PDA

View Full Version : Prevx detection


Tarnak
November 20th, 2009, 10:10 PM
I can't figure out why this file (see screenshot) is detected, but not when I am running the latest RC 3.0.5.23 in another snapshot. BTW, my license has expired recently. ;)

Since, I am confident of keeping things out of my system ( famous last words), that I don't want, I feel fine in running Prevx for detection only. ;D

PrevxHelp
November 20th, 2009, 10:20 PM
-{ Quote: "I can't figure out why this file (see screenshot) is detected, but not when I am running the latest RC 3.0.5.23 in another snapshot. BTW, my license has expired recently. ;)

Since, I am confident of keeping things out of my system ( famous last words), that I don't want, I feel fine in running Prevx for detection only. ;D" }-

Could you send a scan log to report@prevxresearch.com so we can investigate it closer? :) Thanks!

Tarnak
November 20th, 2009, 10:43 PM
-{ Quote: "Could you send a scan log to report@prevxresearch.com so we can investigate it closer? :) Thanks!" }-

Log scan sent. :)

If anyone is interested I got the detected file from here (see screenshot), which link was posted in another Wilders' thread ;)

PrevxHelp
November 20th, 2009, 10:49 PM
-{ Quote: "Log scan sent. :)

If anyone is interested I got the detected file from here (see screenshot), which link was posted in another Wilders' thread ;)" }-

Avast detects the file as well... and it was originally named "EQSecure - treat with caution".

Is it possible that this is an infected/modified version?

I'm downloading the exe from that link now and should have some results shortly :)

PrevxHelp
November 20th, 2009, 11:05 PM
Hmm.... the file from the link you've posted is different from the file in the log you sent - we don't detect the one from the link (only PC Tools does as a FP as the file is legitimate).

It might be worth replacing your file with the new download just to make sure you're using a clean version :) Or, feel free to send over the file you have for further analysis if wanted.

Tarnak
November 20th, 2009, 11:07 PM
-{ Quote: "Avast detects the file as well... and it was originally named "EQSecure - treat with caution".

Is it possible that this is an infected/modified version?

I'm downloading the exe from that link now and should have some results shortly :)" }-

I tracked down the thread where the detected file was mentioned, See post #10 in - http://www.wilderssecurity.com/showthread.php?t=256388

Tarnak
November 20th, 2009, 11:23 PM
-{ Quote: "

.......Or, feel free to send over the file you have for further analysis if wanted." }-


Sorry, I think I referenced the wrong file in my post. I will send you the exe shortly. I am on dial up, so it takes awhile. So don't wait up for it. Joe you have to sleep, some time. ;D

Tarnak
November 23rd, 2009, 10:54 PM
I received a reply from report@Prevxresearch, earlier this morning, advising the detection has been removed. A scan has confirmed. :)

Also, they advise it may be a cracked version of EQSecure.

Scoobs72
November 24th, 2009, 01:54 AM
-{ Quote: "Avast detects the file as well... and it was originally named "EQSecure - treat with caution".
" }-

'treat with caution' was the name I originally gave this file on my PC after I downloaded it from the Wilders thread. Hitman subsequently detected it and I presume has uploaded it, from where it has found its way to Prevx. Hmmmm.

Tarnak
November 24th, 2009, 02:44 AM
Just to clarify, I initally posted the incorrect file as per my post in #3 above.

I should have referenced this file instead, see post #19 - About EQSecure Pro 4.2 - http://www.wilderssecurity.com/showpost.php?p=1567932&postcount=19

So where Joe says,

-{ Quote: "Avast detects the file as well... and it was originally named "EQSecure - treat with caution".
" }-

he is referring to an incorrect file mentioned by me.