Emsisoft Anti-Malware Home is a paid security program for home users and home offices. It protects Windows PCs and Macs against malware, ransomware, phishing sites and potentially unwanted programs (PUPs). It combines a scanner that uses two detection engines with real-time layers. Each layer steps in at a different point: Web Protection before a download arrives, File Guard as files run or are written, and the Behavior Blocker while programs are running. Every installation also connects to a cloud console. A 30-day trial is available.
Scanning and cleaning infections
Emsisoft Anti-Malware offers three scan types. Quick Scan checks only active programs and suits a system already known to be clean. Malware Scan covers all the places malware usually infects and is the general-purpose choice. Custom Scan lets you pick folders and decide whether to include active memory and malware traces such as altered registry settings. It can also open zip, rar and cab archives, Outlook-style mailbox files and NTFS alternate data streams. These streams are hidden data layers attached to ordinary files. You can save and reuse a custom configuration.
You can quarantine or delete each detection, add it to exclusions or submit it to Emsisoft’s Malware Lab as a false alert. Quarantine keeps a recoverable copy, so you can restore a file flagged by mistake. Scanner settings control whether PUPs such as adware are flagged and whether the scan uses every CPU core or leaves two free. They also control whether it ends with a report or automatic quarantine, optionally followed by shutdown. Scheduled scans can run at intervals, at set times, daily, weekly or monthly, or after startup or an update. They can skip while Game Mode is active.
File Guard scan levels
File Guard is the real-time file scanner, and a slider sets how much it checks. At the default level it scans programs as they start, which costs the least performance but leaves inactive malware for a manual scan. Thorough also scans files when they are created or modified, covering downloads and files copied from USB drives. Paranoid scans a file whenever any program reads it. It slows the computer noticeably and is meant for temporary use while cleaning an infected machine. Malware and PUPs each get their own response: alert, quarantine silently or quarantine with a notification.
Behavior Blocker and ransomware detection
The Behavior Blocker monitors running processes and reacts to suspicious activity. Anti-Ransomware uses the same technology to spot ransomware-like actions, such as encrypting files, and halts the process.
The Behavior Blocker panel lists every process as monitored, trusted or blocked by an application rule, or excluded. From there you can edit a program’s rule, quarantine or end it, or check its digital signature and its reputation in the Emsisoft Anti-Malware Network. Suspicious programs can trigger an alert that asks what to do. Alternatively, they can be resolved automatically through a reputation lookup.
Blocking dangerous websites
On Windows, Web Protection intercepts connections at the system level, so it covers nearly every program rather than only browsers. It uses a host list refreshed every 15 minutes. It blocks hosts known to spread malware, phishing copies of real sites built to collect passwords, and sites that distribute PUPs. Custom rules, in plain text or regular expressions, can allow a host, ask first or block it. You can also import third-party hosts files.
Because Web Protection works at the domain level, it cannot single out one malicious file on a large service. The free Emsisoft Browser Security extension for Chrome, Firefox, Edge and other Chromium-based browsers matches specific URL paths instead. It sends Emsisoft only a hash of each new domain name.
Managing devices from the cloud console
Each Emsisoft Anti-Malware installation connects to the Emsisoft Management Console. You can access the console in a web browser or through Android and iOS apps. There you can check each device’s protection status, start scans, and restore or delete quarantined items. You can also read logs of updates, scans and alerts, and change protection settings. Permission policies decide what local users may change, and an administrator password can lock the settings.
Anti-Malware Home uses a simplified console with up to two workspace managers, up to ten protection and permission policies, and 30 days of log history. Emsisoft Business Security and Enterprise Security + EDR add a fully featured console and longer retention. The Enterprise edition also adds full endpoint detection and response.
Protection on macOS
An Anti-Malware Home license covers Macs from the same pool of device seats. The Mac version includes File Guard, malware scanning, web protection and quarantine with restore. It has no local settings screen, so you configure a Mac entirely through the cloud console.
Emergency Kit Maker
On Windows, Emsisoft Anti-Malware can build a portable copy of Emsisoft Emergency Kit from its own scanner components and current detection updates. You can save it to a USB flash drive or a folder. You can then take the kit to another PC to scan and clean it there.
