Why did an Emsisoft product detect an innocent file as malware?

  • June 1, 2023
  • 2 min read

This situation is not caused by an error of the software! It shows that the protection mechanisms of our software work correctly by detecting malware-like behavior in files that are not already known and classified.

If the Emsisoft program alerts about malicious behavior for a well known program, you can opt to permanently allow the program on your computer by clicking the “Wait, I think this is safe” link on the notification that appears. Sometimes, valid programs that aren’t already classified or electronically signed show similar behavior to malware. The Behavior Blocker will show an alert in those cases.

If you are sure that the file which was detected by one of the Emsisoft programs is not really malicious but it was not quarantined, it may be a false positive. Please report such detections, so we can correct them, here’s how:

In the meantime, you can whitelist the the file with an exclusions in your MyEmsisoft console, using the instructions available by clicking this link.
Note that Emsisoft Emergency Kit only has scanning exclusions, while Emsisoft Anti-Malware has scanning and monitoring exclusions. Monitoring detections are indicated by the word ‘behavior’ in the notification.

Rating: 3.9/5. From 16 votes.
Please wait...

Similar topics