Kej

Report Windows 10 Bug

Recommended Posts

As for the detection rate, i opened the infected file.After few second it show me message that it blocked that file, but i still can open it again!!

About crashing problem, i set all control level to basic, but i still can shut down Real-time Protection from Task Manager!

 

 

Share this post


Link to post
Share on other sites

Can you provide more information please for the devs.

Which version and build of Windows do you use?

Which build of EIS are you using?

Do you have a virus total link for the infected file?

What crashing problem?

Share this post


Link to post
Share on other sites

In your video, you have a RAR archive open in WinRAR. Every time you double-click on the keygen.exe file, WinRAR extract it to a TEMP folder, and then runs it. When this happens, Emsisoft Internet Security (EIS) detects and quarantines the file. This is expected behavior, since WinRAR keeps extracting the file from the RAR archive every time you double-click on the keygen.exe file in the RAR archive, thus creating a new copy of the keygen.exe file in your TEMP folder.

 

15 hours ago, Kej said:

About crashing problem, i set all control level to basic, but i still can shut down Real-time Protection from Task Manager!

I'm not sure what you mean by "shut down Real-time Protection from Task Manager". Are you ending EIS processes (a2guard.exe/a2service.exe) from the Task Manager, or are you doing something else? If self-protection is turned off in the EIS settings, then it is possible to end the running EIS processes from the Task Manager.

Share this post


Link to post
Share on other sites

Emsisoft Internet Security (EIS) detects and quarantines the file. but i can still run that file again. why?? i have been used many anti-virus before and i haven't seen like that result or happen.

One more things, i set the Activate File Guard Scan Level to Thorough!!

Share this post


Link to post
Share on other sites

According to what Arthur said... the file that gets quarantined is NOT the file you are double-clicking inside the archive.   It's the extracted copy.    WinRAR isn't file explorer - it's showing you a picture of the files that are stored in the RAR archive.  When you double-click on the picture of the keygen.exe filename, WinRAR does what it has to to extract a copy of that file and then run it.  EIS quarantines the extracted copy.   It's not removing the original  keygen.exe  from the WinRAR archive - that's still there and you are able to extract it repeatedly.

Share this post


Link to post
Share on other sites
6 hours ago, JeremyNicoll said:

According to what Arthur said... the file that gets quarantined is NOT the file you are double-clicking inside the archive.   It's the extracted copy.    WinRAR isn't file explorer - it's showing you a picture of the files that are stored in the RAR archive.  When you double-click on the picture of the keygen.exe filename, WinRAR does what it has to to extract a copy of that file and then run it.  EIS quarantines the extracted copy.   It's not removing the original  keygen.exe  from the WinRAR archive - that's still there and you are able to extract it repeatedly.

Ok, i understand it. thank you

Share this post


Link to post
Share on other sites

Thank you for helping clarify @JeremyNicoll. ;)

@Kej if you right-click on the RAR file that has the keygen.exe file in it, and select to scan it with Emsisoft Internet Security, then it should be detected and you should have the option to Quarantine the RAR archive (unless it is password protected).

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.