Prevx RC 3.0.5.3

[Dark Star 72]

Good morning, v3.0.5.3 now installed without any problems after a startup scan and running nicely.
Also available as a download from the Beta site.

[ludo021288]

Just installed 3.0.5.3 over 3.0.1.65. Install works smoothly but the initial learning scan doesn't launch automatically. I had to launch it manually. Otherwise, everything is working fine with this release.

[PrevxHelp]

Hello all,
This build fixes a few incompatibilities and issues and illustrates some changes in our licensing model. To retest the changes after upgrading, just close/reopen your browser.

The download links are still:

32bit: http://info.prevx.com/download.asp?grab=edgebeta
64bit: http://info.prevx.com/download.asp?grab=edgebeta64

The changelog is:
- Added a grace period of 4 hours of enabling Realtime Protection if the user has only a cleanup license to make cleanup more effective by blocking droppers
- Made some adjustments to the licensing model
- Fixed some reliability issues with the management of the configuration
- Fixed credential protection for UK keyboards
- Fixed compatibility with foreign keyboards/foreign characters
- Fixed some minor GUI logic issues
- Added differentiation between database configured/user configured domains
- Fixed some incompatibilities with KeyScrambler
- Fixed an issue preventing Windows Explorer from seeing Internet Explorer windows
- Improved credit card credential protection
- Added dynamic database-driven configuration of protected domains
- Minor graphical changes

Complete List of Known Issues:
- Incompatibility with NIS2010 identity protection
- Possible crash with A2 + Ad Muncher on XP SP3
- Possible issue using YouTube under a Sandboxie'd Firefox 3.5.3 (Vista SP2)
- Issue preventing KeePass seeing macros or copying/pasting data
- WinFlip isn't allowed to flip browser windows (XP SP3)
- Crashes with Firefox 3.5.3 + IETab + WebSiteWatcher + Xmarks + Foxmarks
- Connection issue with ShadowDefender + OnlineArmour in Shadow Mode (XP SP3)
- Slow "My Documents" synchronization when configured to synchronize on logon/logoff
- Possible incompatibility with Zemana AntiLogger (Win7)
- Back button on a Logitech SetPoint mouse doesn't work properly
- Stray issue causing My Documents to open after a SafeOnline-configured scan takes place
- Incompatibility with Fritz!DSL Protect

Conceptual Incompatibilities:
- Defensewall is expected to block Opera support as it prevents browsers from reaching trusted components (Prevx) so we are not able to load some protection/monitoring into an Opera browser protected by Defensewall

Next Steps:
- Add Safari Support
- Add Iron Support
- Add Maxthon Support

Please let me know what you find and thanks again for the testing! :)

[PrevxHelp]

Hello all,
As I mentioned in the previous post, we've made some changes to our licensing model so I thought I'd explain them here. The new model puts some limitations on the protection of custom websites in the free version - the user is now allowed to add one custom website but they cannot change the https policy to Maximum by default. Our database now dynamically ships a list of websites to protect down to the agent PCs, including PayPal, Amazon, CleverBridge, and government websites. We've done this primarily to not undercut the value of SafeOnline - offering it completely free for all home users would be disadvantageous to us. When not visiting these domains, protection is still active for stored passwords and data, as is the antiphishing/anti-malicious-URL checking and man-in-the-middle attack prevention.

However, for all beta testers at Wilders and elsewhere, we are still offering the full https protection/full configuration for free (a $14.95 value) as a big Thank You! for your testing :)

The v3.0.5.3 build should automatically identify if you were a beta tester or not and allow you to configure everything but if it does not, please send me a PM and I'll fix your license.

Please let me know if you have any questions or thoughts on this!

[mvdu]

I use Keyscrambler and was having constant Prevx crashes with the previous version; will let you know if they continue.

[PrevxHelp]

-{ Quote: "while we are on the subject of core Prevx functionality, i was wondering if you (Joe) would be willing to give a refresher course on P3's behavior monitoring functionality. i ask because i truly would like to ween myself completely from conventional HIPS. at present i use Comodos Defense Plus in a reduced capacity. i only have it monitor RPC/DNS services, Protected Files & Folders, Driver Installation, Physical Memory, and Disks Access. Answering pop-ups from even this basic D+ set-up are often for me just best guesses. i have been fortunate to have not hosed my system too often by these guesses.

i would like to automate this, and i believe i read something of yours indicating Prevx could in fact be a cloud based HIPS. am i nuts or is D+ soon to be kicked to the curb??" }-

(Sorry for the delayed response on this post - I had missed it :-[)

We aren't trying to displace D+/similar products but we do feel that the right way to go is to automate HIPS responses and operate as silently as possible. Prevx 3.0's behavior monitoring covers the disk/registry/memory/network, collecting all of the data (and more :)) which "classical" HIPS products collect and then shipping that to our database which automates the decisions on the "prompts" that would have occurred.

To be fair to everyone, we were one of the first classical HIPS vendors but those days are long gone in our opinion - we disagree with the model of prompting the user with every change that takes place. While it is nice to put things in the user's hands, 98-99% of users have no clue/don't care/shouldn't care what the prompts mean: antimalware research should be left to the antimalware companies, not to the end user. The 1-2% of users (and this is a very over-estimated number) that do want that degree of functionality are fine, but for the bulk of the users "in the wild", a classical HIPS is a headache.

We've seen that when giving a user a Yes/No prompt about a security change, they tend to get it wrong more than 50% of the time. Depending on the user, this would mean that a classical HIPS product may have more luck just randomly picking Yes or No :-\

Since moving away from the classical HIPS features in Prevx 2.0, we have had the most significant drop in tech support inquiries and user complaints that we've ever seen, followed by a massive increase in real malware detections and blocked files. One of the problems with classical HIPS is that once you block an action, you can't "unblock" it - we have had a number of users who come in complaining that Prevx 3.0's installation didn't work but it turned out that they had simply not clicked Allow to every prompt :-\

Hrm... it seems I may have spent a bit of time on a soapbox here ;D Let me know if this answers your question or if you want any other clarification!

[TonyW]

Please check your PMs, Joe. :)

[sded]

Upgraded from 3.0.5.2 to 3.0.5.3 with no problems this time.

[rolarocka]

There is still a problem with ThreatFire and Prevx. They both interchange themselves in the security center. I will send you a pm showing it.
---------------
Also Prevx sometimes disables itself and restarts when the system is under heavy load. Not easy to replicate though...

[nrestell]

Hi,

RC3.0.5.3 installed fine here on Windows 7 64bit :) .

Any news on when the web protection will be available for 64bit?

Regards,

Neil

[Triple Helix]

-{ Quote: "Hello all,
As I mentioned in the previous post, we've made some changes to our licensing model so I thought I'd explain them here. The new model puts some limitations on the protection of custom websites in the free version - the user is now allowed to add one custom website but they cannot change the https policy to Maximum by default. Our database now dynamically ships a list of websites to protect down to the agent PCs, including PayPal, Amazon, CleverBridge, and government websites. We've done this primarily to not undercut the value of SafeOnline - offering it completely free for all home users would be disadvantageous to us. When not visiting these domains, protection is still active for stored passwords and data, as is the antiphishing/anti-malicious-URL checking and man-in-the-middle attack prevention.

However, for all beta testers at Wilders and elsewhere, we are still offering the full https protection/full configuration for free (a $14.95 value) as a big Thank You! for your testing :)

The v3.0.5.3 build should automatically identify if you were a beta tester or not and allow you to configure everything but if it does not, please send me a PM and I'll fix your license.

Please let me know if you have any questions or thoughts on this!" }-

I don't quite understand your explanation that I hight lighted in your statement! This is for the Free Version only or is this a extra fee for a fully Licensed version because there is no license for the free version that you can fix right?

Thanks,

TH

[Dark Star 72]

Joe,
You said in one of your previous posts that the full data base for the AntiPhishing/anti-malicious-URL/man-in-the-middle protection was not complete and not fully turned on. With the release of this 3.0.5 series of release candidates is this now being fully utilised or do we have to wait for the final public release to see this.

Also, with reference to your reply to Simmikie about Prevx HIPS funtionality.
If I install software with a HIPS (lets say OA) installed and I approve the first pop-up OA will continue to monitor the installation and stop it if it starts to do anything suspicious during the installation process, what would Prevx do in the same sort of situation if there wasn't a HIPS installed, would it also stop the installation and notify you while it consulted with the Mothership?

Last question (for now)
What are the outgoing firewall like protection capabilities of Prevx now, could we expect to get an alert/warning if something on the machine tried to access confidential information for the purpose of 'phoning home' with it. I am thinking of something already installed on the machine, not something only in the browser. And just how much protection does 'SafeOnline' give in this arena.

[kasperking]

-{ Quote: "I don't quite understand your explanation that I hight lighted in your statement! This is for the Free Version only or is this a extra fee for a fully Licensed version because there is no license for the free version that you can fix right?
" }-

this fee is for free version as far as i understand....means for $14.95 safeonline can be set to max setting otherwise it would stay at "low" and a prompt to buy license when attempted to set max value....no such fee or restriction for licensed version it seems.

hey prevxhelp on an upgrade from 3.0.1.65 to the current rc i get the safeonline license prompt but after a clean install it was fine???

and winpatrol site is being flagged as phishing site........i.e. if i search info about prevx.exe from within winpatrol the WP site is flagged as a phishing site

[Dark Star 72]

-{ Quote: "and winpatrol site is being flagged as phishing site........i.e. if i search info about prevx.exe from within winpatrol the WP site is flagged as a phishing site" }-
I also reported this problem here:

http://www.wilderssecurity.com/showthread.php?t=255491

post#6

[PrevxHelp]

-{ Quote: "I don't quite understand your explanation that I hight lighted in your statement! This is for the Free Version only or is this a extra fee for a fully Licensed version because there is no license for the free version that you can fix right?" }-

We've introduced a scaled pricing model - you can buy a cleanup only license, a SafeOnline only license, a realtime protection + cleanup license, or a realtime protection + cleanup + SafeOnline license.

Let me know if this isn't clear :)

[ludo021288]

And for people who already owned a realtime + cleanup license, will they have to buy a new license to have SafeOnline features, or will it be free for them?

PS: Do you have any idea when SafeOnline will be avaible for x64 systems?

[PrevxHelp]

-{ Quote: "Joe,
You said in one of your previous posts that the full data base for the AntiPhishing/anti-malicious-URL/man-in-the-middle protection was not complete and not fully turned on. With the release of this 3.0.5 series of release candidates is this now being fully utilised or do we have to wait for the final public release to see this." }-

I'm not sure how turned on it is - we just released 3.0.5.3 officially as of about 10 minutes ago but I will get more details shortly.

-{ Quote: "Also, with reference to your reply to Simmikie about Prevx HIPS funtionality.
If I install software with a HIPS (lets say OA) installed and I approve the first pop-up OA will continue to monitor the installation and stop it if it starts to do anything suspicious during the installation process, what would Prevx do in the same sort of situation if there wasn't a HIPS installed, would it also stop the installation and notify you while it consulted with the Mothership?" }-

The installation isn't stopped, it is just delayed temporarily while we contact "The Mothership" :) The "Authenticating Files..." popup is the graphical display we show when its taking a bit longer to talk to the database.

-{ Quote: "Last question (for now)
What are the outgoing firewall like protection capabilities of Prevx now, could we expect to get an alert/warning if something on the machine tried to access confidential information for the purpose of 'phoning home' with it. I am thinking of something already installed on the machine, not something only in the browser. And just how much protection does 'SafeOnline' give in this arena." }-

We don't provide outgoing firewall protection but we do take in these details for weighing our heuristics/collecting them as behaviors. Regarding SafeOnline and the browser - we are draconian about our approach with it: we don't necessarily care who is trying to access the data, they just won't be able to :) When dealing with threats like the MBR rootkit, it becomes difficult to track back to a precise starting point, which is why we just lock it down completely.

[rolarocka]

Nice Website :thumb:

[PrevxHelp]

-{ Quote: "And for people who already owned a realtime + cleanup license, will they have to buy a new license to have SafeOnline features, or will it be free for them?" }-

Existing users with a full license will have the free SafeOnline features but will need to upgrade their license to include the fully configurable SafeOnline. (Most of the beta testers should have already been automatically upgraded - we upgraded a few thousand users who we identified as beta testers automatically but let me know if you didn't get included :))

-{ Quote: "PS: Do you have any idea when SafeOnline will be avaible for x64 systems?" }-

This is still a bit further down the road - we don't have a specific timeline for it yet but it "should" come before Prevx 4.0.

[PrevxHelp]

I've made a new thread about the official release of build 3.0.5.3 here: http://www.wilderssecurity.com/showthread.php?t=256694

I'll leave this thread open for any feedback pertinent to SafeOnline issues/incompatibilities/etc.

Let me know what you find and thank you, as always, for the testing :thumb:

[Habakuck]

Joe, i have a 3.0 "Full" Licence (CleanUp and Protection). Am i able to use SafeOnline with the final release? I really hope so cause i have 239 days left and i think i paid for the full PrevX product!

[Dark Star 72]

-{ Quote: "Existing users with a full license will have the free SafeOnline features but will need to upgrade their license to include the fully configurable SafeOnline. (Most of the beta testers should have already been automatically upgraded - we upgraded a few thousand users who we identified as beta testers automatically but let me know if you didn't get included :))" }-
Joe, have just checked my license details in 'My Prevx' and I have 18 days left of 'Prevx 3.0 Malware Removal & Protection'. Nothing about Safe Online. Will I be able to continue using Safe Online for the next i8 days until I renew my license?

[Dark Star 72]

-{ Quote: "I'm not sure how turned on it is - we just released 3.0.5.3 officially as of about 10 minutes ago but I will get more details shortly.

Thanks, not a problem

The installation isn't stopped, it is just delayed temporarily while we contact "The Mothership" :) The "Authenticating Files..." popup is the graphical display we show when its taking a bit longer to talk to the database.

But, if the installation does start to 'misbehave' what would happen, would Prevx alert to it.

We don't provide outgoing firewall protection but we do take in these details for weighing our heuristics/collecting them as behaviors. Regarding SafeOnline and the browser - we are draconian about our approach with it: we don't necessarily care who is trying to access the data, they just won't be able to :) When dealing with threats like the MBR rootkit, it becomes difficult to track back to a precise starting point, which is why we just lock it down completely." }-

I realised that Prevx doesn't provide FW protection, I just wondered if Safe Online would provide the same sort of protection. I think perhaps I didn't word my original question too well.

And congrats on the new web site, very nice.

[firzen771]

-{ Quote: "Existing users with a full license will have the free SafeOnline features but will need to upgrade their license to include the fully configurable SafeOnline. (Most of the beta testers should have already been automatically upgraded - we upgraded a few thousand users who we identified as beta testers automatically but let me know if you didn't get included :))." }-

has the license i have been included in the automatic upgrade? if u need me to PM u the licenses incase let me know.

[Baldrick]

-{ Quote: "Existing users with a full license will have the free SafeOnline features but will need to upgrade their license to include the fully configurable SafeOnline. (Most of the beta testers should have already been automatically upgraded - we upgraded a few thousand users who we identified as beta testers automatically but let me know if you didn't get included :))
" }-
Hi Joe

That is extremely kind and considerate of Prevx...my thanks to you all back at the ranch. :thumb:

I just look forward to more testing...and renewing my license (for the works) when it expires. ;D

[PrevxHelp]

-{ Quote: "Joe, have just checked my license details in 'My Prevx' and I have 18 days left of 'Prevx 3.0 Malware Removal & Protection'. Nothing about Safe Online. Will I be able to continue using Safe Online for the next i8 days until I renew my license?" }-

Yes you will - we aren't mentioning SafeOnline in the "License Information" page within product yet and we have a specific workaround in place just for beta testers to give you SafeOnline functionality which doesn't necessarily update your license key to reflect it.

Let me know if you need anything or if the license renewal is bumpy at all from the new release :)

[PrevxHelp]

-{ Quote: "has the license i have been included in the automatic upgrade? if u need me to PM u the licenses incase let me know." }-

PM'ing me the license would be the easiest way :)

[clocks]

-{ Quote: "We've introduced a scaled pricing model - you can buy a cleanup only license, a SafeOnline only license, a realtime protection + cleanup license, or a realtime protection + cleanup + SafeOnline license.

Let me know if this isn't clear :)" }-


I think things have gotten a little muddy, but maybe it's just me. Most companies have a free version, and a pro/paid version. Prevx now has four versions. Seems like one or two too many.

[firzen771]

-{ Quote: "PM'ing me the license would be the easiest way :)" }-

PM sent :)

[firzen771]

-{ Quote: "I think things have gotten a little muddy, but maybe it's just me. Most companies have a free version, and a pro/paid version. Prevx now has four versions. Seems like one or two too many." }-

i do have to agree, this adds a lot of confusion and hassle for new customers...

[Page42]

-{ Quote: "Existing users with a full license will have the free SafeOnline features but will need to upgrade their license to include the fully configurable SafeOnline." }-
Hi Joe

I own a Prevx3 1 Year Malware Removal and Protection for 2 PCs license. What must I do to upgrade? Thank you. :)

[clocks]

-{ Quote: "i do have to agree, this adds a lot of confusion and hassle for new customers..." }-

Exactly. Over the past day or two I having been thinking about pulling the trigger on a three year license for what was, at the time, their top product. Now another "level" of protection is available, and it seems like it should have just been included in their existing top level product. But instead it is another $10 on a three year license.

Every time a new feature is added, is the price going to go up incrementally?

[PrevxHelp]

-{ Quote: "Exactly. Over the past day or two I having been thinking about pulling the trigger on a three year license for what was, at the time, their top product. Now another "level" of protection is available, and it seems like it should have just been included in their existing top level product. But instead it is another $10 on a three year license.

Every time a new feature is added, is the price going to go up incrementally?" }-

SafeOnline, while included in the main product on-download, is technically a separate product - not just an additional feature. A similar behavior takes place with internet security suites: you pay extra for the additional components on top of the antimalware but you can still buy the antimalware product separately if wanted.

You can, of course, just pay for the antimalware components and just leave SafeOnline in the free version which may be a desirable option for users who don't think that their PC is infected or have enough other layers of security to satisfy their protection needs.

We separate out the different products so that users can choose what they want. There are many users who, for one reason or another, only want cleanup functionality - many of whom only want it for 1 month, which is why we offer that option. On top of that, you can get realtime protection or SafeOnline on top of both, rather than forcing users into a "one-size fits all" model.

[PrevxHelp]

-{ Quote: "Hi Joe

I own a Prevx3 1 Year Malware Removal and Protection for 2 PCs license. What must I do to upgrade? Thank you. :)" }-

Send me a PM if it isn't automatically upgraded from beta testing :)

[firzen771]

-{ Quote: "Exactly. Over the past day or two I having been thinking about pulling the trigger on a three year license for what was, at the time, their top product. Now another "level" of protection is available, and it seems like it should have just been included in their existing top level product. But instead it is another $10 on a three year license.

Every time a new feature is added, is the price going to go up incrementally?" }-

in theory it sounds complicated but i will give prevx a good job on making it decently clear on their new site design, prevx always seems to have a very nice, clear and concise website that helps:thumb:

and thx for checking my licenses prevxhelp :)

[Triple Helix]

Hi Joe,

Why does it still says Release Candidate on the final?

TH

Edit: I downloaded a fresh copy and all is fine now!

[Baldrick]

-{ Quote: "Hi Joe,

Why does it still says Release Candidate on the final?

TH

Edit: I downloaded a fresh copy and all is fine now!" }-
Interesting...but I don't have 3.0.5.4 yet and trying to update comes back with "You have the latest..." message.

???

[PrevxHelp]

-{ Quote: "Interesting...but I don't have 3.0.5.4 yet and trying to update comes back with "You have the latest..." message." }-

We have some parts of our updating switched off currently, and it may be that v3.0.5.3 won't upgrade to v3.0.5.4 if you've downloaded the official release of v3.0.5.3 first.

You can, of course, manually run the newer installer and it will upgrade your existing copy automatically :)

[Habakuck]

Joe, do you have an idea how long it will take to develop the 64-bit version of SafeOnline?

[Baldrick]

-{ Quote: "We have some parts of our updating switched off currently, and it may be that v3.0.5.3 won't upgrade to v3.0.5.4 if you've downloaded the official release of v3.0.5.3 first.

You can, of course, manually run the newer installer and it will upgrade your existing copy automatically :)" }-
of course...silly me. WIll try that. ;D

[PrevxHelp]

-{ Quote: "Joe, do you have an idea how long it will take to develop the 64-bit version of SafeOnline?" }-

We're hoping to have it out within the next month but are making good progress with it so far so it may be out sooner :)

[Habakuck]

-{ Quote: "We're hoping to have it out within the next month but are making good progress with it so far so it may be out sooner :)" }-
Cool. :thumb:

[kbijl]

Hi, how can i see of the rootscan is working ? always when i start prevx to scan i see the mention of rootscan only for a part of a second and then he goes scanning (starting at 9 %)

windos vista latest update and bullgard 8.7 en the rc 3.0.5.3 from prevx !

[PrevxHelp]

-{ Quote: "Hi, how can i see of the rootscan is working ? always when i start prevx to scan i see the mention of rootscan only for a part of a second and then he goes scanning (starting at 9 %)

windos vista latest update and bullgard 8.7 en the rc 3.0.5.3 from prevx !" }-

The rootkit scan is an inherent part of Prevx - only a small portion of it takes place at the beginning of the scan but the rest takes place while the scan is going (as files are read to be scanned, they are also checked for rootkits) so the behavior you're seeing is most likely fine.

[Baldrick]

Build 3.0.5.8 auto installed here and running well. :thumb:

Any info on changes included? ;D

[rolarocka]

Sometimes Prevx crashes when you go to "Undo Cleanup" and press "Remove All" when there is nothing to clean. I got an error about adress something. Couldnt take a screenshot. Prevx restarted alone.
Latest Beta.