PDA

View Full Version : Prevx CSI logs


GabolaN
March 12th, 2009, 10:08 PM
Hi there. Im new here at the forum :D Sorry in advance for my English :P


First Id like to congratulate Prevx team because you have surely made a real "strong" tool :thumb:

Well, my question is simple: Is there any tutorial or guide about how to read a Prevx LOG? I will give this program an oportunity as Ill start to use it to fix my clients PCs (among with huge apllications like Malwarebits, Ewido or Hijackthis, feel proud ;D ), so I really need a guide or something so I can learn to read the logs. I´ve found a thread in this forum about the letters, but I´d like more information.


PD: I´ll also install Prevx EDGE trial version on my clients PCs when I gave them back, hope there´s no problem with this. In fact, I think they are propable to buy the license.


Yours sincerely,
GN

PrevxHelp
March 12th, 2009, 10:29 PM
-{ Quote: "Hi there. Im new here at the forum :D Sorry in advance for my English :P


First Id like to congratulate Prevx team because you have surely made a real "strong" tool :thumb:

Well, my question is simple: Is there any tutorial or guide about how to read a Prevx LOG? I will give this program an oportunity as Ill start to use it to fix my clients PCs (among with huge apllications like Malwarebits, Ewido or Hijackthis, feel proud ;D ), so I really need a guide or something so I can learn to read the logs. I´ve found a thread in this forum about the letters, but I´d like more information.


PD: I´ll also install Prevx EDGE trial version on my clients PCs when I gave them back, hope there´s no problem with this. In fact, I think they are propable to buy the license.


Yours sincerely,
GN" }-

Hello,
The letters define the actual decision found from the database and the files are sorted by determination. Besides that, there isn't much else to the log :)

Please let me know if you have any questions about any particular determination, however, or if you do have any further questions about the log!

GabolaN
March 12th, 2009, 10:52 PM
Hello,

¿So it means that files with letter B were the only removed by Prevx? Can I trust in it´s detection engine? I dont want to eliminate true positives :S


I have found in my sistem´s log these ones:

UP
GP

PrevxHelp
March 12th, 2009, 10:59 PM
-{ Quote: "Hello,

¿So it means that files with letter B were the only removed by Prevx? Can I trust in it´s detection engine? I dont want to eliminate true positives :S


I have found in my sistem´s log these ones:

UP
GP" }-

Yes, B's are the known malware. UPs are suspicious, but not enough to be considered definitely malicious currently (although that may change over time as more data is collected from the files).

Gs and GPs are trusted and good. Please let me know if you have any further questions! :)

GabolaN
March 12th, 2009, 11:14 PM
Excelent!


The last one for tonight, I promisse: :P


Does the trial version of Prevx CSI, delete automatically the letters B founded?

PrevxHelp
March 12th, 2009, 11:20 PM
-{ Quote: "Excelent!


The last one for tonight, I promisse: :P


Does the trial version of Prevx CSI, delete automatically the letters B founded?" }-

No, CSI will not clean anything in the trial version - you will need a full cleanup license to remove infections.

GES/POR
March 13th, 2009, 06:04 AM
-{ Quote: "apllications like Malwarebits, Ewido or Hijackthis
" }-

Theres no more ewido, use these: MBAM, SAS, Dr.WebCureIt

raven211
March 14th, 2009, 07:32 AM
-{ Quote: "No, CSI will not clean anything in the trial version - you will need a full cleanup license to remove infections." }-

Is a trial license still not possible, e.g. through request?

LoneWolf
March 14th, 2009, 08:15 AM
-{ Quote: "Is a trial license still not possible, e.g. through request?" }-

Send PrevxHelp a PM with a request for a "one week test license for cleanup + protection"
They were kind enough to give me one. :thumb:
I bought a lic after the test lic was over. ;D

PrevxHelp
March 14th, 2009, 11:55 AM
-{ Quote: "Is a trial license still not possible, e.g. through request?" }-

The trial licenses are still available, but it does depend on the situation - he looks like he wants to clean up customer PCs and requesting a license on-demand would be a bit of a delay. However, if wanted, let me know the day before you go to work on a PC and I can get you a test license ready :)

GabolaN
March 14th, 2009, 08:58 PM
Many thanks PrevxHelp :thumb: . But I just prefer to install CSI on my customer PCs and perform a scan so I have more tools to identify malware and remove them. Then I leave CSI installed on their PC so they can decide if they want to get a licence :)