View Full Version : Threat Alerts idea
StevieO
July 25th, 2009, 07:24 PM
Would it be possible to code into Prevx a way to automatically send any and all detects directly to central command. This could potentially save you and us a lot of time in eliminating FP's, and confirming real nasties as well ?
Maybe as an intermediate upgrade before the next version. If not in the next.
PrevxHelp
July 25th, 2009, 07:55 PM
We already have this data and we also know what will cause a false positive before it happens, therefore, we prevent any high volume false positives immediately. You managed to catch the last FP just a couple minutes after it was changed automatically into being malicious (which is part of the reason why we try and respond as quickly as possible - the faster we fix FPs, the less of a headache they are :))
We also have a view of what files users are reporting as FPs but it is quite shocking how obvious it is when malware authors are trying to game our system to automatically report FPs... we have some actually malicious samples reported thousands of times every day from a wide range of computers :-\ Apparently they don't understand how our systems work ;D
StevieO
July 25th, 2009, 08:06 PM
" we also know what will cause a false positive before it happens "
Aha, the secrets out at last, you're Psychic lol.
Jeez, those baddies, they'll stop at almost nothing. Probably paying 1 cent per send to the same people who do do live dodgy captchas on the fly too !
PrevxHelp
July 25th, 2009, 08:09 PM
{QUOTE-> " we also know what will cause a false positive before it happens "
Aha, the secrets out at last, you're Psychic lol. <-QUOTE}
Haha ;D If I was psychic I wouldn't be working on the weekend :shifty:
vBulletin® Copyright ©2000-2010, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2010, Wilders Security Forums