Review and test of Emsisoft Anti-Malware 10 antivirus
Overview and test of Emsisoft Anti-Malware 10 antivirus. Basic features and settings, checking the detection level and testing proactive protection when running unknown threats
Emsisoft Anti-Malware is an antivirus and anti-spyware that protects your computer from various types of malware. Software Control blocks any malicious activities, Web Protection stops Internet threats when you are online.
Emsisoft Anti-Malware version 10.0.0.5409 Beta took part in testing.
Samples used for testing
To check the protection level of Emsisoft Anti-Malware 10, we used:
400 malicious samples collected on the Internet from 05/06/2015 to 05/22/2015.
35 bat scripts, both malicious and containing commands to control Windows OS settings, which can lead to unpredictable consequences.
16 safe samples to check for false positives.
270 malicious encryption programs.
Summary of testing
Detection
level Detection level in Emsisoft Anti-Malware 10 mode with "default" settings:
Remaining files after all checks: 2
Cleaned: 0
Infected files: 2 (0.5%)
Files confirmed as harmful by VirusTotal more than 10 engines: 1 (0.25%)
Of the 35 bat-scripts, which include both purposefully written viruses and OS commands, after unpacking, 20 objects remained in the folder.
False positives: 0/16.
Of the 270 scramblers in the folder, 0 remains.
Performance and performance
Total scan time: 0:02:10
Maximum value of memory consumption by the main running anti-virus process: virtual memory: 1016.43 MB, physical memory: 233.38 MB
Running the remaining files Run
results:
When malicious files are launched, cloud technologies for detecting and blocking threats, as well as proactive protection of behavior in the system, have proven themselves.
Malicious web pages from which dangerous software was supposed to be downloaded were blocked.
An antivirus scan found no threats on the system.
After the reboot, no threats were detected in the system.
When unpacking an additional archive with 917 objects and launching the remaining 4, 2 objects were found to be inactive in the temporary directory (objects of an advertising nature). Changes in the registry caused by potentially unwanted applications have also been identified. These remaining objects are classified as low-risk threats and do not pose a threat, as they are actually located in temporary directories.
As a result, reinstallation of the operating system is not required.
Identified problems
As a recommendation: you can further enhance the detection of unwanted changes in the system in bat-scripts, about which the user should be warned. This will help to avoid unwanted and dangerous system changes.
0 Comments