Scanning only when reading/writing/installing/opening files

Discussion in 'Prevx Releases' started by raven211, Apr 5, 2010.

Thread Status:
Not open for further replies.
  1. raven211

    raven211 Registered Member

    Joined:
    May 4, 2005
    Posts:
    2,567
    Title says it. Are there already options for this, or is it possible that you'll provide that in the future?
     
  2. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    In realtime, Prevx scans files/modules as they try and load or execute. We don't feel that scanning on write is the most logical time to scan being that it wastes resources and will still require a duplicate rescan when the file attempts to load (as new signatures may have been created).

    That being said, Prevx does monitor file changes/reads in order to build a behavioral profile so while we don't necessarily scan files every time they're written, we can potentially add this function in the future (and Prevx 4.0 will have something more along those lines, although it is still some ways away :))
     
  3. raven211

    raven211 Registered Member

    Joined:
    May 4, 2005
    Posts:
    2,567
    That was a good explanation. To be honest though, this question and feature request was more of a performance-related request. :D Giving the users options for this would make Prevx more customizable performance wise as well IMHO.
     
  4. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Definitely, and Prevx 4.0 should have this level of customization (albeit implemented in a different way but I'll stop being cruel with mini-leaks until we're further along with developing it :D)
     
  5. Konata Izumi

    Konata Izumi Registered Member

    Joined:
    Nov 23, 2008
    Posts:
    1,544
    its okay to have scan on-write but please don't make it ON by default but only an option.

    PLEASE!!! :D
     
Thread Status:
Not open for further replies.