Detection overrides

I have a various nasties, in several locations, that Prevx correctly detects When i click on them to remove future detection, i get prompted for file/folder location





Prevx already knows where these are, so the prompt for location shouldn't be required i would have thought ?

 

Hi CloneRanger,

it seems to me that the suspicious application created some temporary files that were flagged malicious by PrevX and that didn't exist anymore when you tried to flag them as false positives.

Regards,

mHazweiO

 

@mHazweiO

Hi

These apps were NOT running, just static files in folders, so no tmp etc.

I wasn't trying to flag them as false positives, as they are not FP's because thay are REAL nasties for tests etc, but instead exclude them from future detection.

Thanks for trying to help

 

Just add the Folder to the Detection Overrides to stop detection! As I do with my Nasties Folder. And if I remember correctly you are using the Facebook version maybe it's not possible to add to Detection Overrides? Joe will have to let us know!

TH

 

@Triple Helix

Hi, Dan the Man

I have The point i'm making is,

Once i've clicked on the highlighted entry, as i did.

Good memory

It is, i have

 

That is to be expected to confirm that you want to Add to Overrides as we are not novice users but for a novice it's just to make sure that they want to that as it says in the window Use this Feature with Caution! And that's great that the Facebook version you can add files and folders to the Detection Overrides!

TH

 

We still do ask the user for input to choose the folder. Any amount of automation on this end generally results in user confusion unfortunately and we try to dissuade users from accidentally turning off Prevx's protection by adding overrides

 

@Triple Helix

The thing is doesn't ask to confirm just asks where, when it already knows If it went straight to the file/folder and then asked to confirm it would be a Lot better, and Quicker, than having to scroll etc through stuff to get there

Isn't it just

@PrevxHelp

I understand your caution but please see above re a Lot better, and Quicker etc