MartinB

Emsisoft Appeared On Some of Our Computers

Recommended Posts

About a week ago, Emsisoft just appeared on some of our work computers. I did not install it. I have also uninstalled it on a few of the computers but it keeps re-installing itself. To me, that is a sign of malware. Prior to this, I had never heard of this software which claims to be an anti-malware application itself. My research says the application is a legitimate piece of software, but it is sure acting like malware to me. My research also states that Emsisoft fights with other anti-virus programs.  I need to know where it came from and how to get rid of it completely. It has slowed down some but not all of the computers it has appeared on making them nearly useless.

Share this post


Link to post
Share on other sites

Hello MartinB,

All active antivirus can potentially fight with other active antivirus, and Emsisoft Anti-Malware is no exception. Often it will run alongside others with no trouble, but sometimes it cannot. Again though, that applies to all active antivirus products.

Do you have software such as Repairtech's Syncro or Kabuto on any of these computers? Those are MSP (managed service provider) programs that can and often are configured to install and maintain software such as ours. Those two in specific are often used for Emsisoft Anti-Malware installation and maintenance. If for example you'd signed up for remote management service, that could have come as part of the package.

Without knowing more of the situation, I can only make guesses such as that one. Emsisoft Anti-Malware has never to my knowledge been 'maliciously' installed. I'm not sure what the point would be, since it is designed to be cleanly uninstalled, has a free trial, and is designed to fight malware rather than be malware. If it keeps reinstalling itself though, that is a hallmark of MSP software activity.

If you'd like, email me at [email protected], and I can help you dig a bit without risking sensitive information from any of the computers is posted on the public forum.

Share this post


Link to post
Share on other sites

Hello David -

Yes, I am aware that active anti-virus will fight with other installed running anit-virus. All my research prior to posting suggested that Emsisoft is legitimate. The thing is, I do not know where it came from. We do use Webroot Secure Anywhere. I just need to know how to uninstall it and get rid of it completely off the three or four machines that it is slowing down to an almost unusable state. Every time I uninstall it, the machine runs perfect for the rest of the day but then slows down immensely the next day and the software has reappeared. That seems fishy to me. We also utilize LabTech.

Share this post


Link to post
Share on other sites

Isn't LabTech an automation / MSP / RMM software? It may be configured to install Emsisoft Anti-Malware if it is not detected at computer boot time. I'd check to see if perhaps it has been enabled in LabTech settings, as that would definitely explain it.

The only instances of Emsisoft Anti-Malware being installed in the manner you're referring to that I'm aware of are all due to MSP type software. If that's not it, we should probably switch to email so we can gather some endpoint logs and see where it might be coming from, with a bit of research.

Share this post


Link to post
Share on other sites

Sorry for not replying sooner. Our MSP did indeed implement the Emsisoft software so now I at least know where it came from. I am a little frustrated that it was not communicated to me prior to them doing so. I have been fighting this for a week thinking I had some malware issue. I was just notified yesterday that they implemented it. 😒

Thanks for your help. I now have to figure out what software it is fighting with. 

Share this post


Link to post
Share on other sites

Quite alright, and I'm glad you found the culprit. If you have any other active antivirus software on these computers, I would start there where conflict is concerned. You're also welcome to email as I'd mentioned before, so we can gather logs to see if there's something we recognise that can conflict.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.