When looking up about security in Windows 8 / Windows 8.1. I read here (Securing the Windows 8 Boot Process) that Early Launch Anti-Malware "can load a Microsoft or non-Microsoft antimalware driver before all non-Microsoft boot drivers and applications" and that ELAM is supported by "several non-Microsoft antimalware apps" as well as Windows Defender.
Some sites for Anvi-virus products say that ELAM is supported, but if you wish to use another anti-virus program, is there a way to see if Early Launch Anti-Malware is supported and will work?
eg: Are supported anti-malware programs listed somewhere? or would something be shown to indicate that ELAM is active once the anti-virus program is installed?
Many thanks
1 Answer
I don't know about any site that lists all anti-malware software that uses ELAM.
Though you can easily check whether particular product uses ELAM once you install it.
Run regedit.exe and search for Early-Launch group in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services key.
On Windows 8.1 (and higher) there is at least WdBoot driver (part of Windows Defender). If you'll find another driver with Early-Launch group then AM software it belongs to is using ELAM.