Panda Cloud Antivirus 1.1 Beta Released

Panda does nice (at the moment the best with lowest current infections) at this live honeypot demo http://173.14.219.57:9000/SeventyThreatLiveVideoChallenge/pages/default.aspx

Regards Kees

 

Interesting test... thanks for the link!

 

@Pbust


with the BB be the same as in the upcoming Pro version?

you said some kind of BB? what would that imply?

thank you
Brock

 

This did the trick! Thanks pbust.

 

Ok i just decided to finally give PCAV a go on my PC, but i have a question that may seem dumb but i still need to ask. Since i read in this thread that the Beta doesn't have auto update so far...how do i update PCAV?

 

For beta's it is common that the PROGRAM does not update, since it is normally used for a limited time. Because the blacklist is in the cloud (on the servers of Panda), you do need to worry about uodating the malware signatures.

Problably new download for program update, I guess (would be normal procedure with betas). When you provided your e-mail, most companies send you a notify mail to push new versions of Beta's into the testing community.

Regards Kees

 

Ah i see, then i just need to wait for new beta versions for now. Thanks Kees1958.

 

It quarantined update.exe from Avira yesterday (I use Avira for on-demand scanning). I didn't even notice it until today when I went to check the "trash". When you undelete a file from quarantine, is that info sent to the cloud and regarded as a false positive or factor in its analysis in any way?

 

I trust no Panda yet. Like a masked bear waiting to eat you.

 

What in the world are you talking about?

Thanks.

 

Anyone else seeing these annoying pop ups with the Eicar test files?

Seen at every bootup and coming out of sleep mode.

 

I have testet on Virtual Box .
So light..

 

If I remember correctly a little pop up will show saying the beta available but I don't 100% know yet.

 

Guess i will have to wait and see if that happens, would be nice if that happens.

 

Hmmm...

PSANHost.exe*32
Memory (Private Working Set) = 5084K
Commit Size = 284,404K

 

Yes Behaviour Blocking (BB) and Behaviour Analysis (BA) will be included in the upcoming 1.1 version.

As mentioned by Kees, you don't need to worry about *updates* as the program is always connected to the cloud-scanning servers. As you'll see there's not even an *update* button on the GUI. In regards to *upgrades* (new engine and program versions) these will be automatic & transparent for paid users. Free users will get a notification of new program version and pointed to our website to download & install the new executable. There won't be a need to uninstall as the new executable will uninstall the previous version and install the new one.

Yes the info is sent to the cloud, but its better/quicker if you send the file to falsepositives@pandasecurity.com so that one of our lab engineers can look at it manually and exclude it quicker.

Weird.. is the eicar in a compressed file (zip, rar...) and what location is it at? Does this happen with the latest beta version?

What's the problem with this? Its just virtual address space in the pagefile, no direct impact on memory usage. The important measurement is working set.

 

These are for all the Eicar test files. Location shown in attachment; browser ChromePlus and yes this is the latest beta.

 

Great, thanks for clearing that up pbust.

 

Is the Exclusion List also applicable for the real-time monitoring component, or only the on-demand scans?

Ned.

 

I have a small (300mb) page file and the system was getting sluggish when I was opening programs so something wasn't right. It's rare to see the commit charge that high on a real time scanner.

 

If I remember correctly it is for real time and on demand.

 

One small hiccup i'm facing is that accessing my quicklaunch shortcuts is slow when the Panda is running (ie Quicklauch context menu freezes for a few seconds when the quicklaunch arrow is clicked). Disable it and the access to the quick launch shortcuts are instant.
I have added the quick launch folder (and all subfolders & shortcuts within) in the Exclusion list, but still experience the slow down.

Same goes for while opening a stack docklet in Objectdock. On clicking a stack, ObjectDock freezes for a few seconds and then only shows the contents of the stack. Adding neccesary items to Exclusion list does seem to help.

 

The exclusion list prevents alerts but doesn't appear to stop the files from being scanned.

 

Yup, thats what i'm thinking.

Waiting for Pedro to shine some light on this.

 

It seems like the Chrome path. It's known issue with Chrome downloads. We're working on it. It's annoying but does not affect security as the files are detected and blocked correctly.

On-access only

Is the pagefile manually set? If that's the case set it to automatic and/or set it on a different (bigger & faster is better) drive.

Is this a recent install of PCAV? It might be that PCAV is scanning all those programs in order to cache them. Check if this is the case and if it continues happening let me know.

If you add anything to the exclusion list, the files and/or directories (and their subdirectories) listed will not be scanned or disinfected. Are you seeing a different behaviour?