Prevx Home Edition - free

[JohnK]

Anyone any opinions on Prevx (https://www.prevx.com/) ?

They've just launched a free home edition of their "host intrusion prevention" software (it's in beta). They seem to have been around in the corporate arena for a while, and it sounds like the kind of product we'd all like on our machines (if it works, that is). And being free helps.

JohnK

[Slovak]

What could it hurt to download and try? I just did, going to reboot and try it out, I will post my thoughts later this afternoon when I get back home.

[Tassie_Devils]

Hmmm.... very good endorsements via the UK Constabulary of Avon

https://www.prevx.com/prevxenterprise/casestudies/casestudies_avonsomerset.htm

and Somerset.

Looks good, but could not get any real feel on "what" it does for protection, until I 'registered' and got following email.

=============================================
1) USING PREVX HOME WHILST PERFORMING WINDOWS UPDATE

Because Windows Update needs to access key areas of the system registry and needs to be able to write files to areas of the file system that are normally protected by Prevx Home, we recommend that you turn OFF all Security Settings other than the Buffer Overflow policies whilst performing Windows Update. On completion of Windows Update, please turn back ON the Security Settings that you have turned off!

The buffer overflow policies will protect you against internet worms such as Sasser and Blaster whilst performing Windows Update.

Whilst these policies are switched off it is recommended that you do not browse other web-sites, in order to minimize the risk of spyware infections.

2) USING PREVX HOME WHILST INSTALLING NEW APPLICATIONS OR DRIVERS

Installing new applications or drivers may generate Prevx Home Alerts as new system registry entries and new executables are written to your system. When queried, you may choose the Allow option. Alternatively, you may wish to temporarily turn off the File System and Registry Security Settings. Remember to turn these back ON when you have finished!

3) FILE SYSTEM POLICIES AND SYSTEM REGISTRY POLICIES – Available Settings

During the early part of the Beta program, we have disabled the “Prevent” Option for certain Security Settings. The options available are “Query” and “Off”. This will enable you to see all Alerts and determine if they are the result of legitimate system behavior (e.g. running Windows Update or installing new programs or drivers) or cannot be accounted for by these actions. You can choose to Allow or Deny, as appropriate. The “Don’t Tell Me This Again” and “Don’t Ask Me This Again” functions can be used for any regular Alerts or Queries where you want to determine future behavior.

4) “SEND TO PREVX” OPTION ON ALERTS

To help us build a picture of the most frequent Alerts, please use the “Send to Prevx” option when examining Alert Details.

5) PREVX UPDATE FUNCTION

During the beta period we will be releasing updated and refined versions of the system and the security settings from time to time. We recommend that you use the Update function regularly to ensure you are using the most up to date release of the product.

========================================

Have not actually dl'd yet and will wait until Slovak gives some feedback. I currently run ProcessGuard and it looks like a similar app as described above, as in 'Allow' or 'Deny' a process/exe/registry change, etc.

Could not ascertain a price, says FREE download, and according to email I've got a link to get download, then install, and to *Activate it I have to put in my email addy.

You are allowed to download up to 5 times for diff machines.

HTH, TAS

[Slovak]

So far as I can tell it works as it is supposed to, no side affects on my win2k machine, it blocks everything they say it should.

[nadirah]

Not bad, a good software which can help your anti-virus and firewall products to be even more effective. I'm sure a lot of people will like Prevx.

[Slovak]

Maybe so, but they must download it and try it first.

[Visions]

But as usual it only works with 2K/XP and not 9X/ME.

[notageek]

Dare I try it. :) Yes I dare. I'll post some feedback on it when I get time to fool with it. :)

[notageek]

OK I'm trying it out now. Looks like it's almost like a firewall (note I said almost). So far it only tells me about certain things that want to go through the internet. I tried running Yahoo messenger and it never asked me about if I want to run it. It has an auto update feature that you can't turn off. It has a passowrd protection. You can still shutdown programs through the windows task manager without it asking if I want to shut andthing down. Unlike winsonar when you close down Prevx it don't ask you if you want to shut the program down. In other words PG is better but this is still in beta and it's not that bad of a program.

Here's what my windows Task Manager says it's using. This is in KB
SAGUI.exe: Mem Usage= 2,152kb
Peak Mem Usage= 10,580kb
VM Size= 5,564kb
PXAgent.exe: Mem Usage= 5,776kb
Peak Mem Usage= 6,220kb
VM Size= 4,836kb
Installing it was easy. No problems with running it. No crashes while I was running. Un-installing it was easy also. In conclusion I think it's a so so app. I would rather use SSM or PG over Prevx becuase PG can guard process and SSM tells you when a program starts and also when it's put a start up command in the registry. But like I said before this is still a beta. I hope this helps.

[Tassie_Devils]

Slovak/Notageek.... thanks for the being the "Crash Test Dummies" :P on this one.

Sounds like the home edition is maybe not up to scratch as opposed to the PRO? the cops in UK are using.

Also, as notageek agrees with what I *thought* it's PG-like in actions, I'll let my other security apps take care of things for now along with PG of course.

Thanks again guys. :)

[Slovak]

Well it is just as both of you guys said, it is still in beta stages. I think I am going to stick with it and see just how it turns out in the long run. Heck, what would have happened if we would have given up on Spywareblaster, or spybot, etc when they were just in beta stages? It is "crash test dummies" like us that make beta products better by giving our feedback and inputs. Besides, it so far is not "screwing" anything up so far so I will hang on to it for now.

[notageek]

I haven't given up on it. I just uninstalled it and I'll mess with some more when new beta comes out. I mean it really didn't do much for me. It sat in the tray and let what ever program I open run. It didn't ask me if I want it to run ut when I opened up an ISP it warned me. It's not a bad little program and I'm going to wait around and see.

[meneer]

PrevX offers a host intrusion detection solution. It would compare to Cisco Secure Agent and MacAfee's security suite for that matter. It's not a personal firewall or anti virus.
It's meant to prevent day zero exploits like Blaster and Sasser. I suppose it will do just that. And it could well be of great value.

[nadirah]

PrevX comes in two editions:
Prevx Home edition
PrevX PRO ( PRO version coming soon. )

I think once PrevX home and pro get to their final release, the software could be an indispensable security tool, judging from its looks.

[Notok]

I've been using this for a couple days now, and I'm pretty happy with it. I haven't seen anything that protects against buffer overflows before. It seems to fit perfectly between Qwik-Fix and ProcessGuard. I just can't wait to see the final product. Currently it takes around 12-15mb of RAM, seems to slow things down a little (not too bad, though), is kind of light on technical details on the protection (I emailed the tech support with a few questions, and they just directed me to the online help regarding one of them, and didn't address others at all. Apparently there are no whitepapers or anything giving more details on exactly how it works unless, I assume, you are an enterprise customer), and the wording for some things would be pretty intimidating for some more novice users. For example, when you allow something and check "don't ask me again" it gives you the option to remember answer for "this secured object and process" and "all secured objects protected by this security setting and process", which is a little confusing at first. Overall, however, it's pretty cool. I imagine the final version will be a little leaner and "hardened" If it all works out, I would consider this a pretty important layer of security.

It's just sad that this kind of protection isn't already inherant to Windows. :-\

[notageek]

I alos tried it out again. I like it. The only thing I don't like is how much RAM it uses. Sure do hope they fix that.

[Slovak]

I like it too, but dislike the memory usage, maybe we should contact them and give some feedback since this is a beta version.

[notageek]

Yes. I'm on my way over to let them know.

[nadirah]

Remember, PrevX is still BETA. ;)

[Notok]

All the more reason to request it! The more people that mention it, the more likely it is to be fixed. I just filed a request as well.

[Slovak]

I did let them know about the memory usage problem, and they responded already, here is a copy and paste of the email.......
From: "Home Support" <Home-Support@prevx.com>
To: <slovak1965@xxxx.net>
Cc: <home-support@prevx.com>
Subject: RE: TESTING: Prevx Web: User Suggestions on Mon Jun 04:05:00


Hi John,


We understand the issue and will be working on reducing the resources used
by Prevx Home. We have had quite a challenge to bring the Corporate IPS
product down to the desktop and so have a few issues such as memory
utilization to address.


We expect future releases to reduce this further.


Thank you for the comments and please continue to provide us with your
feedback it is appreciated.


Regards,


Prevx Home Support


251,2,John,Dorko,slovak1965@sbcglobal.net,I like the program, but it uses
way too much memory, maybe you should try to cut down the memory usage
somehow.,2004-06-28 03:04:50


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.710 / Virus Database: 466 - Release Date: 23/06/2004




__________ NOD32 1.796 (20040626) Information __________


This message was checked by NOD32 Antivirus System.
http://www.nod32.com

[notageek]

Slovak, I got the same email this morning.

[The Blue Fairy]

Guyz, I read the comments in this forum with much interest.
I'd like to know what you think about the memory issue?
If I maximize and then minimize the GUI - it takes arround 1.5 meg in memory.
which is quite less for such a graphic based gui.
The agent takes arround 5MB (depending on what happens on the system)

What is a reasonable amount of memory usage in your opinion for such a product? (e.g. If I think at Norton product - ouch!)

[notageek]

Read my post earlier about the memory it took up on my Machine. Sorry I didn't feel like turning the KB into MB.

[Infinity]

Hi you all, I find Prevx doing a great job. it is not Processguard but it is a real supplement on processguard. Personnally it is doing a good job on my system. when something is altered I have processguard and if something is installing something with spawning processes it is Prevx warning me ;)

for me I would purchase it immediately only for this feature...

bye

[webster]

Hi,

I agree with INFINITY. PREWX is doing a good job here too. The only problem, is that you cannot undo one single rule, if you make af wrong decision. I hope they will fix that.

[Slovak]

I am glad it is working well for all of you, it is for me too. If you have any problems, or suggestions, then let them know here
https://www.prevx.com/homeoffice/homesupport.htm
Every time I submit a suggestion they email me back.

[notageek]

Webster made a good point about the undo part. I hope they'll add that or fix it or whatever. It's good tool I'm still testing it.

[Notok]

I suggested being able to edit entires in the blacklist/whitelist individually at the same time I griped about the memory usage, I actually got a real human response!

Hi Adrian,

We appreciate all the comments you have sent in so far they have been
valuable in helping us shape future releases and to determine customer
requirements.

We are continually looking at performance and memory usage of the product
and future release will improve this area. We still aren't quite as big as
the competitors with similar products. This has been a huge challenge to
take this technology out of the corporate market and bring Host Intrusion
Prevention to the desktop.

We are working on a white list style editor which will allow you to view the
settings, however this is likely to be in the Professional release only.

Thank you for the positive comments they are appreciated.

Regards,

Prevx Home Support

(note: I also gave a couple compliments)
They also sent me a generic formatted response later saying that the suggestion was being passed on to the beta team.

Keep sending suggestions in, though, the more votes they get for a particular feature, the more likely they are to implement it.

[lynchknot]

Won't install for me - :(

[Q Section]

Anyone have a screenshot of the main page? Thank you.

[tImEwArP]

Just a quick reminder to all. Prevx will not work on 9X/ME systems.

[Notok]

lynchknot: You have to be logged on as administrator, or an account with administrative privledges.

[Rui]

I agree with INFINITY and Notok, too.
It seems Prevx Home Edition might be a very good security application, complementing PGuard v. 2.000. I have the two functioning merrily in my system and with no problems. And in these days, it seems all protection we can get is not enough...

[lynchknot]

{QUOTE-> lynchknot: You have to be logged on as administrator, or an account with administrative privledges. <-QUOTE}

I am an I know that

[Notok]

lynchknot: Obvioulsy something is preventing you from accessing the registry, or at least the drivers part of it. If you can't think of any other security software that might be causing this, then maybe try installing in safe mode.

[lynchknot]

I'm thinking it's probably PG or SSM

[Notok]

PG would definitely do it. PG would prevent it from installing the driver it needs to run.

What's SSM?

[Infinity]

SSM is system safety monitor. a tool like processguard but not kernel mode driven. it is a very good application, a system firewall not internet firewall but watches your applications they do not get altered or closed.
It is freeware and you find a copy here:

http://www.webattack.com/get/systemsafety.shtml

if you type SSM in the search area you find a lot info regarding this beautiful little app.

bye

[Notok]

Ah, ok, I have seen that, the initials just didn't register. I had been curious about it, but never tried it. Didn't know it was low level, either. I'll have to check it out. Thanks for the info!

[Infinity]

{QUOTE-> I'm thinking it's probably PG or SSM <-QUOTE}

i wouldn't know exactly what could cause this. it could even be some spyware not letting you to install it... but I doubt that.

maybe you can tell us what applications you are using, some interpherens maybe...

[lynchknot]

I exited both apps and I still cannot install.

[Infinity]

I just sent them an email regarding this thread and saying I was very happy wht this software and making some suggestions...

a half an hour and they responded... now that is what I call service, + a great utility helping us staying secure, at least helping us staying safe ...

it is a win win situation I believe for all of us. and I am certainly not affiliated to them.

Sorry Lynchknot you are having these issues.

bye

[Notok]

Hopefully you disabled PG before exiting, if you just exit without disabling the protection, it will still keep drivers from installing.

[Creekside Rogue]

Hello people,

I'm new on this forum as of tonight,but I've also downloaded the Prevx Home Intrusion Prevention software. Unlike all of you, my problem with this software has been with its effect on other software, particularly older applications. I've tried to use a typing application and an older wargame. Both apps froze on me after just a few minutes of use. I've tried them with Prevx active and with it completely disabled but still installed. I usually get about 5 minutes of time with the app before it simply freezes. I have to completely shutdown and do a restart to get my computer back. Conversely, a very new piece of game software was able to run without any apparent adverse effects.
I made sure these apps were able to run without Prevx installed. I use McAffee Antivirus, Internet Connection Firewall, Spybots 1.3, Web Washer and Avast Antivirus. I also have Tauscan Monitor usually running. I know I'm not supposed to run more than one antivirus at a time, but I've used the two above in monitor mode without any conflicts in the past. Has anyone else had any trouble running other apps with Prevx Installed (regardless if its security features are active or not) ???

I've sent two e-mails to Prevx Support about these issues without any response.

I use XP Home, Dell P4 2.4 ghz 512 MB RAM, 64 MB RAM NVidia Geforce 4 MX 420 video card.

[Slovak]

Welcome to the forums Creekside Rogue. If you go to their support page, which can be launched from the program itself, there is a FAQ on the program itself, and this is what it says about other software problems.....
The Security Settings in Prevx Home are set up to prevent the generic types of attack methods used by hackers, worm and virus authors to gain access to your system. For example; These methods include utilising areas of memory not designated for use by genuine software applications as a rule.

However, from time to time software vendors may include abnormal programming methods in their applications which contravene general programming rules and which the Prevx Home security settings are created to detect and prevent.

To prevent your application from terminating, select the Security Settings tab and in turn, switch each of the settings off, run the application and, if the problem continues, return the setting to its original position and move onto the next.

[Creekside Rogue]

Thanks for the reply Slovak. Yeah, I read that part of the Prevx Support page as well. However, I figured that if I simply disabled all of the security settings in Prevx Home and tried running the application, that should certainly allow it to function properly. I wasn't too crazy about shutting down my computer and restarting it every time the application froze after each single adjustment to Prevx's security settings.
But I could be wrong for such an assumption...hmmm. I'll consider going through the process just to see if it makes any difference.
Thanks again for the reply.

[Slovak]

I would try as they say, after all if it doesn't work as they say it should then by all means submit it to them in a bug report and as a recommendation if you have one. Remember this is a beta product we are dealing with.

[dsranger1]

I decided to try the Prevx beta after reading some news stories about it and other intrusion prevention systems, and having tried the TeaTimer module in Spybot 1.3. (note- teatimer is rather effective at detecting changes at a basic level, but it's quite annoying after a while, as it's a very elementary change detection system - for ANY registry change, you'll be prompted.) I did a fresh install of Windows 2000 last night, and, after installing all the patches from Windows update, and installing AVAST antivirus and ZoneAlarm, added on Prevx to see if it would be something worthwhile for a home or office environment. So far, my answer is yes, with some minor reservations. while I haven’t tested it against any live viruses or trojans yet, the component that detects application modification is effective and I can see how it could be useful – after installing Prevx and rebooting, I ran windowsupdate to install first the most current version of Windows Media Player, then two patches for WMP. With both the installation and the patches, Prevx detected the new processes, prompting me whether I wanted to allow them to continue. The prompts were somewhat repetitive and therefore felt rather aggressive, similar to Kerio’s prompting at multiple components of a single process. Prevx behavior can be modified for 11 different categories of behavior, with three choices for each category – allow, prompt, or deny. three of the 11 categories are set to deny by default, the other six to prompt. For securing workstations in an office (to prevent users from making/allowing unwanted changes), having the program set to deny for all categories would certainly be useful, and with password protection added, would allow support techs and admins to maintain control over a desktop environment without going through the complexities of Novell zenworks or spending many hours creating a complex security policy within a Windows domain.

[WilliamP]

What protection does this provide that Process Guard, a AV and a AT not provide?

[Slovak]

{QUOTE-> What protection does this provide that Process Guard, a AV and a AT not provide? <-QUOTE}
Free protection

[WilliamP]

I'm not trying to be cynical. I'm trying to learn. I'm allways looking for additional protection. I just wanted to know if it would provide added protection. ???

[Notok]

Prevx provides some protection at the file level, as well as some memory protection against buffer overflow attacks. It's totally different than PG, and I think it compliments it quite well as it has the potential to provide some good protection against user error, should you unwittingly allow something to run that shouldn't.

[notageek]

Anyone know if there has been an update?

[nadirah]

I've checked for any updates, so far, there's nothing yet.

[webster]

The bufferoverflow protection actually works. The new Spysweeper 3.0 creates bufferoverflow when i close it, and PREWX alerts, and blocks it. The problem is, that it creates the "Sasser" countdown and reboot. I have to close PREWX before Spysweeper, to avoid it. Sometimes i forget it.

[WilliamP]

Thank you Webster. I may just give it a try. I am a security nut. So long as the program will increase protection and not cause problems.

[Slovak]

There are no guarantees that it will not cause any problems, as it is still in beta testing stages. From what I can tell most people don't have problems with it, and the few that do are most likely their own faults.

[notageek]

OK Now for some odd reason after I launch Prevx My computer freezes. I think there's conflict with another program. I'll keep people informed on the poroblem .

[c0ltran3]

Is there anyone who installed Prevx with Abtrusion Protector already installed?
I've been using AP and I'm afraid it could be conflict between the programs.

[Rui]

{QUOTE-> The bufferoverflow protection actually works. The new Spysweeper 3.0 creates bufferoverflow when i close it, and PREWX alerts, and blocks it. The problem is, that it creates the "Sasser" countdown and reboot. I have to close PREWX before Spysweeper, to avoid it. Sometimes i forget it. <-QUOTE}

That happens in my system, too. This inconvenient is solved when you untick the "Enable spy installation shield" in Spysweeper 3.0. If you do this you will be able to close Spysweeper without the buffer overflow occurring. I guess you may prevent spyware installation through Spybot's Teatimer, too. At least, this was the only way I found to solve the buffer overflow problem.

[webster]

{QUOTE-> That happens in my system, too. This inconvenient is solved when you untick the "Enable spy installation shield" in Spysweeper 3.0. If you do this you will be able to close Spysweeper without the buffer overflow occurring. I guess you may prevent spyware installation through Spybot's Teatimer, too. At least, this was the only way I found to solve the buffer overflow problem. <-QUOTE}

Thank you :) . I have just found another way around. I only use the bufferoverflow protection for "managed services and third party services". It protects firewall and antivirus, and other vulnerable applications, and i think it is enough. The Windows installer creates bufferoverflow too, when you install/uninstall. I have also disabled the IE, and run key protection. I will let Spysweeper take care of all IE protection.

[WilliamP]

Notageek, how is it going with the freezing problem? ???

[WilliamP]

Downloaded today. Played around with it some. Everything seems to work great and I haven't had any problems. In fact I'm really impressed with the program. When I opened Spywareblaster it gave me an alert popup. I told it not do tell me again and allowed it to open. Then I went back and opened it again and it worked like a charm.

[notageek]

Sorry for not getting back to you WIlliam. It's been a busy weekend. :)

My computer isn't freezing anymore. I closed all the programs running 1 by 1 to find the program cuasing it abd found that it was the caller ID program I had running bothering Prevx. I got the problem fixed. I also sent and email tell the maker of the caller id program telling them about this problem.

Now the other thing I wish was fixed it the updating. I wish you could pick if you want it to auto update or not.

[WilliamP]

Notageek, if I'm not mistaken Prevx is supposed to monitor the registry. I wonder how you can find out the registry key monitored? Glad to hear you quit freezing.

[notageek]

I don't know that one. I think maybe that would be a good addtion to this program. :)

[WilliamP]

According to the Control Panel there is monitoring of the Registry Run Keys.

[notageek]

Yeah now I'm having an issue with Prevx closing down lsass.exe. Everytime I do something it closes it down and restarts my computer. Right now I'm running Prevx without the buffer part of the program. I'm on my way over to the website to let them know about this.

[nadirah]

Here's the latest updates:

[Slovak]

Does anyone get any type of error when restarting their computer with Prevx installed? I get one about PXAgent.exe and some memory error relating to it. I have submitted this to Prevx. I get this same exact error on both my win2k and winxp computers.

[Notok]

Yup, I get the error msg too.

[notageek]

I quit using the program for the time being. I was only able to use 72% of the program becuase of the buffer overflow stopping lsass.exe from running.

[nadirah]

I have been using prevx for a few weeks now, no error messages at all! very smooth! ;D

[controler]

Running it also with no problems.
Running XP Pro SP2 RC2
My test machine.

Also running Bo Clean, Antivir, and Panda with firewall and Built in Windows firewall
for XP log readers I am using
XP Log Reader and FrielogXP
oh yea SG and spywarebalster and of course Spybot
on a Actiontec Wireless Router set to high

[ghiser1]

Hey - There's an update out v2.0.9.8.

More security settings too ;D

Needs a reboot though, and you need to allow the Update process to go through again after the reboot.

[Antony]

Where can I download PG from. I hope it will work with my Sygate firewall as it sounds well thought of.

[Notok]

Woohoo! It's using less memory now (total of about 5MB) and they added at least one of the things I suggested recently (DLL protection, not that I'm the only one that asked for it, I'm sure)

[Slovak]

Mine won't update, it gets to the reboot point, then gives errors like insuffecient rights, and cannot contact the prevx service

[WilliamP]

Mine hung up when I told it to quit . It didn' quit ,but it wouldn't run. I tried remove and it didn't like that either. I had to go to my startup program to keep it from starting. Then rebooted and removed it.

[gerardwil]

After updating and restart:

[Slovak]

I get that one too gerardwil

[gerardwil]

I am going to uninstall prevx en try a fresh install ;D

[WilliamP]

I wonder if the new install will contain the update??

[Slovak]

I fixed it! ;D First I tried to uninstall Prevx completely and then reinstall it with nothing running in the background, like NOD32, LNS, etc., but to no avail that didn't work either. After poking around my computer for a bit I decided to take a look at my WinXP services that I had running, and noticed Prevx Agent loaded and running, even with Prevx uninstalled! :o Well disabling it did not help either because I still could not install it properly. The solution is to remove the service from your services. How do we do this? load up regeit and navigate to
Hkey_Local_Machine\System\CurrentControlSet\Services and look for prevx agent and delete it, then voila! no more prevx listed in WinXP services.

[Slovak]

{QUOTE-> I wonder if the new install will contain the update?? <-QUOTE}
Yes it does, if you redownload it from Prevx.

[Notok]

{QUOTE-> Mine won't update, it gets to the reboot point, then gives errors like insuffecient rights, and cannot contact the prevx service <-QUOTE}

I had the same problem on both mine and my girlfriend's machine. I just uninstalled it, reinstalled, updated, and it was fine. I was running into some problems with this kind of thing previously, hopefully this update will fix it. Oh the joys of beta software :)

[WilliamP]

Redownloaded ,updated and all seems fine.

[nadirah]

I never had a single problem with prevX right from the time i downloaded it. 8)

[0Lan]

Hi folks,

First, Im very sorry to hear you're having problems with updating Prevx
to 2.0.9.8. We try to solve the issues we are having as soon as possible.

Can you verify, that a fresh installation of Prevx Home (instead of an update)
works for you all?
We have known issues regarding support of multiple users and access
permissions on a system.
Especially limited user account under XP and Windows2000.
Can you let me know what account you are running Prevx on?
(Admin, PowerUser, LimitedUser, Guest?)

Your help is greatly appreciated and thank you for your patience
and participation on the beta program

Prevx

[nadirah]

Here's the latest news, fresh and piping hot from PrevX. :)

[WilliamP]

I had problems updating. Removed then redownloaded and all is good. I am Admin. Account.

[Slovak]

{QUOTE-> Hi folks,

First, Im very sorry to hear you're having problems with updating Prevx
to 2.0.9.8. We try to solve the issues we are having as soon as possible.

Can you verify, that a fresh installation of Prevx Home (instead of an update)
works for you all?
We have known issues regarding support of multiple users and access
permissions on a system.
Especially limited user account under XP and Windows2000.
Can you let me know what account you are running Prevx on?
(Admin, PowerUser, LimitedUser, Guest?)

Your help is greatly appreciated and thank you for your patience
and participation on the beta program

Prevx <-QUOTE}

It didn't work for me on WinXP pro as admin, I had todo a fresh download in order for it to work

[notageek]

Anyone else having problems with the prevx shutting down your computer when lsass tries to run in the background? Is anyone else having freeze ups using SSM and Prevx?

[Slovak]

Nope, not here anyway, submit it as a bug report to Prevx, they have responded to all my bug reports so far.

[notageek]

Just did.

[gerardwil]

Did a fresh install and update. Everything seems OK now.

[Notok]

I did notice that the newer version of SSM would create a buffer overflow, which would cause it to crash and start the shutdown timer. However SSM 1.8.9 didn't have any problems. The latest SSM didn't seem to play well with my system in general, though.

[Hyperion]

{QUOTE-> I did notice that the newer version of SSM would create a buffer overflow, which would cause it to crash and start the shutdown timer. <-QUOTE}

I confirm about SSM.Caused me twice in the past 2 days the same issue (NT authorization ,countdown,reboot).I thought i had a new variant of Blaster at the beginning...

Can anyone tell me how PrevX is with CPU usage and RAM?

[Notok]

{QUOTE-> Can anyone tell me how PrevX is with CPU usage and RAM? <-QUOTE}
CPU usage is negligible, the updated Prevx uses less RAM, it has 2 components (the service and the UI) which vary in the amount of RAM they take, but seem to always equal out to about 5MB.

So far the update looks to be better overall.

[Hyperion]

Thanks,maybe i ll install it tomorrow.

[Hyperion]

Installed it,all normal till now,just a small GUI issue.I use large fonts in winXP and some things aren't visible as you can see below.Happens more or less in every PrevX window.Nothing that one can't guess,but just keep it in mind.

[WilliamP]

I have downloaded 3 times. I get a popup when I reboot. I thought maybe I could get it to behave. It won't load till I click OK

[Slovak]

{QUOTE-> I have downloaded 3 times. I get a popup when I reboot. I thought maybe I could get it to behave. It won't load till I click OK <-QUOTE}

See my post on page 4 of this thread.

[WilliamP]

That appears to be a different pop up. Also on shut down I get a pop up PXAgent.exe Application error.

[Slovak]

That shutdown error lots of folks get, no big deal, just try as I said andsee if it works then.

[WilliamP]

I found the problem. I remove Prevex again for about the 4th time. Did a search for PXAgent.exe which is an executable for Prevex. It was in windows prefetch. When Prevex was removed the first time it must have been left behind. I deleted it then did another download and walla. Alls well that ends well.

[Hyperion]

I have been running Prevx for 8 hours now with no problem whatsoever.I also tried some firewall leak tests,and in PC Audit PrevX kicked in detecting dll injection and stopped it.
I wish the protection was extended in all files ,not just C:>Windows directory.

[notageek]

OMG someone help me. I went to unisntall Prevx to reinstall it (long story) and I can't I went to Add/remove and there's not entry there. Can I uninstall is from my registry?

[webster]

{QUOTE-> OMG someone help me. I went to unisntall Prevx to reinstall it (long story) and I can't I went to Add/remove and there's not entry there. Can I uninstall is from my registry? <-QUOTE}

I think you can doubleclick the uninstaller, in the Prewx folder. It usually works
:)

[notageek]

I thought of that and went there but there was no uninstaller in the prevx folder.

[WilliamP]

Try this. My computer,double click c drive , if that is where your programs are, double click program files open Prevex folder and delete one file at a time. If that works reboot and do a search for PXAgent.exe and delete. Re-download.

[notageek]

Thanks Willaim. I went to start/Porgrams and found the prevx program and tried to the uninstall from there and it won't work. I get and error message about can't find the installer. I need the darn thing uninstalled. LOL

[gerardwil]

Hi Nota,

Remove it from start ups (i.e. S-S&D). Quit the program in the systray and reboot. If you have Regcleaner (4.3) uninstall Prevx with that. Reboot after that and it should be gone.

Gerard

[gerardwil]

Regcleaner can be found here:

http://www.majorgeeks.com/download460.html

[webster]

You could re-install, to get the uninstaller :)

[notageek]

Thnaks webster. I tried that and it didn't even start. I think I got a bad exe.

Hi garardwil. I tried to use JV16 to uninstall the program and it didn't work. I closed down everything that was running and still couldn't uninstall it. My week hasn't been going well and this just puts the sprinkles on the cake. :) Thanks for your suggestions I'm going to try to use regcleaner. I know regcleaner is almost the same as JV16 but just maybe I'll get it uninstalled. I also need to send this bug to them to let them know.

[gerardwil]

If you know what files to delete you can try killbox also:

http://download.broadbandmedic.com/

[WilliamP]

Do you have a gun handy? :-\

[WilliamP]

I have PG and a little program called Start Man. The exe that runs Prevx is sagui.exe .If you download Kill Box and get rid of sagui you should be able to go into the folder and delete the files.

[notageek]

I'm going to do it the hard way. I'm going to delete all the files of prevx and than delte all the reg keys that Prevx hold and keep my fingers crossed that it's not going to go wrong and I have to fix it. Of course I'm backing up my registry. :)

[WilliamP]

Good luck my friend.

[notageek]

Thanks. I did it before with mcafee firewall. man that was a crazy firewall.

[tazdevl]

Just reinstall it. Uninstall options should show up.

[nadirah]

WHOA!! :o
Those bloody hell hackers have been waging war on my computer these few days and my firewall is busy blocking them out non-stop. There seems to be a continuous firing of unsolicited traffic packets from a wide variety of IP addresses at my computer. And this is what happened when PrevX stopped a side effect of the hackers' attacks, a buffer overflow was STOPPED! :o

[controler]

Hi nadirah


What browser are you using that you are getting buffer overflows?

controler

[tazdevl]

{QUOTE-> WHOA!! :o
Those bloody hell hackers have been waging war on my computer these few days and my firewall is busy blocking them out non-stop. There seems to be a continuous firing of unsolicited traffic packets from a wide variety of IP addresses at my computer. And this is what happened when PrevX stopped a side effect of the hackers' attacks, a buffer overflow was STOPPED! :o <-QUOTE}

So you aren't using a firewall?

[WilliamP]

Well I thought I had the pop ups at shut down and start up fixed but it isn't. I thought that the Pxagent.exe file had gotten messed up. Also I have a strange situation that started after Prevx, can't explain. I have a Cookie program , Cookie Pal . I have strange cookies getting in that I've never seen before.Such as [a.as-falkag.net], [ehg-idg.hitbox.com] And what really is strange is they will just show up. The Cookie Pal program logs the cookies and shows which are turned down and which are accepted. These somehow get past getting logged and just show up on the computer. I have run Ad-Aware, Spybot,TDS3 and a Hijackthis scan. May not have anything to do with Prevx. Checked my settings in IE.

[tazdevl]

William,

Open IE, Tools, Internet Options, Privacy Tab, Advanced, Override and hit the block third party cookies radio button. Should help.

[WilliamP]

When I do that I have one web site that won't load. And that is my credit union web site.

[Notok]

Odd.. I tried running SSM 1.8.9 and my system threw a fit. When I restarted, Prevx was giving the error message saying that Prevx Agent couldn't start, etc., but a little while later it popped up a msg warning that RegRun was trying to access IE's BHOs, then it turned itself on and started working normally :o

So I guess if you experience problems, try letting it be for a while and see what happens.

[Hyperion]

I tried SSM 1.8.9 too and uninstalled it because i saw it had a leak or something.The more time it was running,the handles used were increasing.

[webster]

I have just reinstalled Prewx. When it tried to connect, ZA warned, and i allowed the connection. Prewx showed an error,could not connect to server. I shutdown ZA, and it connected, and configured, and it is running smooth now. Maybe a ZA issue, Maybe not.

[webster]

By the way, Prevx did not like that Spysweeper tried to access the BHO area in the registry. It warned, like it was saying, I am here, dont touch, stay away 8)

[tazdevl]

Just allow SS. Prevx monitors the registry so if an app accesses it, it's going to pop up a warning. Prevx also seems to have some sort of proxy built in, so it needs to access the net.

As you found out, if it stops workng and you did something before the odd behavior started, perhaps clicking yes instead of no would be a good idea.

[webster]

Tazdevl

I did allow SS, but i did not have do it. Prevx did not block the scan, just the access attempt. Spysweeper did not try to change anything, but Prevx showed an alert, just because it was there, scanning. I think that is 8) .

[0lan]

Webster & tazdevl

Prevx does not contain any proxies nor does it need an internet conection to
work.
If you get an alarm on your firewall regarding Prevx Agent and/or management console, the details in you firewall should show you that
prevx is trying to access the localhost (127.0.0.1) - it does not try
to "go" somewhere else.
Prevx uses this for internal communication and you must allow it (permanent)
in order to let prevx work properly.

Prevx will never connect to the internet, except you want it to do so:
- performing an update
- reporting an alert
The rest of the time, Prevx wont touch your internet connection ;)

0lan

[Notok]

That was the thing, though, it didn't bring up any warnings for SSM, when I started SSM it seemed to hose my system, when I restarted it said it couldn't start the Prevx service, but Prevx seemed to spontaneously work again after a few mins. I don't know that there's any connection between SSM and Prevx, I used them previously without any problems except for SSM's memory usage, like Hyperion noted, and it's tendancy to really screw my system up (temporarily), but that's another thread.

At any rate, this is certainly an improvement on Prevx' part from when it would previously be unable to start the service and I would have to totally reinstall (clean.) The more I use this product, the more I like it. I can't wait to see the final release.

[webster]

0lan

Thank you for the information :)

[tazdevl]

I just got a buffer overflow and lsass error... kept restarting. So I uninstalled.

[Hyperion]

I must say,on my system other than that GUI small problem ,i have nothing to complain of...Stable,nothing strange and...it works :) PC Audit was reported, when i use registry cleaner it reports that the application tries to gain registry control ecc. I m very pleased with it.

[nadirah]

Hi taz, I have sygate personal firewall PRO installed on my computer. But i think hackers are attacking my computer, and my firewall BLOCKS them out 100%. One of the attacks was a wild type, and extremely fierce and although my firewall BLOCKED it out 100%, it was so strong but yet it caused only a minor side-effect. That's the buffer overflow, it is only a MINOR side-effect of the attack. The process which was affected by this minor buffer overflow was: svchost.exe but luckily prevx stopped the buffer overflow. And i'm using the browser: firefox version 0.9.2
After checking my firewall logs, i saw that an enormous amount of unsolicited internet traffic packets, the pattern of the attack involved a lot of unsolicited traffic which was capable of overloading/crashing a computer. ALL unsolicited traffic packets were BLOCKED. And i noticed one of the blocked traffic packets came from a IP address called: 0.0.0.0

PrevX said: This could have been the result of a hacker or internet worm attack.

[WilliamP]

Taz, it seems you are running SSM on your sys. Is that correct? I have Process Guard and don't seem to have any conflict. The only problem I have is at shut down and reboot I get the pop ups. I am really impressed with PrevX and I hope it continues to behave on my computer. Good luck.

[tazdevl]

{QUOTE-> Taz, it seems you are running SSM on your sys. Is that correct? I have Process Guard and don't seem to have any conflict. The only problem I have is at shut down and reboot I get the pop ups. I am really impressed with PrevX and I hope it continues to behave on my computer. Good luck. <-QUOTE}

Nope. Running Spy Sweeper, ZA Pro 4.5 and NOD32. That's it. Just started happening. After 5 reboots that I couldn't stop, shut it down and uninstalled.

[WilliamP]

Post 56 speaks of Spy sweeper problems and reboots.

[tazdevl]

{QUOTE-> Post 56 speaks of Spy sweeper problems and reboots. <-QUOTE}


Thanks, missed that. Working on a product launch, so let's just say I'm like Rainman with ADD at the moment. ;D SSM didn't click.

[Robyn]

I am interested in this new software (although not too keen on beta versions) I note on the website they say easy to install - after installing are the configurations the 'train as you go' type? I know all set up are different and have noted a few problems with it but otherwise is it easy to control once installed? (hopefully without errors!) It certainly looks to be a very promising application.

[gerardwil]

Setting up is easy as shown

[WilliamP]

Give it a try. I am very impressed with it. I'm not a security expert and don't know for sure it will do what all is claimed. I like the way it works and when there is an alert it gives you a lot of information on what took place. So far I've had no conflicts with my other programs.

[controler]

running it with Zonealarm 5 with no problems here. test machine has Bo clean, Antivir, Prevex,Zone Alarm 5 Spywearblaster and guard. Also have the built in firewall enabled on SP2 RC2 , usiny visualzone, FirewalllogXp and XP Logreader.



controler

[Robyn]

Thanks for the screenshot and the further info (very informative) I can see some of the features would overlap with Ad-aware plus but also see that you can turn on an off the protection as required.

I do have other security applications but looking at the variety listed in this post I would say conflict would be minimal - just hope it agrees with Sygate Pro!! (I note one has this firewall) I am going to be starting afresh with my computer in August so now would be the time to 'test' this before I would install anything on my new system. I am always fearful of betas but I know one thing if there is a bug or conflict I would be the one to find it :-[ I have my main computer or my laptop so will decide which one gets the beta ::) thanks again.

[Hyperion]

PrevX runs fine with Sygate free.

[Robyn]

Thanks to all I found the courage and have just installed Prevx on my laptop first. I am literally using this for the very first time so will need to review any settings to see if I need to change anything to avoid conflicts with other software. I can now read this thread with the actual program installed!

[kanga2cool]

:) Hi guys what the differance between Prevx and Process Guard dose Prevx do the same jod as PG.
Thaks for your answer

[Hyper]

I have another question.PrevX wants to update and downloads something every 2 days.And you can't disabel the update.Since it's not a signature based product,what does it download?

Hyperion

[Robyn]

I think the updates include any fixes and enhancements to the program. I have been updating mine manually but you can change the frequency of the update from the control panel if you don't want the auto updates every 2 days. As this is a beta product I feel I need to download the updates to see any differences they make. You can view the .txt file in the Prevx folder which shows the current problems and what has been fixed.

[WilliamP]

Kanga2cool, I have both with no problems. The purpose of the two programs is quite different,except that they protect your system. My suggestion is to read what you can about both, and get both.

[ghiser1]

{QUOTE-> I have another question.PrevX wants to update and downloads something every 2 days.And you can't disabel the update.Since it's not a signature based product,what does it download?

Hyperion <-QUOTE}

When the upgrade for 2.0.9.8 came out the update process told me there was an update for my 2.0.9.6 version for 2.0.9.8. On that run, all the update did was install the new version - I know that because after the reboot I said no to the second "check updates now" box. The security settings were the same as before the upgrade.

I then did a manual update and it brought down new security settings (DLL and BHO) and replaced some of the existing ones.

So, it looks to me that in the future there may be new security settings coming out seperately from product updates.

It's definitely not signature based.

[Hyperion]

Thanks

[nadirah]

I think PrevX could have a software conflict with the upcoming Windows XP service pack 2. PrevX protects against buffer overflows, and XP service pack 2 also does the same thing. One XP SP2 feature is:

Memory protection. Some attacks by malicious software leverage software vulnerabilities that allow too much data to be copied into areas of the computer's memory. These vulnerabilities are typically referred to as buffer overruns. Although no single technique can completely eliminate this type of vulnerability, Microsoft is employing a number of security technologies to mitigate these attacks from different angles. First, core Windows components are being recompiled with the most recent version of our compiler technology to help mitigate against buffer overruns. Additionally, Microsoft is working with microprocessor companies to help Windows support hardware-enforced "no execute" (or NX) on microprocessors that contain the feature. NX uses the CPU itself to enforce the separation of application code and data, preventing an application or Windows component from executing program code that an attacking worm or virus inserted into a portion of memory marked for data only.

[Slovak]

Are you actually going to put 100% of your trust into Microsoft doing it right over an aftermarket product?

[VikingStorm]

{QUOTE-> I think PrevX could have a software conflict with the upcoming Windows XP service pack 2. PrevX protects against buffer overflows, and XP service pack 2 also does the same thing. One XP SP2 feature is:

Memory protection. Some attacks by malicious software leverage software vulnerabilities that allow too much data to be copied into areas of the computer's memory. These vulnerabilities are typically referred to as buffer overruns. Although no single technique can completely eliminate this type of vulnerability, Microsoft is employing a number of security technologies to mitigate these attacks from different angles. First, core Windows components are being recompiled with the most recent version of our compiler technology to help mitigate against buffer overruns. Additionally, Microsoft is working with microprocessor companies to help Windows support hardware-enforced "no execute" (or NX) on microprocessors that contain the feature. NX uses the CPU itself to enforce the separation of application code and data, preventing an application or Windows component from executing program code that an attacking worm or virus inserted into a portion of memory marked for data only. <-QUOTE}
Does anyone have an Athlon64/Opteron with SP2 RC# who has used PrevX?

[nadirah]

{QUOTE-> Are you actually going to put 100% of your trust into Microsoft doing it right over an aftermarket product? <-QUOTE}
Slovak, i'm only stating a possible software conflict that could take place between prevx and XP SP2. What u mean by saying i am trusting microsoft 100%?
I don't trust microsoft 100%. XP SP2 may have some compatibility problems. Microsoft needs to get XP SP2 to work with most programs.

[Notok]

I wouldn't expect there to be compatibility issues here, the approaches are different. My (elementary) understanding of this is that Microsoft is basically enforcing rules for the programs that run in windows, basically not allowing code that would be vulnerable to this kind of attack, plus giving additional protection/enforcement at the hardware level for owners of processors with the NX feature (currently the 64bit processors.) Whereas I thinkPrevx basically hooks into the process and monitors it, saying "ok, this program is sending too much information to that program in memory, I'm shutting it down"

Basically SP2 would allow the processor to block the information on it's way to memory (if it has that capability), where Prevx would put up a gate on the process in memory, should the information get that far. If it managed to get past all that, SP2 makes it so that the program in memory would have to specifically allow that kind of request (regardless of what kind of processor you have.)

So, really, Prevx would give an additional layer of security, it wouldn't be trying to do the same thing. And no, I wouldn't expect Microsoft's fix to stop 100% of these attacks, or any single software vendor for that matter. Considering the money thats behind the malware out there right now, I'm sure it will just be a matter of time before they figure out how to work around these things, or find a different way of achieving the same results.

It should also be noted that if you go to the Prevx page and click on "Our Partners" they are listed as a Microsoft Certified Parter, indicating that they work with their partners in developing their software. That being the case, I would be pretty suprised to see any major compatibility issues.

[WilliamP]

I have E Mailed Prevx to see if it has been tested against SP2. I'll let you know.

[Honyak]

Hello,
I am new to the forum but have followed for some time. I heard of Prevx and dl'ed and have been running with no problems. I came across this thread and followed it with interest since I was trying Prevx.
I discovered today that to defrag with Perfectdisk you have to disable Prevx, has anyone else experienced this?
So far that is the only quirk I have found since I have been running it for about 10 days.

[Infinity]

{QUOTE-> discovered today that to defrag with Perfectdisk you have to disable Prevx, has anyone else experienced this? <-QUOTE}

ooohhh, that was the problem. man when defragging, everthing went black (don't remember what the colour ment, excluded I think now) and I uninstalled it. I first thought it was my gdata av. but I have prevx too. I will install it again this ev. I had now diskeeper but diskeeper is not in a million times what perfectdisk is.

Thanx Honiak

[Robyn]

I stop all running processes when defragging with O&O Pro defrag (including my firewall) as O&O requires full access with one of its modes. I actually deframented last night on my computer with PrevX and everything worked perfectly (no black screens or hangs) I hardly notice PrevX running at all, the only alerts I have encountered were when I went to Windows update last week otherwise my router and software firewall must be stopping any other attacks plus any spyware guards I have ???

[Infinity]

{QUOTE-> I stop all running processes when defragging with O&O Pro defrag (including my firewall) as O&O requires full access with one of its modes <-QUOTE}

I don't want a program that I can use only when I have to close everything down. I used o&o, diskeeper and perfectdisk and the one of system mechanic. but there wasn't any like perfectdisk. it is a matter of taste.

I couldn't use it because apparently prevx, and I uninstalled it. but with this knowledge now I will install it again and one time a week for a half an hour I close prevx to defrag my disk.

thanx

[Decomp]

Prevx: i dont want to spoil the joy, but i think there are some issues about there privacy policy if you read this carefully...i can be wrong offcourse.

[Infinity]

what about it?

[Notok]

http://www.wilderssecurity.com/showthread.php?t=40585&highlight=prevx

[Infinity]

yes notok, still I cannot see the problem lol

pffff, I guess the first person really adequate of understanding an eula or such an agreement would stop using xp too lol or whatever.

oepsie...

[Notok]

Infinity: I thought that thread actually supported what you were saying. It's an issue that has already been addressed.