Prevx RC 3.0.4.228

[Triple Helix]

Working well for me!

TH

[Threedog]

Just got the update. No problems so far.

[PrevxHelp]

Hello all,
This build fixes a few incompatibilities and issues. To retest the changes after upgrading, just close/reopen your browser. Please see the "Complete List of Known Issues" area below and send me a message or make a post here if there is any other issue which still exists.

The download links are still:

32bit: http://info.prevx.com/download.asp?grab=edgebeta
64bit: http://info.prevx.com/download.asp?grab=edgebeta64

The changelog is:
- Fixed an incompatibility with the Digsby account manager
- Fixed some issues with credential protection warnings
- Fixed compatibility with GameGuard
- Fixed an issue saving SafeOnline scan settings
- Fixed an issue sending validated URLs
- Fixed an incompatibility with ZoneAlarm
- Fixed an incompatibility with Super AdBlock
- Fixed some minor issues in the Enterprise version of Prevx
- Minor graphical changes

Complete List of Known Issues:
- Incompatibility with NIS2010 identity protection
- Possible crash with A2 + Ad Muncher on XP SP3
- Browser can't be minimized with TrayIt 4.6.5.5 (XP SP2)
- Possible issue using YouTube under a Sandboxie'd Firefox 3.5.3 (Vista SP2)
- Issue preventing KeePass seeing macros or copying/pasting data
- WinFlip isn't allowed to flip browser windows (XP SP3)
- Crashes with Firefox 3.5.3 + IETab + WebSiteWatcher + Xmarks + Foxmarks
- Connection issue with ShadowDefender + OnlineArmour in Shadow Mode (XP SP3)
- Slow "My Documents" synchronization when configured to synchronize on logon/logoff
- Accents do not work on ABNT2 keyboards
- Possible incompatibility with Zemana AntiLogger (Win7)
- Back button on a Logitech SetPoint mouse doesn't work properly
- Stray issue causing My Documents to open after a SafeOnline-configured scan takes place
- Incompatibility with Fritz!DSL Protect

Conceptual Incompatibilities:
- KeyScrambler says keystrokes are not encrypted on HTTPS websites (Prevx is already encrypting them beneath KeyScrambler)

- Defensewall is expected to block Opera support as it prevents browsers from reaching trusted components (Prevx) so we are not able to load some protection/monitoring into an Opera browser protected by Defensewall

- SAS and MBAM scanning is sometimes slowed when Prevx is active: This is an issue stemming back a while and is solved by stopping Prevx protection while scans are taking place. We're investigating whether it would be possible to identify the operations SAS/MBAM are making in the system to prevent us from intercepting their file reads to improve their scan times.

Next Steps:
- Add Safari Support
- Add Iron Support
- Add Maxthon Support

Please let me know what you find and thanks again for the testing! :)

[firzen771]

{QUOTE-> Hello all,
This build fixes a few incompatibilities and issues. To retest the changes after upgrading, just close/reopen your browser. The download links are still:

32bit: http://info.prevx.com/download.asp?grab=edgebeta
64bit: http://info.prevx.com/download.asp?grab=edgebeta64

The changelog is:
- Fixed an incompatibility with the Digsby account manager
- Fixed some issues with credential protection warnings
- Fixed compatibility with GameGuard
- Fixed an issue saving SafeOnline scan settings
- Fixed an issue sending validated URLs
- Fixed an incompatibility with ZoneAlarm
- Fixed an incompatibility with Super AdBlock
- Minor graphical changes

Conceptual Incompatibilities:
- Defensewall is expected to block Opera support as it prevents browsers from reaching trusted components (Prevx) so we are not able to load some protection/monitoring into an Opera browser protected by Defensewall

- SAS and MBAM scanning is sometimes slowed when Prevx is active: This is an issue stemming back a while and is solved by stopping Prevx protection while scans are taking place. We're investigating whether it would be possible to identify the operations SAS/MBAM are making in the system to prevent us from intercepting their file reads to improve their scan times.

Next Steps:
- Add Safari Support
- Add Iron Support
- Add Maxthon Support

Please let me know what you find and thanks again for the testing! :) <-QUOTE}

looking forward to the next build ;)

[Threedog]

The connection mode with ShadowDefender and Online Armor must be specific to that setup is it? I am using Prevx Beta with Online Armor ++ alone and have had no problems with it.

[PrevxHelp]

{QUOTE-> The connection mode with ShadowDefender and Online Armor must be specific to that setup is it? I am using Prevx Beta with Online Armor ++ alone and have had no problems with it. <-QUOTE}

Indeed, these issues have almost all only been reported by a single user - the majority of users haven't had problems but I felt it would be useful to get a digest together of the issues that have been reported :)

[rolarocka]

I have scheduled scans turned off but sometimes it still starts a scan in background.

[MatDE]

So is this fixed or just vanished for no reason from known issues list? ;)
{QUOTE-> - Some incompatibilities with Fritz!Protect firewall <-QUOTE}
And before you are asking ... yessss .. I am lately a bit cautious with installing RC's. ;D - But if this is fixed I might be ready to face the unknown! - Build. 227. :D

[Threedog]

Build 228 out now.

[Threedog]

New build out. Running fine here so far.

[firzen771]

finally, the build i need ;D changelog im hoping soon?

[Threedog]

The list of problems should be getting very short now.

[firzen771]

waiting for the installer.

[Threedog]

You should be able to get it using the beta links from the other builds. Mine just updated automatically.

[firzen771]

{QUOTE-> You should be able to get it using the beta links from the other builds. Mine just updated automatically. <-QUOTE}

i had a very "specific" issue with previous builds, so its not gunna be possible.

[Threedog]

Got ya! Hope the new build fixes things up for you.

[firzen771]

still nothing?...

[firzen771]

well downloaded .228 and my problem is slightly different, but nevertheless it's still the same issue... >:( >:( this is crazy how difficult this problem is being to solve...

[PrevxHelp]

{QUOTE-> well downloaded .228 and my problem is slightly different, but nevertheless it's still the same issue... >:( >:( this is crazy how difficult this problem is being to solve... <-QUOTE}

The only change between 227 and 228 is the change which I explicitly made to work on your PC :-\ Can you please send me a scan log to report@prevxresearch.com? One possible cause "may" be avast 5: have you experienced these problems with Prevx before having avast 5 installed?

[MatDE]

Hi Joe, I tested that new 228 build some hours ago because the life/public version stalled when I wanted to scan after working like clockwork the days before. It just didn't start exactly as it happened before. And of course as always I couldn't stop/kill it then, had to reboot and so I assume now the Fritz!DSL Protect issue isn't really solved and just vanished without reason from the list above! ;)

Then I decided to give 228 a quick shot ... and that version worked quite well for some minutes ;) but then the prevx info thing (blue) crashed IE8 (or vice versa .. who knows :)) in private mode and all went south. - So at the moment I am Prevx-less surfing and really pressing all thumbs for the next RC build(s)! ;D

[firzen771]

{QUOTE-> The only change between 227 and 228 is the change which I explicitly made to work on your PC :-\ Can you please send me a scan log to report@prevxresearch.com? One possible cause "may" be avast 5: have you experienced these problems with Prevx before having avast 5 installed? <-QUOTE}

yes, had the problem when i was using avast v4.8 which is the stable version. and ill get a scanlog in a second and send u it.

[PrevxHelp]

{QUOTE-> Hi Joe, I tested that new 228 build some hours ago because the life/public version stalled when I wanted to scan after working like clockwork the days before. It just didn't start exactly as it happened before. And of course as always I couldn't stop/kill it then, had to reboot and so I assume now the Fritz!DSL Protect issue isn't really solved and just vanished without reason from the list above! ;) <-QUOTE}

It indeed looks like it has vanished, thanks to some inaccurate copy/pasting on my end :)

{QUOTE-> Then I decided to give 228 a quick shot ... and that version worked quite well for some minutes ;) but then the prevx info thing (blue) crashed IE8 (or vice versa .. who knows :)) in private mode and all went south. - So at the moment I am Prevx-less surfing and really pressing all thumbs for the next RC build(s)! ;D <-QUOTE}

I'll probably need to investigate this closer sometime tomorrow or next week if you're available - build 228 doesn't have any significant changes over 227 but we don't have access to any Fritz!DSL hardware/software and haven't had any other user come in with a similar problem :-\

[firzen771]

sent u the PM prevxhelp.

[kasperking]

well poor ad muncher 4.73 beta v 31306 crashed........:-\ seems like AM and
keyscrambler issues still persist...

[firzen771]

i think ive given up on trying prevx :'( it seems that my issue can never be solved...

[Dark Star 72]

Joe,
I have just had another BSOD the same as I reported in the thread on bld 221 and have managed to get the crash log this time so will forward to report @ prevxresearch for you look at in a minute.
As last time I have OA++ and Prevx 228 installed.

[PrevxHelp]

{QUOTE-> Joe,
I have just had another BSOD the same as I reported in the thread on bld 221 and have managed to get the crash log this time so will forward to report @ prevxresearch for you look at in a minute.
As last time I have OA++ and Prevx 228 installed. <-QUOTE}

I've analyzed the crashdump and can't see anything Prevx-related in it :-\ Do you have any way to reproduce this on-demand or is it completely random?

[PrevxHelp]

{QUOTE-> i think ive given up on trying prevx :'( it seems that my issue can never be solved... <-QUOTE}

I'm honestly not sure what would be causing it... Prevx doesn't do anything strange with the network stack or modify any data going through. Could you possibly try uninstalling avast and see if the issue still occurs?

[PrevxHelp]

{QUOTE-> well poor ad muncher 4.73 beta v 31306 crashed........:-\ seems like AM and
keyscrambler issues still persist... <-QUOTE}

The KeyScrambler "issue" is a non-issue (as long as its still the same one which you had before where the keystrokes were "unencrypted" - this just means that Prevx is preventing KeyScrambler from seeing the keystrokes).

We're still unable to reproduce any issues with Ad Muncher... if you have any further details or if you'd be willing to open a remote support session, this would be extremely useful (and I'm sure we'd be able to solve it very swiftly :))

[Dark Star 72]

{QUOTE-> I've analyzed the crashdump and can't see anything Prevx-related in it :-\ Do you have any way to reproduce this on-demand or is it completely random? <-QUOTE}
No, I cannot reproduce this on-demand. I tried removing Shadow Defender and installing a fresh download in case SD had been corrupted but it seems not. I'm beginning to wonder if there is a conflict with OA, perhaps I'll remove Prevx for a few days and just run SD and OA and see if I can get it to happen again.
The strange thing is that there is nothing showing in the Event Viewer at the time of the BSOD ???

[firzen771]

{QUOTE-> I'm honestly not sure what would be causing it... Prevx doesn't do anything strange with the network stack or modify any data going through. Could you possibly try uninstalling avast and see if the issue still occurs? <-QUOTE}

ill give it a try, this will be my last attempt tho, if this doesnt do anything then, :'(. if this IS the issue, ill forward it to the avast team and hopefully get it straightened out.

[kasperking]

{QUOTE-> The KeyScrambler "issue" is a non-issue (as long as its still the same one which you had before where the keystrokes were "unencrypted" - this just means that Prevx is preventing KeyScrambler from seeing the keystrokes). <-QUOTE}
huh...non issue....KeyScrambler unencrypted strokes means all gibberish is written instead of what you want to write....example instead of say "prevx" it is "?ca/c" this regardless of whether prevx is doing/not doing its bit

{QUOTE-> We're still unable to reproduce any issues with Ad Muncher... if you have any further details or if you'd be willing to open a remote support session, this would be extremely useful (and I'm sure we'd be able to solve it very swiftly :)) <-QUOTE}
the crashes are not endearing at all...i am back to v 3.0.4.65....but okay i am game even though the skeletons in my closet are planning a revolt n takeover..;D

[ambient_88]

{QUOTE-> huh...non issue....KeyScrambler unencrypted strokes means all gibberish is written instead of what you want to write....example instead of say "prevx" it is "?ca/c" this regardless of whether prevx is doing/not doing its bit


the crashes are not endearing at all...i am back to v 3.0.4.65....but okay i am game even though the skeletons in my closet are planning a revolt n takeover..;D <-QUOTE}
I have experienced the same things as yours, kaspersking, when I was using the 32-bit version.

[firzen771]

{QUOTE-> I'm honestly not sure what would be causing it... Prevx doesn't do anything strange with the network stack or modify any data going through. Could you possibly try uninstalling avast and see if the issue still occurs? <-QUOTE}

well i tried this and same thing, no AV installed just prevx and same stuff is happening...

[dlimanov]

Joe
Have a performance question: in this latest version as well as older releases, I noticed that even after initial (or scheduled) scan is finished, launching some applications takes longer than usual due to Prevx scanning files that are loading and are part of that application. Some examples are VLC Player, MediaMonkey, DivX player, anything VMWare, anything requiring Cygwin libraries.
I guess my question is why Prevx re-scanning these files on load, when it should've picked them up during on-demand scan and mark them as safe?
Thanks as always!

[PrevxHelp]

{QUOTE-> Joe
Have a performance question: in this latest version as well as older releases, I noticed that even after initial (or scheduled) scan is finished, launching some applications takes longer than usual due to Prevx scanning files that are loading and are part of that application. Some examples are VLC Player, MediaMonkey, DivX player, anything VMWare, anything requiring Cygwin libraries.
I guess my question is why Prevx re-scanning these files on load, when it should've picked them up during on-demand scan and mark them as safe?
Thanks as always! <-QUOTE}

Are you experiencing this on the first execution of one of these programs or subsequent executions? It may be worth running a few of them and sending me a scan log so that I could see if there is anything obvious which is causing the delayed scan to take place.

Thanks! :)

[PrevxHelp]

{QUOTE-> well i tried this and same thing, no AV installed just prevx and same stuff is happening... <-QUOTE}

:-\ I'm honestly not sure what would cause it in that case. Prevx doesn't do anything irregular with the network stack or send anything out-of-the-ordinary across the network.

To take a stab at a possible cause, could this be your ISP blocking traffic after misidentifying Prevx as a threat? :-\ I honestly would love to solve the problem but we have had no other user ever report a problem like this and the v3.0.1.65 build has been out for > 5 months without a single change so it's very hard to correlate/cross-reference data to try and find the underlying cause.

[PrevxHelp]

{QUOTE-> huh...non issue....KeyScrambler unencrypted strokes means all gibberish is written instead of what you want to write....example instead of say "prevx" it is "?ca/c" this regardless of whether prevx is doing/not doing its bit <-QUOTE}

I think we will end up disabling some of our protection when KeyScrambler is installed and active (just because it does duplicate some of the functionality and when dealing with cut+dry things like encrypting keystrokes, it opens up quite a bit of room for incompatibilities).

{QUOTE-> the crashes are not endearing at all...i am back to v 3.0.4.65....but okay i am game even though the skeletons in my closet are planning a revolt n takeover..;D <-QUOTE}

If you could send me a PM with when you'd be available tomorrow or any time later in the week, I'd much appreciate being able to fix the problems remotely :)

[ambient_88]

{QUOTE-> Are you experiencing this on the first execution of one of these programs or subsequent executions? It may be worth running a few of them and sending me a scan log so that I could see if there is anything obvious which is causing the delayed scan to take place.

Thanks! :) <-QUOTE}
I noticed that too. Currently, Prevx is scanning a lot of files that I've scanned before. I'll wait a couple more days to see if something changes.

[PrevxHelp]

{QUOTE-> I noticed that too. Currently, Prevx is scanning a lot of files that I've scanned before. I'll wait a couple more days to see if something changes. <-QUOTE}

I'd be interested in getting a scan log from you as well in that case if it isn't too much trouble - the more cases we can compare, the better :)

Thanks!

[dlimanov]

{QUOTE-> Are you experiencing this on the first execution of one of these programs or subsequent executions? It may be worth running a few of them and sending me a scan log so that I could see if there is anything obvious which is causing the delayed scan to take place.

Thanks! :) <-QUOTE}

Wow, that was quick! :)
This usually happens on first execution after new version is installed, but AFTER initial scan is completed. Am I wrong to assume that initial "learning" scan would've seen these files and classified them as safe already?

[PrevxHelp]

{QUOTE-> Wow, that was quick! :)
This usually happens on first execution after new version is installed, but AFTER initial scan is completed. Am I wrong to assume that initial "learning" scan would've seen these files and classified them as safe already? <-QUOTE}

The learning scan doesn't necessarily scan every file from every program. In the case of a program like VLC, it has literally hundreds of components which it loads dynamically when executed. Therefore, Prevx may not have caught them all on the initial scan as they aren't directly registered within the system or able to load on their own. When they do come to load, however, we will scan them and then allow/block as they're accessed.

We should generally be able to determine the intent of a program or component within a few seconds after the first sighting so I'm a bit surprised you're receiving persistent scans like this (which could be a result of an inconclusive program determination but those are relatively rare).

One other factor which could be involved is the infection status of your PC - do you currently have any threats or test viruses on your PC?

[Habakuck]

My Security Center again shows PrevX RC as "not active".
I ran a Windows x-64 update before and restarted the computer.

[Romagnolo1973]

Hi Joe this problem seems solved:

- SAS and MBAM scanning is sometimes slowed when Prevx is active: This is an issue stemming back a while and is solved by stopping Prevx protection while scans are taking place. We're investigating whether it would be possible to identify the operations SAS/MBAM are making in the system to prevent us from intercepting their file reads to improve their scan times


We try scan with MBAM & SAS and everithing goes well, time scan with Prevx off and Prevx on is quite the same.
You can delete the issue :thumb:
Thanks

[dlimanov]

{QUOTE-> The learning scan doesn't necessarily scan every file from every program. In the case of a program like VLC, it has literally hundreds of components which it loads dynamically when executed. Therefore, Prevx may not have caught them all on the initial scan as they aren't directly registered within the system or able to load on their own. When they do come to load, however, we will scan them and then allow/block as they're accessed.

We should generally be able to determine the intent of a program or component within a few seconds after the first sighting so I'm a bit surprised you're receiving persistent scans like this (which could be a result of an inconclusive program determination but those are relatively rare).

One other factor which could be involved is the infection status of your PC - do you currently have any threats or test viruses on your PC? <-QUOTE}

Hi Joe,
I do have a small "harvest" of test viriis, would this throw it off?
Thanks!

[dlimanov]

One more thing I noticed with SafeOnline on: any links I click in Gtalk open up as a blank tab in Opera instead of opening the actual URL. All other links in chat clients like Hotmail, OCS, Trilian and such open up fine, so not sure if this is something special in the way Gtalk launches new browser window.

[Habakuck]

My Security Center still shows Prevx as "inactive". :-\

[Triple Helix]

{QUOTE-> My Security Center still shows Prevx as "inactive". :-\ <-QUOTE}

It shows fine on my 3 computers! XP, Vista & Win 7 all 32bit

TH

[PrevxHelp]

{QUOTE-> My Security Center still shows Prevx as "inactive". :-\ <-QUOTE}

Just to clarify - are you using a fully registered version of Prevx? We only integrate into the security center when you have a full license.

[Habakuck]

Yes i do use a paid version.

[Baldrick]

Seems to have gone very quiet here! Am I missing something ???

[trjam]

{QUOTE-> Seems to have gone very quiet here! Am I missing something ??? <-QUOTE}
Lol, I am still here and using it. Dont use the RC though. Wish Prevx had invested the effort into improving cleaning instead of that web thing.

[Baldrick]

{QUOTE-> Lol, I am still here and using it. Dont use the RC though. Wish Prevx had invested the effort into improving cleaning instead of that web thing. <-QUOTE}
Hi trjam

Thanks for the reassurance. I am interested in the beta which I have been testing and it is unlike Joe to be absent unless his rushing around the world between conferences, etc. OR if a final release is due.

Personally I find the "web thing" to be very good and useful but must agree that Prevx's achilles heel at present is the incomplete cleaning. A review of a competitor product noted that it had just disloged Prevx from being Editor's Choice due to better cleaning ability. I am not saying that I necessarily go by this magazine reviews but I think that the 'weakness' in this department compared to competitors is something that should be addressed and hopefully Prevx have plans to look at this once v3.0 Final is released.

After all there is only so much that they can do whilst trying to respond to all the feedback they get from beta testers. ;D

[Threedog]

The gone quiet may mean that people may not be running into as many problems with it too. That would be a good thing. Personally, I haven't had any problems with this beta at all.

[simmikie]

{QUOTE-> Hi trjam

Thanks for the reassurance. I am interested in the beta which I have been testing and it is unlike Joe to be absent unless his rushing around the world between conferences, etc. OR if a final release is due.

Personally I find the "web thing" to be very good and useful but must agree that Prevx's achilles heel at present is the incomplete cleaning. A review of a competitor product noted that it had just disloged Prevx from being Editor's Choice due to better cleaning ability. I am not saying that I necessarily go by this magazine reviews but I think that the 'weakness' in this department compared to competitors is something that should be addressed and hopefully Prevx have plans to look at this once v3.0 Final is released.

After all there is only so much that they can do whilst trying to respond to all the feedback they get from beta testers. ;D <-QUOTE}

there has been so much attention given to Safeonline (rightfully so) that the part of Prevx which is nearest and dearest to my heart, the protection and clean-up, has largely been off of the radar.

i mention this because if i recall correctly, this build also features a reworked protection engine, and there has been no mention of what users will gain from this effort.

has anyone noticed improvements in detection/clean-up or/and reduced FP's?

[TonyW]

{QUOTE-> has anyone noticed improvements in detection/clean-up or/and reduced FP's? <-QUOTE}Re: the FPs, I haven't had that many to start with, perhaps two if I recall correctly that occurred with the stable release, but they were promptly dealt with. There hasn't been any with the beta builds. Settings are at medium though on all counts.

[PrevxHelp]

{QUOTE-> Lol, I am still here and using it. Dont use the RC though. Wish Prevx had invested the effort into improving cleaning instead of that web thing. <-QUOTE}

The cleanup "issues" that were pointed out by the PC Magazine review were empty registry keys and blank files - not the most important things to have :)

We guarantee our malware cleanup (http://www.prevx.com/freescan.asp#tt_guaranteed) so it obviously must be working quite well in the real world :)

[PrevxHelp]

{QUOTE-> there has been so much attention given to Safeonline (rightfully so) that the part of Prevx which is nearest and dearest to my heart, the protection and clean-up, has largely been off of the radar.

i mention this because if i recall correctly, this build also features a reworked protection engine, and there has been no mention of what users will gain from this effort.

has anyone noticed improvements in detection/clean-up or/and reduced FP's? <-QUOTE}

This is very true :) The complete internal changelog between v3.0.1.65 and v3.0.5.1 (we're nearing a final release, and that is the current build which will be coming out to testers soon) has nearly 1000 changes in it - we haven't been sitting idle!

The complete rewrite of the protection engine massively reduces overhead and significantly improves database communication. There will be a sizable uptick in detections, partly because of new detection algorithms rolled out in the client and then also a revamped centralized sandboxing system which performs server-side analysis of malware.

The cleanup engine has a handful of improvements but we're waiting for Prevx 4.0 to roll out the major improvements in it. As per the PC Magazine review, we are going to be adding removal for garbage data - like empty registry keys and data files created by malware. That, however, is more of "icing on top of the cake" rather than real technological benefits, which will be prominently coming in v4.0.

Although we do fine on them now, we've seen one case of a new technique which requires manual work to clean so we will be updating our cleanup engine accordingly. However, in its defense, we have not updated a single component of our generic cleanup engine in over 5 months and it has only failed on a small number of stray threats (which resulted in our engineers promptly fixing the user's PCs remotely) after it has successfully cleaned literally millions of threats automatically with no changes from our end. All of our competitors write signatures to remove specific files, which is why they are marginally more successful with stray, dormant components - ours, however, is completely generic. While PC Magazine may deem our cleanup as imperfect, I believe our track record speaks for itself, at least against real threats :)

[firzen771]

{QUOTE-> This is very true :) The complete internal changelog between v3.0.1.65 and v3.0.5.1 (we're nearing a final release, and that is the current build which will be coming out to testers soon) has nearly 1000 changes in it - we haven't been sitting idle!

The complete rewrite of the protection engine massively reduces overhead and significantly improves database communication. There will be a sizable uptick in detections, partly because of new detection algorithms rolled out in the client and then also a revamped centralized sandboxing system which performs server-side analysis of malware.

The cleanup engine has a handful of improvements but we're waiting for Prevx 4.0 to roll out the major improvements in it. As per the PC Magazine review, we are going to be adding removal for garbage data - like empty registry keys and data files created by malware. That, however, is more of "icing on top of the cake" rather than real technological benefits, which will be prominently coming in v4.0.

Although we do fine on them now, we've seen one case of a new technique which requires manual work to clean so we will be updating our cleanup engine accordingly. However, in its defense, we have not updated a single component of our generic cleanup engine in over 5 months and it has only failed on a small number of stray threats (which resulted in our engineers promptly fixing the user's PCs remotely) after it has successfully cleaned literally millions of threats automatically with no changes from our end. All of our competitors write signatures to remove specific files, which is why they are marginally more successful with stray, dormant components - ours, however, is completely generic. While PC Magazine may deem our cleanup as imperfect, I believe our track record speaks for itself, at least against real threats :) <-QUOTE}

any news on that database restructuring u mentioned in a PM?

[PrevxHelp]

{QUOTE-> any news on that database restructuring u mentioned in a PM? <-QUOTE}

The communication changes applicable to your system will first be in Prevx 4.0 (as they are very fundamental in nature so we can't just toss them in :))

[Threedog]

I haven't had any false positives in ages and I run Max/Med/Med on the sliders.

[firzen771]

{QUOTE-> The communication changes applicable to your system will first be in Prevx 4.0 (as they are very fundamental in nature so we can't just toss them in :)) <-QUOTE}

ah ok, a while away then :(

[simmikie]

{QUOTE-> This is very true :) The complete internal changelog between v3.0.1.65 and v3.0.5.1 (we're nearing a final release, and that is the current build which will be coming out to testers soon) has nearly 1000 changes in it - we haven't been sitting idle!

The complete rewrite of the protection engine massively reduces overhead and significantly improves database communication. There will be a sizable uptick in detections, partly because of new detection algorithms rolled out in the client and then also a revamped centralized sandboxing system which performs server-side analysis of malware.

The cleanup engine has a handful of improvements but we're waiting for Prevx 4.0 to roll out the major improvements in it. As per the PC Magazine review, we are going to be adding removal for garbage data - like empty registry keys and data files created by malware. That, however, is more of "icing on top of the cake" rather than real technological benefits, which will be prominently coming in v4.0.

Although we do fine on them now, we've seen one case of a new technique which requires manual work to clean so we will be updating our cleanup engine accordingly. However, in its defense, we have not updated a single component of our generic cleanup engine in over 5 months and it has only failed on a small number of stray threats (which resulted in our engineers promptly fixing the user's PCs remotely) after it has successfully cleaned literally millions of threats automatically with no changes from our end. All of our competitors write signatures to remove specific files, which is why they are marginally more successful with stray, dormant components - ours, however, is completely generic. While PC Magazine may deem our cleanup as imperfect, I believe our track record speaks for itself, at least against real threats :) <-QUOTE}

nice (i knew there was a reason i keep hanging in with this product:D )

while we are on the subject of core Prevx functionality, i was wondering if you (Joe) would be willing to give a refresher course on P3's behavior monitoring functionality. i ask because i truly would like to ween myself completely from conventional HIPS. at present i use Comodos Defense Plus in a reduced capacity. i only have it monitor RPC/DNS services, Protected Files & Folders, Driver Installation, Physical Memory, and Disks Access. Answering pop-ups from even this basic D+ set-up are often for me just best guesses. i have been fortunate to have not hosed my system too often by these guesses.

i would like to automate this, and i believe i read something of yours indicating Prevx could in fact be a cloud based HIPS. am i nuts or is D+ soon to be kicked to the curb??

Mike

[Baldrick]

{QUOTE-> This is very true :) The complete internal changelog between v3.0.1.65 and v3.0.5.1 (we're nearing a final release, and that is the current build which will be coming out to testers soon) has nearly 1000 changes in it - we haven't been sitting idle!

The complete rewrite of the protection engine massively reduces overhead and significantly improves database communication. There will be a sizable uptick in detections, partly because of new detection algorithms rolled out in the client and then also a revamped centralized sandboxing system which performs server-side analysis of malware.

The cleanup engine has a handful of improvements but we're waiting for Prevx 4.0 to roll out the major improvements in it. As per the PC Magazine review, we are going to be adding removal for garbage data - like empty registry keys and data files created by malware. That, however, is more of "icing on top of the cake" rather than real technological benefits, which will be prominently coming in v4.0.

Although we do fine on them now, we've seen one case of a new technique which requires manual work to clean so we will be updating our cleanup engine accordingly. However, in its defense, we have not updated a single component of our generic cleanup engine in over 5 months and it has only failed on a small number of stray threats (which resulted in our engineers promptly fixing the user's PCs remotely) after it has successfully cleaned literally millions of threats automatically with no changes from our end. All of our competitors write signatures to remove specific files, which is why they are marginally more successful with stray, dormant components - ours, however, is completely generic. While PC Magazine may deem our cleanup as imperfect, I believe our track record speaks for itself, at least against real threats :) <-QUOTE}
Hi Joe

Thanks for the update...extrememly comprehensive and useful as ever.
:thumb:

I echo threedog's comment about FPs...none seen for...well I don't really remember when and to be honest I have not experienced a single glitch with SafeOnline preventing me from doing anything that I was supposed to be able to do. So all in all 228 is working fine here. :thumb:

The faithful ;) standby to test what ever else Prevx want to put out before a Version 3 final...and then hopefully move on to testing a Version 4 beta. ;D

Let us know! We are watching and waiting!

8)

[Dark Star 72]

Just updated to 3.0.5.2 with a load of new 'partner configured' domains in the 'Safe Online' settings.
Now off to bed so will have a better look in the morning

[PrevxHelp]

Hello all,
We've released a new RC build with details here: http://www.wilderssecurity.com/showthread.php?t=256629

Please let me know if you find any issues and thank you for the testing! :thumb: