How is Prevx?

[cheater87]

I want to try it but i heard it was hard to use. Is it hard if it is there is a so called "ABC" mode. What does this do?

[starfish_001]

Prevx is very simple to use the currnet version is much lighter in use than previous versions. I quite like it.


You will need a broadband internet connection to getv the best out of it

[WSFuser]

its a very easy to use HIPS. just install and reboot. on bootup it will perform a background scan.

in ABC mode (default), it allows good files, prompts for files that it hasnt seen often, and it will block bad files.

[sosaiso]

On every reboot it will perform a startup scan FYI.

It's a very easy to use HIPS, the only problem I've ever had with it was the lack of configurability, and its resource usage. Though the resources have been toned down significantly, as far as memory and CPU usage goes.

As for ABC mode it will operate according to the community database rules.
Pro, will prompt you a little bit more if you run a new program that the community has not seen.
Expert will prompt you for every thing that you could possibly imagine like TCP outbound, DNS outbound, accessing Windows API's, etc.

[cheater87]

so is ABC mode good for people who don't want a lot of yes or noes?

[WSFuser]

yes very good.

its not complete, but as long as u dont run extremely new and rare programs, it should be ok.

also beware of false positives. ive had a few but i was able to contact support and get them fixed.

[CloneRanger]

WSFuser -{ Quote: "but as long as u dont run extremely new and rare programs" }-

You mean like a rootkit or something like that ?

[WSFuser]

no. i simply mean that some new or rare program may trigger a pop-up. i cannot think of a specific example, but prompts still exist albeit very very rare.

[CloneRanger]

Oh so does that mean you wouldn't get alerted to something like a rootkit ?

[WSFuser]

i dont know how well it does with rootkits. but i assume it treats them like a program: good is allowed, unknown is prompt, and bad is blocked.

[Notok]

Prevx1 has an extensive whitelist and blacklist. In ABC or Pro mode, you will only be prompted to allow or deny programs that are Unknown, which are programs that have not yet been determined Good or Bad by the analysts. The database is quite large, so you will not see many of these; many people never see a prompt. If you were the unlucky first person to encounter a new rootkit, you would still be prompted to allow or deny it. Once it's determined bad by the analysts, it would then be caught and killed if you had allowed it to run.

HTH

[CloneRanger]

Thanx you for the replies. So it sounds as if prevx will prevent all unknown malware like rootkits and other things, even if it isn't aware of them ?

How prone is prevx to false positives ?

[WSFuser]

-{ Quote: "How prone is prevx to false positives ?" }-
its hard to say, but so far ive only had 3 false postives all of which have been fixed.

[sosaiso]

I've had one that was supposedly fixed, an issue with "utorrent" being a worm. Support was pretty friendly about it and said something would be rolled out, but 3 days after Prevx was still getting rid of my utorrent claiming it was a nasty.

I can't say now because I have uninstalled Prevx1 because of another issue of disconnections and the inability to dl another verision of their R off their website.

About the preventing... I can't say for certain because I have only tried to remove malware once with Prevx1, and the popups after booting up made my head spin.

[cheater87]

ok i'll give this program a spin

[cheater87]

im going to give this a spin

[A1SteakSauce]

Good Luck.

[cheater87]

i installed it and its going great nothng found yet another layer of security for my comp ^_^

[cheater87]

prevx has some trouble updating it self. Sometimes it updates and other times it has a message with an errer message pop up. then i try again and it installs it.

[JerryM]

Are there any conflicts between Prevx and Snoopfree or UnHackMe that you know of?

Thanks,
Jerry

[Notok]

-{ Quote: "prevx has some trouble updating it self. Sometimes it updates and other times it has a message with an errer message pop up. then i try again and it installs it." }-Feel free to drop a note to support with any issues that you have, or drop by our forums at Castle Cops

-{ Quote: "Are there any conflicts between Prevx and Snoopfree or UnHackMe that you know of?" }-UnHackMe should be fine, but haven't tested with SnoopFree. There will be some overlap, so I wouldn't exclude the possibility. Some/many have found problems with SnoopFree in general, so you might want to be careful.

[JerryM]

-{ Quote: "Feel free to drop a note to support with any issues that you have, or drop by our forums at Castle Cops

UnHackMe should be fine, but haven't tested with SnoopFree. There will be some overlap, so I wouldn't exclude the possibility. Some/many have found problems with SnoopFree in general, so you might want to be careful." }-

Thanks for the reply. I have used SnoopFree for a long time, and have had not issues so far.

Best,
Jerry

[Notok]

If you give it a try, let us know :)

[Perman]

Hi,folks: I just noticed that there is a d/l link at download.com for Prevx 1 1, is this something new to Prevx 1? or is it a revised version? Any major difference? How good is it in terms of quality? Thanks.

[sosaiso]

Latest version should be beyond Prevx1 2.xxx

Look here:
http://info.prevx.com/versioncontrol.asp

[WSFuser]

i dont know why they call it "Prevx 1 1", but the file they link to is the latest version (Prevx1 Release v2.0.0.60).

[Perman]

Hi,folks: Thanks for the info. I may give it a good lookat. Prior to that, I like to know how does it compare to other freewares such as SSM free, cyberhawk. I remember i used prevex home some long time ago,but could not recall anything worth mentioning. hanks.

[WSFuser]

ive never tried cyberhawk, but i can say that prevx1 is unique among HIPS. i say this because it has three modes: ABC, Pro, and Expert

http://img179.imageshack.us/img179/8543/prevx1gt3.jpg

ABC mode is so great, long gone are the days of numerous pop-ups.

of course, if u like complete control over your computer then perhaps Pro or Expert mode would better suit you.

and lastly, teh paid version lets u create custom modes. for example u can tell Prevx what system areas to monitor and how it should react.

[cheater87]

i have mine on ABC mode

[Notok]

Pro mode will still actually only prompt you on unknowns, unlike Expert mode, so it's a good "in between" with prompts that are more focused on things that actually stand a chance of being malware. For those that still want to see what's going on with your system, just turn on Event Notification in the Preferences, and you'll see a small notification each time something happens (doesn't prompt, just lets you know that it's happened). There have been plenty of times that this has come in handy :)

[cheater87]

if i accidently block a good thing can i unblock it?

[WSFuser]

yes. open up the Prevx1 Console, go to the Jail section, and then drag the item from Jail to On Probation.

correction: if u blocked teh file and not prevx1, then go to teh Advanced section and click on the Personal Rules tab.

there u can find teh programs u allowed or denied always.