Weather Pulse

Discussion in 'Prevx Releases' started by Rabiddog, Aug 28, 2009.

Thread Status:
Not open for further replies.
  1. Rabiddog

    Rabiddog Guest

    How come all of a sudden Prevx is picking up on "Weather Pulse"
    Had it installed before Prevx.
    Changed the default settings 3 day ago, Why so long and now?
    Seem's like Prevx is too nosy.
    When I have to send in the log's of every program installed and just not the FP.
    Call me paranoid, that's why I joined this forum.
     
    Last edited by a moderator: Aug 28, 2009
  2. Rabiddog

    Rabiddog Guest

    Good work Prevx!

    I found some information on this;

    This virus is actually several months old and all AV companies were blind. Why?

    Till now, file infectors (like Virut, Sality, Parite, …) have modified executable files on the victim’s machine. They appended their body and changed the entry point – “thats all”. Win32:Induc is different. The infected file looks for the Borland Delphi compiler on the victim’s machine. If Delphi is found, the source file SysConst.pas is replaced by a malicious one and is compiled into SysConst.dcu. Each new build (using SysConst.dcu – practically all) of any Delphi project on an infected machine produces an infected file. This malware is produced by “white” programmers without their permission. Many files are digitally signed and distributed globally through download servers.

    A few statistics: A few hours after VPS update 090818-0 (contains detection Win32:Induc) we received hundreds of suspected “false positive alerts” – all of them were infected. In the last 12 hours (since VPS was released) avast! has found ~200 000 infected files.
     
  3. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Indeed :doubt: Induc is a new, widely spread file infector which is infecting the build process of many software companies that use the Delphi programming language.

    Weather Pulse is one of the affected programs and this shows that software can't be trusted just because it is digitally signed or written by a "trusted" vendor.

    If you do see any cases of Prevx being too "noisy", please let us know but I believe this detection is correct.
     
  4. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,768
    Location:
    Texas
  5. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    The Induc infected version which we and a number of other AVs are flagging was first seen within the Prevx community on July 10th. I suspect they've cleaned the new version now but anything earlier than 2.20 will have the "false positive" (not really a false positive :))

    It would definitely be good to uninstall and download the newest from the link you posted.
     
  6. Rabiddog

    Rabiddog Guest

    I was saying noisy because sending it a report of everything running on the computer. Why not just the problem?
     
  7. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Prevx scans your entire system to find possible threats by sending data about files and their behavior into our centralized servers which then automatically detect new threats. It needs to analyze everything on your PC so that it can be sure that it will find any active threats.
     
  8. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,151
    Location:
    PA
    So the WeatherPulse latest version is clean? I don't know if I can trust WeatherPulse, since on their download page they passed it off as a "false positive." What does PrevxHelp think?
     
  9. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Their latest version is clear of Induc but I also dislike their blatant dishonesty as regarding it as a false positive but quite a few other weather programs have even worse spyware in them :doubt:

    Personally, I don't trust any of them - I tend to just look out the window to see what weather it is now :D Any further in the future than right now, the weather predictors are almost always wrong so I try not to bother :D
     
  10. Habakuck

    Habakuck Registered Member

    Joined:
    May 24, 2009
    Posts:
    544
    you are so right! I am a sailor and i only trust my personal weather forecast. :)
     
  11. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,768
    Location:
    Texas
    It pays to be informed about potential weather events for your own safety.
    Can you name names so we can avoid such programs?
     
  12. mvdu

    mvdu Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    1,151
    Location:
    PA
    LOL - I know what you mean. But as I currently use WeatherPulse, would you advise I drop it due to the Induc dishonesty?

    I'd also like to know the worse programs.
     
  13. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Probably not - I think they're clean now and while I don't appreciate the dishonesty, they do have a good product.

    WeatherBug is the worst example I've seen. They have cleaned up their act recently but I still come across people whose PCs have WeatherBug installations from ~2005 that get frequent popups and random annoyances they thought were because of a virus infection when they're actually caused just by the WeatherBug.

    A bit before that was WeatherCast, and then FreshWeather around '07...

    I guess I may just have a cold shoulder when it comes to weather applications. Now I just use the weather gadget that comes by default with Windows 7 :)
     
  14. Page42

    Page42 Registered Member

    Joined:
    Jun 18, 2007
    Posts:
    5,829
    Location:
    Last Breath Farm
    weather.com is a favorite of mine. It is surprisingly accurate, even with their 10 day forecast. If I had to pin a number on it, I'd say their forecasts are correct about 75% of the time. I will even say I rely upon their forecasts. :)
     
  15. Triple Helix

    Triple Helix Webroot Product Advisor

    Joined:
    Nov 20, 2004
    Posts:
    12,012
    Location:
    Ontario, Canada
  16. Rabiddog

    Rabiddog Guest

    Well I got rid of Weather Pluse and use Weather1 now. Nice program. Paid for, but it's clean.
    I guess, you get what you pay for.
     
Thread Status:
Not open for further replies.