SafeOnline vs Leaktests

Discussion in 'Prevx Releases' started by PrevxHelp, Mar 9, 2010.

Thread Status:
Not open for further replies.
  1. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Hi pling_man,
    I'm not sure what the issue would be - we definitely pass all of the AKLT tests on a normal PC on .85 and .91. Could you try uninstalling, then rebooting, then reinstalling? Also, do you have a SafeOnline license key or are you using the Facebook evaluation version?

    We do have an incompatibility with Zemana Antilogger because both products try and do very similar things on the system so we recommend not using both at once, although they will coexist somewhat peacefully, albeit with lowered protection for screen grabbers.

    Let me know what you find - not really sure what would be causing this except for some incompatibility or a broken installation (maybe from the reimaging if it was just using System Restore?)
     
  2. pling_man

    pling_man Registered Member

    Joined:
    Feb 11, 2010
    Posts:
    599
    Location:
    UK
    I re-imaged using Acronis True Image.

    I have uninstalled, rebooted, re-installed PrevX 3.0 several times. I did note there was a small issue during the uninstall that Kaspersky blocking something so I have been uninstalling with KIS disabled. (I will try and be more specific about this KIS issue later).

    I will have another look at the AKLT tests this morning and report what I find here.

    Can you also confirm that GetKeyState and GetAsyncKeyState blocks the typing of numbers 1234 etc. ?
     
    Last edited: Mar 16, 2010
  3. pling_man

    pling_man Registered Member

    Joined:
    Feb 11, 2010
    Posts:
    599
    Location:
    UK
    I have managed to fix this now :thumb: so all the AKLT methods are blocked finally :) . There was a driver file left over from an unsuccessful attempt to install QFX KeyScrambler. I removed this and removed a few left over entries relating to KeyScrambler in my registry. I also removed/re-installed PrevX (3.0.5.91).

    The only issues I have found are:

    (1) Certain key presses (/ \ # ; .) are not blocked when the GetKeyState and GetAsyncKeyState methods are used. I don't have these characters in any of the data I need to protect :D so I'm not too worried about this.

    (2) When I uninstall PrevX 3.0, KIS 2010 blocks something it thinks is a keylogger (it blocks this: \DRIVER\PXBF). I can get round this by disabling KIS for the uninstall.

    My brief "flirtation" with Kemana AntiLogger and QFX KeyScrambler was borne out of a desire to put some keylogging protection in place when I am not using my browser.

    If anyone can confirm that SafeOnline is compatible with KeyScrambler I would like to give KeyScrambler another try. (I did find an old post in this forum by PrevxHelp saying that KeyScrambler could be used to add an extra layer of protection to SafeOnline - so confirmation this is still the case will be nice).

    I will be creating a new backup image with Acronis TrueImage before I try KeyScrambler again though. :D
     
  4. pling_man

    pling_man Registered Member

    Joined:
    Feb 11, 2010
    Posts:
    599
    Location:
    UK
    Lol, I'm a paying customer, licence for PrevX 3.0, real-time protection and SafeOnline. :D
     
  5. Hugger

    Hugger Registered Member

    Joined:
    Oct 27, 2007
    Posts:
    1,003
    Location:
    Hackensack, USA
    I use SOL and Key Scrambler together with no problems on Windows 7 Pro x64.
     
  6. pling_man

    pling_man Registered Member

    Joined:
    Feb 11, 2010
    Posts:
    599
    Location:
    UK
    Thanks Hugger.

    I have now managed to install KeyScrambler on my 32 bit Vista laptop.

    It seems to be largely compatible with PrevX SafeOnline. :)

    The only issue I can think of is that the protection of confidential data in SafeOnline doesn't work with KeyScrambler. SafeOnline uses keylogging to determine what the user is typing, but only sees encrypted text if KeyScrambler is running so an alert is not triggered if confidential data is entered into the wrong website. So it seems, I can have an extra layer of keylogging protection (KeyScrambler) but must forego a layer of phishing protection (SafeOnline confidential data on advanced tab).

    This could be fixed if the approach was changed to read characters in the output buffer of the active web page text box. This would also ensure that
    protection was enabled when data is copied/pasted into a text box (something they are working on - I hope :D ).
     
    Last edited: Mar 16, 2010
  7. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,979
    @PrevxHelp

    Some more potential tests etc for you, to add to the ones i listed in post 10


    keylogtest

    http://www.pctools.com/forum/showthread.php?t=49595

    Keylogtest

    http://www.testmypcsecurity.com/securitytests/keylogtest.html

    DLLInject

    http://research.eeye.com/html/tools/RT20060801-6.html

    Duster

    http://research.eeye.com/html/tools/RT20060801-5.html

    DLL Control

    http://virusinfo.info/soft/DllCtrl.zip

    RemoteDLL

    FireMaster

    FirePassword

    FirePasswordViewer

    IEPasswordDecryptor

    ChromePasswordDecryptor

    GooglePasswordDecryptor


    http://securityxploded.com/remotedll.php


    Other stuff you "might" find of interest etc ?


    TOCTOU with NT System Service Hooking Bug Demo

    http://www.securesize.com/Resources/files/toctou.shtml

    HookLib v1.0

    http://hades.ds1.agh.edu.pl/~woolf/www/index.php?content=texts

    WinIo

    StickyApp32


    http://internals.com/utilities_main.htm

    Test Case Manager

    http://www.wintestgear.com/products/retired/TCM.html
     
  8. bierni86

    bierni86 Registered Member

    Joined:
    Oct 13, 2009
    Posts:
    17
  9. GES/POR

    GES/POR Registered Member

    Joined:
    Nov 26, 2006
    Posts:
    1,490
    Location:
    Armacham
    Outdated Test though, posted on Fri Nov 06, 2009
     
  10. bierni86

    bierni86 Registered Member

    Joined:
    Oct 13, 2009
    Posts:
    17
    it is not so old - I'm not sure if you can improve a program in 4 months to be one of the best from one of the worst.
     
  11. vojta

    vojta Registered Member

    Joined:
    Feb 26, 2010
    Posts:
    830
    More or less everybody here knows what Prevx is and what it's not, and we all were aware of that test and others similar.

    Prevex doesn't focus on static detections. If you want something that looks at a file standing alone in a folder doing nothing and tells you "it's a virus" without testing it's behavior, you need another app. In those type of tests, Prevx fights with it's hands tied behind it's back.
     
  12. bierni86

    bierni86 Registered Member

    Joined:
    Oct 13, 2009
    Posts:
    17
    I don't say that prevx is a shi* - I use it myself but i could be better in static detections - although it is a powerful software.

    one question - i would like to format my HDD and install all from the beginning - do I have do reset or renew my prevx key - or should I just install prevx and enter my old key?
     
  13. kasperking

    kasperking Registered Member

    Joined:
    Nov 21, 2008
    Posts:
    406
    reset your key from my prevx account if you have one or pm joe aka prevxhelp .
    https://my.prevx.com/
     
  14. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,161
    Location:
    UK / Pakistan
    I installed EliteKeylogger, rebooted and then installed Prevx Safe Online. EliteKeyLogger bypasses Prevx and can record password keystrokes on https sites.

    Also a scan by Prevx is not able to detect hidden files of EliteKeyLogger.
     
  15. bierni86

    bierni86 Registered Member

    Joined:
    Oct 13, 2009
    Posts:
    17
    but as you might have noticed - prevex is not stricte antikeylogger software and for that you should rather use zemana antilogger or a powerful spyshelter antikeylogger software
     
  16. Searching_ _ _

    Searching_ _ _ Registered Member

    Joined:
    Jan 2, 2008
    Posts:
    1,988
    Location:
    iAnywhere
    I had a similar issue with malware installed, Prevx 3.0 could not detect.
    It was kicka** on detection of the download file though.
    In my experience Prevx is top notch at prevention, not so good at detecting an infected system.

    But the support of Prevx is Uber Fantastic. :thumb:

    And for SafeOnline I have not tried it out so can't say anything about it.
     
  17. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    SafeOnline should fully prevent EliteKeylogger and SafeOnline will actually block EliteKeylogger on all websites/programs, not just HTTPS websites, as it removes it system-wide. The last version I tested a couple weeks ago was v4.3.0.0 - could you let me know what version of SafeOnline you're using and what OS you're on?

    Also, it looks like you are using KeyScrambler as well? Is that on the same image? SafeOnline + KeyScrambler are somewhat incompatible with each other just because they try and do the same thing - can you try disabling Prevx, uninstalling KeyScrambler, rebooting, and then re-enabling Prevx and see if that corrects the protection?

    Let me know! :)
     
  18. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    While Prevx isn't just an antikeylogger, SafeOnline includes extremely powerful antikeylogger components (see: http://malwareresearchgroup.com/?page_id=2)
     
  19. Dark Star 72

    Dark Star 72 Registered Member

    Joined:
    May 27, 2007
    Posts:
    771
    Just had a little play with AntiKeylogger, downloaded a new version that went up yesterday.
    Removed Prevx from my system, downloaded and installed AntiKeylogger and had a play with it to confirm that it was working, it was.
    Installed Prevx and it detected AntiKeylogger in 'hidden mode' during the installation scan, Prevx cleaned it up and rebooted, not a trace left on the system.
    Well impressed :thumb:
     
  20. bierni86

    bierni86 Registered Member

    Joined:
    Oct 13, 2009
    Posts:
    17
    isn't just an antikeylogger this is exactly what I ment.

    btw imho it would be great when prevx was compatible with keyscrambler - dream team for online banking
     
  21. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Prevx SafeOnline by itself will provide all of the protection that KeyScrambler provides for online banking sessions - it just does so in a different way, making keystrokes completely invisible rather than just encrypting them, providing an additional level of security.

    We are partially but not fully compatible with KeyScrambler just because we already do everything they do for banking security :)
     
  22. Scoobs72

    Scoobs72 Registered Member

    Joined:
    Jul 16, 2007
    Posts:
    1,113
    Location:
    Sofa (left side)


    If you use SafeOnline you don't need anything else to protect your online banking. Keyscrambler becomes irrelevant.
     
  23. SafetyFirst

    SafetyFirst Registered Member

    Joined:
    Jan 26, 2007
    Posts:
    462
    Any idea why SafeOnline detects xBBrowser as malware?

    I asked and this is what the xB developer said.
     
  24. johncage

    johncage Registered Member

    Joined:
    Aug 11, 2008
    Posts:
    70
    but KeyScrambler support East Asian Language Input protection that Prevx SafeOnline doesn't. hope Prevx team will implement and support it.
     
  25. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,037
    Location:
    Ontario, Canada
    Is your language on this page http://info.prevx.com/downloadcsi.asp and if not what language Version are you using? Any extra info would be appreciated!

    TH
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.