View Full Version : Prevx RC 3.0.4.206
PrevxHelp
September 26th, 2009, 02:19 PM
Hello all,
This build again fixes a number of issues and should be much more compatible with other applications.
32bit: http://info.prevx.com/download.asp?grab=edgebeta (ignore the "edgebeta" part of the URL - this download is RC1 )
64bit: http://info.prevx.com/download.asp?grab=edgebeta64 (the web security functionality is not 64bit compatible yet but there are significant improvements "under-the-hood" of Prevx for 64bit still and this build fixes previous 64bit incompatibilities)
The changelog is:
Fixed compatibility with Babylon OCR
Major improvements in the protection engine which reduce resource usage significantly
Improved performance in the file read monitor
Improved identification of executions to reduce unnecessary overhead while loading new programs
Fixed some tab position issues on Windows 2000
Fixed protection under 64bit
Fixed multiple issues under Sandboxie's protection
Fixed compatibility with GData's WebFilter
Significantly improved URL identification on Chrome on XP
Fixed some tab position issues in Chrome on XP
Fixed an issue creating desktop shortcuts with UAC enabled
Fixed an issue moving the scrollbar quickly in Opera
Improved browser performance in Opera
Fixed some text parsing issues in Opera
Fixed some issues accessing protected storage in IE6/7
Fixed an issue preventing form data-stored passwords from being read by the browser
Fixed tab position in a Google Chrome "Desktop Application"
Fixed some UAC incompatibilities
Fixed an incompatibility with the Vista desktop window manager
Fixed a redraw issue when moving back across text with the arrow keys
Fixed incompatibility with BS Player Pro
Minor graphical changes
Minor textual changes
Current known incompatibilities are:
- Possible issue with Threatfire v4.6.0.19
- Some issues with Fritz!Protect firewall
- Possible issue with some download managers
- Some incompatibilities with DefenseWall's "Untrusted" branding/Online Armor's green border
- Incomplete Safari support
Minor changes which we will be making:
- A "Reset to Default" button
- A warning when the user sets Maximum heuristics
- Additional browser support (suggestions from: http://www.wilderssecurity.com/showthread.php?t=254228)
Please let me know what issues you find! Some of the new protection fixes require a reboot after upgrade so you may want to reboot for good measure even if you haven't experienced the incompatibilities we have corrected.
firzen771
September 26th, 2009, 02:35 PM
giving it a try now, will report back.
wutsup
September 26th, 2009, 03:05 PM
yea i think prevx and threat fire 4.6 hav problems together. as long as threat fire is not included in the windows security center everything works together. but once u included TF into WSC, and u restart ur comp, when go into windows security center and click on show all antivirus/spyware and u close it i get a windows host process has stopped working (rundll32)
firzen771
September 26th, 2009, 03:10 PM
im running whatever is in my sig and now my internet issue is slightly different. i have fine internet connection when prevx is running, but as soon as i do a scan and wen it reaches 98% (where it sats analyzing results) thats when my internet cuts out and wont work again until i restart, restarted several times now and everytime the same thing, loss of internet when its analyzing results...
well internet also seems to cut out over time as well as when analyzing results, seems this issue is still happening...
Habakuck
September 26th, 2009, 03:32 PM
Well done.
Win7 64-bit is working fine! Real Time Protection works! Finally.. ::)
Prevx is back on line...
markusg
September 26th, 2009, 03:46 PM
i will test tomorrow if prevx and my screenreader works now better together
simmikie
September 26th, 2009, 04:27 PM
welllll....SafeOnline P3 RC 206 seems to be doing (or not doing) the same as it always has on my XP Pro SP3 system.
with Opera 10 and P3 set on default HTTP settings:
Host Name: Unknown
IP Address: Unknown
IP Verification: IP Not Verified
not tragic at all really, i don't need SafeOnline. i have Defensewall, and i count on P3 RT protection to handle any drive-bys that reach the local machine.
it is weird though why my chosen default browser is giving SafeOnline such a hard time. if i liked IE8 or FF as much as i do Opera, i wouldn't even bother reporting this.
Mike
PrevxHelp
September 26th, 2009, 04:31 PM
{QUOTE-> welllll....SafeOnline P3 RC 206 seems to be doing (or not doing) the same as it always has on my XP Pro SP3 system.
with Opera 10 and P3 set on default HTTP settings:
Host Name: Unknown
IP Address: Unknown
IP Verification: IP Not Verified
not tragic at all really, i don't need SafeOnline. i have Defensewall, and i count on P3 RT protection to handle any drive-bys that reach the local machine.
it is weird though why my chosen default browser is giving SafeOnline such a hard time. if i liked IE8 or FF as much as i do Opera, i wouldn't even bother reporting this.
Mike <-QUOTE}
I don't have extensive knowledge of how Defensewall works, but from what I understand, it prevents untrusted processes from reaching trusted processes. The fixed Opera support will require data to be transmitted from a Prevx module within the Opera process back to the main Prevx process to tell it what website the browser is currently on.
Does anyone with better Defensewall knowledge know if this would be the cause of the issues simmikie is having? I'm using Opera 10 here now on Windows 7 and have personally tested it rather extensively on Windows Vista and XP without problems :-\
simmikie
September 26th, 2009, 04:53 PM
hello Joe,
P3 is being weird again.
i am getting the Prevx cannot connect dialog box, (i'll finish what i suspect was P3 interrupted) even though my connection is fine, pages are load, i checked in Comodo FW and Prevx is not being blocked. i further checked how i have P3 configured in the FW, and it is a Trusted app, able to do whatever it wants with no intefrom Comodo. i am geting these annoying messages every 30 seconds or so.
when i attempted to disable P3 while i finithis post and i could reboot, P3 disabled SafeOnline but did not itself ( i set it for reenable on reboot) the dialog box froze, and i was unable type further. i tried IE8 instead of Opera, and i still could not type anything. i decided to uninstall P3 from the CP, that crashed, and i had to crash my system to free it from this mess.
strange stuff indeed.
EDIT: Control Panel was crashed again as i was attempting to remove P3 206. FDISR to the rescue again. Joe if you're around, and want to look at let me know before i revert back to 195, which i will remove and return to P3's latest release.
Last EDIT: just to be sure Comodo was not some how interferring with P3 i disabled both it's HIPS and FW, still getting P3 cannot connect dialog box.
Mike
MatDE
September 26th, 2009, 06:33 PM
Hi Joe, I had the new RC installed above public version, enabled SafeOnline (default) and then rebooted. First tests with FF 3.5.3 were fine: No BSPlayer PRO problems nor with Babylon or Fritz!Protect v2.04.02. ;)
Then I noticed something strange: When I am not using https I can take screenshot with Hypersnap as it should be (http = LOW). When I open in one tab of FF let's say web.de (https) then screenshots are black as it should be (https = MAXIMUM).
But when I close this only https tab and try another screenshot at http website the screen stays black? Shouldn't it be allowed then again? ;D
Well ... and after that I started IE8 and saw the following very nice GUI which didn't get better another time rebooting - maybe antibiotic would help? ;D
Who needs IE anyway .. right! 8)
(It looks strange but still works btw. ;) )
p.s.: My configuration is the same you saw recently - with Avira 9 Premium added if this helps.
IPs don't get verified ... that is new ... not even after long time of waiting?
PrevxHelp
September 26th, 2009, 06:36 PM
{QUOTE->
But when I close this only https tab and try another screenshot at http website the screen stays black? Shouldn't it be allowed then again? ;D <-QUOTE}
We intentionally don't allow it then. The reason being: although the tab may be inactive/closed, there could still be some data on screen or some other piece of information still hanging around within the browser, therefore, until that entire browser window is closed, we block anything from seeing it. (As soon as an HTTPs website is opened, we flag the entire browser session as potentially containing confidential information).
{QUOTE-> Well ... and after that I started IE8 and saw the following very nice GUI which didn't get better another time rebooting - maybe antibiotic would help? ;D
Who need IE anyway .. right! 8)
(It looks strange but works btw. ;) ) <-QUOTE}
That, on the other hand, is not intentional ;D I suspect this may be a problem with Prevx+HyperSnap. If you drag the window around offscreen or minimize/restore it, does the black dirtiness go away? :)
Thanks for the testing!
PrevxHelp
September 26th, 2009, 06:40 PM
{QUOTE->
i am getting the Prevx cannot connect dialog box, (i'll finish what i suspect was P3 interrupted) even though my connection is fine, pages are load, i checked in Comodo FW and Prevx is not being blocked. i further checked how i have P3 configured in the FW, and it is a Trusted app, able to do whatever it wants with no intefrom Comodo. i am geting these annoying messages every 30 seconds or so. <-QUOTE}
I suspect something within Comodo is still blocking P3 as I can connect here and we don't have any reported outages anywhere.
{QUOTE-> when i attempted to disable P3 while i finithis post and i could reboot, P3 disabled SafeOnline but did not itself ( i set it for reenable on reboot) the dialog box froze, and i was unable type further. i tried IE8 instead of Opera, and i still could not type anything. i decided to uninstall P3 from the CP, that crashed, and i had to crash my system to free it from this mess. <-QUOTE}
:-\ I think this is some nasty side effect of Comodo blocking P3. I'd recommend against going back to 195 simply because of the large number of changes and fixes we've put in place since then but it may be worth trying to uninstall Prevx completely using the commandline:
"c:\program files\prevx\prevx.exe" /prop UNINSTALL=AUTO
and then rebooting your PC and reinstalling .206 fresh again from a clean start.
Let me know if this works any better or if you're still having the nightmares you've described and I'll look closer.
MatDE
September 26th, 2009, 06:47 PM
{QUOTE-> We intentionally don't allow it then. <-QUOTE}
O.K. - but if I had something to say I would change that. Thank god I haven't as part time employee! ;D
{QUOTE-> I suspect this may be a problem with Prevx+HyperSnap. If you drag the window around offscreen or minimize/restore it, does the black dirtiness go away? :) <-QUOTE}
Don't think so because the problem exists even if Hypersnap is not running or wasn't after reboot. And no - dragging the window around does not hinder the dirtiness to be! ;) - But maybe if you don't do something about it the new look will be in short time en vogue? ;D
{QUOTE-> Thanks for the testing! <-QUOTE}
It's always a pleasure to keep you busy and away from tv-series! ;D *justkidding*
(Monk is waiting so bye for now but let me know anytime if you want to sniff around here again. ;) )
p.s.: Did you see that?
"IPs don't get verified ... that is new ... not even after long time of waiting?"
simmikie
September 26th, 2009, 07:20 PM
{QUOTE-> I suspect something within Comodo is still blocking P3 as I can connect here and we don't have any reported outages anywhere.
:-\ I think this is some nasty side effect of Comodo blocking P3. I'd recommend against going back to 195 simply because of the large number of changes and fixes we've put in place since then but it may be worth trying to uninstall Prevx completely using the commandline:
"c:\program files\prevx\prevx.exe" /prop UNINSTALL=AUTO
and then rebooting your PC and reinstalling .206 fresh again from a clean start.
Let me know if this works any better or if you're still having the nightmares you've described and I'll look closer. <-QUOTE}
hey Joe,
i know you folks are working hard on this, and my situation withe the current P3 RC1 is isolated, i have just installed the current release of P3 and there i sit until i am forced to use P3 with SafeOnline (autoupdate when 3.0.4.xxx is released and pushed out).
i am certain by that time you will have most of it worked out, so until then....thanks for your efforts. :)
Mike
Threedog
September 26th, 2009, 09:11 PM
{QUOTE-> I don't have extensive knowledge of how Defensewall works, but from what I understand, it prevents untrusted processes from reaching trusted processes. The fixed Opera support will require data to be transmitted from a Prevx module within the Opera process back to the main Prevx process to tell it what website the browser is currently on.
Does anyone with better Defensewall knowledge know if this would be the cause of the issues simmikie is having? I'm using Opera 10 here now on Windows 7 and have personally tested it rather extensively on Windows Vista and XP without problems :-\ <-QUOTE}
Although I am no Defensewall expert, I suspect also that this is what is going on. I can't confirm it as I don't use Opera...Firefox fan...I also don't have Defensewall installed at the moment. But I remember those Defensewall logs I sent you when the Beta started showing the interaction between IE8 and Firefox and that Defensewall was blocking some of the interaction. I would imagine if someone was having trouble and sent Ilya the Defensewall logs he would be able to correct it.
Triple Helix
September 27th, 2009, 12:01 AM
Working very well with my setup! :thumb:
TH
MatDE
September 27th, 2009, 02:44 AM
After a few hours of sleep and reboot IE8 right now looks normal again? ??? - IPs however are still 'not verified' at all. - After having that reported going to bed again. ;D
Habakuck
September 27th, 2009, 04:26 AM
Hey Joe.
Prevx v3.0.4.206 is not detecting the autostart entry of the trojan simulator.
It is detecting the trojansimulator.exe on execution.
It is also detecting the TSServ.exe on installation.
It is detecting the trojansimulator.exe and the running TSSServ.exe on-demand.
But it is not detecting the autostart entry wich leads to the TSSServ.exe.
After the complete removal reboot the entry is still existing.
Romagnolo1973
September 27th, 2009, 05:46 AM
Hi Joe just a litle bug that afflicted SafeOnline even the previous release
If you clich 4 times faster on FF icon (opening 2 instance of the browser at the same time) the first windows is with prevx logo green, second is blue
If you open 2 instance just not so fast, everything works well
SafeOnline on maximum, XP SP3 , FF3.5.3
Here the pic so you can see the issue
http://img200.imageshack.us/content.php?page=done&l=img200/9065/clipboard01qi.jpg&via=mupload
On IE this not happens, everything works good
Opera or Chrome I don't know (I only use on ubuntu 'cause are better than FF ;D )
I also still continue having the allert "Handle not valid" clicking on desktop's icons , I think is prevx because is the only thing changed in the system
Romagnolo1973
September 27th, 2009, 06:00 AM
{QUOTE-> Hey Joe.
Prevx v3.0.4.206 is not detecting the autostart entry of the trojan simulator.
It is detecting the trojansimulator.exe on execution.
It is also detecting the TSServ.exe on installation.
It is detecting the trojansimulator.exe and the running TSSServ.exe on-demand.
But it is not detecting the autostart entry wich leads to the TSSServ.exe.
After the complete removal reboot the entry is still existing. <-QUOTE}
I think you are wrong, you can see how trojansimulator works here (test with a hips : Comodo defense+, even on uninstal phase)
http://www.hwupgrade.it/forum/showpost.php?p=28986474&postcount=218
Here Prevx & other program detecting (or not detecting) the TrojanSimulator
http://www.hwupgrade.it/forum/showpost.php?p=28987659&postcount=225
Sorry is in Italian language ;D but if you see the pics you understand I hope.
Remember Prevx is not an hips (at the moment8) ) so is behaviour is the same of avira (or other Antivirus) if you want detect the entry on registry we need an Hips as Comodo so you can control how the exe works on install & even on uninstall. If you click the trojansimulator windows uninstall you can see the entry vanishing.
Habakuck
September 27th, 2009, 09:41 AM
{QUOTE-> I think you are wrong, you can see how trojansimulator works here (test with a hips : Comodo defense+, even on uninstal phase)
http://www.hwupgrade.it/forum/showpost.php?p=28986474&postcount=218
Here Prevx & other program detecting (or not detecting) the TrojanSimulator
http://www.hwupgrade.it/forum/showpost.php?p=28987659&postcount=225
Sorry is in Italian language ;D but if you see the pics you understand I hope.
Remember Prevx is not an hips (at the moment8) ) so is behaviour is the same of avira (or other Antivirus) if you want detect the entry on registry we need an Hips as Comodo so you can control how the exe works on install & even on uninstall. If you click the trojansimulator windows uninstall you can see the entry vanishing. <-QUOTE}
I am not wrong!
After deleting the trojan simulator with PrevX the autostart entry is still there!
The Prevx v3.0 found the registry entry and deleted it. The v..206 does not.
MatDE
September 27th, 2009, 10:14 AM
Switched computer on again, so far no IE8 GUI problems but the first scan didn't start and of course I couldn't abort (screenshot). Might have to do something with switching on 2 external drives (1 eSata, 1 USB)? However after reboot with both drives enabled the next scan did start normally and went through. So 'IPs not verified' aside no further problems noticed right now. But don't think I give up, Joe! ;D
PrevxHelp
September 27th, 2009, 11:53 AM
{QUOTE-> I am not wrong!
After deleting the trojan simulator with PrevX the autostart entry is still there!
The Prevx v3.0 found the registry entry and deleted it. The v..206 does not. <-QUOTE}
Could you let me know how you're scanning for the file? If you're just using a right click scan or an on-execution check after the registry entry already exists, then it may not catch it, but if you run a normal "Deep Scan" it should see the registry entry :-\
PrevxHelp
September 27th, 2009, 11:57 AM
{QUOTE->
Sorry is in Italian language ;D but if you see the pics you understand I hope.
Remember Prevx is not an hips (at the moment8) ) so is behaviour is the same of avira (or other Antivirus) if you want detect the entry on registry we need an Hips as Comodo so you can control how the exe works on install & even on uninstall. If you click the trojansimulator windows uninstall you can see the entry vanishing. <-QUOTE}
Prevx will, in virtually all cases, remove the registry entry and I suspect Habakuck is experiencing an inconsistency in the cleanup routine because of the type of scan rather than an issue tracking back to the correct file (as Prevx does fully scan the registry/track registry changes as a HIPS does :))
PrevxHelp
September 27th, 2009, 11:58 AM
{QUOTE-> Switched computer on again, so far no IE8 GUI problems but the first scan didn't start and of course I couldn't abort (screenshot). Might have to do something with switching on 2 external drives (1 eSata, 1 USB)? However after reboot with both drives enabled the next scan did start normally and went through. So 'IPs not verified' aside no further problems noticed right now. But don't think I give up, Joe! ;D <-QUOTE}
The scan issues and "IPs not verified" will be caused by the inability to connect online, possibly because Fritz!Protect isn't appreciating Prevx trying to connect around it :-[ It may be worth trying to remove the whitelist entry within Fritz!Protect and re-add a new one in case they use file hashes (which would have changed between the upgrades).
Let me know if it works :)
Habakuck
September 27th, 2009, 12:15 PM
{QUOTE-> Could you let me know how you're scanning for the file? If you're just using a right click scan or an on-execution check after the registry entry already exists, then it may not catch it, but if you run a normal "Deep Scan" it should see the registry entry :-\ <-QUOTE}
Of course no right click scanning! ;)
I did two tests.
1) PrevX enabled. Execution of trojansimulator.exe. Got detected but i wrote a permanten override for the trojansimulator.exe.
After that i tried to install the TSSServ.exe but Prevx detected it and prevented the installation.
2) I disabled PrevX. Then i installed the TSSServ.exe using the trojansimualtor.exe GUI.
After that the TSSServ.exe was shown in the TaskManager.
I did a "Scan my PC" after that which found two items. The trojansimulator.exe and the TSSServ.exe. Not the registry entry!
I performed the clean up with automatic reboot.
After that the registry entry was still active. I used the Windows system integrity check tool to check the autostart entry.
Win7 64-bit, UAC active, Windows Defender disabled, PrevX stand alone, Windows Firewall active, no other security software.
MatDE
September 27th, 2009, 01:03 PM
{QUOTE-> The scan issues and "IPs not verified" will be caused by the inability to connect online, possibly because Fritz!Protect isn't appreciating Prevx trying to connect around it :-[ <-QUOTE}
Hi Joe, are you sure? Because the previous RC versions (and of course the public version) had not this exact problem to connect online (speaking of 'IPs not verified'). If I am not wrong? ???
{QUOTE-> It may be worth trying to remove the whitelist entry within Fritz!Protect and re-add a new one in case they use file hashes (which would have changed between the upgrades).
Let me know if it works :) <-QUOTE}
Do you remember the screens that popped up all the time when you installed here remotely new RC versions? This was Fritz!Protect warning about hash changes. Once allowing that (by pressing OK) the old rules for prevx.exe were in place for the new build also. So I don't think it has to do with changing of hashes. :(
Now I have disabled Fritz!Protect (outbound firewall) and rebooted but it is still "IP not verified". - Before doing that Prevx was 'frozen' again once I tried scanning. So this scanning worked sometimes and then again not, strange.
However ... I checked Fritz!Protect 'log file' (screen where you can see which connections were allowed) after your posting and there were many dns connections from Prevx, all green and allowed. So again, very strange.
Well .. please don't give up SafeOnline! ;D
If you need my help (remote maintenance, testing etc.) for fixing this or anything else just let me know. 8)
fasteddy2020
September 27th, 2009, 08:25 PM
I installed 3.0.4.206. Whenever I am in a browser (IE8, FF3.5.3 Sandboxed or FF3.5.3 Not Sandboxed) the back button on my Logitech mouse does not work. I actually have two different mice and it affected both. I ran a scan and saved the log. I then uninstalled .206 and reinstalled 3.0.1.65 and the problem went away. Could there be a possible conflict between .206 and logitech drivers? I will send the scan file.
Edit: File is sent.
dlimanov
September 27th, 2009, 11:23 PM
Joe,
There appears to be incompatibility with SafeOnline and F5's SSL VPN, even when the VPN website is explicitly defined in the list and protection is set to OFF for that particular host.. I have to disable SafeOnline completely in order to pass host integrity checking.
dlimanov
September 28th, 2009, 01:03 AM
I am also having problems with YouTube videos loading 3-5% of the content and then ending prematurely with SafeOnline on in Opera. Video loads 5-10 seconds and you can skip forward and it will load another 5-10 seconds, but never fully. With SafeOnline off, loads normally.
rolarocka
September 28th, 2009, 04:41 AM
Downloads in Opera 10 stop after a few seconds with SafeOnline active.
SvS
September 28th, 2009, 06:16 AM
Using Prevx RC 3.0.4.206 I experience frequent Browser Crashes (Internet Explorer 8 on Windows 7 x32 RTM) while visiting sites using the https protocol. The crash is not reproducible by visiting a specific site or performaing certain actions, the tab just crashes and is restored. This was a "clean" (i.e. uninstall the previous RC, reboot and install new RC) install of RC 3.0.4.206 using the default SafeOnline configuration.
PrevxHelp
September 28th, 2009, 09:35 AM
{QUOTE-> Downloads in Opera 10 stop after a few seconds with SafeOnline active. <-QUOTE}
We've reproduced this problem and will have it fixed in the next version :) Thanks for the information!
PrevxHelp
September 28th, 2009, 09:38 AM
{QUOTE-> Using Prevx RC 3.0.4.206 I experience frequent Browser Crashes (Internet Explorer 8 on Windows 7 x32 RTM) while visiting sites using the https protocol. The crash is not reproducible by visiting a specific site or performaing certain actions, the tab just crashes and is restored. This was a "clean" (i.e. uninstall the previous RC, reboot and install new RC) install of RC 3.0.4.206 using the default SafeOnline configuration. <-QUOTE}
Could you let us know what other security software you're using and what browser addons you have installed?
Thanks! :)
PrevxHelp
September 28th, 2009, 09:40 AM
{QUOTE-> I am also having problems with YouTube videos loading 3-5% of the content and then ending prematurely with SafeOnline on in Opera. Video loads 5-10 seconds and you can skip forward and it will load another 5-10 seconds, but never fully. With SafeOnline off, loads normally. <-QUOTE}
I suspect this issue is the same as rolarocka's issue here: http://www.wilderssecurity.com/showpost.php?p=1549029&postcount=31
I will let you know as soon as we have some definitive answer to the issue. Thanks for the report!
SvS
September 28th, 2009, 10:32 AM
{QUOTE-> Could you let us know what other security software you're using and what browser addons you have installed? <-QUOTE}
I'm using Symantec Norton Internet Security 2010.
Browser addons installed:
Bonjour (Apple)
Web-Recherche (www.macropool.com (http://www.macropool.com))
Nuance PDF (Nuance PDF Professional 6 - www.nuance.com (http://www.nuance.com))
Windows Live Sig-In Assistant (not sure what the correct name of this addon is in English)
Java JRE 1.6 (latest version)
ambient_88
September 28th, 2009, 02:01 PM
I believe there is a possible conflict with Firefox 3.5. Whenever I load it, a dialog pops up asking me whether I'd like to restore my previous session (feature by Tab Mix Plus). Now, whenever that dialog comes up, the Firefox chrome gets messed up, ie., some parts are not visible. I am not sure if it's supposed to be like that or whatnot.
Appreciate any help.
SvS
September 28th, 2009, 03:47 PM
There appears to be a slight incompatibility with SafeOnline and the Identity Safe feature of Norton Internet Security (using NIS 2010 on Windows 7 x32).
I use Identity Safe to store my address information and part of my Credit Card info in a password protected Identity Card. While visiting any online shopping site (using the https protocol) I'm unable to type the Identity Card password into Identity Safes password dialog using the keyboard. Copy & Paste works, typing the passowrd does not.
Romagnolo1973
September 28th, 2009, 04:24 PM
Joe I see something new in that RC, now when you launch a scan with other AV or Antispyware ( I see this with Superantispyware & MalwareBytes) prevx follow the other scan (you can see it watchin prevx check file apperaing near the clock)
This is good because so prevx check sector normaly unchecked (other hd for exemple) but this cause a long scan fo the other programs. For example Malwarebytes with prevx off spend 30 minutes to scan my hd, with prevx on is 2 hours or more, the same happen with SAS ???
Is a bug or you want this behaviour?
PrevxHelp
September 28th, 2009, 06:12 PM
{QUOTE-> Joe I see something new in that RC, now when you launch a scan with other AV or Antispyware ( I see this with Superantispyware & MalwareBytes) prevx follow the other scan (you can see it watchin prevx check file apperaing near the clock)
This is good because so prevx check sector normaly unchecked (other hd for exemple) but this cause a long scan fo the other programs. For example Malwarebytes with prevx off spend 30 minutes to scan my hd, with prevx on is 2 hours or more, the same happen with SAS ???
Is a bug or you want this behaviour? <-QUOTE}
This is semi-expected behavior. MalwareBytes/SAS load files in such a way that they sometimes trigger Prevx to scan the files, however, in build 200/206 we've implemented changes to limit this unnecessary scanning, provided your System Status is Clean.
Could you let me know if you've had any malware on that PC when the slow scan is taking place?
PrevxHelp
September 28th, 2009, 06:22 PM
{QUOTE-> There appears to be a slight incompatibility with SafeOnline and the Identity Safe feature of Norton Internet Security (using NIS 2010 on Windows 7 x32).
I use Identity Safe to store my address information and part of my Credit Card info in a password protected Identity Card. While visiting any online shopping site (using the https protocol) I'm unable to type the Identity Card password into Identity Safes password dialog using the keyboard. Copy & Paste works, typing the passowrd does not. <-QUOTE}
Hello,
We've reproduced your crashing issue with NIS2010 but have not reproduced the Identity Safe issues with the crash-corrected build. It is possible that it got fixed as well but we will likely have a new build by the morning ready for another try :)
Thank you for the reports!
PrevxHelp
September 28th, 2009, 06:23 PM
{QUOTE-> I believe there is a possible conflict with Firefox 3.5. Whenever I load it, a dialog pops up asking me whether I'd like to restore my previous session (feature by Tab Mix Plus). Now, whenever that dialog comes up, the Firefox chrome gets messed up, ie., some parts are not visible. I am not sure if it's supposed to be like that or whatnot.
Appreciate any help. <-QUOTE}
I installed Tab Mix Plus and a Firefox Chrome skin (Chromifox Basic) but could not reproduce any problems.
Could you let me know what I'm doing wrong? ;D Thanks!
ambient_88
September 28th, 2009, 06:56 PM
{QUOTE-> I installed Tab Mix Plus and a Firefox Chrome skin (Chromifox Basic) but could not reproduce any problems.
Could you let me know what I'm doing wrong? ;D Thanks! <-QUOTE}
Here's a screenshot to show what's happening.
MatDE
September 28th, 2009, 08:00 PM
{QUOTE-> That, on the other hand, is not intentional ;D I suspect this may be a problem with Prevx+HyperSnap. If you drag the window around offscreen or minimize/restore it, does the black dirtiness go away? :) <-QUOTE}
JFYI: I had this 'dirtiness' again - but this time running 3.0.1.65!? At next reboot all was o.k. again. Before this happened my system had a Prevx crash during shutdown. Don't know what is going on now here (Avira and Prevx say computer is clean) .. just wanted you to inform: this 'dirtiness' thing isn't RC only. - If Prevx even is the origin which I don't know. :(
p.s.: Some hours later I had to uninstall Prevx and Fritz!DSL because something is going very wrong here (freezing, internet gone etc.), just take a look at the screenshots! Skype and not Prevx!? ??? (Namensauflösung = DNS)
Romagnolo1973
September 28th, 2009, 09:13 PM
{QUOTE-> This is semi-expected behavior. MalwareBytes/SAS load files in such a way that they sometimes trigger Prevx to scan the files, however, in build 200/206 we've implemented changes to limit this unnecessary scanning, provided your System Status is Clean.
Could you let me know if you've had any malware on that PC when the slow scan is taking place? <-QUOTE}
No malware in this pc since 2004;D
This low scan affected my pc & other italians so I think is general
No problem with avira.
wtih old prevx we don't see this problem, only with rc it seem so slow
This slow scan affect only SAS & Malwarebytes?
If yes no problem, I explain my friend stop prevx during SAS or MBAM scan
PrevxHelp
September 28th, 2009, 11:21 PM
{QUOTE-> No malware in this pc since 2004;D
This low scan affected my pc & other italians so I think is general
No problem with avira.
wtih old prevx we don't see this problem, only with rc it seem so slow
This slow scan affect only SAS & Malwarebytes?
If yes no problem, I explain my friend stop prevx during SAS or MBAM scan <-QUOTE}
Could you let me know what operating system you're using? I may be able to correct the issue but clicking Stop Protection is definitely the most reliable way to disable it temporarily during the scan :)
PrevxHelp
September 28th, 2009, 11:35 PM
{QUOTE->
p.s.: Some hours later I had to uninstall Prevx and Fritz!DSL because something is going very wrong here (freezing, internet gone etc.), just take a look at the screenshots! Skype and not Prevx!? ??? (Namensauflösung = DNS) <-QUOTE}
??? Even 62.189.194.207 is one of our addresses... so unless Avira and Skype are covertly using our engine, I suspect there is something amiss within Fritz!Protect.
I'm honestly not sure what to make of that and have never seen anything that bizarre before :-\
ambient_88
September 29th, 2009, 12:52 AM
Joe,
How's the issue with Firefox that I told you about? Also, I forgot to say earlier, but the when I said chrome I meant the UI of Firefox. I am experiencing the same issues with Silvermel and the default theme (Strata).
PrevxHelp
September 29th, 2009, 01:36 AM
{QUOTE-> Joe,
How's the issue with Firefox that I told you about? Also, I forgot to say earlier, but the when I said chrome I meant the UI of Firefox. I am experiencing the same issues with Silvermel and the default theme (Strata). <-QUOTE}
We've made a small tweak which may fix it - we'll have a new build ready by tomorrow for some retesting to check through and see if this was the cause :)
ako
September 29th, 2009, 04:53 AM
No problems here so far with this release. Using
DW 3.0 beta
Winpatrol
Prevx 3.0 RC
Sandboxie
Romagnolo1973
September 29th, 2009, 08:08 AM
{QUOTE-> Could you let me know what operating system you're using? I may be able to correct the issue but clicking Stop Protection is definitely the most reliable way to disable it temporarily during the scan :) <-QUOTE}
it happens on xp pro 32bit sp3 & Vsta Home 32bit sp1, not only on my pc but every launching MBAM or SAS
The problem is only for this 2 antimalware?
I temporaly say to italian user stop prevx during their scan, if is possible solve the issue is better so prevx still continue protect the system, if not ..amen, tellng the trueth with prevx on I don't scan with other antimalware, could be just one time every season;D
PrevxHelp
September 29th, 2009, 04:41 PM
Hello all,
We've released the next build, 3.0.4.210, and have started a new thread here: http://www.wilderssecurity.com/showthread.php?t=254546
Let me know if you have experienced any issues with 206 that aren't in the fixed issues list or if you still have any outstanding problems which don't appear to be resolved and we'll investigate closer.
Thanks, as always, for the extremely valuable testing! :thumb:
vBulletin® Copyright ©2000-2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums