PDA

View Full Version : Prevx RC 3.0.4.216


PrevxHelp
September 30th, 2009, 05:49 PM
Hello all,
In the spirit of frequent builds with improved functionality, this build is a fairly significant upgrade, fixing a number of issues (and issues in the upgrade process itself so you will now be running the correct version after upgrading). The download links are still:

32bit: http://info.prevx.com/download.asp?grab=edgebeta
64bit: http://info.prevx.com/download.asp?grab=edgebeta64

A big thanks goes out to dlimanov and ctrlaltdelete for their extremely valuable help testing this build via remote support, allowing us to fix a number of lingering issues which should make the whole process much smoother.

The changelog between 213 and 216 is:
- Fixed an issue in the upgrade process preventing the Extrusion Prevention from being fully upgraded
- Fixed an issue upgrading 64bit installations
- Fixed an issue identifying internal parameters properly
- Fixed incompatibilities with F5 SSL VPN, Opera Youtube Videos, and WebEx presentations
- Added a generic routine to identify and correct a majority of browser-based incompatibilities automatically.

Known Issues:
- Some incompatibilities with Fritz!Protect firewall
- Possible issues with some download managers (if you experience any, please send a scan log to report@prevxresearch.com - we're adding exceptions for them as much as possible as they are reproduced )
- Possible (unreplicated) issue with Threatfire v4.6.0.19
- Possible issue cleaning the Trojan Simulator
- Opening a new window in Opera prevents Prevx from monitoring the window properly

Conceptual Incompatibilities:
- Defensewall is expected to block Opera support as it prevents browsers from reaching trusted components (Prevx) so we are not able to load some protection/monitoring into an Opera browser protected by Defensewall

- SAS and MBAM scanning is sometimes slowed when Prevx is active: This is an issue stemming back a while and is solved by stopping Prevx protection while scans are taking place. We're investigating whether it would be possible to identify the operations SAS/MBAM are making in the system to prevent us from intercepting their file reads to improve their scan times.

Next Steps:
- Add Safari Support
- Add Iron Support
- Add Maxthon Support
- Add support of the SBC Yahoo! DSL Browser
- Add a "Reset to Default" button

Please let me know if you have any stray issues remaining! When upgrading to this version, please close and reload your browser. It may be worth rebooting your PC but is probably not necessary.

Thank you for the testing! :thumb:

firzen771
September 30th, 2009, 07:03 PM
id like to try prevx again, but every release has the exact same issue for me it seems... :(

Rabiddog
September 30th, 2009, 07:09 PM
With the update (was done automaticly) none of my browsers open except for IE.
After I uninstalled Prevx I can't make a connection with Opera or Firefox. Only with IE.
This build is worse then before!

Running Online Armor no (run-safer used) and Sandboxie (all browsers sandboxed), Shadow Defender (not in shadow mode).
XP-sp-3

Have a feeling it's a conflict with Sandboxie. Installed new version 3.40 SB, and now I have a connection again. I was using the beta version (SB) and had no problems, until the new Prevx build was automatically installed.
I am not going to try this build again, had that bad feeling that I was going to have to reformat, but lucked out. Hope this is resolved soon!

dlimanov
September 30th, 2009, 08:39 PM
I beg to differ. Joe went above and beyond fixing some issues and Opera support (something other complained about) is much improved. So stop moaning, if you don't install and test it, how are things going to get fixed?

Rabiddog
September 30th, 2009, 09:07 PM
-{ Quote: "I beg to differ. Joe went above and beyond fixing some issues and Opera support (something other complained about) is much improved. So stop moaning, if you don't install and test it, how are things going to get fixed?" }-

Just stating facts, who ask you for your two cents?

ambient_88
September 30th, 2009, 10:59 PM
I have an issue with the SafeOnline graphics and Google Chrome. Whenever I click on parts of a webpage, the overlay blinks. So far, IE and Firefox are not affected.

PrevxHelp
October 1st, 2009, 12:19 AM
-{ Quote: "I have an issue with the SafeOnline graphics and Google Chrome. Whenever I click on parts of a webpage, the overlay blinks. So far, IE and Firefox are not affected." }-

Thank you for the information :) I've reproduced it on my Chrome installation and we'll have it fixed shortly!

PrevxHelp
October 1st, 2009, 12:36 AM
-{ Quote: "With the update (was done automaticly) none of my browsers open except for IE.
After I uninstalled Prevx I can't make a connection with Opera or Firefox. Only with IE." }-

Prevx does not leave any files on the system so I don't see how it would have affected your browsing in this way.

-{ Quote: "Running Online Armor no (run-safer used) and Sandboxie (all browsers sandboxed), Shadow Defender (not in shadow mode).
XP-sp-3

Have a feeling it's a conflict with Sandboxie. Installed new version 3.40 SB, and now I have a connection again. I was using the beta version (SB) and had no problems, until the new Prevx build was automatically installed" }-

I think it would be worth seeing what happens with the new version of Sandboxie + Prevx 3.0.4.216. If you do try this, please let us a scan log to report@prevxresearch.com

In the meantime, we'll try reproducing this issue as well but so far we have not been able to reproduce it. There would never be a need to reformat your PC but please let me know if you're interested in some closer diagnosis of the problem.

Thanks :)

PrevxHelp
October 1st, 2009, 12:37 AM
-{ Quote: "id like to try prevx again, but every release has the exact same issue for me it seems... :(" }-

Are you still experiencing the internet-breaking issue or are you coming into another problem now? I can send you a test version with some of the monitoring functionality disabled to try and narrow down exactly what area is breaking it if you're interested.

Habakuck
October 1st, 2009, 06:34 AM
Is it possible to implement a function to control the gui via the back and forward keys?

I always click the backwards key if i try to get back in the gui... :)

firzen771
October 1st, 2009, 07:18 AM
-{ Quote: "Are you still experiencing the internet-breaking issue or are you coming into another problem now? I can send you a test version with some of the monitoring functionality disabled to try and narrow down exactly what area is breaking it if you're interested." }-

its the same issue and sure that sounds good.

ambient_88
October 1st, 2009, 02:54 PM
This release is currently giving me quite a bit of problems. Chrome, Firefox, and IE are all crashing shortly after launching the browser. It didn't happen to me before, so I don't know what's going on.

Nunes
October 1st, 2009, 03:15 PM
Since 3-4 builds back after installing over the previous version Prevx keeps poping up "complaining" that can't connect to the internet althought all other programs can connect.

I only can get Prevx able to connect after reboot.

Triple Helix
October 1st, 2009, 03:17 PM
All is working well for me with the latest FF, Opera & IE8!

TH

PrevxHelp
October 1st, 2009, 03:17 PM
-{ Quote: "This release is currently giving me quite a bit of problems. Chrome, Firefox, and IE are all crashing shortly after launching the browser. It didn't happen to me before, so I don't know what's going on." }-

Are you using any products like Sandboxie or other browser virtualization technologies? If not, could you please let me know what other antimalware products you have installed so that I can see if we can reproduce any of the crashing internally?

Thanks and sorry for the inconvenience.

PrevxHelp
October 1st, 2009, 03:21 PM
-{ Quote: "Since 3-4 builds back after installing over the previous version Prevx keeps poping up "complaining" that can't connect to the internet althought all other programs can connect.

I only can get Prevx able to connect after reboot." }-

The underlying communications in Prevx haven't changed at all between the live and RC versions, however, the software has. Could you see if any firewall is blocking the new build of Prevx from communicating out because of the changed MD5 signature?

If not, could you let me know if you're using any product like K9 Web Protection or another web filtering program? There is a historic incompatibility between Prevx and K9 which sounds like what you are describing.

sded
October 1st, 2009, 03:41 PM
Upgraded to .216 with no problems. Still working fine with Opera 10, FF3.5, Chrome latest, and IE8. And rest of stuff in signature.

ambient_88
October 1st, 2009, 04:05 PM
-{ Quote: "Are you using any products like Sandboxie or other browser virtualization technologies? If not, could you please let me know what other antimalware products you have installed so that I can see if we can reproduce any of the crashing internally?

Thanks and sorry for the inconvenience." }-
The only real-time applications I have running are the following:

Prevx 3.0.4.216
KeyScrambler 2.5 Professional
cFosSpeed 4.52
O&O Defrag 12

OS is Windows 7 Ultimate x86 RTM

Nunes
October 1st, 2009, 04:35 PM
-{ Quote: "The underlying communications in Prevx haven't changed at all between the live and RC versions, however, the software has. Could you see if any firewall is blocking the new build of Prevx from communicating out because of the changed MD5 signature?

If not, could you let me know if you're using any product like K9 Web Protection or another web filtering program? There is a historic incompatibility between Prevx and K9 which sounds like what you are describing." }-

Every time Prevx changes my Antivirus (Norton 2010) asks for allow/block internet connection for Prevx. Of course I give permanent permission.

I don't have any software of the K9 kind.

My question is: Why does it need a reboot to connect again?

Triple Helix
October 1st, 2009, 05:20 PM
-{ Quote: "Every time Prevx changes my Antivirus (Norton 2010) asks for allow/block internet connection for Prevx. Of course I give permanent permission.

I don't have any software of the K9 kind.

My question is: Why does it need a reboot to connect again?" }-

To allow the changes to complete! I always reboot after any Program Update even if it does not ask!

TH

dlimanov
October 1st, 2009, 10:36 PM
Noticed a weird HTTPS problem in Opera (believe it was fixed few releases ago) where every HTTPS site I visit gives me a pop-up as seen below, informing me that certificate is invalid. In almost all cases it's valid, current and respected cert that browser has no problem validating with SafeOnline off.
http://i33.tinypic.com/23mr2n7.png
I remember seeing something like this before, I believe it was a certificate verification method that wasn't working previously, looks like it's back.

andyman35
October 2nd, 2009, 07:30 AM
I'm pleased to say that the 2 main issues I experienced with the previous versions have been resolved.The Opera downloads manager is working correctly now (previously none would complete first time),also Opera in SandboxIE is working as it should.Good job :thumb:

ambient_88
October 4th, 2009, 04:09 PM
Do browser add-ons affect the functionality of Prevx? When I have Tab Mix Plus installed, Firefox would repeatedly crash for no reason; I would go so far to say that Firefox crashes 60% of the time when launching Firefox. Also, KeyScrambler is not playing nice with Prevx when using Internet Explorer--it would repeatedly crash shortly after start up.

All of these symptoms are not present when I uninstall Prevx.

PrevxHelp
October 4th, 2009, 06:53 PM
-{ Quote: "Do browser add-ons affect the functionality of Prevx? When I have Tab Mix Plus installed, Firefox would repeatedly crash for no reason; I would go so far to say that Firefox crashes 60% of the time when launching Firefox. Also, KeyScrambler is not playing nice with Prevx when using Internet Explorer--it would repeatedly crash shortly after start up.

All of these symptoms are not present when I uninstall Prevx." }-

Browser add-ons could definitely affect the functionality of Prevx within the browser. Could you please send a scan log to report@prevxresearch.com so that we can whitelist any component which might be giving us problems.

Also, regarding KeyScrambler - we've had a couple reports of problems with Prevx + KeyScrambler but haven't been able to reproduce them. Could you let me know what OS you're using?

Thanks! :)

ambient_88
October 4th, 2009, 07:25 PM
-{ Quote: "Browser add-ons could definitely affect the functionality of Prevx within the browser. Could you please send a scan log to report@prevxresearch.com so that we can whitelist any component which might be giving us problems.

Also, regarding KeyScrambler - we've had a couple reports of problems with Prevx + KeyScrambler but haven't been able to reproduce them. Could you let me know what OS you're using?

Thanks! :)" }-
I am using Windows 7 Ultimate RTM. I've decided to uninstall KeyScrambler for now to see what happens. So far, IE and Firefox are working fine--no crashes yet. Chrome crashed once, though that might just be a coincidence.

dlimanov
October 4th, 2009, 11:23 PM
-{ Quote: "Noticed a weird HTTPS problem in Opera (believe it was fixed few releases ago) where every HTTPS site I visit gives me a pop-up as seen below, informing me that certificate is invalid. In almost all cases it's valid, current and respected cert that browser has no problem validating with SafeOnline off.
http://i33.tinypic.com/23mr2n7.png
I remember seeing something like this before, I believe it was a certificate verification method that wasn't working previously, looks like it's back." }-

Please ignore this post, Prevx had nothing to do with this. Opera had an issue with corrupted cert database where it lost ALL Certification Authorities for some strange reason.
Sorry..

PrevxHelp
October 5th, 2009, 09:23 AM
-{ Quote: "Please ignore this post, Prevx had nothing to do with this. Opera had an issue with corrupted cert database where it lost ALL Certification Authorities for some strange reason.
Sorry.." }-

No problem! Thanks for the clarification :)

dlimanov
October 6th, 2009, 12:08 PM
Me again. Clicking on externally-delivered links (like email, IMs, etc.) with Opera opened and SafeOnline active gives the following error:
http://i34.tinypic.com/2a94ime.png
If I disable SafeOnline, Opera will open link in new tab, as expected.

qpok
October 6th, 2009, 12:16 PM
I noticed that starting VLC Portable (http://portableapps.com/apps/music_video/vlc_portable) for the first time takes well over a minute with Prevx enabled as it authenticates all the VLC plugin DLL files prior to program start. Is this normal?

Using Prevx 3.0.4.216 with heuristics @ max, age & popularity heuristics @ recommended.

rolarocka
October 6th, 2009, 12:56 PM
-{ Quote: "Me again. Clicking on externally-delivered links (like email, IMs, etc.) with Opera opened and SafeOnline active gives the following error:
http://i34.tinypic.com/2a94ime.png
If I disable SafeOnline, Opera will open link in new tab, as expected." }-
Yes that happens after visiting https websites. It still happens with the new .218 ;)

ambient_88
October 6th, 2009, 05:49 PM
This is the most unstable beta I have tried so far. My browsers are crashing left and right, forcing me to uninstall it. I'm just going to wait until the final version is available.

trjam
October 6th, 2009, 05:54 PM
no offense, but why do you folks just not download the regualar version from the Prevx website. It works great, is what got them here, and you wont be the slaughtered pig, when it comes to betas.

I aint doing no more betas, well maybe the half-moon or plakat type, but thats another side of me.;)

firzen771
October 6th, 2009, 05:58 PM
-{ Quote: "no offense, but why do you folks just not download the regualar version from the Prevx website. It works great, is what got them here, and you wont be the slaughtered pig, when it comes to betas.

I aint doing no more betas, well maybe the half-moon or plakat type, but thats another side of me.;)" }-

cuz people want to try to improve the software and iron out the bugs, thats why people are using the beta.

trjam
October 6th, 2009, 06:00 PM
well it sounds like their iron is broke.:dry:

Baldrick
October 6th, 2009, 06:06 PM
Build 218 snuck onto my PC this evening...all running well as usual! ;D

PrevxHelp
October 7th, 2009, 09:29 AM
-{ Quote: "Me again. Clicking on externally-delivered links (like email, IMs, etc.) with Opera opened and SafeOnline active gives the following error:

If I disable SafeOnline, Opera will open link in new tab, as expected." }-

I've reproduced this as well :) We will have this fixed in the next version! Thanks :)

PrevxHelp
October 7th, 2009, 09:35 AM
-{ Quote: "I noticed that starting VLC Portable (http://portableapps.com/apps/music_video/vlc_portable) for the first time takes well over a minute with Prevx enabled as it authenticates all the VLC plugin DLL files prior to program start. Is this normal?

Using Prevx 3.0.4.216 with heuristics @ max, age & popularity heuristics @ recommended." }-

VLC in particular has hundreds of components and the folders are probably not scanned automatically by Prevx so they wouldn't be in the cache. However, it shouldn't take that long. Could you please save a scan log by clicking Tools > Save Scan Results and send it to report@prevxresearch.com? I suspect we should be able to whitelist the components to improve the performance.

Thanks! :)

PrevxHelp
October 7th, 2009, 10:01 AM
-{ Quote: "This is the most unstable beta I have tried so far. My browsers are crashing left and right, forcing me to uninstall it. I'm just going to wait until the final version is available." }-

If you get a chance, could you try build 218 (which was released last night?) If this still doesn't fix it, I'd be very interested in trying to diagnose the problem remotely as you do seem to have gotten the worse end of the test versions :-\

PrevxHelp
October 7th, 2009, 10:09 AM
Hello all,
We've released a new test version with details here: http://www.wilderssecurity.com/showthread.php?t=255102

Please let me know if any of the issues you've experienced (that I haven't already put in the "Known issues" section) still exist!

Thank you as always! :)