In the settings for Prevx 3 "Enhanced rootkit detection" always becomes unchecked. I posted to Prevx support but haven't received an answer, yet. I found an earlier post here with the following answer: "This is a known graphical bug in Prevx 3 but it is not actually disabling the detection so you're still safe" Could somebody clear that up a bit. How are you actually to know whether the option is enabled or disabled?
You can recheck it once yourself and it will remain enabled unless you manually uncheck it. Hope that helps!