Malake

Behaviour Blocker: could it delete suspicious files?

Recommended Posts

 Hi guys. I'm running EMSI v12 in my laptop and i'm very impressed with the performance of the Behaviour Blocker, by far the most strong argument of this suite. However, i wonder if there is any setting for deleting automatically the files that have some suspicious behaviour. Sometimes, BB block these malicious attempts, but the files remain in my computer. 

 

Thanks

 

Regards

Share this post


Link to post
Share on other sites

The Behavior Blocker doesn't have configurable automatic-quarantine settings. There are a few things that the Behavior Blocker will automatically quarantine, however for the most part it won't do that just in case it flags a legitimate file. Since the detections are based on behavior, alerts can be displayed for legitimate files that aren't digitally signed and aren't listed as Trusted in our Anti-Malware Network.

Share this post


Link to post
Share on other sites

I was going over the program settings earlier today, and it looks like I was mistaken about the controls for automatic-quarantine having been removed. They appear to have simply been moved somewhere else:

post-18745-0-73708900-1477622105.png

post-18745-0-73708900-1477622105_thumb.p
Download Image

  • Upvote 1

Share this post


Link to post
Share on other sites

I was going over the program settings earlier today, and it looks like I was mistaken about the controls for automatic-quarantine having been removed. They appear to have simply been moved somewhere else:

 

post-18745-0-73708900-1477622105.png

 

 

 

 

 

 

Great! Thank you

Share this post


Link to post
Share on other sites

Please note that this setting only effects alerts where you would have been asked to select what to do. It doesn't effect decisions that would have already been made automatically.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.