Is Prevx good?

Discussion in 'other anti-malware software' started by truthseeker, Aug 31, 2008.

Thread Status:
Not open for further replies.
  1. truthseeker

    truthseeker Former Poster

    Joined:
    Jan 26, 2008
    Posts:
    977
    Is this website safe and well known?

    http://www.prevx.com/

    It offers a free scan. But is it safe to install their activex that's needed for the scan?
     
  2. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    yes, its safe.
     
  3. gerardwil

    gerardwil Registered Member

    Joined:
    Jan 17, 2004
    Posts:
    4,750
    Location:
    EU
    It is,

    Gerard
     
  4. EraserHW

    EraserHW Malware Expert

    Joined:
    Oct 19, 2005
    Posts:
    588
    Location:
    Italy
    It is :D ;)

    Any question is more than welcome :)

    Best regards,

    Marco
     
  5. truthseeker

    truthseeker Former Poster

    Joined:
    Jan 26, 2008
    Posts:
    977
    I used the online scanner, but Precx installed some .exe file on my laptop which now permanently runs in RAM.

    Anyone know why?
     
  6. Montpellier

    Montpellier Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    20
    Their free scan isn't an Active-X browser based scan, but instead their "Prevx CSI" product in scan-only mode. This means if their scan found anything nasty, it could be easily upgraded it in order to cleanup without having to download and scan with a further program.
     
  7. truthseeker

    truthseeker Former Poster

    Joined:
    Jan 26, 2008
    Posts:
    977
    Ok thanks. I uninstalled the file anyway.
     
  8. StevieE9

    StevieE9 Registered Member

    Joined:
    Jan 16, 2007
    Posts:
    139
    Prevx is a safe and reputable security software company. But their main subscription product for home users 'Prevx 2' has fallen badly in to disrepute in recent months because of truly horrendous 'false positives'. So bad that on WinXP and Vista it was marking (and blocking) the update and/or install of so many standard programs that, for many users, it froze their systems.

    Many of us uninstalled the program even though we still had months left on a paid subscription.

    Also, you will find their 'Independent' support forum over at CastleCops is like a graveyard. None of the 'official' Prevx people have posted in it for months - and virtually no one else.

    Bottom line is their home products are not worth paying any money for at all.
     
  9. GES/POR

    GES/POR Registered Member

    Joined:
    Nov 26, 2006
    Posts:
    1,490
    Location:
    Armacham
    Jep still have a license for it and will never recommend anyone using any of their products.
     
  10. EraserHW

    EraserHW Malware Expert

    Joined:
    Oct 19, 2005
    Posts:
    588
    Location:
    Italy
    Here I am ;)
     
  11. Dark Star 72

    Dark Star 72 Registered Member

    Joined:
    May 27, 2007
    Posts:
    778
    Hi Marco, hope you enjoyed your [holiday ?].

    A question, when P3 is released where will it be announced first. On the Prevx site or here?
    And also, I'm getting restless :shifty: :D

    Ian
     
  12. doktornotor

    doktornotor Registered Member

    Joined:
    Jul 19, 2008
    Posts:
    2,047
    No. Zillions of false positives, won't touch it again thanks.:thumbd:
     
  13. emperordarius

    emperordarius Registered Member

    Joined:
    Apr 27, 2008
    Posts:
    1,218
    Location:
    Who cares
    Everything packed = Malware
     
  14. doktornotor

    doktornotor Registered Member

    Joined:
    Jul 19, 2008
    Posts:
    2,047
    Well, probably not only... ;) Anyway, the amount of FPs has been obnoxious, really unusable.
     
  15. Dark Star 72

    Dark Star 72 Registered Member

    Joined:
    May 27, 2007
    Posts:
    778
    B****cks. I've been using it since Prevx 2.0 came out and had hardly any FP's and when I have they have been fixed in double quick time. Just go and have a look at the other forums-Eset, Kaspersky, AVG, you name it, they all have FP's and a damn site more than Prevx. And some of them take days or even weeks to sort them out.

    Rant over
     
  16. emperordarius

    emperordarius Registered Member

    Joined:
    Apr 27, 2008
    Posts:
    1,218
    Location:
    Who cares
    PrevX does have a lot of false positives. I made a test now.. Made a C++ program that displayed "Hello world". I packed it using PeCompact, Uploaded to VT and PrevX detected it as suspicious.


    1.PNG
     
    Last edited: Sep 10, 2008
  17. ren

    ren Registered Member

    Joined:
    Nov 1, 2006
    Posts:
    45
    What a test dude... -_^
     
  18. Long View

    Long View Registered Member

    Joined:
    Apr 30, 2004
    Posts:
    2,295
    Location:
    Cromwell Country

    The online scanner can be run with Shadow Protect/ Returnil type program.
    boot and then it is gone.
     
  19. EraserHW

    EraserHW Malware Expert

    Joined:
    Oct 19, 2005
    Posts:
    588
    Location:
    Italy
    Hello :)

    Thank you :) Yeah, indeed everything has gone quite well.

    We'll announce it on our website, but I'm quite sure some rumors will be posted on the forum too, even because we're going to be having a beta program and I'm sure everyone here will hear about it :)

    Kind regards,

    Marco
     
  20. EraserHW

    EraserHW Malware Expert

    Joined:
    Oct 19, 2005
    Posts:
    588
    Location:
    Italy
    Zillions of false positives?

    Everytime you find a false positive you can report it so that you help us to improve the software. The best software is the one where users help developers reporting them all bugs or every kind of problem they have had. It should be the best thing to do, shouldn't it?

    Thank you
     
  21. bellgamin

    bellgamin Registered Member

    Joined:
    Aug 1, 2002
    Posts:
    8,102
    Location:
    Hawaii
    You need a different place for your forum. Nowadays CastleCops (CC) is unavailable a lot, due to systemic problems. Even when CC is available, it is verrrry slow. Also, Prevx forum at CC is largely dried up. Slow-or-no replies by Prevx personnel. Ditto with email requests. If that is Prevx's idea of support, NO THANKS!
     
  22. EraserHW

    EraserHW Malware Expert

    Joined:
    Oct 19, 2005
    Posts:
    588
    Location:
    Italy
    Let's analyze the word 'suspicious' = inclined to doubt or mistrust

    That doesn't mean that is forsure malware. Is this a false positive? No, it isn't. Prevx is just saying that looking at some characteristics, that file could be suspicious and it need an in-depth analysis.

    It's not saying that is a malware, not at all.
     
  23. EraserHW

    EraserHW Malware Expert

    Joined:
    Oct 19, 2005
    Posts:
    588
    Location:
    Italy
    We're looking into forum options - Castlecops really has been bad recently, but it does look like its getting better.
    We're still monitoring it and deciding what we should do and where we should host a forum at. We do try and respond as fast as possible with email requests.

    If something you've sent in has taken too long to be responded to, let me know and I'll escalate it. Messages get lost sometimes or assigned to the wrong departments, etc.
     
  24. doktornotor

    doktornotor Registered Member

    Joined:
    Jul 19, 2008
    Posts:
    2,047
    Uh, Prevx is marking any packed executable as "suspicious". Useless annoying noise, stop doing such nonsense. There's nothing "suspicious" with packed execs per se, yeah indeed you need to do some real "in-depth analysis" before marking such stuff - but Prevx has been failing here for ages. :thumbd:
     
  25. EraserHW

    EraserHW Malware Expert

    Joined:
    Oct 19, 2005
    Posts:
    588
    Location:
    Italy
    Thank you for trying to teach me how our software works.

    After you've written such things, try packing your notepad.exe with UPX. It's an easy test. After that, notepad.exe is a *packed* executable.
    Wow, now Prevx should mark it as suspicious. Let's check it.

    I can make things faster: http://www.virustotal.com/en/analisis/05f07dd9bda162100400239dcd885665

    After that, try with regedit.exe - just another test.

    I won't reply anymore to such useless and meaningless attacks.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.