Emsisoft says your license has expired and real-time protection stops

Fix it now

Emsisoft documents exactly what happens here: on expiry the product switches automatically to a freeware version that lets you run scans and provides no real-time protection. Scanning still works, so the machine looks fine, and the layers that stop something before it runs are the ones that have gone.

1. Open Emsisoft Anti-Malware, find the text showing the time remaining on your licence in the Overview section, and click Details. That opens License settings.
2. Read the key and the date. Use Show license if you need the key itself to compare against your records.
3. If the term has ended, use Renew license, or Go to MyEmsisoft to manage it there: select your workspace, open Settings on the left, and use Renew now.
4. If the key is live but every seat is used, remove a machine you no longer protect from your MyEmsisoft workspace, then apply the key here again.
5. Restart the machine and confirm the Protection screen shows File Guard running, along with the Behavior Blocker and Web Protection.

Emsisoft’s renewal page requires a key with time still on it; once the term has fully lapsed, renew through MyEmsisoft or obtain a new licence instead.

If the licence area shows a future date and the resident layers are running, you are done. If the key is being rejected rather than reported as expired, the next section explains why those are different problems.

Why it happens

Emsisoft splits the product cleanly, and it publishes where the split falls. When a licence expires, the anti-malware program switches automatically to a freeware version, which allows you to perform scans but provides no real-time protection of any sort. That is the vendor’s own description, and it is more useful than any inference: on-demand scanning survives, everything resident stops.

The resident layers are the ones Emsisoft documents by name in its user guides: File Guard, which inspects objects as they are opened or written; the Behavior Blocker and its anti-ransomware component, which watch running processes and intervene on behaviour rather than on signatures; and Web Protection, alongside Emsisoft Browser Security. Those are the parts that stop something before it runs, which is a much larger loss than the phrase ‘you can still scan’ suggests.

That design is also why the machine gives such a mixed impression. A scan that finds nothing today is evidence about today, not about whether anything is guarding the machine tomorrow. Nothing on screen breaks, no service fails to start, and the only visible change is a date and a set of greyed-out tiles that most people never open.

The second message in this family, about a key not being valid, is a different fault. Expired means the key was recognised and its term has passed. Invalid means it was not accepted at all: a transcription error, a key issued for a different edition, or a key that has been reissued so the one you are holding no longer exists. They lead to different places, and treating them as interchangeable wastes a renewal.

Full reference

Sorting expired from rejected

What the licence area actually offers

Emsisoft documents License settings as reachable from the Overview section: find the text showing the time remaining on your licence and click Details. The buttons there are Change licence, for switching between a trial and a full version, Renew license for one that is expiring, Obtain a new license for additional computers, and Go to MyEmsisoft for managing licences and devices. Show license displays the key currently in use, which is what you compare against your records when a key is being rejected.

Renewing before and after the term ends

1. Before expiry, either use Renew now in MyEmsisoft under your workspace’s Settings, or the renewal page on Emsisoft’s site with your key.
2. Emsisoft notes that the renewal page needs a key with time remaining, so it is not the route once the term has fully lapsed.
3. After expiry, renew through MyEmsisoft, and reinstall the software if the update does not apply itself.
4. Then confirm the resident layers restarted, rather than only checking the date.

Which components you are checking for

Emsisoft’s own answer to ‘is real-time protection working’ is to start the product and make sure File Guard is set to on. That is the single check worth running after any licence change, and it is faster than reading the date.

If you decide not to renew

Be honest about what an unrenewed installation is: an on-demand scanner. That has a real use, but it does not watch the machine between scans. If you are stopping, remove the product and confirm Microsoft Defender Antivirus is turned on under Windows Security, Virus & threat protection, Manage providers. Microsoft documents Defender being re-enabled automatically once a non-Microsoft product is uninstalled or otherwise stops providing real-time protection, and it gives you resident protection at no cost.

Every code this article covers

Confirm the fix worked

1. License settings shows a date in the future for the key you entered.
2. The Protection screen lists File Guard as on, which is Emsisoft’s own test for working real-time protection.
3. The Behavior Blocker and Web Protection are running rather than greyed out.
4. An update completes, so you know the product is talking to Emsisoft properly.
5. Restart and confirm the resident layers come back on their own.

Questions people ask about this