Search the Community

I am an MSP. On August 1st we had an account breach on one of our Atera (MSP Software) accounts which resulted in the propagation of this crypto virus. Any assistance would be greatly appreciated. Attached is the information from just one machine, we have 4 or 5 other we'd like to get assistance with. Thank you in advance Sean scan_190810-160007.txt Addition.txt FRST.txt

It's been doing this for a while. scan_190729-233028.txt FRST.txt Addition.txt

I can't delete this object(Gen:Variant.Graftor.6168) after scanning. Emsisoft Emergency Kit write that I have to write about my problem on this site. Please help. Thank you.

We have archived Outlook emails using GFI-Archiver. These have a .eml extension. We scanned the 690,000 older (2006-2013) email records in the archive and the message is that 2,417 Detected. There are multiple emails within each .eml extension file. "Quarantine selected" and "Delete selected" give the same response: "You are trying to delete a detection that is inside an archive (zip, rar, pst (Outlook)). Any detections inside of archives will cause the archives to be entirely deleted, along with all files or email they contain." "Are you sure you want to delete the selected file(s)?" Does this mean that all of the emails within the .eml file will be deleted or quarantined? Is there anyway to delete or quarantine just the malware emails, but no the rest of the emails in the .eml file?

scan_190717-104338.txt Addition.txt FRST.txt

I just got 9469. No issues so far here on Win 7 Pro

What is this that EAM is trying to run C:\Program Files\Emsisoft Anti-Malware\a2service.exe > C:\Windows\Temp\tmp000000c0\tmp00000058 I have blocked it so far Pete

Hello, There is a problem in the analysis logs. The analyses are indicated as ongoing when they are finished. Look at the screenshot.

Win 10 1809. EAM 9112. I noticed this the other day, but with it being Xmas I was too busy to make a report. So I reproduced the behaviour again today. Custom scan of C drive only and I did not use the machine in anyway while scan was running or until I looked at details of scan. Left it to run and it completed flagging Eicar as usual. I left the window open. About 10 mins or so later I looked at the scan report details. I closed the scan window and tried to open my browser. First I tried Sandboxied, then without Sandboxie. I tried to open CD Burner XP. It was as if something was preventing it and I am sure it was EAM after a custom scan and being left open afterwards. I can reproduce the behaviour each time. A definitions update occurred each time while the scan was running (just for info) Debug logs attached a2service_20181226043717(1660).zip

Problem with updates. EAM is constantly trying but cannot do it. Fails with connection error. Last update was 7.43 UK time. Cannot send an email to support through GUI due to a technical error and was told to try later. EDIT.. Looks like it's fixed now.

Hey, So far, I've been pretty happy with the cloud console (as have most of my customers) however, is there any chance of getting an MD5/SHA1/256 hash of a "detected" file in the log on the cloud console and/or email notifications? Additionally, do you guys have any plans of adding something like a daily/weekly digest of detections vs "as they happen" notifications? I don't mind being notified right away, but in a few cases (namely, an FP at this point) I received something like 150 emails in the span of 5 minutes. I submitted the FP, and it was fixed in a pattern update, but you can see how that's not an idea situation 😁 Thanks! Chris

Hello, I'm just after cleaning a system that's infected with backdoors. I don't see anything suspicious but I'll be calmer if a specialist takes a look at it. Addition.txtFRST.txtscan_190626-062141.txt

Win 10 1903 When exactly is Auto-Silent mode triggered? On my machine just now it was enabled/disable by me going into full screen (and then trying to get it back again!!!) I usually use Dark Mode but as you said some UI changes had been made, and I couldn't see any in dark mode I switched to Bright. I almost fell off my chair..that is really bright, have you changed that bit?

My PC worked as usual and suddenly I found I couldn't open any program - so I can't start with Emsisoft! The reboot didn't help. Maybe it's a virus but I'm not a programmer, just a user of Windows and I don't know how to get access to my files...

so i dont know which decryptor to download all i can say is i downloaded the anti-malware thing from your website i did a quick scan and found two malwares Adware.Generic.1831217 Adware.Linkury.CX Adware.Linkury.CT Adware.Agent.VXN please help me to find which one i need to download kindest regards - Patrik

guevara virus is there any toolto remove this guevara virus from my hard drive

Hello, I had a ransomware on my computer. So I restarted the computer in safe mode, then I did a scan with malwarebytes, roguekiller and hitmanpro. I deleted all positive results and txt files from the cryptolocker and made a restaration of the computer before the installation of the virus. Luckily I had all my documents on an external drive so I did not lose anything, but I was wondering if I had to completely reinitialize the computer or if I'm safe now? I have several expensive and super long to install software so if it is not necessary I would prefer not to have to do it.Thank you!

Win 10 1903.... EAM 9412 First thing I do each morning after boot is look at Forensics. This morning the 27th was not at the top of the list and I couldn't get them there. I had no problem with the log showing correctly yesterday. Thought I would send you the debug logs but I couldn't highlight each one (service, guard, start) and send to zip. The context menu just disappeared. I was able to highlight and send the logs folder itself though. There looks to be some 'access denied' lines in the service log. After quite a few clicks the 27th is now at the top as it should be. Logs.zip

Just for info, released build of Win 10 1903 upgraded with EAM installed and running without any issues at all.

Laptop computer is (extremely) slow, both in function and boot up and shut down . I've been fighting it for a while now. Started with a Firefox update (66.0.3 I think) , ran through the browser update function. Several years old Toshiba Satellite laptop. Won't allow my emsisoft to update. Scan runs but hangs at 80%. Installed malwarebytes and ran it and deleted 2 pups. Ran ccleaner and also the registry cleanup. It also hung but the file it was scanning was a Firefox file. No help. Used file explorer to search "Mozilla" and deleted all files that popped up after Firefox uninstall. I think that's basically it that I've done. My emsisoft was expired, but it did say subscription was active, but would not update. So installed a 30 day trial until i can scrape some money together to renew. A several year user. Never no problems. Thank you. I do not see how to attach my scsn logs

sir pls help me, my pc all fia.txt.fordanles fordan extension and encrypted pls solve my problem

Hi. I did an emergency malware scan with your Emsisoft Emergency Kit and it found an object that could not be removed. The diagnosis said "Gen:Variant.Graftor.53846 (B)" and its location was at "C:\WINDOWS\SysWOW64\Phoneutil.dll" Ihave attached a screenshot of the scan below. Thank you in advance.

Hello, I'm having issues with a SecHijack (A), Application.CoinMiner.EP (B), and Trojan.Ceram.Gen.2 (B). It is being correctly detected on scan, however removing it requires restarting and on each restart there is a new set created. Any help would be appreciated. scan_190430-122117.txt

Auto updated. Very smooth

Today I installed several hacks to get cheats on a game, but a few minutes later I saw that google chrome was removed, so I went to the Internet explorer and discovered lots of forums about infected laptops, I installed lots of tools to uninstall the virus but it didn't work and as soon as I closed one of these tools it would uninstall automatically.