Emsisoft Anti-Malware & Emsisoft Internet Security 10 available

Can you check the whitelist dialog and check if there is an entry for Secunia there? I have also updated the reputation information for Secunia.

That will cause literally gigabytes worth of logs to be generated per day. I know that, because there is a way to get these types of logs. But we only use them for debugging.

We had those in the past and according to the user feedback we got most considered them redundant.

We expect EEK 10 to be released within the next few weeks. The exact time depends on whether there are any major bugs in the EAM/EIS 10 release. So far things are looking quite good .

You will see all the speed improvements we implemented in EAM/EIS in EEK as well.

 

Thanks for the reply. Will do.

FYI - Emsisoft previously advised against this stating initial update is critical but appears delaying update is the only solution to my issue.

 

That's nice to hear. Good job and congrats on your new release

 

Good Afternoon! Quickest Trial Demo Ever...Lol! Tried V10 EAM for a Scan was so impressed...guess what! Excellent Product...Congrats Christian and Fabian...and all at Emsisoft. Sincerely...Securon

 

There is no entry in the whitelist.

Here is another one that has appeared which should be well known.
http://www.isthisfilesafe.com/?md5=705EA99E940E7873B779258602EF22AE

I am not understanding what criteria enters a program into the monitoring mode. As you can see, the programs in the attached image all have good reputations but are being monitored without any custom rules created yet the livecomm.exe file is showing an unknown reputation, is not monitored, but actually is a well known file.

How does a program enter monitored status?

 

I tied EAM 10, too.
Scanning speed has been improved.

 

Thanks. I changed the classification.

The reputation has no influence on whether we will monitor an application or not. It just determines what default action is taken when we observe a potentially malicious behavior. Whether a process is monitored or not is largely depending on your white-list settings and the way it was started. Essentially we focus on processes started within the user logon session, as those are the only processes relevant for preventing malware infections. That means by default we don't monitor most services unless they were started by a user, like for example livecomm.exe in your example.

 

Thanks for the speed increase, much appreciated!

 

We found a bug in the routine that can cause the update to go off sooner than intended. It will be fixed in the next release.

 

By next release, do you mean release 11? I have had a couple of ver. 10 updates recently.

Also I found something that might be the root cause of my issues. At boot, svchost.exe -netsvcs is consuming virtual memory at huge rates. Today it was over 2 GB combined real + virtual. Again watching it, it all seemed to be Win Update related. However, only 512 MB of real memory was being used; the rest was all virtual. Strange in that I have 8 GB memory and running WIN 7 x64.

When I installed WIN 7 many moons ago, I experimented with various virtual memory setups using the 3 SATA HDDs I have installed. I only allocated 300 MB VM to the drive WIN 7 is installed on and the rest to a fast Seagate SATA drive that only contain image backups. Back then, I was only using Norton IS and everything booted up and initialized quick plus ran quick thereafter. Today I have EAM, Eset Smart Security, and EMET all loading at boot.

I also suspect that perhaps EAM uses a lot of VM at boot up? In any case, I have allocated much more VM to the WIN 7 drive and will see if that helps the EAM startup. I do know that by currently delaying the first EAM update, I am not longer getting an system lockups right after the first cold boot.

-EDIT- Well, I was right. The problem is WIN 7 updating and literally thousands of PCs are affected. Appears MS is close to a fix on the issue. Don't know why it has taken so long though. Thank goodness I have 8 GB of memory. The people with 2 GB of memory are dead in the water. Here's the link: https://social.technet.microsoft.co...-memory-usage?forum=w7itproperf&prof=required

 

uuuhm... back with update issues. Keep an eternal looping with "updating" "initializing"....

 

@fax
So far so good... You can see my log attached. I haven't got any problem with update since first v10 beta.
I'm using WIN7 64-bit.

 

First of all: I must say that speed improvements is impressive. Keep on rockin' !!!

The new behavior blocker tab is very useful IMHO. Please, look into into this:



With regarding to post #33 and examples from my screenshot, it's unclear to me how the reputation is determined. In particular: two files of my files are original Brother DCP-J140W driver (VolPanlu.exe is it part of unofficial Daniel K's SB X-FI Support Pack 3.3, so it's ok for me). Is it proper behavior?

 

Thanks.. just got an update that needed a reboot... so far no errors. Lets see...

 

It appears that on some systems the SSL option is causing update issues. We are currently trying to figure out what is causing them. The most likely cause are proxies or web filters interfering with the SSL communication. We are currently looking into it.

 

A fix would be to tell users to exclude Emsisoft processes from web filtering. I do this in Eset Smart Security. Also exclude same in AV scanner and HIPS.

 

Just got the message as well : Could not connect to the update server. Please check your internet connection and proxy settings. It was still working this afternoon.

 

nope, could not connect error is back... if I disable the SSL communication then it seems to connect better but may be its just a coincidence.

 

First, I am having no problems with updating; SSL or otherwise. So, that is the good thing.

However when using 2 simultaneous connections, I have 151 ports being opened up with 8 actually being used for the first boot of the day. For the life of me, I don't know why so many ports have to be used to perform a update?

 

Are they open (connected) or are they closed and in one of the finalization states? (FIN_WAIT)

 

The ones not used always show in Wait status.

 

Fabain, did something changed regarding Game Mode in recent updates?

I have auto-updates set to 30min interval and they happen regardless of game mode being on or off. I'm on an older machine so signature-refresh that happens after update is troublesome when I play games.

 

Barthez, I'm trying to reproduce this.
In case of success, can I open trouble ticket for your problem on Emsi support forum?