Real-time protection Prevx

Hi,

We are thinking of using Prevx as the primary anti-malware solution in our company. The last three years we used Sophos, which is also a very good anti-malware program.

Right now, I am testing Prevx in a virtual machine and I think it is doing a pretty good in removing al sorts of malware. However, the real-time protection of Prevx is not always doing its job flawlessly. When I run a piece of malware, Prevx does nothing sometimes. When I run a scan immediately after that, Prevx finds the malware I just ran and removes it.

At that moment the PC was already infected and I think that it is better to prevent rather than disinfect the PC afterwards.

Is this behavior of Prevx normal? Or am I doing something wrong?

 

do yu have an test license? i think yes?
can you tell us the windows version, prevx version, are this standard settings? how did you run the file? for example from an folder, directly from internet? can you check the installer at vt and look if prevx is detecting the installer, perhaps it can only find the infection (the infected files) but not the dropper

 

yes, its by-design to keep your network and computers running at its optimal performance.

it would be nice to know what 'test version' of Prevx you are using, as they dont offer full removal,

anyway, should that file become active, prevx should alert you.

if you come across a file you believed to be infected and you run it, dont assume Prevx is doing nothing if a pop-up doesnt appear automatically, it keeps its watchful eye on it.

if a detection in real-time is delayed, this could be due to the checking of many factors to determain if the file is infact infected, but have no fear - the file is still under control.

however, if the file is still running and prevx is not alerting you, it cant be doing much as prevx has alot of behavour based filters to spot the nastys, however if then you are still unsure about that particular file - give support a little nudge.

a computer can have many viruses, ie. my own has many almost a million samples, but i keep them under control and inactive, no automatic pop-up will show for me, but if one where to be 'let out' of my own protection and the sample become active, prevx will most likely alert me based either on its behaviour or the cloud database.

Prevx of course doesn't offer an http scanner, so files will need to be downloaded and ran on your machines for prevx to kick-in, however as i stated, they will be watched and tracked 'through-out' your machine.

I actually think Prevx is more set-up for enterprises rather than home users, but we can all enjoy it for sure.

also, best place to test the software is of-course, a real live machine, VM's have in the past tend to show inaccuracys on many products tested compared to what they can achieve on a real machine.

 

i wouldn't replace sophos with prevx.. you could run prevx along with sophos, if the sophos program will allow you to do that..

prevx seems to have a bug where at least sometimes its realtime-protection will not flag some malware when its realtime-protection has been temporarily disabled and then re-enabled.. it sounds like that is what you experienced when you said that the "guard" did not block some malware from running but that it did flag the same malware when doing a manual scan..

 

Hello sebasm12,
As the other members here have said, we would definitely be interested in seeing some more specific information on your setup. Prevx doesn't come with a conventional trial version, per-se, as it only includes realtime monitoring and scanning but not realtime protection.

If you have received a test license, could you please send it to me via a PM so that I can take a look at it to see if you have the protection components enabled?

Thank you!

We've corrected this issue

 

prevxhelp, i have not seen that any new, fixed version of "prevx" has been released.. the last time that i checked, the same build 3.0.5.143 was available for downloading.. i hope a new, fixed version of prevx is released soon..

 

Download the latest RC build 3.0.5.158 it is very stable or they would not release it! https://www.wilderssecurity.com/showthread.php?p=1685534#post1685534

TH