Prevx "Bug" Reports

[Triple Helix]

The aim of this thread is to give feedback to Prevx as to Reports of "Bugs" that we see in the current builds of Prevx software.

TH

[Triple Helix]

I have mentioned this in another thread that the Icon does not always show up on boot up I see it more of a problem on XP machines but also once in awhile on my Vista system.

TH

[PrevxHelp]

-{ Quote: "I have mentioned this in another thread that the Icon does not always show up on boot up I see it more of a problem on XP machines but also once in awhile on my Vista system.

TH" }-

I've tried to reproduce this (and I know a few people here are seeing the issue) but I cannot. Could you let me know if you are using a limited user account or any user switching?

[Triple Helix]

-{ Quote: "I've tried to reproduce this (and I know a few people here are seeing the issue) but I cannot. Could you let me know if you are using a limited user account or any user switching?" }-

No to your Questions I run all with Admin Rights.

TH

[Romagnolo1973]

dear Joe
italian users say to me that when pc is offline with no internet the prevx icon on the tray stil continue colored green

at the past it was red in this case I remember

is a bug?
thanks

[LagerX]

Prevx icon turns to red when there is a Age/Spread detection.
After I open Prevx and hit scan button and then cancel, it turns to green.
Is this right? I mean, I haven't cleaned possible infection, but it's green (UI shows "Scan required")

Maybe new icon - blue (means "Scan required")

[PrevxHelp]

-{ Quote: "Prevx icon turns to red when there is a Age/Spread detection.
After I open Prevx and hit scan button and then cancel, it turns to green.
Is this right? I mean, I haven't cleaned possible infection, but it's green (UI shows "Scan required")

Maybe new icon - blue (means "Scan required")" }-

Yes, good point :) We will add a "Scan Required" state to the tray icon.

Thanks! :thumb:

[PrevxHelp]

-{ Quote: "dear Joe
italian users say to me that when pc is offline with no internet the prevx icon on the tray stil continue colored green

at the past it was red in this case I remember

is a bug?
thanks" }-

The icon should still be green - any new files will be automatically scanned as soon as the internet is reconnected so there isn't anything to be worried about at that point :)

[Romagnolo1973]

-{ Quote: "Prevx icon turns to red when there is a Age/Spread detection.
After I open Prevx and hit scan button and then cancel, it turns to green.
Is this right? I mean, I haven't cleaned possible infection, but it's green (UI shows "Scan required")

Maybe new icon - blue (means "Scan required")" }-

yes when it found malware it turns red, when need scan was blue but the problem is that when the pc is out of the net in the past icon was gray (I foud it in my italian guide 'couse previously don't remember and make mistake calling it red) but now in this case icon still continue on green so the user can't see if there is a problem
And if out of the net prevx can't catch malware

I try and my prevx icon stil green too

I think Joe must investigate;D

[Romagnolo1973]

-{ Quote: "The icon should still be green - any new files will be automatically scanned as soon as the internet is reconnected so there isn't anything to be worried about at that point :)" }-

eh yes joe but in the past was better
gray icon is a good alert for a user I think

[kriebly]

Hi there,

How does one uninstall Prevx Edge 3? I see no uninstall menu item nor an entry in Add/Remove Software control panel, nor can I find a removal tool for 3.0 on the web site. :)

[PrevxHelp]

-{ Quote: "Hi there,

How does one uninstall Prevx Edge 3? I see no uninstall menu item nor an entry in Add/Remove Software control panel, nor can I find a removal tool for 3.0 on the web site. :)" }-

We've had a couple users come in with this and have never found a reason :-\ You can run the uninstall procedure manually by clicking Start > Run > and typing:

"c:\program files\prevx\prevx.exe" /prop UNINSTALL=AUTO

We will be adding a link next to "Prevx 3.0" in the Prevx program menu so that users can uninstall it easier... although we still aren't sure what the real cause of the problem is ???

Let me know if you need anything else! :)

[kriebly]

-{ Quote: "We've had a couple users come in with this and have never found a reason :-\ You can run the uninstall procedure manually by clicking Start > Run > and typing:

"c:\program files\prevx\prevx.exe" /prop UNINSTALL=AUTO
" }-
Thanks! It worked like a charm.

[Defenestration]

On Win 7 x64 I just tried to install PrevX (using latest PREVXCSIFREE64.EXE 3.0.1.65 installer) into a non-standard folder (ie. C:\Program Files\ABC\PrevX), but it still installed to C:\Program Files\PrevX.

[PrevxHelp]

-{ Quote: "On Win 7 x64 I just tried to install PrevX (using latest PREVXCSIFREE64.EXE 3.0.1.65 installer) into a non-standard folder (ie. C:\Program Files\ABC\PrevX), but it still installed to C:\Program Files\PrevX." }-

Could you let us know if you're using UAC on Win7? This may be a factor in the issue but we will definitely investigate it further to fix it in the next release.

Thanks! :)

[Defenestration]

Yes, I'm using default Win 7 UAC settings, and was asked to confirm elevation during install.

[PrevxHelp]

-{ Quote: "Yes, I'm using default Win 7 UAC settings, and was asked to confirm elevation during install." }-

Ok great, we're reproduced the issue and will have it corrected in the next version :) Thanks for the report!

[microbial]

Have just tried to run a scan with Prevx. Scan Progress remains at 0% and no files are being scanned. The elapsed time of the 'scan' is now 13 mins 25 secs. Trying to abort the scan has failed. any advice? Yes, I am connected to the internet ;)

Screenshot:

211823

[PrevxHelp]

-{ Quote: "Have just tried to run a scan with Prevx. Scan Progress remains at 0% and no files are being scanned. The elapsed time of the 'scan' is now 13 mins 25 secs. Trying to abort the scan has failed. any advice? Yes, I am connected to the internet ;)" }-

Wow :-\ Not sure what would cause that! Do you have any HIPS products installed which could be blocking Prevx? The connection would abort and warn the user if it couldn't reach the Prevx database so I suspect it isn't a firewall issue but more likely a HIPS alert.

If not, let me know and we'll investigate further :)

[microbial]

Hi there. No HIPS installed. I rebooted PC and tried again. Same problem.

???


211829

[microbial]

Issue resolved by uninstalling Acronis True Image. Far from ideal. Are there know issues with Acronis software?

[Page42]

I run Prevx with an older version of ATI, no conflicts. (ATI 9)

[microbial]

This is Build 12. Now why it's conflicting with Prevx is what I'd like to know.

[dcrowe0050]

I just installed Prevx 3.0 for the first time. And during the learning scan it will not connect to Prevx Database. I created a rule to allow it through the the firewall and it still will not connect. Any suggestions??

[microbial]

You don't have Acronis installed by any chance? ;)

Sounds like there's a conflict of some kind going on. It would be useful if there was a list on prevx's website that detailed known conflicts with Prevx. Sorry not to be more helpful...

[dcrowe0050]

No I don't have Acronis and I"ve checked and rechecked my firewall to make sure I created the rule correct and I did so I dont know what is wrong.

[dcrowe0050]

Nope no Acronis

[dcrowe0050]

Nevermind I guess it worked itself out thanks guy

[microbial]

:thumb:

[PrevxHelp]

-{ Quote: "Issue resolved by uninstalling Acronis True Image. Far from ideal. Are there know issues with Acronis software?" }-

We aren't aware of any compatibility issues with Acronis but we will be investigating this shortly to see what we can find :)

[hawk50]

Forgive me if anybody has asked this question, my laptop has been sent off to be fixed.
I was using PC Tools Firewall Plus Current Version: 6.0.0.69 on my vista 64 bit system. Prevx said it was up dating, all of a sudden my laptop started doing weird things on its own, the prevx system try icon disappeared, a warning popped up that my firewall was being attacked by outside sources, something prevx and went dead. When rebooted a black screen appeared and all I could see was my pointer. It would not even read my reimage disk.
I took it back to BB and it starts up there, but shortly after that the same symptoms.
They sent it out for repair; I have not received it back yet.
Sorry I don’t have any more info than that; I am on a friend’s computer writing this.
Thank for any info.

[twobits]

The Scenario: Vista,NIS 2010,activated Prevx 3.0.

Computer booted up but no one logged in. Prevx check the Norton engine once per second (approx). No big deal except that Norton logs "Unauthorized Access" instances into "history" and that logging with the constant scanning by Prevx generates about 4-8 percent CPU charge. All with no one logged on!I added a detection overide for the entire Norton program file but this does not stop the constant checking of the Norton engine. The result is many hundreds of log entrys in NIS 2010 in a short time (1 per second) and undue CPU charge for inactive computer. I'm a first time poster and looking for comments. Many Thanks.

[PrevxHelp]

-{ Quote: "The Scenario: Vista,NIS 2010,activated Prevx 3.0.

Computer booted up but no one logged in. Prevx check the Norton engine once per second (approx). No big deal except that Norton logs "Unauthorized Access" instances into "history" and that logging with the constant scanning by Prevx generates about 4-8 percent CPU charge. All with no one logged on!I added a detection overide for the entire Norton program file but this does not stop the constant checking of the Norton engine. The result is many hundreds of log entrys in NIS 2010 in a short time (1 per second) and undue CPU charge for inactive computer. I'm a first time poster and looking for comments. Many Thanks." }-

Hello,
Thanks for registering and welcome to the forum :) I'll see what we can do to avoid this - that is indeed very annoying and I suspect not intentional (likely a minor incompatibility with NIS2010).

I will write back here with what we find. Thank you for the report and let me know if you find anything else!

[PrevxHelp]

-{ Quote: "Forgive me if anybody has asked this question, my laptop has been sent off to be fixed.
I was using PC Tools Firewall Plus Current Version: 6.0.0.69 on my vista 64 bit system. Prevx said it was up dating, all of a sudden my laptop started doing weird things on its own, the prevx system try icon disappeared, a warning popped up that my firewall was being attacked by outside sources, something prevx and went dead. When rebooted a black screen appeared and all I could see was my pointer. It would not even read my reimage disk.
I took it back to BB and it starts up there, but shortly after that the same symptoms.
They sent it out for repair; I have not received it back yet.
Sorry I don’t have any more info than that; I am on a friend’s computer writing this.
Thank for any info." }-

Hello,
I'm unsure what would cause these symptoms. Could you let me know what version of Prevx you were using before? It may be worth going back to the live, v3.0.1.65 version from http://info.prevx.com/downloadcsi.asp to ensure maximum compatibility until we finish the rest of the functionality in the release candidate.

[hawk50]

-{ Quote: "Hello,
I'm unsure what would cause these symptoms. Could you let me know what version of Prevx you were using before? It may be worth going back to the live, v3.0.1.65 version from http://info.prevx.com/downloadcsi.asp to ensure maximum compatibility until we finish the rest of the functionality in the release candidate." }-

Hi,
Thanks for the response, I believe it was version Prevx RC 3.0.4.191. It seemed to have something to do with switching users.
When it rebooted. the page where you switch users was displayed. I selected my user icon and that is when it went south. Did the same thing to the BB tech..
When I get it back I will let you know the cause..
I am not ruling out my laptop may have issue.
Thanks for your fast response.

[Phantasm]

A minor bug:

I sometimes see 2 Prevx icons on the bottom right @ the tray, when i hover over it it will dissappear, nothing serious just saying ;)
It's unlikely for it to happen that many times, but has happened to me twice so far.

[Soujirou]

Probably not a big deal, but I installed the free version of Prevx 3.0 onto my machine using Windows 7 Build 7100. I was following the directions listed here:

http://www.wilderssecurity.com/showpost.php?p=1545233&postcount=2

I received a message that monitoring was being disabled and whatnot so I clicked OK and closed the Prevx window. My memory is a little fuzzy but when I did, my Comodo D+ warned me that Prevx was about to modify something (possibly in the registry) but I let it go. Then the Action Center icon in the system tray disappeared and I believe I received a message that I would no longer be getting Action Center notifications.

So I was wondering if there have been reports similar to this and if it was resolved. If not, I can try reproducing the error when I have some time.

[PrevxHelp]

-{ Quote: "
So I was wondering if there have been reports similar to this and if it was resolved. If not, I can try reproducing the error when I have some time." }-

Hello,
We have not heard of other reports of this, but Prevx does not remove the security center integration when disabling protection, so this "could" be an incompatibility with Comodo.

Could you please let me know what version of Prevx you're using so that we can try and reproduce this issue internally?

Thanks! :)

[Soujirou]

No problem. I was using Prevx v 3.0.1.65 and Comodo Firewall 3.12.111.745.560 with D+ enabled. I managed to reproduce problem and attached the alert it gave me.

[PrevxHelp]

-{ Quote: "No problem. I was using Prevx v 3.0.1.65 and Comodo Firewall 3.12.111.745.560 with D+ enabled. I managed to reproduce problem and attached the alert it gave me." }-

Hmm... strange as Prevx doesn't modify that key but merely stops/restarts the wscsvc service (which is the Windows Security Center service).

We've made some pretty significant changes in the Security Center/Action Center integration which will be released in the next week or two in an automatic update to Prevx which may fix it but in the meantime, you may want to try downloading the pre-release version from http://info.prevx.com/download.asp?grab=edgebeta and executing the file to automatically upgrade to the newest version (v3.0.4.216) which may prevent Comodo from producing the warnings.

Let me know if this doesn't work and we'll explore other options :)

[Soujirou]

I tried it out twice and there were no problems. Thanks a lot for the help.

[Lunarius]

Hi guys, i though you could help me over that,

Here is the point. We have two computers with Prevx installed on. One is mine and the other one is my parent's. so, they registered the lisence for themself and so receive e-mails each time I, nor them, get infected. for now on, everything goes well. the problem goes rigth here, time to time, they receive e-mails telling them that prevx found an infected file on my own computer. So i go look at my computer and see no reaction from prevx, even after scanning. When I look at the file path and go hunting for the file, it doesn't even exist. Some time, it is in %cache%\ wich windows is too dumb too find when asked for and other times, it is residues of other patch or things like that.

P.S.: You should check carefully because i got issues between BitDefender and Prevx. BitDefender always ask me about UAC control to delete one of the roaming files of prevx. I never ask him to do it, as i know it is safe files but. after my scan, tonigth, i'll screenshot the info so you get to know and try to fix it, if it is possible of course as antivirus may act like viruses to seek them ...

Thx for answering, and sorry for my spelling, i'm french canadian so... not my native language!;)

Lunarius:lurking:

[Triple Helix]

-{ Quote: "Hi guys, i though you could help me over that,

Here is the point. We have two computers with Prevx installed on. One is mine and the other one is my parent's. so, they registered the lisence for themself and so receive e-mails each time I, nor them, get infected. for now on, everything goes well. the problem goes rigth here, time to time, they receive e-mails telling them that prevx found an infected file on my own computer. So i go look at my computer and see no reaction from prevx, even after scanning. When I look at the file path and go hunting for the file, it doesn't even exist. Some time, it is in %cache%\ wich windows is too dumb too find when asked for and other times, it is residues of other patch or things like that.

P.S.: You should check carefully because i got issues between BitDefender and Prevx. BitDefender always ask me about UAC control to delete one of the roaming files of prevx. I never ask him to do it, as i know it is safe files but. after my scan, tonigth, i'll screenshot the info so you get to know and try to fix it, if it is possible of course as antivirus may act like viruses to seek them ...

Thx for answering, and sorry for my spelling, i'm french canadian so... not my native language!;)

Lunarius:lurking:" }-

Can you tell us alittle more info like what OS you are using and if it is 32bit or 64bit and the version of Prevx that you are using?

TH

[Lunarius]

I'm using windows 7 Home Premium 64 bit, with 3.0.1.65

[pegr]

The new feature in v3.0.5.50 where the window can be opened and closed if a scan is in progress without disrupting the scan doesn't work for bootup scans (at least it doesn't for me). It works fine for on-demand scans and other scheduled scans though; it's only bootup scans that are affected.

If a bootup scan is running when the window is opened, closing the window causes the scan to hang. Opening the window again and pressing the <Cancel Scan> button does cause the scan to be aborted eventually but it takes several minutes before Prevx responds and closes the scanning window.

The "Start the scan exactly at the scheduled time ..." setting is not checked and bootup scans don't start until well after system bootup has been completed, so it doesn't appear to be a conflict during system bootup that is causing the issue. I've noticed that scheduled bootup scans do take longer to complete than other scans, so I don't know whether there is something different about the way a bootup scan works that may be a contributing factor. :-\

In case it's relevant, I have a 32-bit XP Pro system with Acronis True Image 11 installed. I thought I'd better mention this, as another user, microbial, has reported in this thread that he experienced a problem with Prevx scans hanging and difficulty aborting them when Acronis True Image was installed.

[PC__Gamer]

bug:

if i use a program that needs to open an IE window, ie. Trillian sometimes.

the browser opens up only a partially-protected (blue tick) browser window, even though my SafeOnline is supposed to green tick all websites.

if you then browse to websites that are usually protected (green tick), they are now blue while in this partially-protected browser window.

the window needs to be closed, and re-opened through the usual manner for it to then be protected.

[asdx5]

Hello,
I have installed today the free Italian version of Prevx and used it a little.

I have found a lot of flaws in the GUI (the part of GUI that I have tested).

You can view them here (http://drop.io/0lxnkjf).

[PrevxHelp]

-{ Quote: "Hello,
I have installed today the free Italian version of Prevx and used it a little.

I have found a lot of flaws in the GUI (the part of GUI that I have tested).

You can view them here (http://drop.io/0lxnkjf)." }-

Hello,
Thank you for the information. Unfortunately, each language has significantly different spacing so it isn't possible to make all of the languages fit precisely within the GUI, although we will be working on improving in this in the near future.

[xXDarkStalkerxX]

A minor bug with special characters:

Hi , I am using the Prevx Facebook version ( paid version coming soon 8) ) and I have some problems with SafeOnline protection.
When the protection is on i cant type accents , I think the anti keylogger function is responsible for this behavior.

P.S: Brazilian ABNT2 Keyboard layout.

[PrevxHelp]

-{ Quote: "A minor bug with special characters:

Hi , I am using the Prevx Facebook version ( paid version coming soon 8) ) and I have some problems with SafeOnline protection.
When the protection is on i cant type accents , I think the anti keylogger function is responsible for this behavior.

P.S: Brazilian ABNT2 Keyboard layout." }-

Hello,
Could you please try downloading our newest update from http://info.prevx.com/downloadcsi.asp and see if this corrects the issues?

Let me know! :)

[xXDarkStalkerxX]

-{ Quote: "Hello,
Could you please try downloading our newest update from http://info.prevx.com/downloadcsi.asp and see if this corrects the issues?

Let me know! :)" }-

Wow , works like a charm now.

Many thanks.

[pling_man]

I notice if you clear the scan statistics by clicking on the title "Total Scan Statistics" it sets threats detected and active threats to zero, but the number of scans is set to 1 not zero :what:

[Tolomir]

While prevx is scanning my system - unknown to me run by system, scanning of a single file from the file context menu is "dead".
Also it is not possible to open the status screen from the info menu (prevx symbol), when I want to open the configuration, I get a wait until the system scan is ready...

Under windows 7 a user sees not all tasks in taskmanager by default especially not the system tasks (even as administrator) so a bit more information should be possible, like add a link to the prevx symbol: view current scan.

I'm using prevx 3.0.5.67

[Triple Helix]

Just uncheck and you will see all scans in the bottom right corner by the clock!

HTH,

TH

[Lunarius]

-{ Quote: "Hi guys, i though you could help me over that,

Here is the point. We have two computers with Prevx installed on. One is mine and the other one is my parent's. so, they registered the lisence for themself and so receive e-mails each time I, nor them, get infected. for now on, everything goes well. the problem goes rigth here, time to time, they receive e-mails telling them that prevx found an infected file on my own computer. So i go look at my computer and see no reaction from prevx, even after scanning. When I look at the file path and go hunting for the file, it doesn't even exist. Some time, it is in %cache%\ wich windows is too dumb too find when asked for and other times, it is residues of other patch or things like that.

P.S.: You should check carefully because i got issues between BitDefender and Prevx. BitDefender always ask me about UAC control to delete one of the roaming files of prevx. I never ask him to do it, as i know it is safe files but. after my scan, tonigth, i'll screenshot the info so you get to know and try to fix it, if it is possible of course as antivirus may act like viruses to seek them ...

Thx for answering, and sorry for my spelling, i'm french canadian so... not my native language!;)

Lunarius:lurking:" }-

I'm using windows 7 Home Premium 64 bit, with Prevx 3.0.1.65, got the full package but not the safe online part.

Reposting because i got no answer since 23rd January so, i'd like to know if it's an issue or not, having allot of questioning about it

[Triple Helix]

-{ Quote: "I'm using windows 7 Home Premium 64 bit, with Prevx 3.0.1.65, got the full package but not the safe online part.

Reposting because i got no answer since 23rd January so, i'd like to know if it's an issue or not, having allot of questioning about it" }-

Could you please try downloading the newest update from http://info.prevx.com/downloadcsi.asp which is the version 3.0.5.74 with a Trial of SafeOnline as SafeOnline it a small extra cost to get the full features!

HTH,

TH

[ptz3000]

Hi - I've been running prevX for a few years now and love it.

Because my prevX never auto updates, i check/grab the betas when they're avialable (I was running v3.0.5.91, and now have gone back to v3.0.5.85).

However, last week I experienced a strange BSOD (arent they all), and am trying to determine the cause.

I am running vista 32 bit, all current services packs/updates.

Other security software I run includes: PC Syware Doc, Avira free, Comodo, and MS Security Essentials.

My problems first became evident after the latest batch of MS updates.

After reboot my pc blue screened, reported a usb_bug code and would then disable audio and network (network appeared to have some sort of dhcp error and would auto assign an ip address of 169.xx/etc rather than 192.168/etc. I would also get "system event notification service" error.

After 3 days of several: system restores, sfc scannow, booting off windows dvd in safe mode and trying to repair, etc - the problem seems to only reappear when I install the latest beta update. Has anyone else experienced this or similar?

Kind regards - pete

www.thatsITsolutions.com.au
peter@thatsITsolutions.com.au

[PrevxHelp]

-{ Quote: "
After 3 days of several: system restores, sfc scannow, booting off windows dvd in safe mode and trying to repair, etc - the problem seems to only reappear when I install the latest beta update. Has anyone else experienced this or similar?" }-

Hello,
Could you please look through the C:\Windows\Minidump\ folder and send us any of the .dmp files to report@prevxresearch.com to see if we can find the cause? If it isn't Prevx, we should at least be able to point you in the right direction! :)

[ptz3000]

Will get onto it and post/forward mini dump. I cheched for that file, but because I run ccleaner & did a few restores that file is not present.

I will re-install latest beta and see what happens & report back findings.

Give me a day as I've got a few things to catchup on before I'm able to embark on the perilous task ahead, I fear for my safety lol ;)

[pling_man]

When a website is visited with "Protect sensitive clipboard data" ticked, the clipboard cannot be copied by a trojan. When the browser is subsquently closed SafeOnline unprotects the clipboard again. However, it does not clear the clipboard at this point, potentially exposing any sensitive data it may contain.

Should the clipboard be cleared on exit from the browser?

(I don't know what happens if two browsers are open, e.g. FF and IE)

[PrevxHelp]

-{ Quote: "When a website is visited with "Protect sensitive clipboard data" ticked, the clipboard cannot be copied by a trojan. When the browser is subsquently closed SafeOnline unprotects the clipboard again. However, it does not clear the clipboard at this point, potentially exposing any sensitive data it may contain.

Should the clipboard be cleared on exit from the browser?

(I don't know what happens if two browsers are open, e.g. FF and IE)" }-

Very valid point. I think we may end up adding a message like the one that Microsoft Word shows when there is data left on the clipboard.

Thanks for the suggestion! :)

[CloneRanger]

@pling_man

Good point :thumb:

@PrevxHelp

Rather than adding a message, it would be much better/secure to just automatically clear it afterwards. Might be possible for you to include a few lines of code ? :) eg


Code to clear the Clipboard

http://www.access-programmers.co.uk/forums/archive/index.php/t-25241.html

EmptyClipboard Function

http://msdn.microsoft.com/en-us/library/ms649037(VS.85).aspx

[PrevxHelp]

-{ Quote: "
Rather than adding a message, it would be much better/secure to just automatically clear it afterwards. Might be possible for you to include a few lines of code ? :) eg" }-

It's definitely quite an easy function to work with... however, there are likely many cases where the end user would -want- to have the data on their clipboard. One of the main complexities with SafeOnline is trying to keep it very user-friendly without sacrificing on security. We've come quite a long way with SafeOnline in this regard, but it is an area we are constantly aware of - definitely making sure that the user's experience is not interfered with.

I still think a message to the end user is necessary before we go about clearing the clipboard contents, but we're considering adding a prevailing protection element across the clipboard to continue securing the data after the browser has been closed, unless unsecured data is copied over the secured data. I think this will probably be the best approach - let me know if you have any thoughts otherwise!

[pling_man]

I think I found a minor bug, or at least an inconsistency.

When you do a Quick Scan from the Advanced Scan screen, the message "Last Scan: Quick Scan" is displayed on the Status Screen.

When you do a Deep scan (either from the Status Screen or the Advanced Scan Screen), the message "Last Scan:" is displayed on the Status Screen.

However, if you do a Quick Scan from the Advanced Tab inside the Tab dropdown window in the browser, the message displayed (when you go and look) is "Last Scan:". But it should display "Last Scan: Quick Scan" to be consistent ;)

Or it could be it is doing a Deep Scan rather than a Quick Scan and the caption next to the check box in the clip drop-down is wrong. ???

This was using the 3.5.0.103 RC btw.

[pling_man]

-{ Quote: "Very valid point. I think we may end up adding a message like the one that Microsoft Word shows when there is data left on the clipboard.
" }-

I don't get a message from Word 2007 when I leave data on the clipboard and exit. Maybe they changed it since 2003.

-{ Quote: "
there are likely many cases where the end user would -want- to have the data on their clipboard." }-

There may be some cases, but "many"? Right now, I can't think of any! LOL (I still think a confirmation is necessary though).

-{ Quote: "
... we're considering adding a prevailing protection element across the clipboard to continue securing the data after the browser has been closed, unless unsecured data is copied over the secured data. I think this will probably be the best approach - let me know if you have any thoughts otherwise!" }-

No this won't work, you need to ensure that all data on the clipboard is protected, not just data that happens to be listed as "confidential". What you could do is keep the clipboard protected once the browser closes until it is first changed. But this is a bit clunky for my mind. And what happens if it is not changed and the user runs the browser again?

I would just have some code on exit like the following pseudocode (KISP - Keep It Simple Prevx!)

if (not clipboard is empty) {
message "Clear clipboard?"
if (response = "Yes") {
clear clipboard
}
}

You don't need to bother the user if the clipboard is already empty (may be most of the time for a lot of users)

The messagebox should ideally contain the prevx safeonline logo (to help the user understand why he/she is seeing it).

And you should ensure that the default on the message window is "Yes" so a simple press of the return key does the safest thing.

Users who don't use the clipboard will have nothing to do. Users who do, will soon learn why they are being asked this question on exit.

[pling_man]

Does anyone know what "Shutdown prevx" does in the system tray menu? (visible when you stop/remove protection). And how do you start prevx up again afterwards?

[papillonn]

Do you have any problem with firefox 3.6? Safeonline doesn't work even in safe mode.

[pling_man]

No it works just fine for me papillonn.

Edit. Actually there is one problem, it must be turned on manually in the GUI.

PrevxHelp, when I load protection from the system tray (after stop/remove protection), SafeOnline is not turned back on. I have to do it manually. Also I have a vague memory of the protection being off after I applied my licence key and having to be turned on manually then (This would have been the .91 release when I did a re-install and re-licenced as the .98 and .100 releases have autoupdated).

[papillonn]

i don't understand why this happens, because in ie and opera it works, and i didn't touch firefox and its settings.

[pling_man]

Don't worry papillonn, I'm sure someone will help you soon.

Meanwhile, you could try uninstalling, re-booting, and re-installing prevx.

[papillonn]

Even I have used prevx remover for version 3. But the problem persists. Safeonline doesn't work on my firefox 3.6 installation.

[johncage]

Hello,

I donot know if this is a bug. if a website's security configuration is above low, i cannot use Chinese input software to type Chinese characters in that website.

It seems that Safeonline dose not support East Asian Language Input.:(

[ptz3000]

My problems seem to have resolved themselves - i've updated to 3.0.5.103 and everything is running smoothly, not sure what caused that bsod/USB bug error code I encountered last week.

[PrevxHelp]

-{ Quote: "Does anyone know what "Shutdown prevx" does in the system tray menu? (visible when you stop/remove protection). And how do you start prevx up again afterwards?" }-

"Shutdown Prevx" will fully terminate its processes, although at that point protection will already be disabled as you would have to remove it to get that menu option. You'll need to use the shortcut to re-enable it (and possibly click Enable Monitoring if under UAC).

[PrevxHelp]

-{ Quote: "Even I have used prevx remover for version 3. But the problem persists. Safeonline doesn't work on my firefox 3.6 installation." }-

Could you let me know what other security software you use and if you are using any browser sandboxing product?

Thanks! :)

[papillonn]

I use KIS 2010 and i don't use browser sandboxing. I added prevx directory in exclusion list of KIS.

[sounak_s]

http://www.prevx.com/filenames/X239743560318436753-X1/PXKBF.SYS.html

[Triple Helix]

-{ Quote: "http://www.prevx.com/filenames/X239743560318436753-X1/PXKBF.SYS.html" }-

Can you explain your problem Please for we all can know?

TH

EDIT: I see that you posted it here also! http://www.wilderssecurity.com/showpost.php?p=1648290&postcount=24

[PrevxHelp]

-{ Quote: "http://www.prevx.com/filenames/X239743560318436753-X1/PXKBF.SYS.html" }-

I replied in the other thread as well, but in case you don't see it:

"PXKBF.sys" doesn't guarantee that it is our file - there are some infections that have started using that name because we do. Our driver is in the 20KB range, while the others are < 10KB.

[bierni86]

Joe I use Miranda IM + gadu gadu protocol and when I want to copy a link or a message into my messanger it just doesn't work - disabling prevx real-time protection fixes the problem - when it's turned on the problem remains.

[PrevxHelp]

-{ Quote: "Joe I use Miranda IM + gadu gadu protocol and when I want to copy a link or a message into my messanger it just doesn't work - disabling prevx real-time protection fixes the problem - when it's turned on the problem remains." }-

Could you save a scan log by clicking Tools > Save Scan Results and send it to report@prevxresearch.com? We should be able to whitelist your copy of Miranda to allow it to work properly.

Thanks! :)

[Zorak]

Hey Joe (sounds like a good name for a song :D )

I just wanted to add my report regarding the disappearing Prevx icon, which some others also seem to suffer from occasionally. I run XP Home SP3 with four Limited User Accounts, but the symptoms also occur when running as Admin. It has been happening for me with all versions of Prevx since my original install of 3.0.1.65. I am currently running official release 3.0.5.106.

The problem appears to be totally random and happens maybe around once a fortnight or so (computer used each day and turned off at night). It sometimes happens on boot-up but more often it seems to happen when a new user logs on after another has logged off. Fast User Switching is enabled but hasn't been used when the problem occurs. The Prevx splashscreen and icon don't appear, and only the Prevx process belonging to the System appears in Task Manager. The only way to get both processes back is with a re-start of Windows.

It is only a minor inconvenience for me as I always check the icon is there before going online, however my partner and teenage children are not likely to be so careful. Is my system still protected in these circumstances?

Thanks and sorry if I'm interrupting your Easter!

[PrevxHelp]

-{ Quote: "
Thanks and sorry if I'm interrupting your Easter!" }-

No problem at all! :) We've had a couple reports of this but haven't really found an underlying cause. Could you let me know if you're using any other security software to see if that could interfere?

If not, I'll continue to investigate further! :)

[lubieplacki]

Hello Joe.

I download a lot of malware and scan by Prevex and it founds 255 infections. Im clicking cleanup now, after cleanup i need to reboot my PC. And when i push OK and wait a little bit, after Goodbye screen of windows Ive got a bluescreen! Something like bug.

[Zorak]

Thanks for the response Joe.

-{ Quote: "We've had a couple reports of this but haven't really found an underlying cause. Could you let me know if you're using any other security software to see if that could interfere?" }-

No other security software running real-time. LUA + SRP + Prevx = lots of security :) I used to use Avira Free as well but uninstalled it recently. I run occasional on-demand scans with Hitman Pro Free.

Can I ask this question again? Is my computer provided with any protection at all if only the System owned Prevx process is running?

Thanks

[lubieplacki]

Hello! I'm using Prevx and WTW ( something like MSN, ICQ). I copy text from first window of WTW and I cant paste it to the second window of WTW, to do this i need disable prevx protection. How to repair this?

[PrevxHelp]

-{ Quote: "Thanks for the response Joe.



No other security software running real-time. LUA + SRP + Prevx = lots of security :) I used to use Avira Free as well but uninstalled it recently. I run occasional on-demand scans with Hitman Pro Free.

Can I ask this question again? Is my computer provided with any protection at all if only the System owned Prevx process is running?

Thanks" }-

Background protection is still applied, however, the user won't be able to be notified of any detections so it isn't an ideal situation to be in. Were still looking into possible causes but if you manage to get it into a state where it is fully reproducible, please let me know and I'll try to set up a remote debugging session.

Thanks for the help and patience!

[PrevxHelp]

-{ Quote: "Hello! I'm using Prevx and WTW ( something like MSN, ICQ). I copy text from first window of WTW and I cant paste it to the second window of WTW, to do this i need disable prevx protection. How to repair this?" }-

Hello :)
Could you please save a scan log by clicking tools - save scan results and send it to report@prevxresearch.com? We should be able to correct the issue from there!

[PC__Gamer]

sorry if its been said (dont have time to read through all the pages)

Regarding the blue status of Prevx when you cancel a scan, and get the 'Scan Required' status.

cancelling a scan shouldn't mean that a scan is required. :)

i think it should only show if X-amount of days have passed, or after a removal of an infection & prevx requires you to do another scan just to check that all is clear.

& does SafeOnline need to have a little lock on the main GUI while im browsing, and a tick when im not? (2 icons for the same thing is just confusing, should be either a green tick or a red cross when its turned off)

just some thoughts ;)

[PrevxHelp]

-{ Quote: "sorry if its been said (dont have time to read through all the pages)

Regarding the blue status of Prevx when you cancel a scan, and get the 'Scan Required' status.

cancelling a scan shouldn't mean that a scan is required. :)

i think it should only show if X-amount of days have passed, or after a removal of an infection & prevx requires you to do another scan just to check that all is clear. " }-

Yes, this is a valid point :) I suppose "Scan Required" is accurate in the context when the learning scan has been cancelled but once a scan is aborted, a scan is required to then know the status so we assume that something has changed :)

-{ Quote: "& does SafeOnline need to have a little lock on the main GUI while im browsing, and a tick when im not? (2 icons for the same thing is just confusing, should be either a green tick or a red cross when its turned off)" }-

The padlock icon will show when there is an actively secured instance - the green tick is the default which just says it is installed/enabled, while red means disabled/inactive :)

[falkor]

I cannot copy and paste with Prevx running .? What the crap ? I stop protection and i can . Please explain this .

[pling_man]

Prevx is still not running after some boot ups. I would estmate it happens 1 boot up in every 8 (so its quite common). When it happens I have to reboot to get the icon to appear.

Have prevx seen this bug yet? They may need to setup a pc with more than one user so that a login screen is shown. I would have thought it would be easy to find with a few hours investment.

This is the main thing stopping me from putting prevx on my other PCs.

[PrevxHelp]

-{ Quote: "I cannot copy and paste with Prevx running .? What the crap ? I stop protection and i can . Please explain this ." }-

Hello,
Can you please click Tools - Save Scan Results and send this log to report@prevxresearch.com? We will correct the clipboard issue ASAP once we receive the log :)

Thanks!

[PrevxHelp]

-{ Quote: "Have prevx seen this bug yet? They may need to setup a pc with more than one user so that a login screen is shown. I would have thought it would be easy to find with a few hours investment." }-

We (and myself included) have spent quite a massive amount of time trying to track this down - it does not appear to be a straightforward issue to reproduce and it certainly isn't happening in a lab environment, despite having run extensive tests every time a user comes in with this complaint (which have been relatively few but still more than we'd like to see).

If you'd be interested in a remote debugging session, I suspect that could help us get down to the bottom of the issue, although it still does seem to be rather non-trivial to hunt down.

Let me know if you find anything else!

[nfsmith]

Hello,

I am having the same problem. I cannot use the clipboard unless I disable Prevx temporarily. This is pretty inconvenient.

Has there been any progress on fixing this? Is there a way I can configure it to stop the problem?

Would sending a log copy help?

-nfsmith

-{ Quote: "Hello,
Can you please click Tools - Save Scan Results and send this log to report@prevxresearch.com? We will correct the clipboard issue ASAP once we receive the log :)

Thanks!" }-

[PrevxHelp]

-{ Quote: "Hello,

I am having the same problem. I cannot use the clipboard unless I disable Prevx temporarily. This is pretty inconvenient.

Has there been any progress on fixing this? Is there a way I can configure it to stop the problem?

Would sending a log copy help?

-nfsmith" }-

Yes :) Please send over a log and we should be able to fix it quickly!

[pling_man]

Im sorry but I posted a bug in the Future Changes thread instead if here (my mistake). I would appreciate it if PrevxHelp/Joe could have a look and see if he can help with the bug.

Probably best to post replies here.

Thanks.

[ASUS77]

My Prevx updated to 3.0.5.124 and I have noticed major issues. Now when I open a browser, open a new tab, or click a link that opens a new browser or tab, there is about a 20 second lag. If I turn off the Safe Online feature this problem goes away. Same problem in multiple browsers.

[lubieplacki]

Joe, I have other problem with PrevX and WTW. Before adding WTW to the PrevX whitelist I can copy link from browser and paste it to the WTW, I cant only copy from one WTW window and paste to the other WTW window. Today, after update to the newest beta i observed something like that: I can copy and paste from 1st to the 2nd window of WTW but I cant copy from browser and paste to the WTW window. After disabling PrevX i dont have any problem. Can you do anything with this? If You want I can send a log.

[PrevxHelp]

-{ Quote: "Joe, I have other problem with PrevX and WTW. Before adding WTW to the PrevX whitelist I can copy link from browser and paste it to the WTW, I cant only copy from one WTW window and paste to the other WTW window. Today, after update to the newest beta i observed something like that: I can copy and paste from 1st to the 2nd window of WTW but I cant copy from browser and paste to the WTW window. After disabling PrevX i dont have any problem. Can you do anything with this? If You want I can send a log." }-

It would definitely be worth seeing another scan log to see if we can correct any issues.

Thanks for the help! :)

[lubieplacki]

Okey, in the afternoon i send log.

[pling_man]

I reported my issues with auto updating not working with KIS2010 at the end of the beta thread for the 124 version.

Anyway, for now I have been running with "Automatically download and apply updates" in Basic Configuration unticked. But, I just noticed that if you click "Check for updates" at the bottom of the Gui, Prevx re-ticks the option under Basic Configuration.

This looks like a bug (or poor design). At the moment if I want to do a manual check for updates, I have to then go to Basic Confuguration and untick the option afterwards.

Edit. I now think this bug only occurs when the autoupdate fails (see thread "Can't update"). When the autoupdate succeeds, the check box remains unticked.

[TonyW]

Not sure if this is a bug or not, but the date & time of my last scan isn't currently being shown:

217536

(Using Prevx 3.0.5.130)

[Triple Helix]

-{ Quote: "Not sure if this is a bug or not, but the date & time of my last scan isn't currently being shown:

217536

(Using Prevx 3.0.5.130)" }-

Do you know when your last scan was? When I don't use my second computer or my VM's for a few days this also happens but if I do a scan it will show again! I don't think it is a bug but Joe will clarify!

TH

[PrevxHelp]

-{ Quote: "Not sure if this is a bug or not, but the date & time of my last scan isn't currently being shown:" }-

This could sometimes occur when your previous scan was a right click scan or if the scan was aborted. Could you try running another scan to see if it clears it up?

Thanks! :)

[TonyW]

-{ Quote: "This could sometimes occur when your previous scan was a right click scan or if the scan was aborted. Could you try running another scan to see if it clears it up?" }-Since mentioning this, Prevx has performed a scan by itself. It now shows that the last scan was performed 14 hours ago.

[TonyW]

-{ Quote: "Since mentioning this, Prevx has performed a scan by itself. It now shows that the last scan was performed 14 hours ago." }-That blank area has returned, and I know I haven't done a right-click scan or aborted a scan as PrevxHelp suggests. Maybe it also happens when there hasn't been a scan for a few days? (It corrects itself when launching a scan.)

[Triple Helix]

-{ Quote: "That blank area has returned, and I know I haven't done a right-click scan or aborted a scan as PrevxHelp suggests. Maybe it also happens when there hasn't been a scan for a few days? (It corrects itself when launching a scan.)" }-

That's what happens to me like I said above! ;) This is my settings on my main system! See picture:

TH

[PrevxHelp]

-{ Quote: "That blank area has returned, and I know I haven't done a right-click scan or aborted a scan as PrevxHelp suggests. Maybe it also happens when there hasn't been a scan for a few days? (It corrects itself when launching a scan.)" }-

That's definitely possible - I suspect that it has passed the normal length where it counts hours/minutes and is now into days past which could cause it to not update the time anymore.

I'll take a look to see what may be going wrong - thanks for the report! :)

[shadek]

I get random freezes with Google Chrome beta 5.0.375.29 when having Safe Online activated.

[PrevxHelp]

-{ Quote: "I get random freezes with Google Chrome beta 5.0.375.29 when having Safe Online activated." }-

Can you please try the newest test version from: http://www.wilderssecurity.com/showthread.php?t=271956 and let me know if the problems persist?

Thanks! :)

[shadek]

Trying it now and still randow freezes. Working 100% fine with Safe Online inactivated though. :) Anything I can do in order to assist you? I'm running Win 7 x64 Ultimate. I have tried with latest stable Chrome release and latest beta with the same result. I have tried different settings in the SO module and it still freezes. I have no extentions in Chrome that interfere. With SO disabled everything runs smooth.

EDIT: I forgot to mention that I even get a freeze for about 10 seconds when I start Chrome. I cannot even do anything in Windows in the meantime. It seems the freeze affects the whole OS and not only Chrome/Prevx. But as I stated above, works fine with SO off. Furthermore, the Prevx icon in the browser is misplaced I think. It's on top of settings icon in Chrome. I can barely click on the settings icon thanks to that (see attached image).

[StormerR34]

Not sure if it's a bug, but the Prevx SafeOnline tab in the browser can be moved.

[Triple Helix]

-{ Quote: "Not sure if it's a bug, but the Prevx SafeOnline tab in the browser can be moved." }-

It's designed that way as most of us had problems where the tab was and couldn't move it but now we can! :thumb:

HTH,

TH

[shadek]

Worth noticing is with the new RC .137 build Chrome starts extremely slow and freezes my computer. I get random hick-ups and freezes when browsing every now and then... but it was even worse with .130 release so .137 fixed a few slowdowns at least.

Prevxhelp, I've sent you a PM about remote access so you can observe for yourself how slow Chrome starts and freeze and how it randomly freezes when browsing. :)

Windows 7 Ultimate x64 with latest updates.
Prevx build 3.0.5.137 with SO active. When SO not active, everything's smooth. Only freezes with Chrome latest stable build and latest beta. Firefox and IE 8.0 working great as always with SO! :thumb:

[Romagnolo1973]

For Joe
some italian user said to me that there is an issue on Prevx (Facebook version and Prevx too)
If you have 2 account (one admin e other limited user) when you log off admin and start as limited user prevx in this perfil start deactivated
This happens on Prevx 140 version I don't know if it happens on new .143
The sistem where they enconter this issue is Seven 32bit

I can't replicate 'cause I use (till I was born;D ) only adim even if I perfectly know is not a good behaviour

If you can investigate
Thanks as ever

[Triple Helix]

-{ Quote: "For Joe
some italian user said to me that there is an issue on Prevx (Facebook version and Prevx too)
If you have 2 account (one admin e other limited user) when you log off admin and start as limited user prevx in this perfil start deactivated
This happens on Prevx 140 version I don't know if it happens on new .143
The sistem where they enconter this issue is Seven 32bit

I can't replicate 'cause I use (till I was born;D ) only adim even if I perfectly know is not a good behaviour

If you can investigate
Thanks as ever" }-

It's a known issue and the Prevx Team is working on it hopefully in the next couple of Builds it will be fixed!

HTH,

TH

[BoerenkoolMetWorst]

I don't know of this is the place to report FP's but I updated pidgin to 2.7.0 and it worked fine but when I just tried to start it I got a Prevx warning age/spread violation(though it was to be expected with all heuristics to the max.) Could you fix this?

[Triple Helix]

-{ Quote: "I don't know of this is the place to report FP's but I updated pidgin to 2.7.0 and it worked fine but when I just tried to start it I got a Prevx warning age/spread violation(though it was to be expected with all heuristics to the max.) Could you fix this?" }-

Please send a scan log as stated in this post http://www.wilderssecurity.com/showthread.php?t=245129 for FP's as Prevx don't want FP's in the forums they want users to use the Official Channel!

Thanks!

TH

[BoerenkoolMetWorst]

Problem is, it isn't detected in a scan. It popped up when I launched it(though I launched 2.7.0 before, without warning) I removed the detection override created by allowing Pidgin once and did the standard scan, but nothing was detected, right-click scan on pidgin.exe also doesn't detect anything. But if I launch pidgin again the pop-up is back.

[Triple Helix]

-{ Quote: "Problem is, it isn't detected in a scan. It popped up when I launched it(though I launched 2.7.0 before, without warning) I removed the detection override created by allowing Pidgin once and did the standard scan, but nothing was detected, right-click scan on pidgin.exe also doesn't detect anything. But if I launch pidgin again the pop-up is back." }-

Look in the log for that file and post the lines that have to do with it! But the best to do is send a scan log to Prevx as they can fix it on there servers in the cloud!

TH

[BoerenkoolMetWorst]

lol, I mistakenly assumed pidgin wouldn't be in the scan log because it wasn't detected as malicious. If send a scan log to Prevx now :)

[Triple Helix]

-{ Quote: "lol, I mistakenly assumed pidgin wouldn't be in the scan log because it wasn't detected as malicious. If send a scan log to Prevx now :)" }-

Good to here! Any problems that arise it is best to send them a scan log first because most times they can fix it at there end! ;)

Cheers,

TH

[shadek]

Prevxhelp, I am now willing to do a remote session to solve the Google Beta problem with SO.

The problem we solved before where browser frooze is fixed, but now the SO does not work, as I can take screenshots freely even when settings are at max. Odd thing is, the 'Prevx'-icon in browser turns green (hence I can't take printscreens anymore) whenever I post in these forums for instance.

[PrevxHelp]

-{ Quote: "Prevxhelp, I am now willing to do a remote session to solve the Google Beta problem with SO.

The problem we solved before where browser frooze is fixed, but now the SO does not work, as I can take screenshots freely even when settings are at max. Odd thing is, the 'Prevx'-icon in browser turns green (hence I can't take printscreens anymore) whenever I post in these forums for instance." }-

I'll send you a PM to further discuss debugging :) Thanks!

[shadek]

-{ Quote: "I'll send you a PM to further discuss debugging :) Thanks!" }-

Rodger that! Here's some printscreens just to 'prepare' you for the the issue I'm experiencing. :)

[shadek]

Problem I posted above is now solved, and I suppose this issue will have been resolved until next release.

Great job as always, Prevx.

[Triple Helix]

-{ Quote: "Problem I posted above is now solved, and I suppose this issue will have been resolved until next release.

Great job as always, Prevx." }-

Good to here! Prevx has the best support IMHO! That's what got me hooked! Even there support inbox is great with lssues!

TH

[shadek]

Yeah, it was some great going remote desktop. A very good platform for them to fix the issues we, the active, bug-hunting users are finding.
And TripleHelix, I can only agree. You cannot find better support elsewhere. :)

[Triple Helix]

-{ Quote: "Yeah, it was some great going remote desktop. A very good platform for them to fix the issues we, the active, bug-hunting users are finding.
And TripleHelix, I can only agree. You cannot find better support elsewhere. :)" }-

Also just think when they fix our problems the whole Prevx community benefits from our efforts that's got to make you feel good! ;D

TH

[Dermot7]

-{ Quote: "Good to here! Prevx has the best support IMHO! That's what got me hooked! Even there support inbox is great with lssues!

TH" }-

The unquestionable quality of Prevx support, combined with their high-perfomance software, is what convinced me to purchase.
Some of the popular vendors have a lot to learn from Prevx IMHO.

[shadek]

I discovered a new glitch. Prevx not showing up in Windows Security Center.

Running Windows 7 x64 Ultimate. I have no had this problem before with Prevx. Maybe it's the latest unstable version .153 that's causing it?

[shadek]

Here's another glitch in Chrome. The 'green bar' disappears but the protection is still there; I can't take printscreens without warnings etc. But I can't find out when and why it disappears... so I guess it'll be hard to reproduce. :(

[shadek]

Wow, two bugs reported today already. I hate to put the Prevx-team under pressure, but I love finding glitches like these. :)

[PrevxHelp]

-{ Quote: "Yeah, it was some great going remote desktop. A very good platform for them to fix the issues we, the active, bug-hunting users are finding.
And TripleHelix, I can only agree. You cannot find better support elsewhere. :)" }-

Thank you! :) And we also have some of the best users who are willing to help us out when stray bugs exist! :thumb:

[PrevxHelp]

-{ Quote: "I discovered a new glitch. Prevx not showing up in Windows Security Center.

Running Windows 7 x64 Ultimate. I have no had this problem before with Prevx. Maybe it's the latest unstable version .153 that's causing it?" }-

I believe you're correct - when we put 153 (or higher) out as a beta version, you may want to uninstall and reinstall directly from there which should fix the issue after you put in your license key :)

[PrevxHelp]

-{ Quote: "Here's another glitch in Chrome. The 'green bar' disappears but the protection is still there; I can't take printscreens without warnings etc. But I can't find out when and why it disappears... so I guess it'll be hard to reproduce. :(" }-

We've had a couple users report a similar problem and unfortunately you're correct in that it is hard to reproduce. I'm currently only using Chrome here to try to reproduce it but it is more of a cosmetic issue (albeit an annoying one) than an actual protection problem.

I'll report back if I manage to find anything! Thanks for the heads up :)

[shadek]

Yes, but there seems to be no installer with the current (.153) version. With any older version I get the 'no protection' problem which was corrected. :)


EDIT: Nevermind. I'll just wait for beta.

[shadek]

Hopefully, you'll be able to find the 'disappearing' "bar" in Chrome as well. Is it the 'sandbox' around Chrome that complicates thing that much? Seems like a big pit of problems for SO to manage. It's almost as if Google wants to save the world by themselves. :D

[Jeannot]

Hi,

I 'm using (trying) Prevx free on XP sp3 as Admin sinds a month.
I see again (this has already happened several times recently) that there are up to four icons of Prevx in the taskbar. Then, they disappear one by one and the last one stays.
But today the program closes permanently. I open it again, but it closes too.
I reopen it and do a scan... It closes during the scan ???
An idee of what happen ????

[markusg]

please try a new scan, right klick prevx tray symbol, safe log.
report@prevxresearch.com
explaining the problem

and post the topic url + your username.

[Jeannot]

I left and I closed the PC.
On my return: 4 icons of Prevx in the taskbar.
It seemed to me that by simply passing the mouse over it, three of the four are missing.
But a few seconds after the last icon was also gone.
I reopen Prevx and do a scan. This time he goes to an end and I see the result (joint).
I close this display and the icon disappears immediately from the taskbar.
You say "right klick prevx tray symbol, safe log". How and when can I do that ?
When I right Klick, I have 3 options : Analyse, configure and stop.:wacko:
Thanks !

[markusg]

you can also open the prevx main window, select tools, safe log.

[Jeannot]

Yes, this is it : I reopen Prevx - this time one icon in the taskbar - and I simply pass the mouse over it and the icon is gone !

[Jeannot]

OK.. i'll do what you say first !
Thanks again.

[markusg]

and can you open it in "start" "programs"?

[PrevxHelp]

-{ Quote: "Hi,

I 'm using (trying) Prevx free on XP sp3 as Admin sinds a month.
I see again (this has already happened several times recently) that there are up to four icons of Prevx in the taskbar. Then, they disappear one by one and the last one stays.
But today the program closes permanently. I open it again, but it closes too.
I reopen it and do a scan... It closes during the scan ???
An idee of what happen ????" }-

Hello :)
Can you please try this uninstall/reinstall process:

Run the removal tool from http://info.prevx.com/download.asp?grab=csiuninstalltool

Then reboot your PC

Then install the newest version from http://info.prevx.com/downloadcsi.asp

- if it still doesn't install properly, try uninstalling again now by running:

"c:\program files\prevx\prevx.exe" /prop UNINSTALL=AUTO

and then reboot and install again.

Let me know what you find!

[Jeannot]

OK. Thank you for your prompt response !:)

[Jeannot]

Hi,

I've used "Force Uninstall Prevx" but after the reboot, a screen appeared asking me to install Prevx??
I've now close the screen and wait for your instructions... (at this stage can I continue installing the new version?):o

[Jeannot]

Hi,
I finally follow all your recommendations.
I had to go until the end, but the problem seems to be resolved.
Thank you very much for your help.8)

[treehouse786]

hello, recently bought a prevx licence (my first ever software purchase! :D ), i have recently come across a malware collection containing 500 malware's, prevx detected about 370 which still leaves about a 130 which prevx is not detecting, is there a way i can send the remaing undetected files to prevx to add to their database?

[Triple Helix]

-{ Quote: "hello, recently bought a prevx licence (my first ever software purchase! :D ), i have recently come across a malware collection containing 500 malware's, prevx detected about 370 which still leaves about a 130 which prevx is not detecting, is there a way i can send the remaing undetected files to prevx to add to their database?" }-

If you can please follow the instructions to send the possible undetected malware to Prevx as stated in this post: http://www.wilderssecurity.com/showthread.php?t=245129 You will probably have to send a few to get them all sent!

HTH,

TH

[treehouse786]

thank you, email sent

[Triple Helix]

-{ Quote: "thank you, email sent" }-

Your welcome!

TH

[NBP Pipsquack Bird]

Bug:

PSO v3.05.171 Win 7 both x86 and x64 fully patched, IE8 (both x86 and x64)

In the upper right corner of IE8 is a search provider box with an arrow on the far right end of the box. If you click that arrow what drops down is a list of search providers AND a box called "Find on This Page." The Find on this page if clicked on should add a toolbar to IE8 with its own search box. Enter a term in the search box and it will immediately locate and highlight all those terms on the given web page.

With PSO build 171 installed, the Find On This Page toolbar will not appear and thus the feature is unavaiable.

Please fix in next release as for me and probably many others, the Find on This Page is of daily importance when searching lengthy webpages for a single term.


Request:

On one PC I run Windows with the screens DPI at 125% (as WIndows 7 calls it.) With this non standard DPI screen resolution, the PSO tab in IE sits off to the right between the address box and search box.
This is obviously just an aesthetics issue but if you folks could make the PSO icon line up with the address box when Windows at a non default DPI that would be great!

[Triple Helix]

-{ Quote: "Bug:

PSO v3.05.171 Win 7 both x86 and x64 fully patched, IE8 (both x86 and x64)

In the upper right corner of IE8 is a search provider box with an arrow on the far right end of the box. If you click that arrow what drops down is a list of search providers AND a box called "Find on This Page." The Find on this page if clicked on should add a toolbar to IE8 with its own search box. Enter a term in the search box and it will immediately locate and highlight all those terms on the given web page.

With PSO build 171 installed, the Find On This Page toolbar will not appear and thus the feature is unavaiable.

Please fix in next release as for me and probably many others, the Find on This Page is of daily importance when searching lengthy webpages for a single term.


Request:

On one PC I run Windows with the screens DPI at 125% (as WIndows 7 calls it.) With this non standard DPI screen resolution, the PSO tab in IE sits off to the right between the address box and search box.
This is obviously just an aesthetics issue but if you folks could make the PSO icon line up with the address box when Windows at a non default DPI that would be great!" }-

To answer your first Question "Find On This Page toolbar" works fine on the x64 of IE8 but not on the 32bit IE8 on Win 7 x64 for me with the new RC 3.0.5.174 I will in a moment check to see if it works fine on my Win 7 32bit and report back!

And to answer your other Question you can open the Prevx SafeOnline Tab and Drag the Tab Window to where ever you want it in the supported Browsers! :thumb:

HTH,

TH

219121

EDIT 1: I tried on 32bit IE8 and can't make it work even if I disable PSO so I booted into Win 7 32bit and tried IE8 and can't get that to work either even if I disable PSO, I Also disabled the BHO in IE8 and does not solve it, I even Disabled Prevx completely and it still does not work I will now uninstall Prevx to see if that helps?

EDIT 2: Uninstalling Prevx fixes the problem! To the Prevx Team could it be the BHO in IE8 that could cause this Problem as it does work fine with the 64bit IE8 version but not 32bit IE8 in Win 7 64bit or Win 7 32bit?

[PrevxHelp]

-{ Quote: "
EDIT 1: I tried on 32bit IE8 and can't make it work even if I disable PSO so I booted into Win 7 32bit and tried IE8 and can't get that to work either even if I disable PSO, I Also disabled the BHO in IE8 and does not solve it, I even Disabled Prevx completely and it still does not work I will now uninstall Prevx to see if that helps?

EDIT 2: Uninstalling Prevx fixes the problem! To the Prevx Team could it be the BHO in IE8 that could cause this Problem as it does work fine with the 64bit IE8 version but not 32bit IE8 in Win 7 64bit or Win 7 32bit?" }-

Thanks TH and NBP Pipsquack Bird for the debugging assistance! We will be looking closer at this problem and hopefully have a solution in the next beta release :) I'll report back with what we find!

[redwolfe_98]

when i test prevx's realtime-protection, using the "trojansimulator" files, prevx's realtime-protection fails to flag "trojansimulator.exe" when i run it.. so, as far as i can tell, prevx's realtime-protection is not functioning and, so, is useless..

prevx's manual "on-demand" scanner flags the trojansimulator files..

[Triple Helix]

-{ Quote: "when i test prevx's realtime-protection, using the "trojansimulator" files, prevx's realtime-protection fails to flag "trojansimulator.exe" when i run it.. so, as far as i can tell, prevx's realtime-protection is not functioning and, so, is useless..

prevx's manual "on-demand" scanner flags the trojansimulator files.." }-

You have had this problem in the past http://www.wilderssecurity.com/showthread.php?t=272629 and it does detect them as I stated in that thread, are you using some other security that could prevent Prevx from blocking these files? Try disabling all other security software and try again!

[eugene91]

I think Prevx SafeOnline has issues with Octoshape http://www.octoshape.com/index.php?page=showcase/play&lang=en a program to stream online radio..

All my browsers would crash when I try to stream radio.. :wacko:

I'd really want to use Prevx SafeOnline again..

[PrevxHelp]

-{ Quote: "I think Prevx SafeOnline has issues with Octoshape http://www.octoshape.com/index.php?page=showcase/play&lang=en a program to stream online radio..

All my browsers would crash when I try to stream radio.. :wacko:

I'd really want to use Prevx SafeOnline again.." }-

Could you please save a scan log by clicking Tools - Save Scan Results and send it to report@prevxresearch.com? We should be able to correct it from there :)

Thank you!

[eugene91]

It's not the scanning issue.. It will say plugin failed to load and hangs the browser and I have to restart the browser.. So i removed PrevX and no more issues.. Could be the plugin issue.. Since that Java did warned "harmful" application which is not.

[Triple Helix]

-{ Quote: "It's not the scanning issue.. It will say plugin failed to load and hangs the browser and I have to restart the browser.. So i removed PrevX and no more issues.. Could be the plugin issue.. Since that Java did warned "harmful" application which is not." }-

PrevxHelp wanted the scan log from Prevx so that he could possibly fix the issue at his end: http://www.wilderssecurity.com/showthread.php?t=270590

TH

[eugene91]

Problem solved. Thanks to Prevx Support :D Now I can use Prevx SafeOnline again :D

[Triple Helix]

-{ Quote: "Problem solved. Thanks to Prevx Support :D Now I can use Prevx SafeOnline again :D" }-

Great to here! :thumb:

TH

[Dermot7]

3.0.5.179
"Use Smart Scanning to improve speed" option in Tools>Advanced Scan is
unchecking itself, but very intermittently, and I haven't yet discovered what occasions this, so afaik is not re-producable.
I been watching this for a while, to see if I was wrong, or could find why it occasionaly happens, but it's definitely happening sometimes. Maybe only on
my set-up? Anyone else noticed this?
P.S. I've realised if you do a right-click scan, and then open Prevx, then Smart Scanning option will have been unchecked, so I guess this is as it
should be. Sorry, hadn't noticed this before.

[PrevxHelp]

-{ Quote: "3.0.5.179
"Use Smart Scanning to improve speed" option in Tools>Advanced Scan is
unchecking itself, but very intermittently, and I haven't yet discovered what occasions this, so afaik is not re-producable.
I been watching this for a while, to see if I was wrong, or could find why it occasionaly happens, but it's definitely happening sometimes. Maybe only on
my set-up? Anyone else noticed this?
P.S. I've realised if you do a right-click scan, and then open Prevx, then Smart Scanning option will have been unchecked, so I guess this is as it
should be. Sorry, hadn't noticed this before." }-

This is intentional in that the checkbox doesn't get saved. However, I do suspect you're correct in that it will persist if you haven't rebooted, but the main reason behind it is to not have the user run a smart scan unless they're intentionally trying to.

Hope that helps! :)

[Dermot7]

-{ Quote: "This is intentional in that the checkbox doesn't get saved. However, I do suspect you're correct in that it will persist if you haven't rebooted, but the main reason behind it is to not have the user run a smart scan unless they're intentionally trying to.

Hope that helps! :)" }-
Thanks Joe, yes, what you say sounds right, and makes this clearer. It's also the default setting for smart scanning to be unchecked e.g. when doing a fresh
install. Personally, I usually do a deep scan (smart scanning unchecked) after an update, and after that use smart scanning.

[Triple Helix]

-{ Quote: "Thanks Joe, yes, what you say sounds right, and makes this clearer. It's also the default setting for smart scanning to be unchecked e.g. when doing a fresh
install. Personally, I usually do a deep scan (smart scanning unchecked) after an update, and after that use smart scanning." }-

I never use smart scanning I just keep the default Deep Scan it only takes 2 to 3 minutes! ;)

TH

[Dermot7]

-{ Quote: "I never use smart scanning I just keep the default Deep Scan it only takes 2 to 3 minutes! ;)

TH" }-
Hi TH, thanks......think I'll try it like you say, and see if I see any much difference over time. Recently I've been thinking that scanning is slower than it
was before, but, of course, it's unrealistic to make many scan speed comparisons due to differing software combos, amount of files etc.

[pegr]

If a SafeOnline protected value is entered into a different website in order to test the protection, the Credential Protection alert is displayed as expected. After closing the browser, when it reopens, keying just the last character of the protected value causes the Credential Protection alert to be displayed again. It doesn't matter what website is used for the test or what the protected value is. I tried this repeatedly with Firefox and IE8 and got the same result with both browsers.

This looks like a bug in SafeOnline's Credential Protection. It appears that SafeOnline is remembering the previously keyed keystrokes and sees the attempt to rekey the last character as completing the entire protected value, hence the alert.

[tombsc]

1. I have to switch off safeonline in order to type my details into the internet banking sign on pages for Nationwide and First Direct - Not much else seems to be affected every time, but once or twice safeonline has prevented any text field input on any website

2. The auto update has never worked for me. It says a new version is available but then fails to download it. I have to manually visit prevx.com and download and install a new version.

Using FF3.6 on Windows Vista

[Triple Helix]

-{ Quote: "1. I have to switch off safeonline in order to type my details into the internet banking sign on pages for Nationwide and First Direct - Not much else seems to be affected every time, but once or twice safeonline has prevented any text field input on any website

2. The auto update has never worked for me. It says a new version is available but then fails to download it. I have to manually visit prevx.com and download and install a new version.

Using FF3.6 on Windows Vista" }-

Can you please send a scan log to Prevx they may see something in your log that they can fix at there end! http://www.wilderssecurity.com/showpost.php?p=1662381&postcount=1

TH

[PrevxHelp]

-{ Quote: "Can you please send a scan log to Prevx they may see something in your log that they can fix at there end! http://www.wilderssecurity.com/showpost.php?p=1662381&postcount=1" }-

In addition to this, it would also be helpful to know if you're using any other browser security products.

Thank you! :)

[tombsc]

-{ Quote: "In addition to this, it would also be helpful to know if you're using any other browser security products.

Thank you! :)" }-

The only other security product is Windows Defender and I recently downloaded Spywareblaster, but the problems were there prior to this.
I'll take your advice and send my scan log to prevx. Thanks.

[CloneRanger]

False memory syndrome ;D

220791

No big deal, just a heads up for you really ;) I did have this nasty i DL'd but i Permanently deleted it. Still showing up on boots though ?

No need to wake TH or PH up though for this :D When you get a spare minute, or three :thumb:

[Triple Helix]

-{ Quote: "False memory syndrome ;D

220791

No big deal, just a heads up for you really ;) I did have this nasty i DL'd but i Permanently deleted it. Still showing up on boots though ?

No need to wake TH or PH up though for this :D When you get a spare minute, or three :thumb:" }-

You know what I'm going to say! ;D Uninstall reboot and install again to clear it up! And also we will see what Joe has to say?

TH

[CloneRanger]

@ Triple Helix

Oh you woke up, sorry ;D

No don't say that :D

Why is it we have to keep going through the same hoops to fix things ? I would have thought a silent update could fix it ?

[Triple Helix]

-{ Quote: "@ Triple Helix

Oh you woke up, sorry ;D

No don't say that :D

Why is it we have to keep going through the same hoops to fix things ? I would have thought a silent update could fix it ?" }-

It's to clear the cache!

HTH,

TH

[Konata Izumi]

-{ Quote: "It's to clear the cache!

TH" }-

I demand for clear cache function. ;D

[PrevxHelp]

You can right click on the entry and select Report as a false positive :) It is likely that the file data isn't flushed into the harddisk itself so Prevx is seeing it below the OS' current view of what is deleted/active.

[CloneRanger]

-{ Quote: "Originally Posted by Triple Helix

It's to clear the cache!" }-

Cache, what cache where ?

-{ Quote: "Originally Posted by Konata Izumi

I demand for clear cache function." }-

Yeah me too :)

-{ Quote: "Originally Posted PrevxHelp

You can right click on the entry and select Report as a false positive " }-

Yes thanks i know that ;) and have now, but wanted to know why it had FMS, and how to prevent it happening again. Plus i thought you'ld like to know about it.

-{ Quote: "It is likely that the file data isn't flushed into the harddisk itself so Prevx is seeing it below the OS' current view of what is deleted/active." }-

In english please ;D

[PrevxHelp]

-{ Quote: "
In english please ;D" }-

;D When you delete a file, it isn't actually deleted - it is merely marked as deleted. However, if the operating system has not updated every part of the file system on the physical disk, it's possible that there would be a mismatch between what Prevx sees and what Windows sees (as Prevx scans the disk without using the file system directly at all).

It would probably be worthwhile trying a reboot and a rescan to see if that clears it down, but if all else fails, you can always just mark it as a FP and it will be removed from the scan :)

[CloneRanger]

-{ Quote: "Originally Posted by PrevxHelp

When you delete a file, it isn't actually deleted - it is merely marked as deleted." }-

That i did know ;)

Even after a reboot and a rescan it was still there, and even after marking it as a FP. Scanned today and it hasn't appeared, go figure No big deal as i said, but i was curious to know why, and thought you should be made aware of a "possible" bug.

[CloneRanger]

Still happening today after a reboot :(

The others have gone as i said :thumb: but 3 malware files i DL'd yesterday and deleted in a folder to the Recycle Bin, still show up as in the Deleted folder from on my desktop ? Impossible as it's, In the Bin :P

FMS or Phantom or ? Whatever is causing it, i believe it sure looks like a bug ? Not serious, and doesn't bother me, but non wilders etc people "could" be seriously spooked by these alerts.

[pling_man]

-{ Quote: "However, if the operating system has not updated every part of the file system on the physical disk, it's possible that there would be a mismatch between what Prevx sees and what Windows sees (as Prevx scans the disk without using the file system directly at all).
" }-

It might just go away if you defrag the disc.

[Triple Helix]

-{ Quote: "Still happening today after a reboot :(

The others have gone as i said :thumb: but 3 malware files i DL'd yesterday and deleted in a folder to the Recycle Bin, still show up as in the Deleted folder from on my desktop ? Impossible as it's, In the Bin :P

FMS or Phantom or ? Whatever is causing it, i believe it sure looks like a bug ? Not serious, and doesn't bother me, but non wilders etc people "could" be seriously spooked by these alerts." }-

Can you do a Check Disk scan on reboot for me to see if the files come back? I had to do it once and it worked for me!

TH

220924

[CloneRanger]

@ Triple Helix

Thanks

Did a Check Disk scan on reboot still there ?

[Triple Helix]

-{ Quote: "@ Triple Helix

Thanks

Did a Check Disk scan on reboot still there ?" }-

Time to ask for a remote session from Prevx Support: http://info.prevx.com/service.asp

TH

[PrevxHelp]

-{ Quote: "@ Triple Helix

Thanks

Did a Check Disk scan on reboot still there ?" }-

It might be worth trying to uninstall/reinstall Prevx and see if that clears it down - not sure why they would be hanging around but if that doesn't solve it, we can certainly try a remote support session to get to the bottom of it! :)

[CloneRanger]

-{ Quote: "Originally Posted pling_man

It might just go away if you defrag the disc." }-

Thanks, might try that soon :thumb:

-{ Quote: "Originally PostedTriple Helix

Time to ask for a remote session from Prevx Support:" }-

Or not ;D But thanks for the suggestion :thumb:

-{ Quote: "Originally Posted by PrevxHelp

It might be worth trying to uninstall/reinstall Prevx and see if that clears it down" }-

This seems to be a standard answer these days :P I don't think we should have to keep doing that, not on final release versions anyway. And if i did, i guess the likelyhood of it happening again is more than 50/50, which would only incurr the same suggestion :D That's why i "believe" it might be a bug, and needs sorting.

-{ Quote: "we can certainly try a remote support session to get to the bottom of it!" }-

Hey leave me bottom out of this ;D I mentioned before that i have disabled the RS stuff, and have no intention of enabling it, but thanks for asking :thumb:

Not a big problem, but it is one !

[pabrate]

I found two major FP's , but I learned from previous report that FP's should be sent via email and I don't like that.
So, that's that, if Prevx is interested I can give their names.

But what is really interesting is that real-time scanner doesn't catch it nor report it, but default scan does find it.
And maybe this was said before but I can see Prevx in VirusTotal list but I'm sure they not use Prevx for analyze.
Those two samples proved that just now, Prevx scan finds them, HitmanPro finds them (just Prevx Vendor) but VT says Prevx is not detecting it.
I even executed A-Squared Emergency Kit and it didn't find them (which is definite proof for me that this is for sure FP !!) MBAM scan didn't find them as well.
Really weird :)

But fine, whatever, another one of never-ending Prevx mysteries :D

[Triple Helix]

-{ Quote: "I found two major FP's , but I learned from previous report that FP's should be sent via email and I don't like that.
So, that's that, if Prevx is interested I can give their names.

But what is really interesting is that real-time scanner doesn't catch it nor report it, but default scan does find it.
And maybe this was said before but I can see Prevx in VirusTotal list but I'm sure they not use Prevx for analyze.
Those two samples proved that just now, Prevx scan finds them, HitmanPro finds them (just Prevx Vendor) but VT says Prevx is not detecting it.
I even executed A-Squared Emergency Kit and it didn't find them (which is definite proof for me that this is for sure FP !!) MBAM scan didn't find them as well.
Really weird :)

But fine, whatever, another one of never-ending Prevx mysteries :D" }-

How about the lines from the scan log? Just post the FP lines here or PM them to PrevxHelp!!

HTH,

TH

[pabrate]

-{ Quote: "How about the lines from the scan log? Just post the FP lines here or PM them to PrevxHelp!!

HTH,

TH" }-

Sure, no problem.

[NF] d:\program files\windows media player\wmpdmccore.dll [PX5: BE44BB00001DC5B0F2CC049DDE6A4D0057C759E2]
[NF] d:\windows\system32\slwc.exe [PX5: 7242C342E0786788D0750411D50F8300954EBE87]

First one : No comment.
Second : Link (http://www.windowsxlive.net/snow-transformation-pack-the-new-masterpiece-is-here)

I don't know what [NF] on those lines stands for but it's in Detection overrides now.

[pabrate]

220983

Those two infected entries doesn't appear in scan log so here's the picture.

[pabrate]

OK, after removing those two overrides, slwc.exe is still found but windows media player is not anymore.
In fact, I can't remember that scanner even found / detected wmpdmccore.dll , it was just sitting there in overrides but not by my manual add (100% sure)
Would that even be possible ? (for Prevx to put something in overrides by itself without alerting user at all)

[pabrate]

I can report that Prevx added this entry in override by itself :

[NF] (ACTIVE) d:\program files\windows media player\wmpdmccore.dll [PX5: BE44BB00001DC5B0F2CC049DDE6A4D0057C759E2]

220993

Any comment ?

[pabrate]

Never mind, all is good, I won't bother you again.
Admins can delete last few posts starting from #192

[SweX]

You can delete the posts your self if you want to:)

[pabrate]

-{ Quote: "You can delete the posts your self if you want to:)" }-

How ? I can only edit them and make them empty, anyhow, there is TH's reply.
I mean whatever, I asked legit questions, Prevx for some reason doesn't like reporting FP's at their forum (every other Vendor here doesn't mind that) , or maybe Prevx doesn't like me for some reason, which is fine, I can understand that :)
I just want to understand better the product, that's all.

I'll quote something from one very popular movie :

"I'm here to help - if my help's not appreciated then lotsa luck, gentlemen"

::)

[PrevxHelp]

-{ Quote: "
I mean whatever, I asked legit questions, Prevx for some reason doesn't like reporting FP's at their forum (every other Vendor here doesn't mind that) , or maybe Prevx doesn't like me for some reason, which is fine, I can understand that :)" }-

We don't not like you ;D We do dissuade false positive reporting to the forum, however - for instance, these FPs were already fixed but we looked unresponsive because I was flying back from the UK to the US while another one of our support staff fixed the FP from a submission to report@prevxresearch.com :)

[pabrate]

-{ Quote: "We don't not like you ;D We do dissuade false positive reporting to the forum, however - for instance, these FPs were already fixed but we looked unresponsive because I was flying back from the UK to the US while another one of our support staff fixed the FP from a submission to report@prevxresearch.com :)" }-

Okay, nice to hear that :thumb:

[Triple Helix]

-{ Quote: "Okay, nice to hear that :thumb:" }-

Also this is why not post FP's in the forums: http://www.wilderssecurity.com/showpost.php?p=1678435&postcount=8

HTH,

TH

[pabrate]

-{ Quote: "Also this is why not post FP's in the forums: http://www.wilderssecurity.com/showpost.php?p=1678435&postcount=8

HTH,

TH" }-

Okay, fair enough, will not post them anymore here, as for sending them via email I'll think about it :)

[Triple Helix]

-{ Quote: "Okay, fair enough, will not post them anymore here, as for sending them via email I'll think about it :)" }-

Thank You! ;)

TH

[CloneRanger]

@ PrevxHelp

Discovered a way that gets rid of FMS. Whilst disconnected from the www i ran a scan, or i should say tried to. Obviously this doesn't work without the www When i connected and reran i now see this

221140

Might be a clue in there for you as to how to fix it No charge if there is ;)

[shadek]

The SafeOnline function DOES stop functioning from time to time in Google Chrome 6 (beta). The Prevx-icon turns blue and I can take screenshots and everything even though my settings would normally not allow it. However, usually, refreshing the page will enable protection again (and the icon turns green). Prevx-team might want to look into that.

[Triple Helix]

-{ Quote: "The SafeOnline function DOES stop functioning from time to time in Google Chrome 6 (beta). The Prevx-icon turns blue and I can take screenshots and everything even though my settings would normally not allow it. However, usually, refreshing the page will enable protection again (and the icon turns green). Prevx-team might want to look into that." }-

They will probably look at it when it comes out of Beta as there could still be many changes before then!

TH

[PrevxHelp]

-{ Quote: "They will probably look at it when it comes out of Beta as there could still be many changes before then!
" }-

Yes :) We only support browsers once they're officially released - we don't necessarily support Firefox 4 or Chrome 6 at the moment, although some of the functionality may still be working in the background.

[CloneRanger]

Whilst attempting to cut and paste these malware files to another folder, Prevx shut down :(

221311

Within less than a minute it restarted though, and appears to working as before :)

None of these can be the new Prevx POC, as i hasn't been released yet. They are waiting for v.189 :P

How wierd, what's the prognosis doctor ?

[PrevxHelp]

-{ Quote: "Whilst attempting to cut and paste these malware files to another folder, Prevx shut down" }-

Hard to say - I suspect it could have just been a random aberration. If you see it again, let me know :)

[CloneRanger]

-{ Quote: "Originally Posted by PrevxHelp

I suspect it could have just been a random aberration." }-

random aberration, well that's one way of looking at it :D

[pegr]

SafeOnline credential security doesn't work if the protected data contains embedded special characters - in my case underscores and full stops. It does work if the protected data contains only letters and numbers.

This feature used to work with embedded special characters in previous releases but no longer works in Prevx 3.0.5.187.

[PrevxHelp]

-{ Quote: "SafeOnline credential security doesn't work if the protected data contains embedded special characters - in my case underscores and full stops. It does work if the protected data contains only letters and numbers.

This feature used to work with embedded special characters in previous releases but no longer works in Prevx 3.0.5.187." }-

Thanks for the information :) I'll take a closer look at this shortly! Could you let me know if you manually configured this password or if it was automatically configured?

[pegr]

-{ Quote: "Could you let me know if you manually configured this password or if it was automatically configured?" }-I manually configured the protected values (all passwords containing underscores except for my online banking username which contains a full stop).

With an underscore or full stop present in the protected values, I was able to key them into several other websites without a peep out of SafeOnline. Wondering whether it might be something to do with the special characters, as an experiment I deleted the protected values from SafeOnline and set them up again, this time with the underscores and full stops removed and repeated the test. This time SafeOnline correctly alerted.

This does look like a genuine bug rather than something specific to my system, and I would be interested to know if you are able to reproduce this behaviour.

[PrevxHelp]

Hi pegr,
I've reproduced this - it looks to have been introduced when we fixed support for Brazilian/Portuguese keyboards. I'll see what we can do to get this fixed ASAP :)

Thanks for the heads up! :thumb:

[pegr]

Hi Joe,

Thanks for the confirmation. :)

Regards

[mHazweiO]

Hi all,

today I noted an unexpected behaviour of SO. Most of the sites I manually added to SO have the same configuration. On entering the site a quick scan is triggered and access to the site is only granted after scan completion.
I regularly use two different online banking sites. Today I inadvertently opened the bookmark for the one I didn't want to enter. The quick scan started as expected and I cancelled it after about 5 seconds. Soon after that (I was interrupted for some minutes) I accessed the second online banking site. I was quite astonished when the site opened without SO performing the quick scan.

Has anyone encountered a similar behaviour so far?

Used PrevX version: 3.0.5.189, Browser: Opera 10.62, OS: Win 7 x64

Best regards,

mHaZwei0

[Triple Helix]

-{ Quote: "Hi all,

today I noted an unexpected behaviour of SO. Most of the sites I manually added to SO have the same configuration. On entering the site a quick scan is triggered and access to the site is only granted after scan completion.
I regularly use two different online banking sites. Today I inadvertently opened the bookmark for the one I didn't want to enter. The quick scan started as expected and I cancelled it after about 5 seconds. Soon after that (I was interrupted for some minutes) I accessed the second online banking site. I was quite astonished when the site opened without SO performing the quick scan.

Has anyone encountered a similar behaviour so far?

Used PrevX version: 3.0.5.189, Browser: Opera 10.62, OS: Win 7 x64

Best regards,

mHaZwei0" }-

It's not a bug Please read this thread for some answers! http://www.wilderssecurity.com/showthread.php?t=280289

HTH,

TH

[mHazweiO]

Thanks for the explanation TH.

After reading the thread you linked to I can now remember that I read it too.
But obviously not thoroughly enough ;-)

Best regards,

mHaZwei0

[Triple Helix]

-{ Quote: "Thanks for the explanation TH.

After reading the thread you linked to I can now remember that I read it too.
But obviously not thoroughly enough ;-)

Best regards,

mHaZwei0" }-

Your very welcome! ;)

TH

[CloneRanger]

Copy/Paste problem

v.187 - XP/SP2

Only one i have found though, so far ;)

Tried to C/P into RegSeekers search bar with no success. Disabled PSOL for 5 minutes and success, so it's definately PSOL causing this.

Please do NOT ask me to update to v.199 as i prefer to wait a while for new versions to "settle down"

*

Anyone using RegSeeker with v.199 if so how' it going ?

[PrevxHelp]

-{ Quote: "Copy/Paste problem" }-

Could you send a scan log to report@prevxresearch.com? We should be able to fix it from there :)

Thanks!

[CloneRanger]

@ PrevxHelp

Copy/Paste problem seems to have been fixed = :thumb: PSOL wanted to update to v199 so i decided to allow it this time. I guess that's what did the trick ? So whatever you did thanks.

I did have a few password errors though, and it's not the first time either :( I'll wait till after a reboot and see if that cures it, before i play hell ;D

[vojta]

This bug report is exclusive to version .199. I'm in XP32 SP3, Q6600 4GB RAM. I also run NIS (the bug happens both with NIS 2010 and 2011). I'm using PSO.

The thing is that the computer totally freezes when executing some programs. It doesn't matter if real time monitoring is on or off.

The first time that it happened was while launching the Norton downloader in order to update to NIS 2011. The PC freezed the moment the GUI tried to open, only a blank GUI appeared and the computer stopped. I thought it was the downloader's fault, so I downloaded and installed NIS 2011 manually after uninstalling 2010. Everything without a problem.

It also happened after installing some Windows' updates. When rebooting, the PC freezed at the "Windows is closing" screen.

Also happens when some music applications (hosts like Cubase) try to load a plugin (a DLL file).

Uninstalling PSO always solves the problem.

I have no issues when running things like Winamp, VLC, Firefox, Rocket Dock, Norton, Malwarebytes, etc.


Cheers!.

[Triple Helix]

-{ Quote: "This bug report is exclusive to version .199. I'm in XP32 SP3, Q6600 4GB RAM. I also run NIS (the bug happens both with NIS 2010 and 2011). I'm using PSO.

The thing is that the computer totally freezes when executing some programs. It doesn't matter if real time monitoring is on or off.

The first time that it happened was while launching the Norton downloader in order to update to NIS 2011. The PC freezed the moment the GUI tried to open, only a blank GUI appeared and the computer stopped. I thought it was the downloader's fault, so I downloaded and installed NIS 2011 manually after uninstalling 2010. Everything without a problem.

It also happened after installing some Windows' updates. When rebooting, the PC freezed at the "Windows is closing" screen.

Also happens when some music applications (hosts like Cubase) try to load a plugin (a DLL file).

Uninstalling PSO always solves the problem.

I have no issues when running things like Winamp, VLC, Firefox, Rocket Dock, Norton, Malwarebytes, etc.


Cheers!." }-

If you still have Prevx installed or can you install again and please send a scan log to Prevx as stated in this post: http://www.wilderssecurity.com/showpost.php?p=1662381&postcount=1

TIA,

TH

[gates]

-{ Quote: "This bug report is exclusive to version .199. I'm in XP32 SP3, Q6600 4GB RAM. I also run NIS (the bug happens both with NIS 2010 and 2011). I'm using PSO.

The thing is that the computer totally freezes when executing some programs. It doesn't matter if real time monitoring is on or off.

The first time that it happened was while launching the Norton downloader in order to update to NIS 2011. The PC freezed the moment the GUI tried to open, only a blank GUI appeared and the computer stopped. I thought it was the downloader's fault, so I downloaded and installed NIS 2011 manually after uninstalling 2010. Everything without a problem.

It also happened after installing some Windows' updates. When rebooting, the PC freezed at the "Windows is closing" screen.

Also happens when some music applications (hosts like Cubase) try to load a plugin (a DLL file).

Uninstalling PSO always solves the problem.

I have no issues when running things like Winamp, VLC, Firefox, Rocket Dock, Norton, Malwarebytes, etc.


Cheers!." }-

I have same problem with newest prevx version when starting some games. Needless to say I have already send scan log and support ticket. ;)

[vojta]

I'm in contact with Prevx's support since a couple of days ago and I'm following their suggestions. I'm sure everything will be fixed soon.

[vojta]

-{ Quote: "I'm in contact with Prevx's support since a couple of days ago and I'm following their suggestions. I'm sure everything will be fixed soon." }-

I've just tested a Prevx's solution for this and it seems to work very well!.

[pegr]

-{ Quote: "Hi pegr,
I've reproduced this - it looks to have been introduced when we fixed support for Brazilian/Portuguese keyboards. I'll see what we can do to get this fixed ASAP" }-Hi Joe,

This bug has still not been fixed in the latest 3.0.5.205 beta. Any idea when this might be resolved?

Regards

[Dermot7]

I'm consistently seeing the issues as detailed in these two threads:

http://www.wilderssecurity.com/showthread.php?t=270783&page=2&highlight=Prevx+disabled
http://www.wilderssecurity.com/showthread.php?t=275307&highlight=Protection+disabled

That is, when I switch to Standard user(from Admin) protection appears to
be disabled, but in Task Manager prevx.exe SYSTEM process is running, and vice
versa, and also on logging in from Sleep mode. Is this issue common, and is
there a solution, please? Maybe I should reinstall, but I'm not confident this
would resolve issue since it occured before this present installation(about 2 months). It's not a big problem, but is sure irritating. Thanks :)

[Triple Helix]

-{ Quote: "I'm consistently seeing the issues as detailed in these two threads:

http://www.wilderssecurity.com/showthread.php?t=270783&page=2&highlight=Prevx+disabled
http://www.wilderssecurity.com/showthread.php?t=275307&highlight=Protection+disabled

That is, when I switch to Standard user(from Admin) protection appears to
be disabled, but in Task Manager prevx.exe SYSTEM process is running, and vice
versa, and also on logging in from Sleep mode. Is this issue common, and is
there a solution, please? Maybe I should reinstall, but I'm not confident this
would resolve issue since it occured before this present installation(about 2 months). It's not a big problem, but is sure irritating. Thanks :)" }-

Hi Dermot7,

What version of Prevx are you using? Because 3.0.5.199 has better user switching!
-{ Quote: "- (P30) Improved user switching support http://www.wilderssecurity.com/showthread.php?t=282115 " }-

Maybe do a clean install? Uninstall reboot download from the link I posted and install and after the learning scan install your license code!

HTH,

TH

[Dermot7]

Hi TH, thanks, yes I'm using the RC(build 205) but was getting problem also with build 199(but maybe not so frequently??). Maybe I'll go back to 199 and
see if there's much difference. Many thanks, take care. :)

[Triple Helix]

-{ Quote: "Hi TH, thanks, yes I'm using the RC(build 205) but was getting problem also with build 199(but maybe not so frequently??). Maybe I'll go back to 199 and
see if there's much difference. Many thanks, take care. :)" }-

Or just do a clean install of .205 and make sure you install with full administrators rights!

TH

[Dermot7]

-{ Quote: "Or just do a clean install of .205 and make sure you install with full administrators rights!

TH" }-
Yeah, thanks, think I'll try that, and of course I always install as Admin, cheers,
I'll report back with any results.

[Dermot7]

Did a clean install (of build .205), but seems same issues still persist. Not to worry, at least scan time has improved, and seems to work better with Opera.
I'm sure this will be resolved before long.

[CloneRanger]

Just wondered why all of a sudden after using it for ages, you now detect this ?

222113

Yes i've marked/excluded it as a FP, but that's not the point. I hope it's not for "some" reason i won't mention :P

[PrevxHelp]

-{ Quote: "
Yes i've marked/excluded it as a FP, but that's not the point. I hope it's not for "some" reason i won't mention :P" }-

No, we're not being rude ;D I've fixed the FP now centrally :) Thanks!

(Also, fwiw, the current beta protects against all builds of UnPrevx :))

[CloneRanger]

After allowing the Spyshelter test tool v1.44 as a FP i ran it.

When i finished i then undid the FP

222220

and ran it again. Prevx didn't alert me ? and i also got this error

222217

Ran a full scan and still no detect ?

[rolarocka]

Dont know if its a bug but if i want to install Prevx with randomized file name after installing and uninstalling on same PC with normal Prev.exe name, it says i can only install Prevx on one PC. If i install Prevx normal again (without randomized option) its all good again. P.S. all on same PC.

[PrevxHelp]

-{ Quote: "Dont know if its a bug but if i want to install Prevx with randomized file name after installing and uninstalling on same PC with normal Prev.exe name, it says i can only install Prevx on one PC. If i install Prevx normal again (without randomized option) its all good again. P.S. all on same PC." }-

Could you try rebooting your PC after uninstalling? If this continues, let me know as it definitely should be able to use both and switch between randomized/non-randomized :)

[PrevxHelp]

-{ Quote: "
and ran it again. Prevx didn't alert me ? and i also got this error" }-

That error is correct - SafeOnline will prevent the leaktest from accessing the clipboard.

-{ Quote: "Ran a full scan and still no detect ?" }-

Could you check in Detection Overrides and see if there is any remaining entry there? It would be worth trying to remove that and then rebooting to see if that clears it down.

Let me know your results! :)

[CloneRanger]

-{ Quote: "Originally Posted by PrevxHelp

That error is correct - SafeOnline will prevent the leaktest from accessing the clipboard" }-

Even after i excluded the SS test as a FP ?

-{ Quote: "Could you check in Detection Overrides and see if there is any remaining entry there? " }-

Only cos it's you ;)

-{ Quote: "It would be worth trying to remove that and then rebooting to see if that clears it down." }-

Have and it did. I expected it would, as it seems to be this is the only way Prevx can handle such things ! You're probably aware that i and others have to do this more often than we'ld like :P There must be a better solution you could factor in to future updates :thumb: IE, when we instruct it to do something, it does it ;)

By the way and FYI, when all this was going on, i got more wrong PW alerts again as previously when testing ? You might be able to connect these type of errors to "some" possible bug etc that keeps happening from time to time, under certain circumstances ;)

[pegr]

-{ Quote: "Hi Joe,

This bug has still not been fixed in the latest 3.0.5.205 beta. Any idea when this might be resolved?

Regards" }-**Bump**

[PrevxHelp]

-{ Quote: "**Bump**" }-

This is indeed still an out-standing issue. We're still working on a complete solution to this as in some languages what we see as a full stop is used as a control character and has to be handled differently. I'm not sure on the time scale to fixing this but it is more work than it would seem as there are quite a lot of languages which behave very differently.

[PrevxHelp]

-{ Quote: "
Have and it did. I expected it would, as it seems to be this is the only way Prevx can handle such things ! You're probably aware that i and others have to do this more often than we'ld like :P There must be a better solution you could factor in to future updates :thumb: IE, when we instruct it to do something, it does it ;) " }-

When you override a file as a false positive it has to set the override throughout all parts of the engine, some of which are only updated on reboot so indeed there are some headaches to trying to get it synchronized (in particular when adding something as a false positive/removing it/re-adding it).

This is indeed an area which we will be improving :)

-{ Quote: "By the way and FYI, when all this was going on, i got more wrong PW alerts again as previously when testing ? You might be able to connect these type of errors to "some" possible bug etc that keeps happening from time to time, under certain circumstances ;)" }-

Not entirely sure what would be causing that but it could possibly be some poor interaction in the keyboard monitoring. Let me know if you see anything specific!

[CloneRanger]

Originally Posted by PrevxHelp

-{ Quote: "When you override a file as a false positive it has to set the override throughout all parts of the engine, some of which are only updated on reboot" }-

Aha !

-{ Quote: "so indeed there are some headaches to trying to get it synchronized " }-

Pleased you appreciate that :)

-{ Quote: "(in particular when adding something as a false positive/removing it/re-adding it)." }-

As i've suggested before :D There should be a seperate option to Remove, not just Report as FP, as sometimes they are not FP's but we want to exclude, as in cases such as this, or Securty tools etc etc :thumb:

-{ Quote: "This is indeed an area which we will be improving" }-

You do listen ;) Glad to hear it :thumb:

Re - wrong PW alerts

All i see/get is this 222237

EDIT

I don't see it now after rebooting, just FYI Re earlier !

[pegr]

-{ Quote: "This is indeed still an out-standing issue. We're still working on a complete solution to this as in some languages what we see as a full stop is used as a control character and has to be handled differently. I'm not sure on the time scale to fixing this but it is more work than it would seem as there are quite a lot of languages which behave very differently." }-Thanks for the update.

Regards

[Dermot7]

-{ Quote: "I'm consistently seeing the issues as detailed in these two threads:

http://www.wilderssecurity.com/showthread.php?t=270783&page=2&highlight=Prevx+disabled
http://www.wilderssecurity.com/showthread.php?t=275307&highlight=Protection+disabled

That is, when I switch to Standard user(from Admin) protection appears to
be disabled, but in Task Manager prevx.exe SYSTEM process is running, and vice
versa, and also on logging in from Sleep mode. Is this issue common, and is
there a solution, please? Maybe I should reinstall, but I'm not confident this
would resolve issue since it occured before this present installation(about 2 months). It's not a big problem, but is sure irritating. Thanks :)" }-
Just an update on this, in that this morning on starting computer(cold boot), PSOL was disabled, first time this has happened. Following a reboot all was ok. I'm sure I've followed uninstall/install sequence methodically a few days ago after Triple Helix's kind advice, and I'm thinking now there is some incompatibility with something else installed, but I'm not sure and would appreciate some guidance, please. Other security software = NIS 2011, Mamutu, Hijack Hunter, No Autorun + on demand HitmanPro, MBAM, FlashCookieCleaner. OS= 32bit Windows 7 HP(fully patched). Please advise
when available, thanks.

[pegas]

-{ Quote: "Just an update on this, in that this morning on starting computer(cold boot), PSOL was disabled, first time this has happened. Following a reboot all was ok. I'm sure I've followed uninstall/install sequence methodically a few days ago after Triple Helix's kind advice, and I'm thinking now there is some incompatibility with something else installed, but I'm not sure and would appreciate some guidance, please. Other security software = NIS 2011, Mamutu, Hijack Hunter, No Autorun + on demand HitmanPro, MBAM, FlashCookieCleaner. OS= 32bit Windows 7 HP(fully patched). Please advise
when available, thanks." }-
You can remove NIS2011 from being incompatible with Prevx as I both use without any issues. They are getting very well together. As for other applications, I am sorry but I can't say.