Emsisoft Internet Security - wersje stabilne i beta

[ichito]

Interesujące, ale i kontrowersyjne zmiany wprowadziło Emsi w najnowszym wydaniu pakietu 2018.7 - zmieniły się ustawienia i nazwy poziomów ochrony, ale to nie tylko zewnętrzna zmiana, bo kryją się za tym zmiany w oferowanej domyślnie ochronie oraz wykorzystywanej technologii. Oryginalne info

In previous versions, we had the following scan levels:

• Fast
  
• Balanced (factory default)
  
• Thorough
  

With version 2018.7 this changes to:

• Default (new factory default)
  
• Thorough
  
• Paranoid
  

We made this change for a good reason, which I would like to elaborate. Behind these three options lie a different technology:

• OnExecution scans: The first option basically only scans programs when they are getting started. While that keeps your computer free from active infections, downloaded inactive malware files may not be immediately detected.
  
• OnModification scans: In addition, this option also scans any files that are newly created, such as downloads, but also any files that are modified by any program. In the past, that was the best method to catch all sorts of downloaded malware and script-/macro-based threats.
  
• OnRead scans: In addition, this option also scans any files as they are being read by any program. On a typical PC, there are usually thousands of files being read in the background every minute, so this option naturally slows down the overall performance of your computer quite dramatically. We don’t recommend making use of it, but keep it available for those who want to be absolutely sure everything gets immediately detected without delays.
  

What we changed in 2018.7 is that we enhanced the OnExecution scan in a way that allows third-party programs and the Windows operating system to access our scanner technology too. Microsoft created specific interfaces called IOfficeAntivirus and AMSI that are used by most modern browsers, script interpreters, and Office programs to make sure the documents that are downloaded and opened do not contain any malware.

I teraz po bogatych wyjaśnieniach dla mnie najlepsze (wytłuszczone)

With that being the new standard, we don’t see the need to scan all files during their creation or modification anymore but combine very fast performing OnExecution scans with those new extra scans coming from third-party applications.

Czyli na domyślnym poziomie ochrony pakiet Emsi nie skanuje plików zapisywanych, kopiowanych, przesuwanych między lokalizacjami np. dyskami, bo przenosi ochronę na technologie MS, przeglądarek czy nawet pakietów biurowych. 
Dziwny to krok i kolejny przykład zasad, które Emsi sobie wprowadziło, że "wiemy lepiej, co użytkownikowi trzeba" i "Windows Defender jest dobry...najlepszy...na wszystko".
Ciekawy komentarz w tej sprawie na AVLab

[Aby zobaczyć linki, zarejestruj się tutaj]