Overview:
Sometimes Emsisoft Browser Security will block site that are deemed dangerous.
Best would be to send an email to our lab submit@emsisoft.com with the web address in question and have them check if the site is dangerous or not.
If not, it will be whitelisted by us.
But if you want to access it anyway you can, as explained below.

Allowing access to a blocked site:
Example of blocked site:

Click on: Visit the site anyway.

Then click on the Extension icon (example in Chrome) and click on: Emsisoft Browser Security

Then choose: Manage exclusions

Press: FN+F5 to refresh the page and you will see this allowed exclusion on the page, where you can also remove it.

The post Emsisoft blocked access to a website appeared first on Emsisoft Help.

Overview:
Sometimes, applications as games, small customized apps or even business software are erroneously flagged as dangerous, even though they are safe to use. This may happen when an application is not digitally signed.
In a perfect world, all legitimate software would be digitally signed. Code signing is the process of digitally signing executables and scripts to confirm the software author and to guarantee that the code has not been altered or corrupted from the moment of his publication.
Malware is known for not being digitally signed. For this reason, unsigned apps will be flagged by your Anti-Malware as a precaution, giving you the choice to allow them into your system or block them.

How do deal with quarantined program:
If a program is flagged as dangerous and you are not sure if it is safe to use or not, it is best to leave it in the Quarantine.
Emsisoft gives you the possibility to share the info of this software to our lab for analysis directly, comfortably from the Quarantine panel. Here’s how:

1. Open the local Emsisoft app on the computer.
2. Click on: Quarantine in the blue tab: Scan & Clean
3. Highlight the file
4. Then click on: False Detection. Please include your accurate email address so we can reply. Please make sure to also fill out the info about the alert and the program.
5. Then please click the: Send button

Once our lab receives the files information, we can analyze how safe that software is.
If it is safe, we will then whitelist it if it is legitimate and allow it through the anti-malware. Will reply to you, so that you can then restore the file by clicking on the file in the Quarantine and by clicking: Restore.

You can also submit the file causing the detection via email to our lab: fp@emsisoft.com so we can analyze and correct the suspected false detection.
If the file is too large to send, please upload it to Virustotal and send us the web address of the scan result via email to submit@emsisoft.com or send us the file via wetransfer.com to submit@emsisoft.com

Files that were tested by us and are not digitally signed need to be added to Monitoring Exclusions, otherwise it will be flagged again each time it is updated without the necessary certificate.
If you are CERTAIN that the program is OK, you can add it directly to the Monitoring Exclusions.

The post False positives: Why did Emsisoft quarantine a safe program? appeared first on Emsisoft Help.

Hovering the mouse over top of the alert will pause its timer, giving you more time to read what is shown. The small blue bar moving across the bottom of the alert indicates the timer as it counts down until the notification disappears. Notifications can also be seen later inside Emsisoft Anti-Malware by opening the program and clicking the ‘Logs’ tile.

Read the alert message carefully and check the source (file name and path) of the file in question. This is often a good indication as to whether this is a suspicious or benign application. Did you start the program yourself or was it started in the background? Does the program come from a trustworthy source? What information can be obtained about the file properties by toggling the View details icon on the alert? In the case of Web Protection alerts, were you expecting this program to access the internet or connect to the described host?

If you are still unsure after considering the above points, then exercise caution and choose to quarantine the file or block the connection. Then contact our support team and give them all readable information from the alert as well as the Emsisoft Anti-Malware version, Windows version and what you were doing when the alert appeared.

Behavior Alerts

Behavior alerts offer the following options:

• Allow once – If you are sure the behavior is valid, you may continue the action.
• Allow always – Allow this behavior now and in the future.
• Block once – End this program now, but do not move it to quarantine.
• Quarantine (recommended) – Stop the action immediately and prevent the program from being accessed again.

Malware and Potentially Unwanted Program Alerts

Malware and Potentially Unwanted Program alerts offer the following options:

• Allow once – If you think the File Guard detection is incorrect, you may continue the action.
• Allow always – Don’t alert to any signature detections for this file anymore.
• Block once – Block access to the file once, but do not move it to quarantine.
• Quarantine (recommended) – Stop the action immediately and prevent the file from being accessed again.

Web Protection Alerts

Web Protection alerts offer the following options:

• Allow once – If you are sure the host is safe, you may connect to it anyway.
• Allow always – Allow access to this host now and in the future.
• Block once – Block access to this host now.
• Block always – Block access to this host now and in the future

The post What to do when you receive an alert appeared first on Emsisoft Help.