Submit a File

Discussion in 'Prevx Betas' started by Triple Helix, Aug 12, 2011.

Thread Status:
Not open for further replies.
  1. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,012
    Location:
    Ontario, Canada
    Does Submit a file work at this point?

    TH

    Capture12-08-2011-3.42.54 PM.jpg
     
  2. De Hollander

    De Hollander Registered Member

    Joined:
    Sep 10, 2005
    Posts:
    718
    Location:
    Windmills and cows
    Prompt with a valid file....and send in the background....I hope;) :D
     
  3. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,012
    Location:
    Ontario, Canada
    I hope so to but want to know for sure as I did ask during the closed beta to support but lost the conversation before I got an answer!

    TH
     
  4. Sherlock_Holmes

    Sherlock_Holmes Registered Member

    Joined:
    Mar 21, 2010
    Posts:
    1,449
    Location:
    Mumbai
    It didnt work till now ? :p i must have sent 3 - 4 files by now !
     
  5. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    These files are being sent but not processed at the moment until we finish some additional components within our support interfaces. In the meantime, you may want to send files to report@prevxresearch.com or speak to our support team to varrange upload.

    For what it's worth, any time you allow/deny/block/override a file within the UI, that information is automatically uploaded to our team so you won't need to upload it separately unless you want a human response.
     
  6. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,012
    Location:
    Ontario, Canada
    I tried to send files in a Password Protected RAR file to report@prevxresearch.com but it keeps getting bounced back! So I have been sending the VT results until it's fixed!

    TH
     
  7. Sherlock_Holmes

    Sherlock_Holmes Registered Member

    Joined:
    Mar 21, 2010
    Posts:
    1,449
    Location:
    Mumbai
    Can we get a notification from wsa when it flags a file as allow/deny/monitor ?
     
  8. subhrobhandari

    subhrobhandari Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    708
    IF I remember correctly it accepts Zip, not RAR.
     
  9. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,012
    Location:
    Ontario, Canada
  10. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    4,953
    Location:
    USA
    I have a program that I purchased about 3 years ago which I believe has a trojan in it. My system is showing all kinds of odd behavior after installing it. I believe it is creating lots of other files with strange nonsense names. If I submit it can I get some feedback about Webroots findings?
     
  11. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,012
    Location:
    Ontario, Canada
    Are you still using WSA? If so send in a scan log to report@prevxresearch.com if not upload to VT and tell us how many AV's detect it!

    TH
     
  12. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    idk how well ur system of it auto submitting is since ive had to back in the closed beta and now whitelist these 2 files which are part of my system builders drivers and software which i know are legitimate and clean yet still nothing been done to solve the FP. lol ive sent the files in maybe 3 times now since closed beta and i thought they were actually going thru this entire time thru the UI submission system. Thats probly something that shuldve been stated from the start so people didnt really waste their time...
     
  13. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    The UI submission and automatic overriding is not fully implemented through to our support team yet - if you have any delay, just write into our tech support inbox to get them to fix the FPs.
     
  14. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,012
    Location:
    Ontario, Canada
  15. xpo172

    xpo172 Registered Member

    Joined:
    Aug 19, 2011
    Posts:
    2
    Where is this done in the UI? Quarantine->Configure->Add File ??
     
  16. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
  17. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Yes, that's correct.
     
  18. shadek

    shadek Registered Member

    Joined:
    Feb 26, 2008
    Posts:
    2,363
    Location:
    Sweden
    How does the staff know I'm not reporting samples which are actually benign? Wouldn't you need the samples to see if I'm actually right? If I may ask... :)
    I process tons of malware each day, and it would be easy for me to just send the MD5s. :)
     
    Last edited: Aug 25, 2011
  19. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    We look them up in our database (the MD5 is one of the hashes we use). Samples are helpful but just the MD5 still gets us the link to all of the behaviors we've seen.
     
  20. shadek

    shadek Registered Member

    Joined:
    Feb 26, 2008
    Posts:
    2,363
    Location:
    Sweden
    Cool!
     
Thread Status:
Not open for further replies.