Introducing, The New Prevx Edge.

Discussion in 'Prevx Releases' started by trjam, Nov 13, 2008.

Thread Status:
Not open for further replies.
  1. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,166
    Location:
    PA
    I can start the Zemana test without an alert. What settings are you using?
     
  2. Threedog

    Threedog Registered Member

    Joined:
    Mar 20, 2005
    Posts:
    1,125
    Location:
    Nova Scotia, Canada
    Beat ya by a full minute there PH. Yer not keeping up the pace.
     
  3. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Its found by the default settings - it is found by blacklisting, not by heuristics. Can you try running a scan and see if it is found? Also, does the main screen of Edge show "Status: Secure"?
     
  4. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Tsk tsk :D I had to download the leaktest and run it!! :D Fine, you win this battle...
     
  5. Threedog

    Threedog Registered Member

    Joined:
    Mar 20, 2005
    Posts:
    1,125
    Location:
    Nova Scotia, Canada
    The Zemana test is blocked here on default settings.
     
  6. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,166
    Location:
    PA
    I got an alert when I downloaded Zemana from the site, but not when I ran the program that was already on my system.
     
  7. Sportscubs1272

    Sportscubs1272 Registered Member

    Joined:
    Apr 9, 2007
    Posts:
    341
    Just installed the trial version and it flagged Vistumbler and JetAudio as rogue software. So no known conflicts with Outpost Security Suite and Threatfire?
     
  8. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    There "may" be a conflict with Threatfire, but we're still investigating it. It seems to be more related to PC Tools Firewall.

    Could you save a scan log (Tools and Settings > Save Scan Results) and send me the entries for the two files so I can correct the FPs? :)
     
  9. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Is there any chance you clicked Trust Always on the file? Clicking this will cause it to not be detected at all. Also, which program exactly was on your system? It may be a different version than the one which we have added to the blacklist.
     
  10. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,166
    Location:
    PA
    It ran a scan of my system programs at startup, but I didn't place it as trusted. If that had been an actual keylogger, would Prevx have detected the activity when it is started? I guess I can put back on PC Tools Firewall Plus for leak tests.
     
  11. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    That may not sound like a long time but when your watching ,waiting for the browser to open seems like enternity.what about IE do you experience the same.
     
  12. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Yes, if it was an actual keylogger it would have blocked it, but it is possible that there is an incompatibility on your system, causing Edge to not function properly. On Zemana.com, can you click Security Test, and then download the KeyLogger Test Program and try running that? If that runs, then it means there is something wrong with your configuration. If you want, I can remotely diagnose your computer to see what's wrong and correct any problem. Please drop me a PM with your results/decision :)
     
  13. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,166
    Location:
    PA
    Oh I just remembered - the test I'm referring to is a modified one with the digital signature removed for testing with Kaspersky. So it is not the same, but still should be detected?
     
  14. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    I just tried side-by-side with Opera and a first Edge installation and it added 3 seconds onto the start time. I have a relatively fast internet connection, but that is a very significant difference from your test. Could you give me some details on your security configuration so I can help diagnose it better?
     
  15. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Ah :) Well, the signatures we have on these leaktests are plain signatures. Doing something like removing the digital signature critically changes the characteristics of the file and is most likely the cause for the dropped detection.

    Just for sanity's sake, can you try downloading the original file to see if we still block that (just to make sure your setup is configured properly).
     
  16. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,166
    Location:
    PA
    Yep, everything works fine with the actual test, so Prevx did its job there. :thumb:
     
  17. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    No No that was not my results, I was responding to Chevez.I however am only on trial which does not scan real time am i correct?
     
  18. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Oops :) Misquoted there :)

    The trial has precisely the same system load and realtime scanning as the full version. If you want, I can get you a full trial license key which will enable the last bit of the features (malware blocking) but it is an identical load/impact as the trial version.
     
  19. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Ok, perfect :) Thanks for letting me know!
     
  20. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    We've corrected the false positives :) Please try rescanning and it will no longer detect those programs. (Like most of the false positives reported here, these were found under heuristics which were just a bit too touchy.)
     
  21. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    Yes please thank you kindly.
     
  22. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    Got the license thank you.Just a few notations here I rebooted and there is no system tray,However processes prevx exe is running.I did another scan and cam up with this which is part of FirstDefense PC Recue.
     

    Attached Files:

  23. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    This could be FD-ISR hiding part of itself from Edge. We can prevent this from happening if you click Tools and Settings > Save Scan Results, I can mark it as a trusted program globally.

    Also, can you see if there are two prevx.exe processes running? There should be one under SYSTEM and one under your user account. If not, please let me know :)
     
  24. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    Ok All I see is under apllication running under processes 1 exe and nothing in services Err.o_O
     
  25. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Ok, this is definitely indicative of some incompatibility. I think NOD32 does have a false positive on us, but I'm not sure. Are you using any other security software than you currently have in your signature? We've seen similar problems from other users but so far there has been no readily reproducible reason as to why its happening.

    Please let us know if you have any ideas or if you'd be willing to have one of our engineers analyze your system to help solve the potential incompatibility.

    Thank you for your patience :)
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.