite laptop. Won't allow my emsisoft to update. Scan runs but hangs at 80%. Installed malwarebytes and ran it and deleted 2 pups. Ran ccleaner and also the registry cleanup. It also hung but the file it was scanning was a Firefox file. No help. Used file explorer to search "Mozilla" and deleted all files that popped up after Firefox uninstall. I think that's basically it that I've done. My emsisoft was expired, but it did say subscription was active, but would not update. So installed a 30 day trial until i can scrape some money together to renew. A several year user. Never no problems. Thank you. I do not see how to attach my scsn logs

sir pls help me, my pc all fia.txt.fordanles fordan extension and encrypted pls solve my problem

Hey, So far, I've been pretty happy with the cloud console (as have most of my customers) however, is there any chance of getting an MD5/SHA1/256 hash of a "detected" file in the log on the cloud console and/or email notifications? Additionally, do you guys have any plans of adding something like a daily/weekly digest of detections vs "as they happen" notifications? I don't mind being notified right away, but in a few cases (namely, an FP at this point) I received something like 150 emails in the span of 5 minutes. I submitted the FP, and it was fixed in a pattern update, but you can see how that's not an idea situation 😁 Thanks! Chris

Hi. I did an emergency malware scan with your Emsisoft Emergency Kit and it found an object that could not be removed. The diagnosis said "Gen:Variant.Graftor.53846 (B)" and its location was at "C:\WINDOWS\SysWOW64\Phoneutil.dll" Ihave attached a screenshot of the scan below. Thank you in advance.

Hello, I'm having issues with a SecHijack (A), Application.CoinMiner.EP (B), and Trojan.Ceram.Gen.2 (B). It is being correctly detected on scan, however removing it requires restarting and on each restart there is a new set created. Any help would be appreciated. scan_190430-122117.txt

Auto updated. Very smooth

Today I installed several hacks to get cheats on a game, but a few minutes later I saw that google chrome was removed, so I went to the Internet explorer and discovered lots of forums about infected laptops, I installed lots of tools to uninstall the virus but it didn't work and as soon as I closed one of these tools it would uninstall automatically.

Ich habe hier einen Treiber, ist das Malware und wenn ja, was richtet der an? https://www.virustotal.com/gui/file/3438c1b80d0ee1e41744efdc048c5b4c21b5fdbd0540a706277c2a59af7437ad/detection

hi, not sure if i am allowed to ask this? will there be some more betas to test soon ? thank you,

A few days ago I saw 2 black boxes flash up on my screen on startup. They where visable for less than a second. I tried to open Emsisoft to do a virus check but it would not open. I then downloaded and ran EEK and it found about 8 malware items that it could not clean and I was directed to support. Having read all your instructions, I realised that I needed to get an official copy of Windows 10 which I did. I cannot install this copy or use the key to licence the copy I have been using. When I run Emsisoft it finds no virus and all the logs are empty. Kind regards Phil

This particular ad is invasive and will not stop appearing in right hand corner of my desktop. What do I do?

I just started playing around with the new "My Emsisoft Cloud Console". My first experiences have been quite positive. 🙂 Two little things that I would like to suggest for improvement: 1) I use only one policy for the whole network (i.e. workspace). This is why I delete all computer groups except "New Computers" (which cannot be deleted). I then set all required policy settings/options on the highest possible level, which is the "root" group called "Workspace". These settings are then of course inherited by the "New Computers" group (and possibly some other groups that I might add later). The problem is that whenever you re-visit the "Protection Policies" section by clicking in the navigation bar on the left hand side, the view defaults to the "New Computers" group. So if I'm not very careful, I'll change settings in this group instead of the root group "Workspace". It would be nice if the selection could default to "Workspace" whenever you re-visit the Protection Policies section. 2) Using the Enterprise Console, it was easy to see at a glance if the settings on some client PCs deviated from the original policy setting (the overview in EEC then shows a little round arrow next to the policy name in the "Computer Policy" column). In the cloud console, you must have a detailed look at the settings of each client PC to see if there is anything different to the original policy. It would be very helpful to be able to see policy vs. current client settings differences directly on the overview dashboard. (please bring back the round arrow 😉) Furthermore, there are some minor cosmetic issues: - When clicking on the menu of the root protection group "Workspace", the menu item "Clone" is not greyed out. It is clickable, but (as expected) nothing happens. It should be greyed out like the rest of this group's menu items. - Some German translations don't fit into the UI (mostly on buttons) - When using browser zoom (I use 120% by default) some lines around some UI fields get cut off And two final questions: - I was wondering what the setting "Detect registry policy settings" in the Scanner Settings section does (see attached screenshot). -Why does my license vanish from the "Licenses --> Personal Licenses" section after assigning it to a workspace ? Is this by design? This seems confusing to me... What happens if I delete a workspace - will the license be returned to the "Personal Licenses" section? What about client PCs that are NOT associated with the workspace - will they have licensing problems (I don't want to add all my PCs to the workspace)? Thanks for the great job so far! Raynor

Need help removing malware/infections I tried deleting / quarantining , but it did not work. scan_150830-193019.txt

Hello, We have a large number of clients currently connected to an on-prem EEC instance. We've done a small pilot and are seriously looking at moving all of them to ECC in the near future. I have a couple of topics to discuss: 1. We have discovered that on existing clients, if the user navigates to Settings and clicks on "Connect to MyEmsisoft", they are automatically connected and show up in the Workspace almost immediately. Neat! I assume it knows to connect to the workspace because the license key in their software is attached to that workspace. Can I get confirmation on that? We have command line access to almost all of the computers and they are using that same key. Is there a command that we can push to the computers en masse that will disconnect them from EEC and connect them to ECC basically to simulate them pressing the "Connect to MyEmsisoft" button? 2. It seems that the "Alternative message or URL for news section" policy in ECC isn't applying to clients put into that policy group. All the other policies appear to be applying properly. Wondering if there are some character or length limitations or maybe a bug? Thanks!

Just got it. All seems well here on Win 7 x64 Pro

Auto updated OK on Win 10 (I think) Can I ask why you never give any info anymore on what has been changed or fixed? It's quite difficult to know if a fix has worked, or a new feature has not worked when you aren't even told what it is. Are we doing blind beta testing now?

Just got it. No issues.

Win 10 1809 EAM 9322 I cannot get the 'All Components' list in Forensics to work ( I don't use it ever, but thought I should report :) )

Just got this update. What is in it?

Updated smoothly with no major issues - just wanted to say thanks for changing the Date column width in the Forensics Log - it's so much better now that both the date and the time are shown by default 😂