Introducing, The New Prevx Edge.

[sded]

OK; I did a rescan from the Scan Status Page. That reset everything and uploaded results to Prevx. Thanks a lot for the quick response. Regards; Ed.

[PrevxHelp]

-{ Quote: "OK; I did a rescan from the Scan Status Page. That reset everything and uploaded results to Prevx. Thanks a lot for the quick response. Regards; Ed." }-

No problem! :)

[trjam]

has anyone tried Geswall and Edge, that to me sounds like a killer combo. Off to try.;)

[trjam]

Loaded and working flawlessly, for now. Man it is nice to have security and speed all in one.:thumb:

[raven211]

Hm.. even in the latest beta (b246), the scan-window will show up - maybe occasionally, I haven't confirmed this or if it's all the time - which comes from the scheduler, even if it's set to the default settings which is not to.

Please see attached image:

[PrevxHelp]

-{ Quote: "Hm.. even in the latest beta (b246), the scan-window will show up - maybe occasionally, I haven't confirmed this or if it's all the time - which comes from the scheduler, even if it's set to the default settings which is not to.

Please see attached image:" }-

This is a scan which would only happen because of another AV hooking on top of Edge's self protection and it occurs regardless of your settings (as it is mandatory to ensure that everything is still intact).

[raven211]

Yes, I did test to enable the self protection, saw this previously too and suspected something like that... So, basically, disabling the Self Protection should solve this, right?

[PrevxHelp]

-{ Quote: "Yes, I did test to enable the self protection, saw this previously too and suspected something like that... So, basically, disabling the Self Protection should solve this, right?" }-

Correct :thumb:

[capatt]

I've been running the latest version with Online Armor and Defensewall. No problems.

[BrendanAdams]

Now I can confirm that when self protection is enabled, Prevx Edge conflicts with Outpost (not always, but quite often). No trouble at all when disabled.

[Baldrick]

-{ Quote: "Hm.. even in the latest beta (b246), the scan-window will show up - maybe occasionally, I haven't confirmed this or if it's all the time - which comes from the scheduler, even if it's set to the default settings which is not to.

Please see attached image:" }-
Interesting...but I do not have the 'Run the scan at exactly the same time...' check box showiing. Understand what it does bit am interested as to why it is not visible. Is it due to the fact that I am still in evaluation mode? ;D

[PrevxHelp]

-{ Quote: "Interesting...but I do not have the 'Run the scan at exactly the same time...' check box showiing. Understand what it does bit am interested as to why it is not visible. Is it due to the fact that I am still in evaluation mode? ;D" }-

Yes :) Registered users are given this option :)

[Baldrick]

Hi Joe

Have just noticed an occurrence of the centre of the sys tray icon going red, another instance of the sys tray icon appearing at the same time and then a short time later the red-centre icon disappearing.

I presume that the Edge just suffered an issue, had to end itself and then re-initialised itself? If so is there any log or information that I can send you to assist in diagnosing the problem.

Running Build 246.

;D

[PrevxHelp]

-{ Quote: "Hi Joe

Have just noticed an occurrence of the centre of the sys tray icon going red, another instance of the sys tray icon appearing at the same time and then a short time later the red-centre icon disappearing.

I presume that the Edge just suffered an issue, had to end itself and then re-initialised itself? If so is there any log or information that I can send you to assist in diagnosing the problem.

Running Build 246.

;D" }-

This definitely could be the case - could you click Start > Run and type eventvwr and then expand the "Windows Logs" folder and click "Application" and then look through the list for anything with a red circle and the word "Error" under the Level column. If you look through the list around when the icon changed it should have something which starts with "Faulting application name: prevx.exe"

If you could PM me that entire entry, that should let us narrow down the problem :)

If you need any clarification, please let me know! ;D

[Baldrick]

Will see what I can dig up for you on this Joe! ;D

[Biscuit]

After a recent major clean up of a heavily infected computer, I needed to run Combofix after installing Edge. (There were multiple layers of infection & I thought I had it fully cleaned) Combofix needs all security turned off & although Nod32 turned off fine, Edge would only go into "install mode" & was still active. Is there a way to completely turn off Edge? I did run Combofix with Edge in install mode - but it wasn't a happy bunny.

FWIW Nod32 v3 was entirely useless on this cleanup - just cycling though warnings - but not able to do anything about it. (Nod32 v2 was already installed on this PC & had let everything through.) Edge was able to clean most of the nasties including some that MBAM missed, but there's still 1 nasty left which Edge is currently having to block on every boot, but with which Nod32 is ineffective & MBAM misses.

[PrevxHelp]

-{ Quote: "After a recent major clean up of a heavily infected computer, I needed to run Combofix after installing Edge. (There were multiple layers of infection & I thought I had it fully cleaned) Combofix needs all security turned off & although Nod32 turned off fine, Edge would only go into "install mode" & was still active. Is there a way to completely turn off Edge? I did run Combofix with Edge in install mode - but it wasn't a happy bunny.

FWIW Nod32 v3 was entirely useless on this cleanup - just cycling though warnings - but not able to do anything about it. (Nod32 v2 was already installed on this PC & had let everything through.) Edge was able to clean most of the nasties including some that MBAM missed, but there's still 1 nasty left which Edge is currently having to block on every boot, but with which Nod32 is ineffective & MBAM misses." }-

In the disable menu of Edge, you can click the dropdown to choose "Enable in 5 mins", "Enable in 10 mins", etc. which will completely disable the protection during that time.

About the infection - I'm going to guess that the beta build will perform significantly better on difficult cleanups like this one. If you do have any doubts and still have access to the machine, could you email me a scan log from Edge so I can see what we're missing and why?

[Biscuit]

-{ Quote: "In the disable menu of Edge, you can click the dropdown to choose "Enable in 5 mins", "Enable in 10 mins", etc. which will completely disable the protection during that time.

About the infection - I'm going to guess that the beta build will perform significantly better on difficult cleanups like this one. If you do have any doubts and still have access to the machine, could you email me a scan log from Edge so I can see what we're missing and why?" }-

Is that from the suspend menu? If so, Edge is still active despite suspending it. When running new exe files, I could see Edge checking them out & Combofix popped up a warning that Edge was running. I however did appreciate that Edge stayed suspended through a reboot.

I still have contact with the customer & I'm trying to get them to send me a log.

[PrevxHelp]

-{ Quote: "Is that from the suspend menu? If so, Edge is still active despite suspending it. When running new exe files, I could see Edge checking them out & Combofix popped up a warning that Edge was running. I however did appreciate that Edge stayed suspended through a reboot.

I still have contact with the customer & I'm trying to get them to send me a log." }-

In this case, you will probably want to use the beta version which has the issue of scanning while suspended fixed. Please let me know what you get from the customer and we can investigate it further :)

[GES/POR]

As of today there is a new version out, at least on the beta. Its 248, whats the changelog Joe?

[PrevxHelp]

-{ Quote: "As of today there is a new version out, at least on the beta. Its 248, whats the changelog Joe?" }-

248, if you uninstall and reinstall fresh, will now properly integrate into the Vista, XP, and Windows 7 security center, clicking the back button on Protection Settings won't try and save the data, the 'Create a desktop shortcut' checkbox is reset if they haven't saved changes, and we made a handful of small improvements to the scanner and realtime protection :)

[sded]

Joe, please send me a link to the new beta so I can do a fresh install and check the Vista SP1 integration. Thanks; Ed.

[trjam]

congrats on 248, looking very good.

[PrevxHelp]

-{ Quote: "Joe, please send me a link to the new beta so I can do a fresh install and check the Vista SP1 integration. Thanks; Ed." }-

Sent :) FWIW the beta link always remains the same :)

[sded]

Thanks. Did an uninstall and reinstall, and still don't see Prevx Edge under Security Center with Vista SP1. Same picture as before , with just Avast! and Windows Defender showing up.

[Triple Helix]

-{ Quote: "Thanks. Did an uninstall and reinstall, and still don't see Prevx Edge under Security Center with Vista SP1. Same picture as before , with just Avast! and Windows Defender showing up." }-

I can confirm this also on Vista!

[trjam]

I still have one complaint, or wish. The green dot in the tray icon is so small that unless you have the eyes of a 20 year old, it just doesnt stand out. I loved the tray icon for Prevx 2, thought it one of the best ever created. Would love to see something like it used.

[PrevxHelp]

-{ Quote: "I can confirm this also on Vista!" }-

??? We ran tests against Norton and OneCare on Vista SP0, Vista SP1, XP SP2, XP SP3, and Windows 7 and we are added into all of them. I personally have Edge installed as antivirus and antispyware on Vista SP1 x64, Windows 7, and XP SP3 (just AV there ;)).

I'm guessing there is another factor involved here but the security center is such an unreliable area, I'm not sure we're going to be able to solve it in the next release. Thank you for the testing on this - I think we've proven that the security center is one large headache ;D

[PrevxHelp]

-{ Quote: "I still have one complaint, or wish. The green dot in the tray icon is so small that unless you have the eyes of a 20 year old, it just doesnt stand out. I loved the tray icon for Prevx 2, thought it one of the best ever created. Would love to see something like it used." }-

I'll forward your request onto the graphics team, however, we can't use the same icon as P2 because that would create a great deal of confusion. I'll let you know what I hear back :)

[trjam]

thanks Joe, but the color side of it does need to be bigger.

[trjam]

I have found that when uninstalling Edge then reinstalling a newer version, that remnants like the Prevx CSI folder in C: Programs remains. When I uninstall I go back and delete this folder then reinstall the newer app. Try this and see if it shows in the security center.

[raven211]

This is weird... why would Prevx all of a sudden detect a part of ThreatFire (TfFsMon.sys;ThreatFire Filesystem Monitor) as Age/Spread Criteria Violation? Yes, it's a beta of TF, but it's not that new and has been running on my PC for atleast several days now, together with Prevx.

Please see the following screenshot:

[chris2busy]

Cheers ReJz0r :D

http://my.opera.com/rejzor/blog/security-center-reset-1-0-released

[Martijn2]

A little bug with updating Prevx 3.0.0.246 to 248 through the Check for updates option in the menu. Prevx freezes and shuts itself down followed by a warning from windows that the application crashed. OS is windows 7 x64.

By the way, manually starting prevx again showed that it successfully updated itself.

[Martijn2]

-{ Quote: "??? We ran tests against Norton and OneCare on Vista SP0, Vista SP1, XP SP2, XP SP3, and Windows 7 and we are added into all of them. I personally have Edge installed as antivirus and antispyware on Vista SP1 x64, Windows 7, and XP SP3 (just AV there ;)).

I'm guessing there is another factor involved here but the security center is such an unreliable area, I'm not sure we're going to be able to solve it in the next release. Thank you for the testing on this - I think we've proven that the security center is one large headache ;D" }-
I can confirm that Prevx is detected in Windows 7 as a antivirus (not antispyware)

[Waterfox]

Hello,
I'm running Prevx Edge 3.0.199 evaluation mode and have one question:
why does it take a while before Prevx icon shows in system tray when changing between two accounts on same computer?
Just so there is no confusion, I'm not talking about initial login, but afterwards, when just switching between logged in accounts.
Running windows xp sp3

[PrevxHelp]

-{ Quote: "This is weird... why would Prevx all of a sudden detect a part of ThreatFire (TfFsMon.sys;ThreatFire Filesystem Monitor) as Age/Spread Criteria Violation? Yes, it's a beta of TF, but it's not that new and has been running on my PC for atleast several days now, together with Prevx.

Please see the following screenshot:" }-

ThreatFire could have easily just pushed out an update which would cause that to happen - could you PM me a scan log so I can fix it?

[Triple Helix]

WoW new version again 3.0.1.1!

Thanks,

TH

[PrevxHelp]

-{ Quote: "A little bug with updating Prevx 3.0.0.246 to 248 through the Check for updates option in the menu. Prevx freezes and shuts itself down followed by a warning from windows that the application crashed. OS is windows 7 x64.

By the way, manually starting prevx again showed that it successfully updated itself." }-

We'll keep an eye out for this, however, what other security software are you using? It could be an interaction between then during the update process but its hard to say at this point.

[PrevxHelp]

-{ Quote: "Hello,
I'm running Prevx Edge 3.0.199 evaluation mode and have one question:
why does it take a while before Prevx icon shows in system tray when changing between two accounts on same computer?
Just so there is no confusion, I'm not talking about initial login, but afterwards, when just switching between logged in accounts.
Running windows xp sp3" }-

Switching between users is a complex process for any software and in order to prevent multiple tray icons from showing up, we sometimes hold off adding the tray icon into the new user account until the user is definitely remaining logged in.

[PrevxHelp]

-{ Quote: "WoW new version again 3.0.1.1!

Thanks,

TH" }-

Yes :) This build has a small number of minor fixes - nothing too interesting to report but we're getting close to ending this beta phase and moving live with this version :)

[Waterfox]

-{ Quote: "Switching between users is a complex process for any software and in order to prevent multiple tray icons from showing up, we sometimes hold off adding the tray icon into the new user account until the user is definitely remaining logged in." }-

Thanks for clearing that up for me :D :thumb:

[Triple Helix]

OK I uninstalled Eset Smart Security and now Prevx Edge is in the Security Center Vista SP1 32 bit! :thumb:

[Triple Helix]

And reinstall ESS and it kicks Prevx Edge and SUPERAnti-Spyware off of the Security Center so no big deal :thumb:

TH

[raven211]

-{ Quote: "ThreatFire could have easily just pushed out an update which would cause that to happen - could you PM me a scan log so I can fix it?" }-

Absolutely, I've the message ready, but I can't seem to how to attach items to my PM (if that's even possible?). :ouch: Am I supposed to upload the file somewhere or send you the whole log in the PM or..? ;D

[raven211]

-{ Quote: "And reinstall ESS and it kicks Prevx Edge and SUPERAnti-Spyware off of the Security Center so no big deal :thumb:

TH" }-

Helix, check if Prevx shows up at both spots by clicking "Show me the antivirus/antispyware programs on this computer." ;)

[Triple Helix]

-{ Quote: "Helix, check if Prevx shows up at both spots by clicking "Show me the antivirus/antispyware programs on this computer." ;)" }-

No it doesn't :thumbd: SAS is not there also :thumbd: so it's nothing to do with Prevx :thumb:

TH

[trjam]

He-He-He Micro-suck....;)

[Triple Helix]

-{ Quote: "He-He-He Micro-suck....;)" }-

That's why we have to protect it LOL :wacko: And it gives us something to do :doubt:

TH

[trjam]

True, that is why we have Edge.;)

[Martijn2]

-{ Quote: "We'll keep an eye out for this, however, what other security software are you using? It could be an interaction between then during the update process but its hard to say at this point." }-
No other security program, but updating to version 3.0.1.1 went without problems, so problem solved for now ;)

[Max Zorin]

I have uninstalled using revo uninstaller, rebooted, downloaded again and my one still says 3.0.0.199 - how do I get a later version?

[PrevxHelp]

-{ Quote: "I have uninstalled using revo uninstaller, rebooted, downloaded again and my one still says 3.0.0.199 - how do I get a later version?" }-

I'll PM you a download link - the current version on the website is still .199 :) 3.0.1.1 is still in beta/release-candidate stage.

[trjam]

Security Center looking good from here.

[PrevxHelp]

-{ Quote: "Security Center looking good from here." }-

:thumb: Great :)

[Max Zorin]

Hiya, running latest beta and does not display in security centre. Shows Avira and Defender only. Have disabled Defender and then security centre only shows Avira.

[PrevxHelp]

-{ Quote: "Hiya, running latest beta and does not display in security centre. Shows Avira and Defender only. Have disabled Defender and then security centre only shows Avira." }-

Of anything in Windows, the Security Center is probably the least organized and most susceptible to problems. I have Edge running on every computer I have (granted, as the only AV) and it works fine. I've seen it working alongside other AVs fine in the security center across a wide range of test machines in-house as well but I don't think the Security Center was designed initially for multiple apps to be registered in and report properly so that's probably why there is so much trouble with it.

I'm not sure we're going to be able to do anything about it not being reported alongside other AVs if it is actually not working properly...

Security Center = :gack: ;D

[trjam]

-{ Quote: "I have uninstalled using revo uninstaller, rebooted, downloaded again and my one still says 3.0.0.199 - how do I get a later version?" }-
Why on earth would you use Avira with Prevx. You dont need it. Heck, Edge will clean it before Avira.8)

Remember, when it comes to actual cleaning, Eset version 4, Kaspersky, and now Edge. Thats it.

[trjam]

And until today, I had never even looked at Security Center in my Vista.

[Triple Helix]

All that matters is that Prevx Edge is Running and Protecting :thumb: I'm very happy with Prevx Edge ;D

TH

[sded]

I'm happy with just the other programs in Security Center. All I need from Prevx is the green winkie. And even at my age I can still see it. ;)

[trjam]

-{ Quote: "I'm happy with just the other programs in Security Center. All I need from Prevx is the green winkie. And even at my age I can still see it. ;)" }-
Ok, whatever makes you happy.:what:

[denis]

i do think this one is false.
From my log.
Previously Detected Files:
[HN] (ACTIVE) C:\Documents and Settings\Hoofdaccount\Bureaublad\SandboxieInstall-335-04.exe [PX5: CEEF4161D1D4DEFEAEA307E17009A900D238C0CF] Malware Group: Community.Heuristic
[HN] (ACTIVE) C:\Documents and Settings\Hoofdaccount\Local Settings\Temporary Internet Files\Content.IE5\8VQ2B4MF\SandboxieInstall-335-04[1].exe [PX5: CEEF4161D1D4DEFEAEA307E17009A900D238C0CF] Malware Group: Community.Heuristic

End of Prevx Scan Log - http://www.prevx.com

[PrevxHelp]

denis: FPs corrected :) Thank you!

[PatG]

What does it mean when the "green" eye turns "black" in the tray? Had this happen yesterday, but on reboot it was green again. Explanation?

[Dark Star 72]

Joe,
I am now running beta 3.0.1.1, the best so far, very smooth.
However.
With the release version 3.0.0.199 up to and including 248 beta the 'Scan Now' operation and boot up scan were scanning 5,000 > 6,000 files in less than 30 secs on average. I now find with 3.0.1.1 the same scan operation has just scanned 17,000+ files in 1min 37 secs. This morning it was just under 15,000 and each scan I have done has increased by 500 or so files.
Is this to be expected? Is this new beta designed to do a more comprehensive scan or do I have a problem :-\

[PrevxHelp]

-{ Quote: "Joe,
I am now running beta 3.0.1.1, the best so far, very smooth.
However.
With the release version 3.0.0.199 up to and including 248 beta the 'Scan Now' operation and boot up scan were scanning 5,000 > 6,000 files in less than 30 secs on average. I now find with 3.0.1.1 the same scan operation has just scanned 17,000+ files in 1min 37 secs. This morning it was just under 15,000 and each scan I have done has increased by 500 or so files.
Is this to be expected? Is this new beta designed to do a more comprehensive scan or do I have a problem :-\" }-

The scan is dependent on a high number of factors - it hasn't changed at all within the last dozen builds or so, but it is more intensive over 199. Essentially, it probably found something "interesting" or marginally suspicious in your system so it stopped trusting your system and started scanning more areas :)

[PrevxHelp]

-{ Quote: "What does it mean when the "green" eye turns "black" in the tray? Had this happen yesterday, but on reboot it was green again. Explanation?" }-

This could happen because of Windows Explorer closing down and restarting or the status changing to 'scan required'. It isn't something to worry about, however.

[Dark Star 72]

-{ Quote: "The scan is dependent on a high number of factors - it hasn't changed at all within the last dozen builds or so, but it is more intensive over 199. Essentially, it probably found something "interesting" or marginally suspicious in your system so it stopped trusting your system and started scanning more areas :)" }-

All I have running that I didn't have running before is the latest beta of Online Armor 3.1.0.20. I also have sandboxie running but that has been on for a while so I guess it must be OA. If I uninstall / reinstall OA when the release version comes out I'll run a scan when I have nothing else on board.

[Dark Star 72]

-{ Quote: "I still have one complaint, or wish. The green dot in the tray icon is so small that unless you have the eyes of a 20 year old, it just doesnt stand out. I loved the tray icon for Prevx 2, thought it one of the best ever created. Would love to see something like it used." }-

I would second trjam on this. I realise why we cannot have the old Prevex 2 tray icon but how about making the green centre 'eye' of the icon grey and the grey outside ring green. ie: just change the colours over within the same icon. If that could be done then how about making the outside ring that would be green flash when it turns red like the red traffic light did with Prevx 2 when there was problem. Caught you eye (no pun intended) immediately.

[GES/POR]

Personally think the icon is perfect right now, better yet 1 of the best ones out there :thumb: n ppl glasses do wonders trust me 8)

[PrevxHelp]

We're always looking to improve any minor thing and I'm waiting on a response from the graphic team to see what they could do with it :)

[yashau]

Is the beta invite only? :)

[PrevxHelp]

-{ Quote: "Is the beta invite only? :)" }-

Well we've never turned anyone down ;D However, the beta is now essentially redundant as it is released as the current version on the website (3.0.1.2)

[yashau]

On the site it says x64 isn't supported. But on this thread I see lots of people using the x64 version. I'm looking specifically for that one :)

[PrevxHelp]

-{ Quote: "On the site it says x64 isn't supported. But on this thread I see lots of people using the x64 version. I'm looking specifically for that one :)" }-

It isn't officially released just yet but will be coming shortly :) I'll PM you with a download link for now.

[yashau]

With the beta do we need to have a licensed version to block malware or does it come with some sort of beta key we can try out? :)

[Baldrick]

Hi Joe

3.0.1.2 installed and running well here however the Kaspersky-related FPs are notified with Build 244 are back. I can PM you a scan log but from what I can see they are exactly the same as those entries that I PM'd a few days ago.

Cheers



Baldrick;D

[PrevxHelp]

-{ Quote: "Hi Joe

3.0.1.2 installed and running well here however the Kaspersky-related FPs are notified with Build 244 are back. I can PM you a scan log but from what I can see they are exactly the same as those entries that I PM'd a few days ago.

Cheers



Baldrick;D" }-

Yes, please send me the scan log - they might be making their files polymorphic which will mean we just have to add additional heuristics to allow them through :)

[PrevxHelp]

-{ Quote: "With the beta do we need to have a licensed version to block malware or does it come with some sort of beta key we can try out? :)" }-

It doesn't but I can get you a 7 day test license :)

[yashau]

-{ Quote: "It doesn't but I can get you a 7 day test license :)" }-That would be awesome :D

Edit: Prevx Edge found some FPs. I've marked them as False Positives. Hopefully they'll get fixed. I use Windows 7 x64 btw. Check screenshot below :D

[Tarnak]

A bit disconcerting that the install of the latest version 3.0.1.2 over the top of my previous registered version did not carry over my license key. Luckily, I had saved this info, otherwise I would have been up S*** Creek.....so to speak! ( It was readily to hand!) :blink:

I don't seem to recall having to insert the license key with the previous version updates, but I could be wrong.;) ;D

[PrevxHelp]

-{ Quote: "A bit disconcerting that the install of the latest version 3.0.1.2 over the top of my previous registered version did not carry over my license key. Luckily, I had saved this info, otherwise I would have been up S*** Creek.....so to speak! ( It was readily to hand!) :blink:

I don't seem to recall having to insert the license key with the previous version updates, but I could be wrong.;) ;D" }-

Hello,
You shouldn't have to enter a license after updating - we'll keep an eye out for this in the future, however, if you do run into a sticky situation where you loose your license key for some reason, you can give me your email address and I'll track down your license key :)

[PrevxHelp]

-{ Quote: "That would be awesome :D

Edit: Prevx Edge found some FPs. I've marked them as False Positives. Hopefully they'll get fixed. I use Windows 7 x64 btw. Check screenshot below :D" }-

Could you please click Tools and Settings and then Save Scan Results and PM me a log containing the files so I can see why they're being flagged? I'm guessing its just because Windows 7 is still quite new and the programs haven't been fully used/analyzed but I'll investigate them further :)

[horseman]

Sorry to interrupt the meaningful discussion on PX2 lozenge and PX3 car tyre colours but...

Well done Prevx....
Somewhere between build 241 and current PX3.0.1.2 it seems to have resolved a bootup resource/memory footprint problem that caused a re-entrant part of prevx.exe to continually start & terminate on my VM testbed.

However I miss the equivalent of PX2's logging facility. Presumably there must be a optional verbose logging option for PX3 client initialisation other than just for Scan logging?

Similarly I would hope that there's a change log/ version history for the Beta's somewhere on the Prevx website?

Enquiring minds would like to know....? ;-)

[Longboard]

Watching, waiting,watching...:)
-{ Quote: "Could you please click Tools and Settings and then Save Scan Results and PM me a log containing the files so I can see why they're being flagged? I'm guessing its just because Windows 7 is still quite new and the programs haven't been fully used/analyzed but I'll investigate them further" }-
;D
Big ask there...:)

[PrevxHelp]

-{ Quote: "Sorry to interrupt the meaningful discussion on PX2 lozenge and PX3 car tyre colours but...

Well done Prevx....
Somewhere between build 241 and current PX3.0.1.2 it seems to have resolved a bootup resource/memory footprint problem that caused a re-entrant part of prevx.exe to continually start & terminate on my VM testbed.

However I miss the equivalent of PX2's logging facility. Presumably there must be a optional verbose logging option for PX3 client initialisation other than just for Scan logging?

Similarly I would hope that there's a change log/ version history for the Beta's somewhere on the Prevx website?

Enquiring minds would like to know....? ;-)" }-

We disable a majority of the logging in the publicly released builds and only enable logging on-demand to debug issues on customer's machines.

And, we don't currently have a changelog online but if you have a few free hours, I've summarized the changelogs in some posts ;D (However, one of the big points of 3.0.1.2 is to significantly reduce the memory usage of Edge, as it seems you have discovered :))

[QBgreen]

Build 3.0.1.2 is at the released download link. Running smooth as cream cheese on my XP Pro SP3 machine! Good stuff.

[yashau]

-{ Quote: "Could you please click Tools and Settings and then Save Scan Results and PM me a log containing the files so I can see why they're being flagged? I'm guessing its just because Windows 7 is still quite new and the programs haven't been fully used/analyzed but I'll investigate them further :)" }-Done. :thumb:

[tombsc]

Hi all,

I found this site while trying to solve a problem I have with prevx edge. I've sent a support email but thought I may benefit from a response on here as well.

1. Provx is seeing this as a bad file:
205941

but when I clean it using prevx it causes a error message that won't go away saying something about a wireless card not working. I put the file back and the error went away so is it a virus or not?

2. I need to uninstall prevx edge and reinstall it as it isn't properly installed - it doesn't show up under windows>add/remove programs, nor does it show up in the security centre, start menu, desktop etc. It seems to work though but I'd like to try again to get it in the right place. So how do I uninstall it when there is no uninstall option??

Thanks alot
Tom

edit to add this is a Vista home premium laptop with no other security software

[Mosqu]

-{ Quote: "I still have one complaint, or wish. The green dot in the tray icon is so small that unless you have the eyes of a 20 year old, it just doesnt stand out. I loved the tray icon for Prevx 2, thought it one of the best ever created. Would love to see something like it used." }-
Why is the tray icon so important? Edge will (or should at least) notify you if anything is wrong or dangerous.

[alley]

Hi PrevxHelp,

I consider purchasing Prevx Edge x64 when it is released. I do have a couple of questions however:
1. If I buy 1 license now, is it possible to upgrade this license to a Family License later?
2. I do reinstall Windows quite frequently. Do I have to ask to reset my activated license key every time I do this (since there are no hardware changes)? Or can every key be activated a couple of times? Would you consider using a license file that can be traced back to this single user, as to prevent widespread use of this one key? Or some other somewhat more user friendly way to prevent illegal use of your software?
3. Thanks for the x64 version! It might be a small market share, but I truely hope development of x64 compatibility bodes well for the worldwide spread of Prevx Edge :) I know I'm going to take the plunge.

BTW: One remark about one of the last betas:
I installed build 3.0.1.1 on vista x64 with sp1 earlier this week (clean install), and the checkboxes in Edge Settings > Protection Settings were all unticked. However, I did see the "right click scanning" option in Explorer and the splash screen was shown. I upgraded to 3.0.1.2 but these checkboxes were still unticked. Am I the only one with this cosmetic problem?

[PrevxHelp]

-{ Quote: "Hi all,

I found this site while trying to solve a problem I have with prevx edge. I've sent a support email but thought I may benefit from a response on here as well.

1. Provx is seeing this as a bad file:
205941

but when I clean it using prevx it causes a error message that won't go away saying something about a wireless card not working. I put the file back and the error went away so is it a virus or not?

2. I need to uninstall prevx edge and reinstall it as it isn't properly installed - it doesn't show up under windows>add/remove programs, nor does it show up in the security centre, start menu, desktop etc. It seems to work though but I'd like to try again to get it in the right place. So how do I uninstall it when there is no uninstall option??

Thanks alot
Tom

edit to add this is a Vista home premium laptop with no other security software" }-

Hello,
Edge adds itself to the control panel but if you've gotten stuck and can't uninstall, you can run the command:

"c:\program files\prevx\prevx.exe" /prop UNINSTALL=Y

If you'd like, could you send me a scan log by clicking Tools and Settings > Save Scan Results and I will check out the file manually to see if it is a false positive or where it is loaded to make sure we clean up the system properly.

[PrevxHelp]

-{ Quote: "Hi PrevxHelp,

I consider purchasing Prevx Edge x64 when it is released. I do have a couple of questions however:
1. If I buy 1 license now, is it possible to upgrade this license to a Family License later?
2. I do reinstall Windows quite frequently. Do I have to ask to reset my activated license key every time I do this (since there are no hardware changes)? Or can every key be activated a couple of times? Would you consider using a license file that can be traced back to this single user, as to prevent widespread use of this one key? Or some other somewhat more user friendly way to prevent illegal use of your software?
3. Thanks for the x64 version! It might be a small market share, but I truely hope development of x64 compatibility bodes well for the worldwide spread of Prevx Edge :) I know I'm going to take the plunge.

BTW: One remark about one of the last betas:
I installed build 3.0.1.1 on vista x64 with sp1 earlier this week (clean install), and the checkboxes in Edge Settings > Protection Settings were all unticked. However, I did see the "right click scanning" option in Explorer and the splash screen was shown. I upgraded to 3.0.1.2 but these checkboxes were still unticked. Am I the only one with this cosmetic problem?" }-

Hello,
We know about the issue with 3.0.1.1 - that is what was fixed in 3.0.1.2 if you install fresh :-[ ;D

If you buy one license, you can upgrade to a family license or a larger one if you wish :) And, yes, we are quite strict about our licenses so you won't be able to install it on another computer if reinstalling - HOWEVER - just send me a message here or write into the support inbox and we can reset your license without any hassle :)

[raven211]

Aww... the TF FPs weren't entirely fixed it seems. :( Now it was TfNetMon.sys or something similar being detected with Age/Spread Criteria Violation. Should I send you a log, Joe?

[PrevxHelp]

-{ Quote: "Aww... the TF FPs weren't entirely fixed it seems. :( Now it was TfNetMon.sys or something similar being detected with Age/Spread Criteria Violation. Should I send you a log, Joe?" }-

Yes, please send me a log - I'll get it sorted ASAP :)

[tombsc]

-{ Quote: "Hello,
Edge adds itself to the control panel but if you've gotten stuck and can't uninstall, you can run the command:

"c:\program files\prevx\prevx.exe" /prop UNINSTALL=Y

If you'd like, could you send me a scan log by clicking Tools and Settings > Save Scan Results and I will check out the file manually to see if it is a false positive or where it is loaded to make sure we clean up the system properly." }-

Thanks but that command won't work because c:\program files\prevx\prevx.exe doesn't exist.
I'll try it with c:\users\ange\prevx\prevx.exe because that's where it installed itself.
I'll also send you the log later.

Thanks for the help.
Tom

[PrevxHelp]

-{ Quote: "Thanks but that command won't work because c:\program files\prevx\prevx.exe doesn't exist.
I'll try it with c:\users\ange\prevx\prevx.exe because that's where it installed itself.
I'll also send you the log later.

Thanks for the help.
Tom" }-

That's quite interesting - that would mean that it didn't actually install to the correct folder. What operating system are you using and, if you're using UAC, did you receive any UAC prompt during installation?

[tombsc]

It's on my parents laptop so I'm not 100% sure what they did. I have the laptop now to try to fix it!

It's a Vista Home Premium machine which had a trial copy of McAfee but they removed that.

UAC is on but I don't know what prompts they got. All they could tell me was that when the install was running it came up with the default location to install as c\programs\prevx but selecting OK gave an error message (could have been UAC?) and they were prompted to choose another location so picked C\Users\Ange as they thought that seemed sensible.

That's why I want to completely remove and reinstall it but don't seem to be able to.

[PrevxHelp]

-{ Quote: "It's on my parents laptop so I'm not 100% sure what they did. I have the laptop now to try to fix it!

It's a Vista Home Premium machine which had a trial copy of McAfee but they removed that.

UAC is on but I don't know what prompts they got. All they could tell me was that when the install was running it came up with the default location to install as c\programs\prevx but selecting OK gave an error message (could have been UAC?) and they were prompted to choose another location so picked C\Users\Ange as they thought that seemed sensible.

That's why I want to completely remove and reinstall it but don't seem to be able to." }-

I'll PM you instructions to manually remove it :)

[sded]

Did you try a complete removal of McAfee as in http://majorgeeks.com/McAfee_Consumer_Product_Removal_Tool_d5420.html ? Seems to work with later/Vista products also. Have seen a number of posts about residue left interfering with the installation of other security products.

[Dark Star 72]

Joe,
Now using 3.0.1.3 and do not have the 'Scan With Prevx' option available in the context menu when I right click a download item on the desktop that I might want to check. It is checked in the GUI menu though. Have had problems with this for a long time but forgot to mention it before. When I have had it available it has rarely worked properly. Any ideas?

[PrevxHelp]

-{ Quote: "Joe,
Now using 3.0.1.3 and do not have the 'Scan With Prevx' option available in the context menu when I right click a download item on the desktop that I might want to check. It is checked in the GUI menu though. Have had problems with this for a long time but forgot to mention it before. When I have had it available it has rarely worked properly. Any ideas?" }-

Hello,
Could you please try uninstalling and then reinstalling from 3.0.1.3? We had an issue a few builds ago which could have broken the right click scan.

If that doesn't fix it, let me know and I'll investigate further :)

[Dark Star 72]

Did a complete uninstall > crap cleaner > install. Right click scan working fine. Just after a r/click scan completed and I clicked OK the Edge 'eye' went red, the icon disappeared for several seconds and then came back up with a green 'eye'. Is that normal?

[PrevxHelp]

-{ Quote: "Did a complete uninstall > crap cleaner > install. Right click scan working fine. Just after a r/click scan completed and I clicked OK the Edge 'eye' went red, the icon disappeared for several seconds and then came back up with a green 'eye'. Is that normal?" }-

This is not normal - that would tend to indicate that Edge encountered a problem. Could you open the event viewer (Start > Run > eventvwr) and see if there are any red "Errors" which reference prevx.exe? I'm guessing it would be logged in there if there was a problem which can be diagnosed "easily" :)

[Dark Star 72]

Have checked the event viewer and there are two red errors but they do not relate to Edge at all and occurred several hours before I reinstalled Edge. The 'source' is C+Serv and 'Event' is 2 for both of them.
Since my previous post I have managed to open the GUI when the 'eye' went red and the 'scan now' bar was red with the message that I needed to reboot to enable protection but Edge enabled itself before I had a chance to reboot.
However I have just uninstalled Shadow Defender, I very rarely use it and it hasn't been on for several days but I have once before had some strange behavior which has disappeared when I removed it.
Will let you know if the problem returns.

Edit: have just done a scan and the file count has dropped from the 17,000+ I mentioned the other day back to 5-6,000 it used to be, so perhaps the something Edge was suspicious of was Shadow Defender.

[Triple Helix]

-{ Quote: "Hi all,

I found this site while trying to solve a problem I have with prevx edge. I've sent a support email but thought I may benefit from a response on here as well.

1. Provx is seeing this as a bad file:
205941

but when I clean it using prevx it causes a error message that won't go away saying something about a wireless card not working. I put the file back and the error went away so is it a virus or not?

2. I need to uninstall prevx edge and reinstall it as it isn't properly installed - it doesn't show up under windows>add/remove programs, nor does it show up in the security centre, start menu, desktop etc. It seems to work though but I'd like to try again to get it in the right place. So how do I uninstall it when there is no uninstall option??

Thanks alot
Tom

edit to add this is a Vista home premium laptop with no other security software" }-

I had this problem earlier and this is what I did!!

http://www.wilderssecurity.com/showpost.php?p=1391346&postcount=1402
http://www.wilderssecurity.com/showpost.php?p=1391479&postcount=1419
http://www.wilderssecurity.com/showpost.php?p=1391631&postcount=1427

TH

[tombsc]

-{ Quote: "Hello,
Edge adds itself to the control panel but if you've gotten stuck and can't uninstall, you can run the command:

"c:\program files\prevx\prevx.exe" /prop UNINSTALL=Y

If you'd like, could you send me a scan log by clicking Tools and Settings > Save Scan Results and I will check out the file manually to see if it is a false positive or where it is loaded to make sure we clean up the system properly." }-

Thanks for your help, I have sorted the uninstall and reinstalland it appears to be working fine now.

I have attached the scan log for you.

[PrevxHelp]

-{ Quote: "Thanks for your help, I have sorted the uninstall and reinstalland it appears to be working fine now.

I have attached the scan log for you." }-

Thank you for the log :) The file was indeed a false positive and has been corrected now :) Please let me know if you find anything else!

[SIR****TMG]

new version working fine on my vista

[jmonge]

-{ Quote: "Thank you for the log :) The file was indeed a false positive and has been corrected now :) Please let me know if you find anything else!" }-i am having trouble with downloading the prevx edge???

[danny9]

-{ Quote: "i am having trouble with downloading the prevx edge???" }-

Last night I tried to download the trial version to see how it runs on 1 of my computers.
Click on the download, goes to another page and nothing happens.
The box to download never appears.
Tried several times.
Problems with the site?

[PrevxWebDesigner]

Hmmm, I don't seem to be experiencing any problems :(

Are you having problems actually loading this page, or is the problem related to clicking the button but nothing happening?
http://info.prevx.com/downloadedge.asp

[danny9]

-{ Quote: "Hmmm, I don't seem to be experiencing any problems :(

Are you having problems actually loading this page, or is the problem related to clicking the button but nothing happening?
http://info.prevx.com/downloadedge.asp" }-

The page appears fine from your link but I can't find anything to start the download.
The only clickable link is for the 64 bit version.

[sded]

I just tried it and the big "download now" button is clickable and starts the download dialog on my system. Using Opera 9.63.

[PrevxWebDesigner]

-{ Quote: "The page appears fine from your link but I can't find anything to start the download.
The only clickable link is for the 64 bit version." }-

Is the big green "Download Now" button not appearing for you?
http://img220.imageshack.us/img220/8869/downloadon6.gif

What browser are you using? :)

[danny9]

-{ Quote: "Is the big green "Download Now" button not appearing for you?
http://i148.photobucket.com/albums/s26/willigogs/download.gif

What browser are you using? :)" }-

The big button is there now!
I will install tonight after work.

I still use IE6 by the way.

Thanks for your help. :)
Dan

[Diazruanova]

Hi,

I am using W2K-SP4 and 1Gb RAM with a Pentium 4 2.3Ghz

besides I have installed as residents:

avast! 4.8 Home
SAS 4.25.1012
OnlineArmor 3.1.0.20
LinkScanner Pro 2.7.2.0120

Would it be too much or an overkill to have also installed Edge and would it conflict with any of the above?

How about slowing my machine: RAM usage? and CPU% ?

Is it easy to uninstall or does it leave left overs on the registry hard to get rid off?

Thanks for answering my questions


Diazruanova

[bart4444]

My qustion is how can you provide hips with vista 64 bit .Vista has patchguard you cant have kernel hooks etc.Has Pervx 64 the same functions as vista 32 bit and xp dus pervx run ad kernel

Sorry for my bad english

[PrevxHelp]

-{ Quote: "My qustion is how can you provide hips with vista 64 bit .Vista has patchguard you cant have kernel hooks etc.Has Pervx 64 the same functions as vista 32 bit and xp dus pervx run ad kernel

Sorry for my bad english" }-

x64 does offer functionality which allows antivirus developers to monitor system functionality. Edge doesn't use kernel hooks in the conventional sense so it isn't affected by PatchGuard :)

[alley]

Hi,

I installed 3.0.1.3 on a clean install of Vista x64 with SP1. By default, the checkbox "Enable "Right Click" Scanning" in Windows Explorer" in Edge Settings > Protection Settings is checked, and the option "Scan with prevx Edge" is available. However, when I untick this checkbox, this option is still there. Then, when ticking the box again, the option to "Scan with Prevx Edge" disappears?:wacko:

[PrevxHelp]

-{ Quote: "Hi,

I installed 3.0.1.3 on a clean install of Vista x64 with SP1. By default, the checkbox "Enable "Right Click" Scanning" in Windows Explorer" in Edge Settings > Protection Settings is checked, and the option "Scan with prevx Edge" is available. However, when I untick this checkbox, this option is still there. Then, when ticking the box again, the option to "Scan with Prevx Edge" disappears?:wacko:" }-

Hmm.... had you installed 3.0.1.1 or .2 before? Those versions had this issue which is corrected in .3.

EDIT: Never mind, I just reproduced it here! :) Not sure what is causing that but we'll have it fixed soon ;D

[Mosqu]

-{ Quote: "Hi,

I am using W2K-SP4 and 1Gb RAM with a Pentium 4 2.3Ghz

besides I have installed as residents:

avast! 4.8 Home
SAS 4.25.1012
OnlineArmor 3.1.0.20
LinkScanner Pro 2.7.2.0120

Would it be too much or an overkill to have also installed Edge and would it conflict with any of the above?

How about slowing my machine: RAM usage? and CPU% ?

Is it easy to uninstall or does it leave left overs on the registry hard to get rid off?

Thanks for answering my questions


Diazruanova" }-
If you need additional security depends on your browsing habits / common sense. In my case your current setup would suffice.

As avast! and Prevx Edge protect against all kinds of malware, I don't see the need of SAS if you would decide to give Prevx Edge a try. But I am not an expert.

Edge is designed to be highly compatible with other security software.

Edge is very light on resources. It's easily installed and uninstalled. But I don't know what traces are left behind.

[Martijn2]

To prevxwebdesigner, this page still shows that prevx doesn't support 64 bit http://www.prevx.com/buyoptions.asp

[GES/POR]

-{ Quote: "To prevxwebdesigner, this page still shows that prevx doesn't support 64 bit http://www.prevx.com/buyoptions.asp" }-

Edge 64 bit is still in beta, CSI hasnt got a 64 bit version and 2.0 does although it is an unfinished beta.

[jmonge]

i am trialing PrevxEdge 3.0 and the results are very impresive,it is also included in the windows security center;D greenie:)it is spyblasterDemo.exe

[PrevxHelp]

-{ Quote: "Edge 64 bit is still in beta, CSI hasnt got a 64 bit version and 2.0 does although it is an unfinished beta." }-

Actually, Edge/CSI x64 are both released. If you look at their download pages, (http://info.prevx.com/downloadedge.asp for example) you will see the 64bit download links in the corner.

RE: Martijn2 - if PrevxWebDesigner doesn't see your message, I'll let me know on Monday :) Thanks for pointing that out!

[Tarnak]

I refer to my previous post the other day - http://www.wilderssecurity.com/showpost.php?p=1395139&postcount=1582

This time the update went off without a hitch!

P.S. Previously, I downloaded 3.0.1.2 from the website link, whereas this time it automatically updated via the program itself.
P.P.S. I notice it has scanned 37,015 files in 17m 28s - See screensot. LOL - when I first started using the program it was under 10,000, and I haven't installed any new programs...just wondering!

[PrevxHelp]

-{ Quote: "I refer to my previous post the other day - http://www.wilderssecurity.com/showpost.php?p=1395139&postcount=1582

This time the update went off without a hitch!

P.S. Previously, I downloaded 3.0.1.2 from the website link, whereas this time it automatically updated via the program itself.
P.P.S. I notice it has scanned 37,015 files in 17m 28s - See screensot. LOL - when I first started using the program it was under 10,000, and I haven't installed any new programs...just wondering!" }-

Hmm... that is MUCH longer than any other scan I've seen. On this system, Edge scans 18k files here in 29 seconds.

Do you have any other security apps installed? (and FWIW, were you just running a standard scan by clicking "Scan Now")

[Tarnak]

-{ Quote: "Hmm...

Do you have any other security apps installed? (and FWIW, were you just running a standard scan by clicking "Scan Now")" }-

That screenshot was taken directl after i had noticed the install,i.e the scan was automatic, not initiated by me. I have Sunbelt Vipre installed, but active protection is disabled. Also, SAS and MBAM on demand and Defensewall.

[Tarnak]

-{ Quote: "Hmm...

Do you have any other security apps installed? (and FWIW, were you just running a standard scan by clicking "Scan Now")" }-

That screenshot was taken directly after i had noticed the install,i.e the scan was automatic, not initiated by me. I have Sunbelt Vipre installed, but active protection is disabled. Also, SAS and MBAM on demand and Defensewall.

[PrevxHelp]

-{ Quote: "That screenshot was taken directly after i had noticed the install,i.e the scan was automatic, not initiated by me. I have Sunbelt Vipre installed, but active protection is disabled. Also, SAS and MBAM on demand and Defensewall." }-

Thanks for the report - I'll see what we can dig up to reproduce this but your scan is definitely taking much longer than normal :)

[jmonge]

can prevx scan without internet connection(offline)?

[PrevxHelp]

-{ Quote: "can prevx scan without internet connection(offline)?" }-

Edge does require an internet connection to scan for new threats, however it will find threats you have encountered before and variants of these threats.

[jmonge]

-{ Quote: "Edge does require an internet connection to scan for new threats, however it will find threats you have encountered before and variants of these threats." }-ok i see,no wonder PrevxEdge scored poor in a google's test review,the testers tested PrevxEdge offine???

[Tarnak]

-{ Quote: "Thanks for the report - I'll see what we can dig up to reproduce this but your scan is definitely taking much longer than normal :)" }-

I have a custom built Quad Core Q6600, with XP Pro SP2 with a lot of Windows patches not installed since OCT 2007, my choice, due the unreliabilty factor of some Microsoft patches. Also, I am on dial up, .... still!;D

[jmonge]

-{ Quote: "I have a custom built Quad Core Q6600, with XP Pro SP2 with a lot of Windows patches not installed since OCT 2007, my choice, due the unreliabilty factor of some Microsoft patches. Also, I am on dial up, .... still!;D" }-no wonder the slow down in the scan cause the prevx scaner needs an internet connection and cause you have dial up plus all apps you have make it even slower;D

[PrevxHelp]

-{ Quote: "ok i see,no wonder PrevxEdge scored poor in a google's test review,the testers tested PrevxEdge offine???" }-

Yes, this is the problem with tests... that is a completely meaningless test :-\

It's the same as going into an AV, deleting the definition bases, turning off the heuristics, and then hoping it blocks new malware. :-\

[PrevxHelp]

-{ Quote: "I have a custom built Quad Core Q6600, with XP Pro SP2 with a lot of Windows patches not installed since OCT 2007, my choice, due the unreliabilty factor of some Microsoft patches. Also, I am on dial up, .... still!;D" }-

Aha ;D That would explain it! I feel sorry for your Quad Core processor ;D

[Tarnak]

-{ Quote: "no wonder the slow down in the scan cause the prevx scaner needs an internet connection and cause you have dial up plus all apps you have make it even slower;D" }-

LOL- But, I was connected to the internet when that scan was run.;D

[jmonge]

-{ Quote: "Yes, this is the problem with tests... that is a completely meaningless test :-\

It's the same as going into an AV, deleting the definition bases, turning off the heuristics, and then hoping it blocks new malware. :-\" }-maybe they do it thinking that cause some malware can disable or crash security apps,instead of scaning in safe mode with networking is even safer than normal mode:)

[Tarnak]

-{ Quote: "Aha ;D That would explain it! I feel sorry for your Quad Core processor ;D" }-
LOL - It likes to work hard!.....reminds me, must get the whip! ;D

[jmonge]

-{ Quote: "LOL - It likes to work hard!.....reminds me, must get the whip! ;D" }-you have to run lite stuff or you'll kill it;D you can just use prevxedge alone and you will see your old machine running like a demon;)

[jmonge]

i heard that SpyBlaster is rogue application so i decided to test Prevx Edge againts and didnt catch it??? what happen?Asquare AntiMalware got it and nail it on the head:)

[PrevxHelp]

-{ Quote: "i heard that SpyBlaster is rogue application so i decided to test Prevx Edge againts and didnt catch it??? what happen?Asquare AntiMalware got it and nail it on the head:)" }-

Could you PM me a link to it? I'll forward it onto the research team :)

[jmonge]

-{ Quote: "Could you PM me a link to it? I'll forward it onto the research team :)" }-Done;)

some thing else after scaning prevx didnt do anything it was all green safe and i run asquare antimalware and got it and after that when asquare alerted me and quarentine it then prevxedge alerted me about it and blocked it but after it was detected by asquare antimalware and like i said i did a prevxedge a full scan and didnt recognize in the begining

[Mosqu]

-{ Quote: "Done;)

some thing else after scaning prevx didnt do anything it was all green safe and i run asquare antimalware and got it and after that when asquare alerted me and quarentine it then prevxedge alerted me about it and blocked it but after it was detected by asquare antimalware and like i said i did a prevxedge a full scan and didnt recognize in the begining" }-
Did you run the installer of SpyBlaster? Real-infection-detection of Edge is better than its passive-file-detection.

[raven211]

-{ Quote: "Yes, this is the problem with tests... that is a completely meaningless test :-\

It's the same as going into an AV, deleting the definition bases, turning off the heuristics, and then hoping it blocks new malware. :-\" }-

Nah, maybe not heuristics, but possibly any updates to the heuristics. Yes, we know Prevx works differently. ;)

[Baldrick]

Build 3.0.1.3 certainly seems to run with minimal (relative term) resource usage. Currently seems to use about 9Mb on my rig which, for what it does, appears to me to be lean.

Everything else appears to be working well at present and the interaction (or should I say lack of it) with KIS 2009 is excellent.

Well done all at Prevx (and especially Joe for listening so well). ;D

[Baldrick]

Hi Joe

3.0.1.3 has just detected GRC's leaktest.exe as 'malicious software'. I am reporting this as I am not aware of Prevx's view as to how such threat testing programs are to be handled. So other manufaturers flag them as FPs whilst others live them as 'threats' so that they can continue to be used for testing.

Hope that this information helps? Can PM you a Scan Log of this if required. Just let me know, as usual

Regards



Baldrick ;D

Edit: Apologies Joe, did not think. With the formal release of v3 should these now be going directly to support via
the web site rather than being piled up at your door? If so then just let me know and I will resubmit via that
mechanism.

[PrevxHelp]

-{ Quote: "Hi Joe

3.0.1.3 has just detected GRC's leaktest.exe as 'malicious software'. I am reporting this as I am not aware of Prevx's view as to how such threat testing programs are to be handled. So other manufaturers flag them as FPs whilst others live them as 'threats' so that they can continue to be used for testing.

Hope that this information helps? Can PM you a Scan Log of this if required. Just let me know, as usual

Regards



Baldrick ;D

Edit: Apologies Joe, did not think. With the formal release of v3 should these now be going directly to support via
the web site rather than being piled up at your door? If so then just let me know and I will resubmit via that
mechanism." }-

That's perfectly fine ;D You can PM a scan log to me - I'll probably just change it to the name "Test Virus".

Once in a while, a leaktest will actually mimic malware close enough and then we do catch it but yes, we generally do not detect leaktests :)

[Baldrick]

Another interesting one just occured re. 3.0.1.3.

Found the centre of the sys tray ico showing Red, and when I opened the GUI a message was displayed saying that Edge needed a reboot to re-establish protection...no other indication as to what might have caused the 'issue'. Have not seen this behaviour before over the month that I was trialing or testing the beta.???

I check the Event Viewer, under 'Applciation' for an entry for today around the time I noticed the Red icon but could no such entry for today at all let alone one for the approximate time of the issue.???

Have since rebooted and Edge has re-established protection normally.;D

Is there anywhere else that I can look for information on this that I can pass on to Prevx for analysis?:-\

;D

[PrevxHelp]

-{ Quote: "Another interesting one just occured re. 3.0.1.3.

Found the centre of the sys tray ico showing Red, and when I opened the GUI a message was displayed saying that Edge needed a reboot to re-establish protection...no other indication as to what might have caused the 'issue'. Have not seen this behaviour before over the month that I was trialing or testing the beta.???

I check the Event Viewer, under 'Applciation' for an entry for today around the time I noticed the Red icon but could no such entry for today at all let alone one for the approximate time of the issue.???

Have since rebooted and Edge has re-established protection normally.;D

Is there anywhere else that I can look for information on this that I can pass on to Prevx for analysis?:-\

;D" }-

I'm afraid there probably isn't anything else we can gather from it at this point - best to just keep an eye out for it in the future :-\

(Also, FWIW, I changed the determination for your leaktest to 'Test Virus' :))

[Baldrick]

-{ Quote: "I'm afraid there probably isn't anything else we can gather from it at this point - best to just keep an eye out for it in the future :-\

(Also, FWIW, I changed the determination for your leaktest to 'Test Virus' :))" }-
Hi Joe

Thanks for the update on the determination update...will double check that later.

Interestingly enough between sending my email and receiving your reply I had another occurrence of the Red sys tray icon...except ths time shortly after the appearance of this a 2nd Edge icon appeared in the sys tray...green this time... and the red one diappappeared as I tried to click on it (expected). Hovering over the green icon the status was flagged as = 'Secure' without the need for a reboot this time.

Check the Event Viewer and nothing appears to have been captured unlike previously. Only difference here is I have just installed the .NET 3.5-related Windows update, etc. Not suggesting that these two events are linked but...:-\

Anyway, will monitor for further occurences and advise as to the circumstances under which they occur...if at all.;)

Let me know if you have any suggestions for tracking the cause(s) of this behaviour.

Regards




Baldrick;D

[Tarnak]

I tried to run this utility, referred to in - 8 svchost.exe's running.... -
http://www.wilderssecurity.com/showpost.php?p=1396404&postcount=61
which led me to - http://www.majorgeeks.com/svchost_viewer_d6114.html . I chose to download form the Internode link, since I am in Australia.

However, PrevxEdge reports this utility as malware. Possible false positive? See screenshot:

[Tarnak]

I refer to my post a few minutes ago:

I just read that it needs .net, so I won't be trying this utility any further.

[PrevxHelp]

-{ Quote: "I refer to my post a few minutes ago:

I just read that it needs .net, so I won't be trying this utility any further." }-

Understandable ;D

However, it was a false positive and is now corrected :) Thank you for your report!

[Tarnak]

-{ Quote: "Understandable ;D
However, it was a false positive and is now corrected :) Thank you for your report!" }-

Thanks! :)

You can see from the enclosed screenshot that I a problem with MBAM. This only started with the update from 3.0.0.199.
I have decided to trust as always. Also, whenever I run an Malwarebytes scan it takes longer and PrevxEdge scanning popup flashes intermittently in the bottom right hand corner of the screen.Never had this interaction between the programs before....only since the update to 3.0.1.2/3.0.1.3 versions.

[PrevxHelp]

-{ Quote: "Thanks! :)

You can see from the enclosed screenshot that I a problem with MBAM. This only started with the update from 3.0.0.199.
I have decided to trust as always. Also, whenever I run an Malwarebytes scan it takes longer and PrevxEdge scanning popup flashes intermittently in the bottom right hand corner of the screen.Never had this interaction between the programs before....only since the update to 3.0.1.2/3.0.1.3 versions." }-

I think the problem between Edge and MBAM is that MBAM is loading files to scan them so Edge is scanning them as well. You may want to disable Edge when running an MBAM scan (this will prevent the "problem" from happening).

As for detecting MBAM and requiring a Trust Always, could you send me a scan log so I can fix it? (Are you using the newest version of MBAM or an older/different build?)

[Tarnak]

-{ Quote: "I think the problem between Edge and MBAM is that MBAM is loading files to scan them so Edge is scanning them as well. You may want to disable Edge when running an MBAM scan (this will prevent the "problem" from happening).

As for detecting MBAM and requiring a Trust Always, could you send me a scan log so I can fix it? (Are you using the newest version of MBAM or an older/different build?)" }-

Do you mean > Right click tray icon > Stop Edge Protection ? If, so I never had to to do this to run a MBAM scan with previous Edge versions......just wondering what has changed in Edge that has brought about this difference in interaction.

Do want me to PM the full log or part only?

P.S. Always the latest version, can't be otherwise if you want to get uptodate definitions.

edit - added word

[sded]

I just ran an MBAM scan with version 1.33 and Prevx Edge 3.0.1.3 never twitched. Run it weekly when imaging system. Do you have self protection enabled?

[Tarnak]

-{ Quote: "I just ran an MBAM scan with version 1.33 and Prevx Edge 3.0.1.3 never twitched. Run it weekly when imaging system. Do you have self protection enabled?" }-

If you mean in Edge > Basic Configuration > Enable Self Protection, then I have it unticked.:)

[PrevxHelp]

-{ Quote: "Do you mean > Right click tray icon > Stop Edge Protection ? If, so I never had to to do this to run a MBAM scan with previous Edge versions......just wondering what has changed in Edge that has brought about this difference in interaction.

Do want me to PM the full log or part only?

P.S. Always the latest version, can't be otherwise if you want to get uptodate definitions.

edit - added word" }-

Edge now scans in realtime from a different area in the system than in .199 which allows it to run faster, however, it may cause more of an interaction between other antivirus software when scanning (i.e. MBAM). It seems like the way that MBAM loads files into memory is triggering Edge to scan files as they're loaded by MBAM.

It might be best to PM/email the entire log to ensure that all of the MBAM related entries are present :)

[Mongol]

My Prexx Edge just plain quit running this afternoon on me. I have the latest version installed. I did a reboot and it's been running fine since...interesting...:o :blink: :)

[PrevxHelp]

-{ Quote: "My Prexx Edge just plain quit running this afternoon on me. I have the latest version installed. I did a reboot and it's been running fine since...interesting...:o :blink: :)" }-

What happened when it stopped? Did the tray icon change to the disabled tray icon or did it show an error message?

We'd definitely like to fix it if possible ;D

[Tarnak]

-{ Quote: "Edge now scans in realtime from a different area in the system than in .199 which allows it to run faster, however, it may cause more of an interaction between other antivirus software when scanning (i.e. MBAM). It seems like the way that MBAM loads files into memory is triggering Edge to scan files as they're loaded by MBAM.

It might be best to PM/email the entire log to ensure that all of the MBAM related entries are present :)" }-

I refer to the scan log which you requested here - http://www.wilderssecurity.com/showpost.php?p=1397293&postcount=1659 and sent by email to you and responded to by you saying that the false positive was fixed.Well, the problem that I mentioned is gone with my last MBAM scan.....everything back to normal!

Can you tell what changed(if you can/allowed)? Afterall, the file/s were there a longtime, even before I started using Edge.

Just curious.:) You can email me if preferable. ;D

P.S. Always trying to understand.

[Mongol]

-{ Quote: "What happened when it stopped? Did the tray icon change to the disabled tray icon or did it show an error message?

We'd definitely like to fix it if possible ;D" }-

It just plain quit, no tray icon and no processes running. Kinda strange...:o ??? :what: :)

[PrevxHelp]

-{ Quote: "I refer to the scan log which you requested here - http://www.wilderssecurity.com/showpost.php?p=1397293&postcount=1659 and sent by email to you and responded to by you saying that the false positive was fixed.Well, the problem that I mentioned is gone with my last MBAM scan.....everything back to normal!

Can you tell what changed(if you can/allowed)? Afterall, the file/s were there a longtime, even before I started using Edge.

Just curious.:) You can email me if preferable. ;D

P.S. Always trying to understand." }-

It's always hard to say - our signatures are changing constantly in the background as the database tunes them/adds heuristics/etc. so what is suspicious one day could be considered bad the next - it is all very dynamic :)

[PrevxHelp]

-{ Quote: "It just plain quit, no tray icon and no processes running. Kinda strange...:o ??? :what: :)" }-

Yes, that is quite odd... We'll keep our eyes open for it, but in the meantime I'll quite Vonnegut as you do in your signature and say: "So it goes" ;D

[Mongol]

-{ Quote: "Yes, that is quite odd... We'll keep our eyes open for it, but in the meantime I'll quite Vonnegut as you do in your signature and say: "So it goes" ;D" }-

Since I did a restart it's run fine. It may be a new install hiccup, I've had a licensed copy for just over a day now...:thumb: 8)

[Saraceno]

Tarnak, I noticed edge doing the same when A-Squared Free performed a full scan. Edge had its popup scanning the files at the same time. However, once the full scan completed, slower than usual, additional scans don't have the prompt anymore.

Maybe it happens when edge updates itself to a new version, and then a full scan (from another program) is performed.

I tried another scan with a-squared, and no further popups/analysing from edge.

[Tarnak]

-{ Quote: "Tarnak, I noticed edge doing the same when A-Squared Free performed a full scan. Edge had its popup scanning the files at the same time. However, once the full scan completed, slower than usual, additional scans don't have the prompt anymore.

Maybe it happens when edge updates itself to a new version, and then a full scan (from another program) is performed.

I tried another scan with a-squared, and no further popups/analysing from edge." }-

Hi Saraceno,

If you look at the screenshot - http://www.wilderssecurity.com/showpost.php?p=1397290&postcount=1658 you will see $ISR2,$ISR3 and $ISR6. Something changed in PrevxEdge that brought them into the scanning equation. These are from snapshots taken using FirstDefense-ISR full version which is no longer available. :)

P.S. I have Asquared too, but I have the guard disabled.;D

[Dregg Heda]

Does Edge produce low FPs?

[Criss]

i noticed that after i updated to 3.0.1.3. Prevx edge are continuously scanning file in the background. Is this normal?? ???

[PrevxHelp]

-{ Quote: "i noticed that after i updated to 3.0.1.3. Prevx edge are continuously scanning file in the background. Is this normal?? ???" }-

It depends on your system, but it shouldn't be scanning continuously. Could you send me a scan log (I'll PM you my email address :)) so I can see if there is anything obvious which is causing the scanning?

[_kronos_]

what are the areas scanned from Prevx Edge during the full (and scheduled) scan? can them be edited from the user?:)

Regards

[PrevxHelp]

-{ Quote: "I had to uninstall and reinstall Edge, but now it loads as a disabled program and when I re-boot as instructed by the software, it still shows protection disabled. I have used CCleaner and examined the registry, but I have been unable to find the cause.

I asked Prevx support for a removal tool for Prevx Edge, but there is no such tool at present. Any thoughts as to how I can clear the registry and reinstall? I was offered remote support, but passed on that idea due to security issues." }-

Hello,
We don't offer a removal tool for Edge and we try and not publicly divulge the information on exactly how to remove it as that can be used by malware.

I believe support will be merging your license key to just CSI as you requested, but if you could try disabling any AVs you have and then uninstalling Edge, rebooting, and then reinstalling Edge that should remove any trace and then reinstall it to replace all of the files.

[PrevxHelp]

-{ Quote: "what are the areas scanned from Prevx Edge during the full (and scheduled) scan? can them be edited from the user?:)

Regards" }-

Edge looks through loading points on the system, files in system areas on the disk, and programs loaded in memory as well as the registry and a detailed check for rootkits. The user can't edit the areas, however, registered users can run a custom scan which will let them add folders, files, drives, etc. to the scan job :)

[PrevxHelp]

-{ Quote: "Does Edge produce low FPs?" }-

Depending on your heuristic settings, Edge is generally completely silent and has very few FPs :)

[Dregg Heda]

-{ Quote: "Depending on your heuristic settings, Edge is generally completely silent and has very few FPs :)" }-
This is on default settings?

[PrevxHelp]

-{ Quote: "This is on default settings?" }-

Yes, the default settings are a strong blend between heuristic detection and generated warnings - you should experience very few FPs with the default settings.

[GES/POR]

-{ Quote: "Yes, the default settings are a strong blend between heuristic detection and generated warnings - you should experience very few FPs with the default settings." }-

Ok im filling in an official complaint: Ive had no fp
s with highest heuristic settings! ???

[PrevxHelp]

-{ Quote: "Ok im filling in an official complaint: Ive had no fp
s with highest heuristic settings! ???" }-

Sorry, but I can't make us produce more FPs for you, no matter how much you ask ;D ;D

[GES/POR]

-{ Quote: "Sorry, but I can't make us produce more FPs for you, no matter how much you ask ;D ;D" }-

As a customer i demand it :P

[Baldrick]

-{ Quote: "Does Edge produce low FPs?" }-
IMHO it does have a low FP count but having said that if any are reported Prevx generally sorts them out & provides an updated database very quickly.

;D

[rolarocka]

FP with this tool:
http://www.paehl.de/news/?p=177
chrome_update.exe - V2.x

[PrevxHelp]

-{ Quote: "FP with this tool:
http://www.paehl.de/news/?p=177
chrome_update.exe - V2.x" }-

Fixed :)

[rolarocka]

-{ Quote: "Fixed :)" }-

This is still being a fp for me:

[PrevxHelp]

-{ Quote: "This is still being a fp for me:" }-

Whoops ;D Got the wrong one last time! NOW its fixed :)

[rolarocka]

Yep no more fp. :D

[mhallerman]

Joe,

Sometimes when I initiate a scan of a file or files from the context menu, I get the message afterwards that Edge scanned the number of files I selected, at other times 0 files, as in the screenshot attached.

Is this possibly a known issue?

Thanks,
Mark.

(Using ver. 3.0.1.3)

[PrevxHelp]

-{ Quote: "Joe,

Sometimes when I initiate a scan of a file or files from the context menu, I get the message afterwards that Edge scanned the number of files I selected, at other times 0 files, as in the screenshot attached.

Is this possibly a known issue?

Thanks,
Mark.

(Using ver. 3.0.1.3)" }-

This isn't a known issue, but definitely looks like it should be one ;D

When you are receiving the prompt of 0 files scanned, what kinds of files are you scanning?

[mhallerman]

Thanks Joe - latest I see has been on avi's - one try comes up saying 1 scanned, 5 seconds later I try again, seems to scan it but says 0.

This happened to me yesterday but I don't recall what file types I was scanning, but more than likely avi's.....

Thanks,
Mark.

[RejZoR]

Good to see Prevx Edge now supporting 64bit Vista. Already installed and running smooth. ;D

[trjam]

-{ Quote: "Good to see Prevx Edge now supporting 64bit Vista. Already installed and running smooth. ;D" }-
Yep, I think it is safe to say, that, "This isnt the same old Prevx anymore.";)

[PrevxHelp]

-{ Quote: "Thanks Joe - latest I see has been on avi's - one try comes up saying 1 scanned, 5 seconds later I try again, seems to scan it but says 0.

This happened to me yesterday but I don't recall what file types I was scanning, but more than likely avi's.....

Thanks,
Mark." }-

We're going to look into this further and see if we can make any fixes to this behavior :) Thank you for the report!

[mhallerman]

Sure thing Joe. Thanks again.

Mark.

[Dregg Heda]

-{ Quote: "Yes, the default settings are a strong blend between heuristic detection and generated warnings - you should experience very few FPs with the default settings." }-

Thanks for the response prevxhelp! Oh and what is edge's self-protection like?

[Baldrick]

-{ Quote: "We're going to look into this further and see if we can make any fixes to this behavior :) Thank you for the report!" }-
Hi Joe

Have been trying to reproduce this over a selection of files but so far have failed although one large .txt file did take so inordinately long that I thought that the scan had failed. Eventually responded and completed but that was strange (nothing in the Event Viewer/Applications).

Will keep on trying until I see a further post form you as to whether this has been resolved or not.

Cheers



;D

[Biscuit]

-{ Quote: "Joe,

Sometimes when I initiate a scan of a file or files from the context menu, I get the message afterwards that Edge scanned the number of files I selected, at other times 0 files, as in the screenshot attached.
(Using ver. 3.0.1.3)" }-

I also saw this a couple days ago while manually scanning my USB (U3) pen drive. It worked fine today though.

[PrevxHelp]

-{ Quote: "Thanks for the response prevxhelp! Oh and what is edge's self-protection like?" }-

Edge's self protection protects against all known attacks to its processes and drivers :)

[Baldrick]

Hi Joe

Another interesting one!

Scheduled scan was running as normal and I paid little attention to it but a little later I decide to check on the results...and found that the GUI was anouncing that the scan had been aborted. Not by me I hasten to add...but then by what. ???

Have taken a Scan Log thereafter and I can PM it to you if this is of interest to you. Just let me know.

Regards




Baldrick ;D

[PrevxHelp]

-{ Quote: "Hi Joe

Another interesting one!

Scheduled scan was running as normal and I paid little attention to it but a little later I decide to check on the results...and found that the GUI was anouncing that the scan had been aborted. Not by me I hasten to add...but then by what. ???

Have taken a Scan Log thereafter and I can PM it to you if this is of interest to you. Just let me know.

Regards

Baldrick ;D" }-


That's another interesting one, and another one which I've never seen. It sounds like something which isn't going to be easy to reproduce but if you run another scan and return it back to Secure status, then we can see if it happens again.

In the meantime, I think we're going to have to play the wonderful waiting game ;D

[Triple Helix]

-{ Quote: "Hi Joe

Another interesting one!

Scheduled scan was running as normal and I paid little attention to it but a little later I decide to check on the results...and found that the GUI was anouncing that the scan had been aborted. Not by me I hasten to add...but then by what.

Have taken a Scan Log thereafter and I can PM it to you if this is of interest to you. Just let me know.

Regards




Baldrick " }-

-{ Quote: "That's another interesting one, and another one which I've never seen. It sounds like something which isn't going to be easy to reproduce but if you run another scan and return it back to Secure status, then we can see if it happens again.

In the meantime, I think we're going to have to play the wonderful waiting game ;D" }-

Could it be INTERNET INTERRUPTION that caused this to happen?

TH

[PrevxHelp]

-{ Quote: "Could it be INTERNET INTERRUPTION that caused this to happen?

TH " }-

I don't believe so, Edge should generally retry if there was a connection failure for some reason so I'm guessing there is something more complex at play here :-\

[Baldrick]

-{ Quote: "That's another interesting one, and another one which I've never seen. It sounds like something which isn't going to be easy to reproduce but if you run another scan and return it back to Secure status, then we can see if it happens again.

In the meantime, I think we're going to have to play the wonderful waiting game ;D" }-
Will do...and long live the wonderful waiting game...NOT! ;D

[Diazruanova]

Hi Joe,

PrevX EDGE detected a false positive: an Installer / Downloader for a new Skype BETA version which I downloaded from VersionTracker :

http://www.versiontracker.com/php/dlpage.php?id=10225260&db=win&pid=10225260&kind=&lnk=http%3A%2F%2Fdownload.skype.com%2FSkypeSetup.exe

I already scanned it with S.A.S, MBAM, and avast! and it is clean. Also uploaded it to VirusTotal and NONE of the programs there, found it to be dangerous, so it is a FP.

Thanks

Diazruanova

[PrevxHelp]

-{ Quote: "Hi Joe,

PrevX EDGE detected a false positive: an Installer / Downloader for a new Skype BETA version which I downloaded from VersionTracker :

http://www.versiontracker.com/php/dlpage.php?id=10225260&db=win&pid=10225260&kind=&lnk=http%3A%2F%2Fdownload.skype.com%2FSkypeSetup.exe

I already scanned it with S.A.S, MBAM, and avast! and it is clean. Also uploaded it to VirusTotal and NONE of the programs there, found it to be dangerous, so it is a FP.

Thanks

Diazruanova" }-

Hello,
Thank you for your report - the false positive should be corrected now if you scan again :)

[trjam]

Joe, hate to call you on the carpet but I need some clarification. Is Edge in reality, another AV product that uses "In the cloud technology" like Panda and McAfee. I mean what distinquishes Edge in its ability to protect, over other AV products. We will come back to this.

Zero day detection is used by all now, and it seems that if product A detects it, it can make this claim. But isnt it still based on 3 factors. Signatures, Hueristics and Community feedback to the vendor. The time has come my firend, to start slivering that fine line that seperates Edge from the rest. Hopefully you can, because if you cant, then Edge deseves to be in the AV forum. And I am going to hard press you on this.

[PrevxHelp]

-{ Quote: "Joe, hate to call you on the carpet but I need some clarification. Is Edge in reality, another AV product that uses "In the cloud technology" like Panda and McAfee. I mean what distinquishes Edge in its ability to protect, over other AV products. We will come back to this.

Zero day detection is used by all now, and it seems that if product A detects it, it can make this claim. But isnt still based on 3 factors. Signatures, Hueristics and Community feedback to the vendor. The time has come my firend, to start slivering that fine line that seperates Edge from the rest. Hopefully you can, because if you cant, then Edge deseves to be in the AV forum. And I am going to hard press you on this." }-

Even though they now run in the cloud, (AFAIK) all AVs just use the cloud to distribute simplistic signatures faster. Our difference is that we don't have huge teams of malware researchers sitting around all day analyzing samples and writing definitions. We have huge teams of data centers analyzing samples and writing definitions ;D (granted, we have malware researchers to tune the rules in the databases ;))

We take community feedback extremely lightly because of how frequently it is abused so we differentiate ourselves from other "community" products because of that (actually, all feedback from users in the community is sent into a manual queue and no determination changes are made automatically because of the potential for abuse).

Edge has a unique advantage over other software because of its ability to actually analyze all of the metrics on an infection, from behavior to popularity to age to signatures to heuristics, etc. etc. which leads it to make a decision on a program based on intelligence rather than whitelisting/blacklisting as many of the vendors are using in the cloud right now.

I believe our cloud technology is years ahead of the other vendors, who are mostly just using simple hashes of programs to check with the cloud. They have a lot of ground to cover and will run into many/all of the problems along the way that we solved 3-4 years ago so I don't think we'll have a direct competitor for quite some time (even if their advertising blurbs make it sound like their "in the cloud technology" can block 500% of all malware, predict the winner of popular sporting events, cure cancer, and find me a good rate on my car insurance).

[trjam]

-{ Quote: "Even though they now run in the cloud, (AFAIK) all AVs just use the cloud to distribute simplistic signatures faster. Our difference is that we don't have huge teams of malware researchers sitting around all day analyzing samples and writing definitions. We have huge teams of data centers analyzing samples and writing definitions ;D (granted, we have malware researchers to tune the rules in the databases ;))
Ok, correct me if I am wrong, by are not the data centers analyzing data from users where Prevx has determined there might be an infection. So if cetain percentage are being flagged then a sig is written and passed out. I mean the data they are processing has to come from somewhere and to me that can only be from the users of the product. Aka, Community feedback.

We take community feedback extremely lightly because of how frequently it is abused so we differentiate ourselves from other "community" products because of that (actually, all feedback from users in the community is sent into a manual queue and no determination changes are made automatically because of the potential for abuse).
Again, Community feedback goes by a aray of different names and approaches
so then a "person" makes the actual determination as to what should have a sig written and passed out. I still dont see how this is such a break-through approach over others.

Edge has a unique advantage over other software because of its ability to actually analyze all of the metrics on an infection, from behavior to popularity to age to signatures to heuristics, etc. etc. which leads it to make a decision on a program based on intelligence rather than whitelisting/blacklisting as many of the vendors are using in the cloud right now.
But yet we still have numerous FPs posted. So the intelligence has flaws until a "person" interacts such as yourself. Doesnt this apply to how all the others do it.

I believe our cloud technology is years ahead of the other vendors, who are mostly just using simple hashes of programs to check with the cloud. They have a lot of ground to cover and will run into many/all of the problems along the way that we solved 3-4 years ago so I don't think we'll have a direct competitor for quite some time (even if their advertising blurbs make it sound like their "in the cloud technology" can block 500% of all malware, predict the winner of popular sporting events, cure cancer, and find me a good rate on my car insurance)." }-


I only say this because as much as I want to agree, every security forum I frequent and view postings by members, there seems to be a uniform disagreement with what we are being told.

[PrevxHelp]

The data is coming from the user's computers and NOT from the users themselves - that is the difference. Some products use a user-based approach where if the user clicks 'Allow' their database logs that and then says if x% of users have clicked 'Allow' it will always click 'Allow' - that is <not> what we do.

Our researchers do not sit and write definitions: they periodically will update heuristics, but they do not go and find a sample of, say, XP Antivirus and mark it. They will mold the heuristics to better handle it if necessary in the case that a program was not automatically found. However, we see literally tens of thousands of new malicious samples per day and the reason why we can stay on top without huge cost is that our infrastructure is scalable - it doesn't require more manpower to handle more samples. Infections are always changing and nothing is perfect which is why we still have researchers to keep up with mutations that can't be caught automatically. Our systems prioritize infections and report many screens full of data to the researchers so that they can quickly make a decision on the file. The database then finds correlations between the decision which the researcher made and other samples and will mark similar infections as bad automatically and then handle variants and mutated infections based on the original decision as bad.

False positives are a completely different story. A majority of the false positives reported here are on unpopular software and by the time I get a log with the file in it, the database has already corrected the determination so I don't need to do anything. However, of course there are times when a signature became a bit too heuristic and needed taming and the opposite is true as well. Some pieces of software do bizarre things you would never expect them to do which is why they get flagged. When I "fix" a false positive, I mark the original file and then forward the file on to the research team to correct that part of the heuristic engine to prevent future similar false positives.

Our false positive rate is barely noticeable (far less than 1/1000th of 1% based on some rough math) compared to the staggering number of infections we block every day and the masses of good software we see every day. FPs just rise to the top of forum posts while real detections remain hidden because most of those users aren't on Wilders with 15 active security products ;D

[Saraceno]

Any false positive I've received, has been on a portable program from www.portablefreeware.com or www.portableapps.com. But that's expected as not many people are downloading or even using those programs. Otherwise, no problems at all. :)

[paniccom]

-{ Quote: "Could it be INTERNET INTERRUPTION that caused this to happen?

TH " }-

206060

If I set Comodo to "Block All Mode", the scan never starts, and a series of messages results; then, when you go to the main screen, this is how it shows. So Baldrick may have gotten disconnected somehow. I think Triple Helix is right, since Prevx Edge relies on an internet connection to run. Even though Prevx Help says the scan should have run again if it was interrupted, who knows what can sometimes happen.

[PatG]

Yo Joe: Just noticed that program authenticates EVERY time I execute the newest version of xPlorer2 Lite, causing a small delay to bring program to screen. Didn't do this on the old version. Can I set something to prevent it from doing this EVERY time?

[PrevxHelp]

-{ Quote: "Yo Joe: Just noticed that program authenticates EVERY time I execute the newest version of xPlorer2 Lite, causing a small delay to bring program to screen. Didn't do this on the old version. Can I set something to prevent it from doing this EVERY time?" }-

We are working on improving this - a new update should be out by the end of the week (if not live it will be at least at beta).

For now, can you email me a scan log? I can improve the performance without requiring a software update :)

[waters]

What is all the difference

1. A user receives a file that the scan agent deems suspicious (for example, an encrypted or packed file) and for which there is no signature in the local .DAT database.
2. Using McAfee Artemis Technology, the agent sends a fingerprint of the file for instant lookup to the comprehensive database at McAfee Avert® Labs.
3. In less than a second, if the fingerprint is identified as known malware, an appropriate response is sent to the user to block or quarantine the file.

[PrevxHelp]

-{ Quote: "What is all the difference

1. A user receives a file that the scan agent deems suspicious (for example, an encrypted or packed file) and for which there is no signature in the local .DAT database.
2. Using McAfee Artemis Technology, the agent sends a fingerprint of the file for instant lookup to the comprehensive database at McAfee Avert® Labs.
3. In less than a second, if the fingerprint is identified as known malware, an appropriate response is sent to the user to block or quarantine the file." }-

Edge doesn't just send a fingerprint of the file to our database for a simple lookup. Edge analyzes programs and identifies their functionality statically and dynamically by analyzing their behavior while they run. As a program runs, if not already trusted, Edge will send up the data where our database analyzes all of the information to find unknown malware - unlike McAfee's solution which looks for known malware.

This allows us to block completely new threats as well as threats which are variants of known malware with no actual manual analysis required.

[waters]

Thanks for explaining

[PatG]

-{ Quote: "We are working on improving this - a new update should be out by the end of the week (if not live it will be at least at beta).

For now, can you email me a scan log? I can improve the performance without requiring a software update :)" }-


Got the scan but don't know how to upload to you. What is the secret to that?

[PrevxHelp]

-{ Quote: "Got the scan but don't know how to upload to you. What is the secret to that?" }-

You aren't psychic? ;D ;D Click Tools and Settings and then Save Scan Results and save it to a file somewhere and then email that to the address I PM'd to you :)

[PatG]

-{ Quote: "You aren't psychic? ;D ;D Click Tools and Settings and then Save Scan Results and save it to a file somewhere and then email that to the address I PM'd to you :)" }-

Done and DONE! 8)

[_kronos_]

Hy boys!
Do you think that Prevx Edge (free) united with an hips with file protection, such as Real Time Defender or EQSecure, could be a good security solution?

When PrevxEdge find anything than popup appear, and RTD's (or EQS) file protection will ask me if allow/deny the creation/modification...

Am I right?:)

Regards;)

[Baz_kasp]

Question for one of the prevx guys:

Can prevx protect against and disinfect fileinfectors such as virut and sality?

[PrevxHelp]

-{ Quote: "Question for one of the prevx guys:

Can prevx protect against and disinfect fileinfectors such as virut and sality?" }-

These are some very difficult file infectors to handle for any vendor. We have a solution to detect and remove file infectors by downloading clean versions of system components automatically during cleanup but virut and sality are really quite difficult for any AV to handle 100%. I think our solution is strong against them, but even so, whenever I see a user with a file infector like virut or sality, I generally recommend that they reinstall their OS and delete all programs.

[PrevxHelp]

-{ Quote: "Done and DONE! 8)" }-

I've made some optimizations to the files in your log - it should help some to tide you over until our next update :) Please let me know if this clears anything up!

[Baz_kasp]

-{ Quote: "These are some very difficult file infectors to handle for any vendor. We have a solution to detect and remove file infectors by downloading clean versions of system components automatically during cleanup but virut and sality are really quite difficult for any AV to handle 100%. I think our solution is strong against them, but even so, whenever I see a user with a file infector like virut or sality, I generally recommend that they reinstall their OS and delete all programs." }-


Thanks for reply.... and yep they are a pain in the ass...generally 100% cleaning is hard and best solution imo if people do not want to format is to do an offline scan via rescuecd (or format :P).
Just to clarify a bit more could prevx attempt to disinfect any random .exe for some version of fileinfector which is already "known" and has routine written for it or only system files?

[PrevxHelp]

-{ Quote: "Thanks for reply.... and yep they are a pain in the ass...generally 100% cleaning is hard and best solution imo if people do not want to format is to do an offline scan via rescuecd (or format :P).
Just to clarify a bit more could prevx attempt to disinfect any random .exe for some version of fileinfector which is already "known" and has routine written for it or only system files?" }-

Edge will generically clean system files infected by file infectors but for any ordinary exe, it will resort to either removing the file or attempting to clean it (but most of these infections do not make the resulting exes able to be restored completely so the effectiveness of that form of cleanup is questionable).

Luckily, file infectors are significantly more difficult to develop than normal "run-of-the-mill" spyware/malware ;D

[PatG]

-{ Quote: "I've made some optimizations to the files in your log - it should help some to tide you over until our next update :) Please let me know if this clears anything up!" }-

Joe, did you somehow upload the log file to update my program? Reason for asking is problem has been SOLVED! No more authenticating that program, it immediately pops right up! Don't know how you did it, but THANK YOU! :thumb:

[PrevxHelp]

-{ Quote: "Joe, did you somehow upload the log file to update my program? Reason for asking is problem has been SOLVED! No more authenticating that program, it immediately pops right up! Don't know how you did it, but THANK YOU! :thumb:" }-

This is the magic of centralized analysis ;D A quick database tuneup around the files on your computer makes a big difference :)

[Baldrick]

-{ Quote: "206060

If I set Comodo to "Block All Mode", the scan never starts, and a series of messages results; then, when you go to the main screen, this is how it shows. So Baldrick may have gotten disconnected somehow. I think Triple Helix is right, since Prevx Edge relies on an internet connection to run. Even though Prevx Help says the scan should have run again if it was interrupted, who knows what can sometimes happen." }-
Have seen and reported this yesterday but can find no trace of a 'break' in internet connectivity at my end. Could it be a break at the Prevx end? Just a thought for what it is worth????

[PrevxHelp]

-{ Quote: "Have seen and reported this yesterday but can find no trace of a 'break' in internet connectivity at my end. Could it be a break at the Prevx end? Just a thought for what it is worth????" }-

I don't think so - we've had 100% uptime for ages so I don't think it would have lost any connection.

However, did you change any manual overrides or configuration options? Changing a detection override will cause the scan to say 'scan required'

Just taking a guess ;D

[Baldrick]

-{ Quote: "I don't think so - we've had 100% uptime for ages so I don't think it would have lost any connection.

However, did you change any manual overrides or configuration options? Changing a detection override will cause the scan to say 'scan required'

Just taking a guess ;D" }-
Have not changed a setting since Build 199. If I see it again I will do a more thorough check on internet uptime to see if there is a possible link. ;D

[Dark Star 72]

-{ Quote: "I don't think so - we've had 100% uptime for ages so I don't think it would have lost any connection. ;D" }-

Hate to ask this question Joe - but what would happen if Prevx did loose their internet connection. Would all those Prevx out there be in limbo, helpless to stop anything being downloaded or executed? :doubt:

[PrevxHelp]

-{ Quote: "Hate to ask this question Joe - but what would happen if Prevx did loose their internet connection. Would all those Prevx out their be in limbo, helpless to stop anything being downloaded or executed? :doubt:" }-

Our architecture is extremely fault tolerant by design and highly redundant, not to mention built upon literally millions of dollars of hardware. Granted, nothing is 100% but I don't believe we've ever had an outage of more than a few minutes - and that was when we were changing over to a new and more powerful architecture so it wasn't really an outage :) We use global monitoring systems to notify us if for some reason we are unreachable in any of a few dozen major countries so if there ever is a problem, we are awake and solving it :)

[firzen771]

maybe this has been answered before but if i install trial of edge and want to use it just as a 3rd opinion in real-tme not actually prevent anything, would edge be able to delete malware it finds when i do a manual scan, like for on-demand scanning?

[PrevxHelp]

-{ Quote: "maybe this has been answered before but if i install trial of edge and want to use it just as a 3rd opinion in real-tme not actually prevent anything, would edge be able to delete malware it finds when i do a manual scan, like for on-demand scanning?" }-

If you're using an unregistered trial, Edge will not remove malware but it will detect it on-demand (so you could use another product to remove them if you want) but whatever Edge finds it will remove if registered :)

[firzen771]

-{ Quote: "If you're using an unregistered trial, Edge will not remove malware but it will detect it on-demand (so you could use another product to remove them if you want) but whatever Edge finds it will remove if registered :)" }-

would edge detect in realtime as well, srry if this has already been answered

[PrevxHelp]

-{ Quote: "would edge detect in realtime as well, srry if this has already been answered" }-

Yes, sorry for being unclear :) Edge will show a dialog with the filename, infection name, etc. in realtime but it won't block the file.

[firzen771]

-{ Quote: "Yes, sorry for being unclear :) Edge will show a dialog with the filename, infection name, etc. in realtime but it won't block the file." }-

ok thx for ur help, i might try running Edge as a helper to my current setup.

[BrendanAdams]

Has there been any recent full version release, or should I download the beta version in order to get the latest improvements ?
Thanks :)

[PrevxHelp]

-{ Quote: "Has there been any recent full version release, or should I download the beta version in order to get the latest improvements ?
Thanks :)" }-

The newest version on beta and the full release is at 3.0.1.3. We're planning a new release within this week but it probably will go directly out and not hit beta (just minor improvements so far :))

[BrendanAdams]

Ok, so I guess the best solution if I want it to stay up-to-date is beta.

[PrevxHelp]

-{ Quote: "Ok, so I guess the best solution if I want it to stay up-to-date is beta." }-

Yes, you would then be up to date with the newest beta versions, however the full released version is the official and "supported" version and also automatically updates as we release new versions.

[Triple Helix]

I don't know if this has been mentioned but the Icon in the Tray is black any Ideas why?

TH

[Triple Helix]

I rebooted and it's Green again?

[The Hammer]

-{ Quote: "I rebooted and it's Green again?" }-So what does Black mean and why was a reboot necessary to correct it?

[andyman35]

-{ Quote: "ok thx for ur help, i might try running Edge as a helper to my current setup." }-

IMO if all you want is an on demand second opinion you're better off running PrevxCSI.

[Dregg Heda]

If Edge uses your online database to catch malware, does that mean that its ability to detect will be reduced when I am offline?

[firzen771]

-{ Quote: "If Edge uses your online database to catch malware, does that mean that its ability to detect will be reduced when I am offline?" }-

yes. it will.