![]() |
|
#1
|
|||
|
|||
|
Question: Does Prevx SafeOnline work against Zeus and SpyEyes on x64 OS?
|
|
#2
|
||||
|
||||
|
No
http://forums.malwareresearchgroup.c...t=582&start=20 Quote:
__________________
Comodo Internet Security (No AV) ZeroVulnerabilityLabs ExploitShield | Trusteer Rapport | TrueCrypt | EMET | Secunia PSI Firefox: Addon security and privacy collection: https://addons.mozilla.org/en-us/fir...den/favorites/ |
|
#3
|
|||
|
|||
|
What Lordraiden meant to say was "I don't know". Prevx SOL fails the form grabbing elements associated with Zeus and Spyeye, but as Joe has always said there are other aspects of Prevx SOL designed to catch these nasties.
I'd suggest waiting for Joe to respond on this one. |
|
#4
|
||||
|
||||
|
Quote:
If those aspects of Prevx SOL were not able to catch the MRG simulator and the simulator/malware is able to steal your bank passwords...
__________________
Comodo Internet Security (No AV) ZeroVulnerabilityLabs ExploitShield | Trusteer Rapport | TrueCrypt | EMET | Secunia PSI Firefox: Addon security and privacy collection: https://addons.mozilla.org/en-us/fir...den/favorites/ |
|
#5
|
|||
|
|||
|
This is a bit dissappointing. We were told that the new SafeOnline would work under the hood in a totally different way to provide better protection also on x64 and this vulnerability was known to Prevx for quite some time and it was supposed to be fixed now.
|
|
#6
|
|||
|
|||
|
Quote:
That is correct if Prevx SOL were a standalone tool, but Prevx SOL includes the realtime scanning engine so the malware may be detected by that instead. Don't get me wrong, it's not good that the SOL element of Prevx SOL fails against the form-grabbing of Zeus and Spyeye, but it doesn't necessarily mean that there is no protection. So the answer to "does it protect" is "possibly". |
|
#7
|
||||
|
||||
|
We haven't received details of their simulator and are uncertain how it operates but we have tested it against Zeus and SpyEye and it does protect against them.
|
|
#8
|
||||
|
||||
|
Quote:
Maybe you can contact with Sveta at MRG or send him a private in this forum.
__________________
Comodo Internet Security (No AV) ZeroVulnerabilityLabs ExploitShield | Trusteer Rapport | TrueCrypt | EMET | Secunia PSI Firefox: Addon security and privacy collection: https://addons.mozilla.org/en-us/fir...den/favorites/ |
|
#9
|
||||
|
||||
|
Quote:
Hmmm.... according to MRG forums, Prevx 3 and 4 beta both failed with this simulator and it was verified by prevx people as they were given acess to this simulator. Later on they said that they are removing all posts about prevx beta from their forums as per request from Prevx people. So I can,t find these now. It,s really disappointing to see the issue still not fixed. God knows how many more issues will be still there.
__________________
Ubuntu 12.10 AX64 Time Machine, Comodo FW & Defence Plus, |
|
#10
|
||||
|
||||
|
Quote:
Have a look here: http://www.wilderssecurity.com/showp...3&postcount=12 TH
__________________
Triple Helix - Microsoft® MVP Consumer Security 2012/14 VIP Member Of ASAP - (Alliance of Security Analysis Professionals™) Webroot® SecureAnywhere™ Complete 2013 Closed Beta Tester v8.0.2.147 - VoodooShield 1.08 - Windows 7 Ultimate 64bit and all Windows OS's from XP to Win 8 on VM's. |
| « Previous Thread | Next Thread » |
| Thread Tools | Search this Thread |
|
|