Search the Community

Installed via autoupdates on Win 10 1909. GUI seems to behave a bit better By the way, how many times during a malware scan should it say 'enumerating files' ?

hi all., we are new in the forum of antivirus, if i import videos with camtasia the application freeze, it causes i can't produce and upload in youtube with camtasia in MEmu android emulator on pc a notification "MEmu (rocket cleaner) 99.0 mb" appears repetitively but rocket cleaner is malicious app installed on MEmu whichs causes hacking of Google accounts, the speed clean and G5 Gamebox malicious android apps on MEmu virtual android on windows more info here: https://www.breakingnews.fr/technologie/supprimez-ces-applications-android-desagreables-qui-peuvent-se-connecter-a-vos-comptes-google-et-facebook-des-maintenant-220819.html En bref Dans MEmu tous ça à piraté le pc, camtasia freeze et comme on est français et sur forum antivirus multilingue the traduction i installed google translate: salut à tous., nous sommes nouveaux dans le forum des antivirus, si j'importe des vidéos avec camtasia, le freeze de l'application, ça fait que je ne peux pas produire et télécharger sur youtube avec camtasia dans l'émulateur Android MEmu sur PC, une notification "MEmu (Rocket Cleaner) 99,0 Mo" apparaît de manière répétitive mais Rocket Cleaner est une application malveillante installée sur MEmu, ce qui provoque le piratage des comptes Google, speed clean et G5 Gamebox malveillantes applications android sur MEmu virtual android sur windows Plus d'infos ici: https://www.breakingnews.fr/technologie/supprimez-ces-applications-android-desagreables-qui-peuvent-se-connecter-a-vos-comptes-google-et-facebook-des-maintenant-220819.html [/blue] avanquest uninstalled & thanks/merci...

Win 10 1909 all updates. Autoupdated without issue. Noticed that whenever I choose Settings.... Permissions, it shows Updates as underlined in the GUI. It may correct itself perhaps after a reboot. Just looking around at the moment. What do you mean by 'Setting the Administrator password''? Do you mean that setting wasn't working as expected in some cases?

Hi, My windows 10 PC is infected and I followed your guidelines. I installed emergency kit but was unable to run emergency application as malware prevented it from running. Please find attached three .txt files. Two from Farbar Recovery Scan Tool produced the following logs: FRST.txt Addition.txt And I was able to run rogue killer, log file from that is attached too. Thanks for your help, appreciate. Addition.txt FRST.txt as_B931.tmp.txt

Hi there! My computer is infected. I have rootkit Wdf34078.sys Please help me. I can't delete it. What can I do? My name Gönczi László from Humgary. Thank you, have a good day.

Is there any beta testing being done for IMac computers

I've got a threat called Win32/Packed.VMProtect.ABO I want to know if it's actually harmful or it's the default for the antiviruses to see it as a threat scan_200313-154937.txt Addition.txt FRST.txt

Win 10 1909 Updated to new beta.. no issues with update. 1.....Did a malware scan and something odd happened. EEK always catches my eicar.txt file in downloads. This time it didn't, instead during the EEK scan Windows Defender notified me and I told it to allow it (see screenshot). EEK scan then did not catch the eicar file in the scan. Does it pick up on Defender allowing it? 2..... Why is there a Emsisoft folder in ProgramData? It is called Updates and has only BD definitions listed in there but both files are empty. It does not get deleted with the other things in C\EEK obviously. 3.... When will I be able to use right-click delete on the C\EEK folder without being told it in in use? (I am using new beta 10048) I just tested the deletion and ended up having to use sc delete epp Logs of scan attached plus WD screenie. logs.zip

I updated my 100025 version through the beta updates.. no problem. Did a malware scan with 100032... no problem. Thought I'd check out doing a clean install of 100032 to check license issue fix... problem C/EEK would not delete. First I had deleted shortcut to it from my desktop. Then went to C/EEK right-click delete. It got to a certain point and said it couldn't delete as it was still in use. I did a restart of machine to 'unlock' it. It still wouldn't delete. So I ran Emsiclean and deleted EEK through it and did the requested restart of the machine. After restart C/EEK was still there. So I right-click deleted it again and this time it went. I shall install 100032 as a clean install now and report in another post.

Is there any problem in my computer now after I've restored my data scan_200228-214808.txt FRST.txt Addition.txt

Beta update went in well. I like the way the GUI is now, it's much easier to navigate. I may be wrong, but doing a manual scan seemed to go from 4 of 5 to finish very quickly. On EAM it goes to 5 of 5 and takes a little while there. Not sure what logs would show this, have attached a couple anyway. logs.db3 scan_200226-073709.txt

Win 10 1909 via autoupdates. No problems so far.

I'm seeing focus changes again (as in: https://support.emsisoft.com/topic/30648-window-focus-is-changing-after-dismissing-notification-pane ). Anyone else? It's been happening, I think, for a few days, but I've been quite sleepy, and only just realised it was happening again...

Win 10 1909 9977 installed after an autoupdate. No issues so far.

EEK stable on Win 10 64 bit 1909. When installing and running for first time, the Recommended Reading slide appears and the first date shown is 1/1/1970 Not a big error but I thought I'd let you know.

Auto update of Win 10 1909 went okay.

I don't know if this is the right place for suggestions, but here goes. Maybe it would be nice that when looking at the Behavior Blocker tab, processes that are verified by the Anti-Malware Network get a check mark, or some other form of visual indication that they are verified. Currently to check if a process is verified by the Anti-Malware Network you have to right click the process, select "File properties" from the context menu, and scroll down in the text box. I think it would be really nice if the reputation was visible at a glance.

I've posted my logs and got confirmation that I was clean, reinstalled windows from usb after I've upgraded the bios and shredded the harddisk signed in to microsoft and chrome account Is there anyway the virus has came back especially it asked for my one drive? FRST.txt Addition.txt scan_200224-121009.txt

hi everyone, my window defender program got disabled 2 days after i visited a suspicious site, i tried to figure out how to turn it back on but i couldn't think any ways to cope with this, i run the emergency kit and perform the malware scan which gave me a scan report at the end of process, i enclosed that below this message but as i saw from the report, it does say my pc is actually fine without virus or any other malwares detected but however, my window defender still not working as i tried to go back to turn it back on, it doesn't work still, therefore, as per this query thread, can i find out how to have my window defender back to normal working state and how to be sure that my pc is actually completely clean even if the defender program issue is fixed ? p.s. oh oh, by the way, for the frst installation, i tried to do that but however, my system pc automatically reject it 2 seconds after the program has been downloaded and therefore, i couldn't run it even though i recognized that i should go forward to run it, nevertheless, it's not i don't want to run it, it's just that my pc doesn't let me go forward, so how should i get around this tricky part? much appreciated, thank you, winston Emsisoft Emergency Kit - Version 2020.1 Last update: 2020/2/9 pm 06:41:04 User account: mei-nb\mei Computer name: MEI-NB OS version: Windows 8.1x64 Scan settings: Scan type: Malware Scan Objects: Rootkits, Memory, Traces, Files Detect PUPs: Off Scan archives: Off Scan mail archives: Off ADS Scan: On File extension filter: Off Direct disk access: Off Scan start: 2020/2/9 下午 06:41:44 C:\Users\mei\Desktop\Downloads\FRST.exe detected: Trojan.GenericKD.33027215 (B) [krnl.xmd] C:\Users\mei\Desktop\Downloads\FRST (1).exe detected: Trojan.GenericKD.33027215 (B) [krnl.xmd] Scanned 42701 Found 2 Scan end: 2020/2/9 pm 06:58:30 Scan time: 0:16:46 scan_200209-184144.txt

Win 10 64bit 1909... EAM beta 9977 As well as a Reflect image, I also have a little USB stick which, every so often, I copy and paste my docs, downloads and pictures to. It is sort of an emergency backup of files which I keep in a drawer. On this PC I have 5 eicar items which I keep to test the scanner. The scanner always tells me it has detected them but never quarantines them. I have report only selected in scanner settings. I have attached what EAM usually does and finds from a scan report. Today I selected documents, downloads and pictures in C\ users\ username (room) and chose copy. Then with my usb stick plugged in and opened I selected paste. EAM quarantined 2 items. (screenie attached) The 2 items were from Downloads. Why did it do that when I had it set to report only ? Was it because it wasn't a scan but a copy and paste? The Zip files in Downloads were not quarantined. The eicar.com.txt in root of C was also not quarantined. scan_200125-054319.txt

I was trying to download a program but instead I've downloaded trojans and malware from this link "http://installcdn.club/down/?q=SolidWorks2020SP0.1" less 5 min later I realized how stupid I was turn off the pc kaspersky rescue tool turn on avast restart unhackme restart avast restart kaspersky restart uninstall chrome shift delete chrome userdata kaspersky McAfee they cant find something now but it wasnt a normal virus in the less than 5 min it had already installed 3 programs 1 of which couldn't delete it until I got unhackme put 4 programs in the start up all of these are gone but does this means it's over or I may still be hacked? is there any possibility that the virus have went to the bias motherboard or the video card? 1 more thing my chrome itself got infected in this in the 3rd time running kaspersky rescue tool Ive found something in the chrome/userdata/default and that's why Ive uninstall it and deleted the data file what will happen if I reinstall it or even use it from another pc can my chrome account be infected and give access to that virus? question may seem stupid but can I get infected again just from opening the website when I was getting the link provided above?!

The restart into this beta did not go smoothly for me. I've just described what happened, elsewhere, as it was maybe relevant there. See my update at:

EAM 9977. Windows 10 1909 all updates installed. Fast boot off. This morning after boot, EAM forensics show no updates yet and taskbar icon is showing the glowing action but nothing is happening. Debug logs attached EDIT.. tried to see email via EAM gui and received this message also attached. a2start_20200217043752(6288).zip

I am French and I translated this comment Emergency kit detected 4 Trojan and 3 Variant. My pc works but I don't connect it to the internet anymore. I attach 2 photos indicating the nature of the trojans and variants as well as the place where they are installed. Can anyone help me ? Thanks in advance scan_200204-213741.txt scan_200204-214902.txt

Hi, everybody, I'm new around here. I wanted to ask you if you can create a promotion to buy the anti-malware for more than three years and with some significant discount. Thank you very much in advance. Best regards.