Prevx SafeOnline vs. Zeus & SpyEye

Question: Does Prevx SafeOnline work against Zeus and SpyEyes on x64 OS?

 

No

http://forums.malwareresearchgroup.com/viewtopic.php?f=29&t=582&start=20

 

What guest meant to say was "I don't know". Prevx SOL fails the form grabbing elements associated with Zeus and Spyeye, but as Joe has always said there are other aspects of Prevx SOL designed to catch these nasties.

I'd suggest waiting for Joe to respond on this one.

 

If those aspects of Prevx SOL were not able to catch the MRG simulator and the simulator/malware is able to steal your bank passwords...

 

This is a bit dissappointing. We were told that the new SafeOnline would work under the hood in a totally different way to provide better protection also on x64 and this vulnerability was known to Prevx for quite some time and it was supposed to be fixed now.

 

That is correct if Prevx SOL were a standalone tool, but Prevx SOL includes the realtime scanning engine so the malware may be detected by that instead. Don't get me wrong, it's not good that the SOL element of Prevx SOL fails against the form-grabbing of Zeus and Spyeye, but it doesn't necessarily mean that there is no protection. So the answer to "does it protect" is "possibly".

 

We haven't received details of their simulator and are uncertain how it operates but we have tested it against Zeus and SpyEye and it does protect against them.

 

Maybe you can contact with Sveta at MRG or send him a private in this forum.

 

Hmmm.... according to MRG forums, Prevx 3 and 4 beta both failed with this simulator and it was verified by prevx people as they were given acess to this simulator.

Later on they said that they are removing all posts about prevx beta from their forums as per request from Prevx people. So I can,t find these now.

It,s really disappointing to see the issue still not fixed. God knows how many more issues will be still there.

 

Have a look here: https://www.wilderssecurity.com/showpost.php?p=1889373&postcount=12

TH