Prevx + Adobe Air

Today I needed an update for Adobe Air, downloaded it right from their site and it was detected as cloaked with something from the malware group called Trojan.SystemPoser by Prevx today. Thank goodness for Prevx! Worth every penny and then some.

I don't even know what Adobe Air really is but, what to do now? Should I totally uninstall Adobe Air with my Revo or is there a safe alternative download site for me to do the update?

"Trojan.SystemPoser B Oct 8 4:39
Oct 8 4:39 102,272 Y Y Y
ADOBE AIR INSTALLER.EXE
%temp%\ Oct 4 0:32 "

I wouldn't have a clue as to whether or not this (the above) is a False Positive but it looks serious enough for me to come running in here. This happen to anyone else updating their Adobe Air the last week or so? How is that going to be resolved I wonder? People just sit around and wait until Adobe cleans it up and then they can finally update? I don't think so but by now I hope somebody has learned about this lurking cloaking posing trojan. Sound like something right out of a horror novel.

Kind of wish the Prevx site was a tad more helpful regarding their codes, etc. and how to read, interperet and completely understand all the data they issue. Add a legend kind of thingy to the page maybe. No biggy but it would be really nice and very helpful for technically-challenged casual home users.

The really weird part of this incident is after Prevx warned me off from installing the update, out of curiosity I scanned the icon with MBAB, Nod32 and Prevx. All 3 scans came out clean. Go figure! It's when I double-click on it to install it that Prevx says NO-NO-NO-NO!!!! Bad!

I searched and just now learned that I could trash it (as it's referred to out there as "bloatware") and Acrobat both and install Foxit PDF freeware. What is the general concensus fellow Wilders on this Foxit software? Any good? Should I go with it? Got to have a PDF program. Would be grateful for your feedback even though Acrobat wasn't the problem today.

I'm not bothered by that at all but I loathe the weekly updates for Adobe Flash - Macromedia. Always 1 for IE and another for the browser I actually use. Thankfully those are very speedy and I hope eventually we all don't end up spending more and more time and money on maintenance and security than on work, study, communication and play.

Thank you in advance Wonderful Wilders.

 

False positive?

 

The best thing to do here is to send a scan log by e-mail to report@prevxresearch.com. As Technic said, this is very likely a false positive, and by sending in the scan log the Prevx Team can correct the issue at their end.

Please see this thread about reporting false positives and missing detections.

 

Updated Adobe air this morning and no problem at all with WSA Essential beta version 40

 

I am aware that there is a procedure if and when you believe Prevx has given you a False Positive. Thanks everyone for your help, links and reminders regarding that.

As I mentioned, I had no idea at all if it was or not and what with all the nasty press Adobe's been getting for eons, I was not suspicious of one. Therefore I did not pursue it. I was more interested in what you all recommended as far as my question about dumping it and Acrobat and trying out this new competiotor of theirs called Foxit Software. Still very curious if anybody has it or has tried it and the final verdict. Or is eveyone still hanging onto all things Adobe here? I want only to do what's best for my `puter and my wallet.

"gdiloren"
I am delighted to learn your Air Adobe update went well. Please, where can I go to download and install this new beta program you have and used that I am suddenly seeing all over the place called" WSA, please?

I guess I would first have to disable Prevx, since the consensus "seems" it was be a False Positive that I should report. I still am not clear on which scan, to send though. Every single day I run a Full scan and a Deep scan with my Prevx. I can't read/inderstand the dang things, LOL, but I do run them and save them to Documents.

TonyW, so, do I send a copy of the FULL or DEEP scan along with a copy of my post, deleting the parts not pertinent to the incident, natch?

I am getting the impression that some time soon (when exactly Prevx moderator?) the remainder my subscription of Prevx SafeOnline is going down the toilet - without a pro-rated refund so that I can apply it toward this new product I must by - as once again some corporate giant bought out another company and I'll have to switch to this well-liked new beta product most everybody here seems to really like for the same exact protection. Am I correct "wonderful wilders", or do I have it all wrong?

WHEN approximately does this beta product shed it's beta skin and we all have to abandon Prevx Safeonline sniff, sniff and buy it - because this late in the game all the Inner Circle people know or can lock onto a very close date yet they dodge the question because they have to "publicly" but I and everyone else realize you guys do know and can give us an idea, etc.. See, with me for example, my subscription ends in 10 months. I am dirt poor, so cannot afford to re-up when it ends if the beta is going to be released soon after. Nor can I afford to lose 6 to 8 months $$$$ of this subscription if it's coming out at Xmas. What happens to all our active subscription money since the new company bought Prevx? Does it get applied toward our having to buy our first subscription with them? Because, fair is fair, and it should.

PS: Please remember to include the site for me to also download and use what gdiloren use to sucessfully scan Adobe Air.

Thanks again.

I just saw the site. It's already public and on sale. I didn't get that impression at all as I kept seeing the word BETA.

This presents a HUMONGOUS problem for me a and a ton of other folks here at Wilders. Those of us who roam back and forth from this forum to the ESET ones as I already have an antivirus: Nod32. Now, what happens to folks like us who want poor, dead, and bought out PREVX Safeonline protection but cannot make the switch to this WSA because it comes with an anti-virus? Drop-dead, serious as a heart attack question?

Prevx, any chance of you helping out us loyal and happy as a clam customers of yours by supporting those of us who cannot abandon you? Contract with us under the table, lol?

Life is grand and I have the BEST luck in the world. ;-)

 

The beta phase has ended. Now you can get a 30-day trial of the final product here:http://www.webroot.com/customerSupport/trialRegistration.php

 

In fact, when the beta phase was open, they emailed you the activation code with the link to download the software, valid about 80 days and renewable (? now, I don't know). SafeOnline is included in WSA, just it has no tab but a lock in the icon tray.

 

No, that is not correct. Current Prevx users will be upgraded without an additional fee to SecureAnywhere.

You can use WSA alongside ESET, just as you have used Prevx alongside ESET - there are no incompatibilities.

I hope that helps quell some of the concern - we're committed to providing the best protection for our users and as soon as we're finished with the transition work on our backend, we'll be able to upgrade Prevx 3.0 users to WSA and current Webroot users to WSA.

 

Such fantastic news! I'm delighted. You more than quelled megatons of deep concern.

Seeing as how I missed the email gudilorn spoke of, I hope when it's time to update me that there's no way at all I can miss it. I have a gmail addy for my laptop. Should I give it to anyone, or is that not necessary?

I am also stunned silly to know that WSA, an antivirus program is NOT incompatible with my beloved Nod32. That is so great and IMHO, highly unusual. And the added bonus is we still get the super-duper SafeOnline. Whoopie!

Well, I got great news but no reply about the free alternative to Adobe Acrobat. Probably because this particular forum is much smaller than most of the others here. Any recommendations on the appropriate one, if any, please?

I'm really very thankful to you guys for the tremendous amount of help, links, information and Great News. Please don't let me miss the boat on this one. No idea at all how I missed an email in my Inbox from Prevx. It wouldn't have gone to Spam or Junk. I always check those anyway. Maybe Prevx sent it to some other mailbox I have and am totally unaware of it? And it's still sitting there?

Thanks All. You rock!

 

Newbie, you haven't missed any email yet! The beta email would have been sent to you if you would had registered when the beta program download was open. If you bought prevX, you should receive soon an upgrade email, as PrevXhelp has said elsewhere in this forum.

 

Thank you. I don't feel scatter-brained and befuddled now. You are very nice and have been a great help to me. I hope you win the lottery big! After me, of course. {wicked grin}

Course, everyone in here is very nice. Have only run into one "not nice at all" person. I suspect he/she was a troll, but whatever.

Sorry for spelling your name wrong. It was a Quick Reply so I couldn't refer to the post.

Any idea at all when the switch-over is going to happen?

 

I don't have an exact date yet - the upgrades are happening in a few phases: upgrade of current WSA customers to the newest build, then upgrades of 7.0 customers to WSA, then upgrades from Webroot 6.0/5.0 (SpySweeper) customers to WSA, and then finally upgrades from Prevx 3.0 to WSA once we finish changes to the licensing system.

Each of these pose some challenges but we're working through them as quickly as possible!