Av-comparatives April results

Discussion in 'Prevx Releases' started by darts, May 15, 2012.

Thread Status:
Not open for further replies.
  1. fax

    fax Registered Member

    Joined:
    May 30, 2005
    Posts:
    3,899
    Location:
    localhost
    Up to now you have provided NO evidence whatsoever that WSA does not do what is supposed to do in your system aside from AV-test reference or referencing to better features that are not there by design (e.g. inbound firewall). Please provide evidence that WSA does NOT protect you or shut up once for all. Amen :D :isay:
     
  2. Mongol

    Mongol Registered Member

    Joined:
    Jul 24, 2004
    Posts:
    1,581
    Location:
    Houston, TX
    You are likely right. "A" keeps posting and antagonizing so the "B's" keep responding. I said I washed my hands of this certain poster and now I have...:thumb: This thread has really wandered way off topic.
     
    Last edited: Jun 2, 2012
  3. No_script

    No_script Registered Member

    Joined:
    May 12, 2012
    Posts:
    97


    How can Webroot protect you when somehow the security features can be disabled or turn itself off.

    http://i49.tinypic.com/2nbyu02.png

    I'm not sure how to explain that other than lol.
     
  4. fax

    fax Registered Member

    Joined:
    May 30, 2005
    Posts:
    3,899
    Location:
    localhost
    I am not sure there is a problem in language, may be you can't well understand English. This could explain all these posts with no value. That screenshots show nothing apart a disabled tool. You could have done it yourself as you did with manually deleting system file.

    If you don't have logs you have no evidence. If you have no evidence you can't support your statement apart just for a value judgement. "I don't like it".

    So, again: you have provided NO evidence whatsoever that WSA does not do what is supposed to do in your system aside from AV-test reference or referencing to better features that are not there by design (e.g. inbound firewall). Please provide evidence that WSA does NOT protect you or shut up once for all. Amen :D
     
  5. No_script

    No_script Registered Member

    Joined:
    May 12, 2012
    Posts:
    97
    What the hell, are you mentally challenged.

    What possible reason would I have to make this up. You should shut up, if you can't accept what I've said then you have serious issues.
     
  6. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Could you send me your license key via PM? Invalid or blocked licenses would disable features like that.
     
  7. fax

    fax Registered Member

    Joined:
    May 30, 2005
    Posts:
    3,899
    Location:
    localhost
    No idea why you would do it. Most evidence provided was totally useless. Harmless files, default registry, safe applications, deleting OS executables. The evidence you provided showed a serious paranoia on malware and/or little knowledge on how windows system works. Therefore, screenshots really brings no further evidence on the table apart from confirming your lack of understanding. :)

    At this point I give up and will keep following the saga from behind the scene. Sorry in advance to all the readers for contributing to derail this thread fully offtopic.

    Lets see if you can at least follow up to prevxhelp request. lol
     
  8. Mongol

    Mongol Registered Member

    Joined:
    Jul 24, 2004
    Posts:
    1,581
    Location:
    Houston, TX
    He won't and the mind numbing rant will continue...:rolleyes:
     
  9. No_script

    No_script Registered Member

    Joined:
    May 12, 2012
    Posts:
    97
    And why would my license be invalid? Did you block it? Come on, how can seriously explain why Webroot would suddenly wipe all settings.


    You fail to see the limitations of Webroot and AV's in general when it comes to detecting Malware. & oh yeah I wouldn't be so quick to judge my skills, you would be surprised.
     
  10. ProTruckDriver

    ProTruckDriver Registered Member

    Joined:
    Sep 18, 2008
    Posts:
    1,300
    Location:
    USN Retired 1969 ~ 1992
    WOW! I think it's time to close or give him his own thread.
     
  11. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    I don't have your license - that's why I asked you for it...
     
  12. No_script

    No_script Registered Member

    Joined:
    May 12, 2012
    Posts:
    97
    I've sent it to him ffs ;)
     
  13. No_script

    No_script Registered Member

    Joined:
    May 12, 2012
    Posts:
    97
    s.bat.vir
    devil.dll.vir - W32/Ramnit.a

    Different day, same result. Infected.:doubt:
     
  14. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    .vir sounds like a remnant that an AV already cleaned previously but please send me a scan log from WSA right now.
     
  15. webbit

    webbit Registered Member

    Joined:
    Nov 2, 2008
    Posts:
    223
    and dont format this time!!!!
     
  16. No_script

    No_script Registered Member

    Joined:
    May 12, 2012
    Posts:
    97
    Yeah npz, problem is this is a fresh imagine. So unless my image is infected then I don't know how to explain the malware being on my PC.
     
  17. STV0726

    STV0726 Registered Member

    Joined:
    Jul 29, 2010
    Posts:
    900
    Every day is exactly the same...

    @No-Script: I strongly encourage you to continue this in a private conversation with Joe (PrevxHelp) if you need further assistance and are willing to perform his suggestions. Continuing to post here has proven not to be of much help it seems to anyone, sadly...just a friendly suggestion from another forum member that has been in (sort of) a similar situation before...

    ...I was having continual instances where on occasion Prevx 3.0 appeared to not load its GUI on login. Joe was more than willing to help of course, but he insisted they could not reproduce the issue so he explained that a remote session would be the next best option. Well, as much as I trust Joe and Prevx, at that time, I had severe obsessive compulsive tendencies about my computer security and the thought of someone remotely connecting didn't fly with me...

    ...So I kinda kept declining and he didn't understand why and I explained that I didn't want someone connecting and them some of the other members got frustrated because they thought it was silly that I was being offered free assistance and rejecting it...

    But what I learned is you have to kinda find the "threshold" of when it's time to sit back and ask yourself..."Ok...what will I gain by continuing to post here publicly?" You know what I mean? It's of course WAY easier said than done, especially for a wordy person such as myself; but nevertheless it's VERY important for maintaining a good reputation on a message board.

    Believe me, I understand that it is like turning down Hagen Dass ice cream or resisting The One Ring to stop yourself from posting sometimes...but it just isn't worth it sometimes. I know because as recent as last November/December I was just as guilty as you at MS Answers (and I'm sure some of that carried over here). Now they DO have some less-than-pleasant community stars there and people that talk condescending towards newer members (won't open that can of worms now) but I was largely to blame in my reputation being not great there. You see I couldn't stop myself from expressing longly and loudly my frustration with their decisions to make super simple MSE even simpler in version 4. My long protest-like posts hopefully did have something to do with Default Actions settings being eventually restored in the MSE 4 beta, BUT, a lot of people over there see me now as a whiner. :(

    Just my two cents...I hope your issues get resolved.
     
  18. superssjdan

    superssjdan Registered Member

    Joined:
    Dec 11, 2011
    Posts:
    148
    Location:
    USA
    The only thing i can think of as to repeated infections that don't seem to go away,you could be infected with a super rare bios virus.Typically 99.99999% of users would never get infected with it unless they went looking for it.In that case i am not sure any solution would protect you.
     
  19. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    I still haven't heard back... a scan log would 100% definitively show exactly what came into your system...
     
  20. Mongol

    Mongol Registered Member

    Joined:
    Jul 24, 2004
    Posts:
    1,581
    Location:
    Houston, TX
    Yep...all talk, no action or evidence from him...o_O :cool:
     
  21. No_script

    No_script Registered Member

    Joined:
    May 12, 2012
    Posts:
    97
    Missed again SET40CF.tmp.vir, seriously wtf! I'll forward the logs,
     
    Last edited: Jun 4, 2012
  22. No_script

    No_script Registered Member

    Joined:
    May 12, 2012
    Posts:
    97
    Well..... Using a nifty little rootkit scanner I just found

    C:\windows\system32\WRusr.dll --> Suspicion for Keylogger or Trojan DLL
    C:\Windows\Panther\setup.etl >>> suspicion for Trojan Downloader.Win32.AutoIt.q


    Not sure if these are false positives, if they are not then it's trouble. I will forward the logs.
     
  23. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Wrusr.dll is a WSA component, and setup.etl is likely a kernel trace log. Set40cf.tmp.vir sounds like a temporary file or false positive, but I couldn't guess by the filename.

    And...... I still have not received any logs from you.
     
  24. No_script

    No_script Registered Member

    Joined:
    May 12, 2012
    Posts:
    97
    Well I sent them, should be there by now. Let me resend.

    BTW I suggest you disable right click shutdown, even with a capatcha a simple VBScript will crash it.
     
  25. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Still nothing, and you can disable shutdown via Basic Configuration in WSA's settings.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.