OFFICIAL RELEASE - Prevx 3.0.5.10 with SafeOnline

[PrevxHelp]

Hello all,
We've released the first update to Prevx SafeOnline which includes a handful of minor bugfixes/changes:

- Fixed compatibility with AdMuncher and WinPatrol
- Fixed credential protection for certain characters on non-English keyboards
- Fixed input redrawing when SafeOnline is disabled
- Fixed an issue not activating a new SafeOnline license
- Fixed a browser slowdown issue in Opera on secured websites
- Fixed some incompatibilities with ESET Smart Security and IE8
- Fixed an issue with touchpad back/forward buttons
- Fixed handling of mouse shortcut "keys"
- Fixed an issue handling switching between languages using a keyboard shortcut
- Fixed some graphical incompatibilities with maximum SafeOnline protection
- Further improved compatibility with ESET Smart Security
- Fixed an issue hitting Alt to underline menus in some applications
- Fixed some issues in the Enterprise version of Prevx 3.0
- Fixed an issue with OEM shortcut application keys
- Fixed an incompatibility with Synaptics Touchpad Enhancements
- Fixed a historic issue not reliably creating the tray icon

Please let me know if you continue to have any incompatibilities or questions/problems at all.

Thank you for your support, testing, and feedback!

[PatG]

Just check and already received the automatic update!

[Triple Helix]

Working well as always! Good article http://www.prnewswire.com/news-releases/prevx-safeonline-boosts-confidence-in-online-banking-69054212.html

TH

[hogndog]

Thanks for the heads up! :thumb:

[denis]

Is this the last one. It just update it, and i couldn't find it here.::)

[rolarocka]

That is the latest beta and you can find it here under the first link:
http://www.wilderssecurity.com/showpost.php?p=1564000&postcount=3

The beta versons are always the same link.

[DavidCo]

No update here

[PrevxHelp]

Hello all,
I've updated the changelog at the top of the thread and done some thread merging - we now have released v3.0.5.10 as the official version to the public.

Let me know if you have any questions or comments! :)

[denis]

i don't like it. It is always working. Thank you prevx for a great.....;D

[Triple Helix]

It would not update so I went and downloaded the latest version and working well!

TH

[Romagnolo1973]

Hi Joe
We have a problem with Prevx GUI, I think new prevx is too fast on scan and your grafic GUI can't be loaded in time ;D;D ;D

It happens only when you scan a file or pattern via contest menu (right click-Scan with prevx) , if the pattern or the file is big enough everyting is ok, if the pattern or the file is small we have the prevx GUI on the right side of the screen completely dark and with only the OK button blue, impossible to see if the file is good or infected

Prevx 3.0.5.10 & XP SP3 for me & other friend same issue

You can look the pictures here, so you can understand better
Pics 1 & 2 big pattern or big files = Previx Gui OK
Pics 3 small files = Previx GUI black
http://www.hwupgrade.it/forum/showpost.php?p=29573508&postcount=1449

Thanks

[PrevxHelp]

-{ Quote: "Hi Joe
We have a problem with Prevx GUI, I think new prevx is too fast on scan and your grafic GUI can't be loaded in time ;D;D ;D " }-

;D We've reproduced this issue and will have it fixed in the next version :) Thanks for the report!

[Cherub]

I'm a little confused. I have the paid Prevx 3, so if mine just automatically updates to the new version, will safeonline be a part of it? Or do I need to download safeonline also?

[papillonn]

you shouldn't pay safeonline separe tely because it is a piece of prevx like realtime malware protection or malware cleanup.

[Blackcat]

-{ Quote: "I'm a little confused. I have the paid Prevx 3, so if mine just automatically updates to the new version, will safeonline be a part of it? " }-
Yes ;)

[rollers]

-{ Quote: "Hello all,
I've updated the changelog at the top of the thread and done some thread merging - we now have released v3.0.5.10 as the official version to the public.

Let me know if you have any questions or comments! :)" }-

I just tried updating from the client and I am still not finding an update, still on 3.0.1.65

Any news on the 64 bit version for safe online?

[PrevxHelp]

-{ Quote: "I'm a little confused. I have the paid Prevx 3, so if mine just automatically updates to the new version, will safeonline be a part of it? Or do I need to download safeonline also?" }-

The SafeOnline trial version will come as disabled by default but can be turned on manually within the GUI.

[PrevxHelp]

-{ Quote: "I just tried updating from the client and I am still not finding an update, still on 3.0.1.65

Any news on the 64 bit version for safe online?" }-

The 64bit version of SafeOnline is due out within the next month or so :)

[simmikie]

well i am confused because my licensed version did not auto update from .53 to .54. nor did it auto-update to 5.6 ( i had to manually update via the updates button) and now it will not update manually or automatically to 5.10 ???

Mike

[rolarocka]

Theres a prob with "Undo Cleanup". After something is detect and you click "Remove All" a few times in a row, it shows the same question multiple times "Are you sure Yes No".
After that Prevx crashes with this error warning:

213517

Or am i having an ram problem? Oh oh...

The good thing is Prevx restarts itself.

[PrevxHelp]

-{ Quote: "Theres a prob with "Undo Cleanup". After something is detect and you click "Remove All" a few times it shows the same question multiple times "Are you sure Yes No".
After that Prevx crashes with this error warning:" }-

I don't think you're having a RAM problem :) This definitely sounds like a Prevx bug (although clicking Remove All multiple is generally not a required function ;D)

Thank you for the report - we'll have this fixed shortly :)

[PrevxHelp]

-{ Quote: "well i am confused because my licensed version did not auto update from .53 to .54. nor did it auto-update to 5.6 ( i had to manually update via the updates button) and now it will not update manually or automatically to 5.10 ??? " }-

We have some aspects of automated updating still turned off - you can manually download the newest versions from http://info.prevx.com/downloadcsi.asp but we're still holding off switching it on for all of our users for a little while to minimize risk.

[rolarocka]

-{ Quote: "I don't think you're having a RAM problem :) This definitely sounds like a Prevx bug (although clicking Remove All multiple is generally not a required function ;D)

Thank you for the report - we'll have this fixed shortly :)" }-
haha well i know many people that double click on everything.

[dorgane]

hi team's prevx,
have you got a date for 64bits SafeOnline ? :doubt:

thank you ;D


i upgrade my vista 64 bits in seven 64 bits with prevx and no bug :argh:

[Baldrick]

Build 3.0.5.10 auto installed here and running well.

OMG...this is getting monotonous. Prevx just seems to work tooooo well!

But hang on a minute...am a bit confused! If this is an Official Release then why does it still have 'Release Candidate' in the header or is this the Official Release Candidate ???

[PatG]

This manual update doesn't have the blue SafeOnline GUI, instead it has reverted back to black Prevx 3.0, is this normal? Remember last time I had to do this, you advised to uninstall/then reinstall, should I go back and redo to get the SafeOnline GUI??

EDIT: Nope, didn't change it. Went ahead and uninstalled/reinstalled as before, only thing it did was lose my configuration on my protected sites. Will just wait next time for the auto update to do it.

EDIT2: Checked laptop, same version, its blue but desktop is black. Man, this is crazy!

FINAL EDIT: Am I embarrassed! Just dawned on me that I dl'd the Prevx version and not the SafeOnline version. Went back and dl'd the correct one, uninstalled/reinstalled and now all is well. Oh well, won't ever forget this one again!

[pegas]

Hello Joe,

Thanks for all your hard work you have had during several past remote sessions to fix my problems. The latest version .10 seems OK except one persisting issue. Still having IE8 crashes occasionally, the error is always the same with those I have e-mailed you. No rule for crashes tracked. Otherwise all is OK with this Prevx version :thumb: You know, I am not so bothered as I almost don't use IE. Just to let you know it, though.

Apart above, I noticed when a browser (in my case Opera or IE) is open and I start an application which needs to be confirmed via UAC, the backgroung is deeply black. However when no browser is open the background is transparent (i.e. you can see what is underneath UAC confirmation window), what is normal behaviour. When Prevx is uninstalled the background is always transparent. Anyhow it isn't a big issue which would deserve your large attention.

Out of curiosity, what level of HTTP configuration should be set in SafeOnline to enable take a screen shot?

Regards,
pegas

[pegas]

-{ Quote: "Hello Joe,

Thanks for all your hard work you have had during several past remote sessions to fix my problems. The latest version .10 seems OK except one persisting issue. Still having IE8 crashes occasionally, the error is always the same with those I have e-mailed you. No rule for crashes tracked. Otherwise all is OK with this Prevx version :thumb: You know, I am not so bothered as I almost don't use IE. Just to let you know it, though.

Apart above, I noticed when a browser (in my case Opera or IE) is open and I start an application which needs to be confirmed via UAC, the backgroung is deeply black. However when no browser is open the background is transparent (i.e. you can see what is underneath UAC confirmation window), what is normal behaviour. When Prevx is uninstalled the background is always transparent. Anyhow it isn't a big issue which would deserve your large attention.

Out of curiosity, what level of HTTP configuration should be set in SafeOnline to enable take a screen shot?

Regards,
pegas" }-
Hello Joe!
Whereas the above issues are not sort of urgency, can you comment upon though? The next issue I encountered is that when SafeOnline is enabled I can't type apostrophe (') and diacritic mark (ˇ) in my browsers (Opera and IE8). Typing applications (Word, Excel etc.) are not affected, just browsers are.
Thx,
pegas

[Cherub]

-{ Quote: "The SafeOnline trial version will come as disabled by default but can be turned on manually within the GUI." }-

OK. I'm not seeing it show up but I think I know why now. I have a 64 bit machine so I'm assuming that until the native 64 bit is finalized I won't have the option of safeonline? Is that right?

[Triple Helix]

-{ Quote: "OK. I'm not seeing it show up but I think I know why now. I have a 64 bit machine so I'm assuming that until the native 64 bit is finalized I won't have the option of safeonline? Is that right?" }-

That is right! Joe said they are working on it ASAP and it's only a few weeks away! http://www.wilderssecurity.com/showthread.php?t=257763

TH

[Cherub]

-{ Quote: "That is right! Joe said they are working on it ASAP and it's only a few weeks away! http://www.wilderssecurity.com/showthread.php?t=257763

TH" }-

That's good. Excited to try it out. It was confusing me why I didn't see it show up and then it dawned on me. lol I'm still getting used to having a 64 instead of 32 bit machine.

[rollers]

I have tried updating, but mine shows no update and still using 3.0.1.65 Is this right? I am using 64 it win7,
Should I manually download?

Answered my own question :-) Just downloaded the file form the site and its updated.

[PrevxHelp]

-{ Quote: "Hello Joe,

Thanks for all your hard work you have had during several past remote sessions to fix my problems. The latest version .10 seems OK except one persisting issue. Still having IE8 crashes occasionally, the error is always the same with those I have e-mailed you. No rule for crashes tracked. Otherwise all is OK with this Prevx version :thumb: You know, I am not so bothered as I almost don't use IE. Just to let you know it, though." }-

Thanks for the information :) If you do happen to find some reproducible scenario, please let me know!

-{ Quote: "Apart above, I noticed when a browser (in my case Opera or IE) is open and I start an application which needs to be confirmed via UAC, the backgroung is deeply black. However when no browser is open the background is transparent (i.e. you can see what is underneath UAC confirmation window), what is normal behaviour. When Prevx is uninstalled the background is always transparent. Anyhow it isn't a big issue which would deserve your large attention." }-

This is intentional - although it is a bit harsh, Prevx is blocking Windows from seeing the desktop, which prevents it from rendering it for the UAC prompt ;D We may add an exclusion for Windows itself in the future but we don't want to open ourselves to the potential for exploits piggybacking on Windows to take screenshots.

-{ Quote: "Out of curiosity, what level of HTTP configuration should be set in SafeOnline to enable take a screen shot?" }-

Setting it to "High" will allow screenshots to take place.

-{ Quote: "Whereas the above issues are not sort of urgency, can you comment upon though? The next issue I encountered is that when SafeOnline is enabled I can't type apostrophe (') and diacritic mark (ˇ) in my browsers (Opera and IE. Typing applications (Word, Excel etc.) are not affected, just browsers are." }-

Thank you for the information :) We will have this fixed in one of the next updates.

[PrevxHelp]

-{ Quote: "I have tried updating, but mine shows no update and still using 3.0.1.65 Is this right? I am using 64 it win7,
Should I manually download?

Answered my own question :-) Just downloaded the file form the site and its updated." }-

Yes, you're correct :) We are not yet pushing out updates for v3.0.1.65 users so if you would like to use the new functionality/new version, we recommend downloading it manually, as you have discovered :)

[pegas]

-{ Quote: "Thanks for the information :) If you do happen to find some reproducible scenario, please let me know!" }-
The crash logs from Opera and IE8 sent to you via mail.

-{ Quote: "This is intentional - although it is a bit harsh, Prevx is blocking Windows from seeing the desktop, which prevents it from rendering it for the UAC prompt ;D We may add an exclusion for Windows itself in the future but we don't want to open ourselves to the potential for exploits piggybacking on Windows to take screenshots." }-
OK thx for explanation. I dont have a problem with this I was just curious and I am glad that it is not another hitch but rather intentional feature.

-{ Quote: "Setting it to "High" will allow screenshots to take place." }-
Thx, yes it does.

-{ Quote: "Thank you for the information :) We will have this fixed in one of the next updates." }-
NP glad I could help you.

[Biscuit]

-{ Quote: "Yes, you're correct :) We are not yet pushing out updates for v3.0.1.65 users so if you would like to use the new functionality/new version, we recommend downloading it manually, as you have discovered :)" }-

Do you have a time-span for when 3.0.1.65 users can auto-update please?

[PrevxHelp]

-{ Quote: "Do you have a time-span for when 3.0.1.65 users can auto-update please?" }-

We're still waiting to iron out a handful of minor issues but will hopefully have 3.0.1.65 users upgraded within the next couple weeks, provided no other AVs start producing FPs on the next versions.

[pegr]

I've experienced an issue on my Windows XP system between Prevx 3.0.5.10 with SafeOnline (paid) and Returnil Virtual System 2010 Home Lux.

When Returnil's real-time anti-malware component (called Virus Guard) is enabled, Prevx scans slow right down and take much longer to complete. With Virus Guard turned off, Prevx scans run at their normal speed. This suggests that Prevx and Virus Guard are conflicting with each other in some way. There was no other security software running at the time, other than Prevx and Returnil.

I know that it is normally not a good idea to run two anti-malware progams in real-time, as these kinds of conflict can occur; but I've always understood that Prevx was an exception to the rule, as it has been deliberately designed to be able to complement a conventional anti-virus.

I'm not really that bothered as I just turned Virus Guard off, but I thought I'd report it anyway so that Prevx could take a look and see if the problem is reproducible in order to get an insight into the issue.

BTW, Prevx 3.0.5.10 with SafeOnline is working just great here! :thumb:

[Romagnolo1973]

Hi Joe,
italian people with KIS & Prevx 3.0.5.10 said Prevx yesterday detect the klif.sys (kaspersky drive) as malicious and unfortunaly trusting in prevx more than in their brain they delete the file;D , so they need reinstall KIS (I know with rollback/undo cleanup they could solve easier, but they don't know)

Knowing Kaspersky problem we recommend set Kis (his pattern) on the exclusion of prevx but his drive located in system32\DRIVERS\klif.sys
was not and obviously prevx scan control it

Do you think is better exclude from scan the klif.sys too (I think is possible)? And it solve future problem?
In this pic you can see the FP and there are 2 registry voice about klif too, setting klif as excluded file on prevx scan automaticaly the registry key concerning it is non catched?
http://www.picamatic.com/view/5974024_2009-11-18_151915/
And if it is not solved, please set as safe this file.
Thanks

EDIT: is not on 3.0.5.10 but on 3.0.5.23 sorry
c:\windows\system32\drivers\klif.sys [PX5: A91D4FC710BCB6A7D0AB048E3CABDB0029BDF800] Malware Group: Medium Risk Malware
They said the same happens on some Ashampoo program, probably you are experimenting something new here

[PrevxHelp]

-{ Quote: "
When Returnil's real-time anti-malware component (called Virus Guard) is enabled, Prevx scans slow right down and take much longer to complete. With Virus Guard turned off, Prevx scans run at their normal speed. This suggests that Prevx and Virus Guard are conflicting with each other in some way. There was no other security software running at the time, other than Prevx and Returnil." }-

I don't think this is necessarily an incompatibility or clash, but more so that both programs are looking at the same files at the same time. Although the Prevx scan may take longer, it is basically guiding VirusGuard to run a scan alongside Prevx's scan as well, possibly finding malware which Prevx would have missed as well that VirusGuard wouldn't have normally looked at :)

Indeed it isn't ideal, but a few AVs do scan what Prevx scans - we generally haven't had too many complaints about it, however - as it saves users having to run a manual scan with their other AV ;D

Out of curiosity, how long is the Prevx scan taking? It may be possible to add prevx.exe to the exclusion list within VirusGuard to prevent it from scanning accesses made by Prevx, but I'm not sure if they have that level of granularity available to the user.

[PrevxHelp]

-{ Quote: "Hi Joe,
italian people with KIS & Prevx 3.0.5.10 said Prevx yesterday detect the klif.sys (kaspersky drive) as malicious" }-

We've corrected the FP but this is caused because security software drivers act almost identically to malware drivers - if we weren't flagging these files, I'd be worried :)

Let me know if you (or they) have any questions :)

[pegr]

-{ Quote: "I don't think this is necessarily an incompatibility or clash, but more so that both programs are looking at the same files at the same time." }-Thanks for replying and for the explanation. I thought that was probably what was happening. The lengthened scan times did make the system fairly unresponsive for a longer duration at boot time though. Rather than lose the benefit of Prevx's boot time scan, I opted to turn off Virus Guard instead.
-{ Quote: "Out of curiosity, how long is the Prevx scan taking?" }-It was fairly inconsistent. Sometimes, the Prevx scan would run normally to completion; at other times, it would start normally and get a certain percentage of the way through (usually between 24% and 28%) then almost grind to a halt, proceeding at the rate of 1% every 10 seconds or so. Prevx scans could then take several minutes to finish, whereas normally they complete within a minute or two. They always did finish eventually though; I never once experienced a hang.
-{ Quote: "It may be possible to add prevx.exe to the exclusion list within VirusGuard to prevent it from scanning accesses made by Prevx, but I'm not sure if they have that level of granularity available to the user." }-Indeed, it does not appear to be possible. Folders and files can be excluded from scanning, but I couldn't see an option to exclude processes. Nonetheless, I did try creating file exclusions in both programs to ignore each others executables, but it didn't help.

I am still a little puzzled about one thing though. The fact that anti-malware programs can interfere with each other's operation is well known, which is why the usual recommendation is not to run more than one in real-time. I thought that Prevx was supposed to be different, having been deliberately designed to co-exist with other security products without each program modifying the behaviour of the other. My main concern here is that if Virus Guard can have such a dramatic effect on Prevx scanning, there could also be a risk that mutual interference could prevent each program from responding in a timely fashion in real-time, potentially reducing the overall level of protection.

This is the main reason I decided to report this, in case you thought it worthy of investigation. As I said previously, it's not a problem for me to keep Virus Guard permanently turned off as Returnil is primarily a lightweight virtualisation application, not an anti-virus. As I use a layered approach which includes virtualisation and policy restriction, I am comfortable relying solely on Prevx as my only real-time signature/heuristic/behavioral based anti-malware program.

[pegas]

-{ Quote: "The next issue I encountered is that when SafeOnline is enabled I can't type apostrophe (') and diacritic mark (ˇ) in my browsers (Opera and IE). Typing applications (Word, Excel etc.) are not affected, just browsers are." }-
Joe did you fix the issue already? Only way to get it work now is to lower configuration for HTTP websites in SafeOnline to "Low". However configuration higher than "Low" doesn't enable me to use the key stroke. Having .23 RC installed.

[pegas]

-{ Quote: "Joe did you fix the issue already? Only way to get it work now is to lower configuration for HTTP websites in SafeOnline to "Low". However configuration higher than "Low" doesn't enable me to use the key stroke. Having .23 RC installed." }-
Just to show you exactly what key I meant :-)
213783

[PrevxHelp]

-{ Quote: "Just to show you exactly what key I meant :-) " }-

;D Thanks for pointing it out - we haven't fixed it yet but it should be fixed in the next release :)

[Biscuit]

-{ Quote: "We're still waiting to iron out a handful of minor issues but will hopefully have 3.0.1.65 users upgraded within the next couple weeks, provided no other AVs start producing FPs on the next versions." }-

Any news yet Joe?

[Fajo]

-{ Quote: "Any news yet Joe?" }-

I think he said early this next week he is rolling out a upgrade.

http://www.wilderssecurity.com/showpost.php?p=1586432&postcount=16

[hogndog]

:thumb:

PC Magazine has a good reason, good things come in small packages, what Prevx lacks in size it makes it up in technology, you have a utility the weighs in at a mere "5 Mb's"

Most modern antimalware utilities or suites include a large database of signatures to help them identify known malware. Some can't scan at all after installation, until they perform a lengthy signature update. The database keeps growing as new malware appears at an ever-increasing rate. And, of course, zero-day malware may slip through before a signature becomes available. The better signature-based tools supplement their scanning with behavior-based detection of new threats.

Patience.. ;)

Hogndog

[PrevxHelp]

-{ Quote: "Any news yet Joe?" }-

We have pushed the automatic upgrade back to now take place on the release of 64bit support for SafeOnline to prevent a confusing split in the existing users, but any user can still manually upgrade by running the newer versions directly.

[PrevxHelp]

-{ Quote: ":thumb:

PC Magazine has a good reason, good things come in small packages, what Prevx lacks in size it makes it up in technology, you have a utility the weighs in at a mere "5 Mb's"

Most modern antimalware utilities or suites include a large database of signatures to help them identify known malware. Some can't scan at all after installation, until they perform a lengthy signature update. The database keeps growing as new malware appears at an ever-increasing rate. And, of course, zero-day malware may slip through before a signature becomes available. The better signature-based tools supplement their scanning with behavior-based detection of new threats.

Patience.. ;)

Hogndog" }-

Thanks for the kind words :) This is exactly our approach and intention!