Introducing, The New Prevx Edge.

Hello,
PXPROT.SYS is a legitimate component of Edge - its self protection (it got missed in the whitelisting procedure in the latest beta release).

However, can you send me a scan log so I can fix the Kaspersky FPs?

 

We are aware of this issue and will be correcting it in the next beta Thank you for the report!

 

Another couple of problems, this time with the password protection.
Clicked on the Edge icon to put it in 'Install Mode' and got a pop-up window requesting my password. Very good but I cannot type / input the password, I cannot find any way to actually get the password or anything else I type to come up in that window If I place the cursor in the bar where the password should appear as I type it, and then left click to get the flashing bar (senior moment, cannot remember what it's called ) in there to start typing nothing happens.
As I had Edge password protected I decided to see if it would take the password when I tried to uninstall it. Control panel > add / remove > Remove > uninstalled no problem. Didn't ask for my password at all!
Surely there's no point in password protecting to stop anyone changing the settings if they can simply uninstall it

 

Hello,
What you are reporting is definitely a bug It will be fixed in the next beta release.

As for uninstalling - we're now limiting uninstallation when password protected to only administrator users on the PC so that should get around the issues and not prevent someone from ever uninstalling Edge

 

Okay, yeah, I think I recall Vista being able to report all the software that's active, while XP will then say something in the lines of "one or more antivirus software..." - which doesn't give me too much clue. It's been a while since running Vista by now... Seems like Prevx is not registering itself here on my XP system where I already have other software in the AV-category, as it doesn't say something like what's in my quote. Is this intentional by your program, or should it still register itself?

 

Edge should still register itself alongside other AVs on XP. We've seen no problems with this but XP may decide which one to report on its own and its hard to control exactly which that is. As for Vista - I'm not even sure where we have problems anymore as I'm running Vista SP1 x64 and Edge is reported as "up to date and virus scanning is on".....

 

Joe,
Any ETA for the next Beta

 

Quite soon AFAICT I'll let you all know as soon as its released

 

Well, is it registering itself in the AS section too for you?

I can confirm that Prevx registering itself here on XP is NOT the case. I've confirmed what I've experienced as message from SC when two applications are registered at the same time by temporarily enabling TF's registration. The first screenshot shows SC and TF with its option enabled while the second is SC with NIS09 registrated alone - Prevx is not a part of it, and this is even confirmed with the latest 244 build.

 

Aha, I've reproduced the issue with registering as an antispyware product on Vista SP1. This fix won't make it into the next beta (due out in ~10 minutes ) but it will come into the next one.

As for XP, it works fine as far as we've seen but we're going to look deeper now that we've definitely seen an issue with Vista SP1 antispyware.

 

Waaah, it doesn't work for me! Keep up the good work.

 

I like this one even if I probably know why that is.

 

Yes, we haven't whitelisted our build yet It isn't done automatically for the beta builds

 

Just curious... when Edge tells me "Attention - Infections have been blocked" and gets all red - what's the user supposed to do? Even I dunno what to do!

 

I also noticed that atleast the beta doesn't take note up to the right of the main-window where it says "As of today, Edge has cleaned X infections", of infections blocked/"cleaned" automatically (through detection override). Is this intentional?

 

When checking the checkbox for creating a desktop shortcut, but click Back and not Save Changes - it'll save the checkbox-status, either if it's unchecked or checked, but won't take action like creating a shortcut when there isn't any. Still seems like odd behaviour to me...

Speaking of which... when could we see the fix for clicking the Back-button saving changes in the Protection Settings section (that's atleast the only section I know about where this happens...)?

 

Hello,
If you've come to the "Infections have been blocked" screen and want to clear off that status, you should click Scan Now and run a scan. This would generally happen only if another AV is locking a file while Edge tries to clean it or if the file is caught mid-download and can't be removed right away (or if Automatically remove blocked files is unchecked of course ). That status indicates that an infection has been blocked but the file may still exist so the system isn't completely secure yet (the threat was averted but not eliminated).

The issue with the back button saving changes in Protection Settings will be fixed in the next release, and we'll also reset the checkbox for creating a desktop shortcut.

The count of infections cleaned "should" be incrementing as you block them in realtime but based on the fact that you encountered the "Infections have been blocked" screen, is "Automatically remove blocked files" turned off?

 

OK; now what? I finally ran a full scan of C, and got the attached infection alerts. I do have the Intel Corporation; Intel� Graphics Media Accelerator Driver for mobile installed, so would think I should treat this as a false positive and go to Detection Overrides and override them for detection. But these are the first infection messages I have seen, so I thought I would also ask here. Thanks; Ed.

 

Sounds like a false positive - but I don't see an attached message Could you PM me the log or just the entries?

 

OK; now it shows up. I double clicked the entries, and have the option to keep detecting, block, or trust (which I presume means don't tell me about it again).

 

Nope, I've since our discussion of "Automatically remove blocked files" enabled it. I don't remember exactly, and wish I was, about what happened, but I think it was when I first was prompted about it. If I recall correctly, I tested the function that clicking the cross of the prompt should also result in cleaning the infection to be average Joe proof. Yet, maybe this actually wasn't functioning correctly, so that Prevx Edge either didn't even block it, or didn't remove the detection when I clicked the cross - resulting in the Attention-status where I'm supposed to run a scan to verify.

Note that this was the detection of build 246, so maybe this is not an issue in that build - who knows. Could you test what happens for you when a detection is occuring, resulting in a prompt, and you click the cross where it's supposed to still clean the file - cause as I said, I don't remember why this was happening.

 

Ah ok, I'm still going to need the scan log itself - can you save one from Tools and Settings > Save Scan Results and then PM it to me? From that I'll be able to get to what signature/heuristic is causing the FPs

 

Ah that explains it right there If you hit the X it will not clean the file - the file would have been blocked but the user didn't say 'Block' so we don't remove the file.

This way, if a user accidentally closes the prompt, we won't remove files on them - we will still prevent them from loading but we won't remove them (hence why you received the warning about infections being identified )

I believe this explains the expected behavior, however I could be wrong - let me know if this sounds partially sane to you

 

Log is too long to PM here, since it is a full scan of c://. Where to send it? Or do you just want the top two log lines showing the cloaked malware?

 

That does make sense, since Edge then found the new beta as being a threat, but it was only blocked, not removed.