- Sep 26, 2014
- 189
Sorry, we are a bit late to update the release notes. We have just updated the release notes.
Or was APEX not supposed to work offline as well?
Without access to the big data sets stored in the cloud I'd assume APEX is less effective offline.APEX lives in both the cloud and your SecureAPlus installation so it still works while you’re offline.
You can use APEX by itself (or alongside a third-party antivirus) by turning off real-time scanning for the Universal AV and turning on Observation Mode for Application Whitelisting.Another thing I would like to set up on the "wishlist" from you guys is a stand alone APEX app.
To use as a companion to whatever solution people use out there
Without access to the big data sets stored in the cloud I'd assume APEX is less effective offline.
You can use APEX by itself (or alongside a third-party antivirus) by turning off real-time scanning for the Universal AV and turning on Observation Mode for Application Whitelisting.
I'd suggest contacting their customer support via email (secureaplus@secureage.com) and letting them know about your issue. The faster they know about it the faster it can be diagnosed and fixed.Right now it looks ok, no fault messages or anything, but the scan shows that something is not right.
Did you tick on "Remember my answer throughout the session"?I found the problem, as I wanted to test the speed of detection (Real-time protection) I left this enabled during the unpacking of the malware.
APEX did react, I told it to delete and after that no more reactions from the app.
It seem there could be a problem when you unpack to many malwares at the same time?
I think sap can test this on his side to confirm, not that this is a likely scenario to get infected but nevertheless.
BTW! Of 184 files in these packs APEX did only miss 2 samples were from yesterday and today. The 2 missed are submitted.
/W
Thank you very much for giving us more information.Yes, this is what I did and I did choose delete.
But nothing happend to the malware in the folder. They were still there.
When I did delete all files in that folder and disable real-time, unpack all the malware again and did a scan, only 2 files did remain.
Did you try to unpack a batch of malicious files when you tried?
And if you could, please disable all components of Universial AV, if this could cause this behaviour on my side?
/W
I have tried to disable all components of Universal AV, and it works fine. You can check "C:\ProgramData\SecureAge Technology\SecureAge\log\AntiVirus.log" and "C:\ProgramData\SecureAge Technology\SecureAge\log\SecureAPlus.log". The virus detection should be recorded in AntiVirus.log. If there is any error on the deletion, you may found it at the SecureAPlus.log file.Thank you very much for giving us more information.
We did unpack batch of malicious files, and all the detected files are deleted, but with Universal AV enabled.
We will check with the settings that you suggested.
I have tried to disable all components of Universal AV, and it works fine. You can check "C:\ProgramData\SecureAge Technology\SecureAge\log\AntiVirus.log" and "C:\ProgramData\SecureAge Technology\SecureAge\log\SecureAPlus.log". The virus detection should be recorded in AntiVirus.log. If there is any error on the deletion, you may found it at the SecureAPlus.log file.
Do you have other antivirus or security product running?From what I can see in the logs it says it did delete the files, but that did not happen.
I manually deleted them, maybe the files were corrupted while unpacking them?
Next time if it happened again, you may try to reboot the machine, and check whether the files are still there.I did the same test 2 days later with the same packs and this time the real-time shield deleted them as it should be.
I will write this off as corrupted files while unpacking for now, if it occurs again I will report back.
Yes, you can safely removes those files, it will create new ones. There is actually an auto archive mechanism. When the file is larger than 100 MB, it will be automatically compressed, and put into the following folder: "C:\ProgramData\SecureAge Technology\SecureAge\log\Archives"BTW! Those logfiles are very big, is it ok to delete hem from time to time, does the app create new ones?
Thank you very much for giving us more information. We will test with Comodo FW.I run SAP beside Comodo FW, that is why I run APEX only, to lift out the trash from CFW:s sandbox.
While on the subject, if you like me only run APEX, why must all the 9 processes of SAP be left running?
/W
I would love a version with Universal AV + APEX. I do not like Application Whitelisting that much. So it would be nice to just have AI and signature-based detection.Thank you very much for giving us more information. We will test with Comodo FW.
Now we also have a better understanding on why you want to run APEX only.
Currently we don't have APEX version only. Some of the processes are related to our Application Whitelisting and Universal AV, and some are shared processes. If in the future we provide APEX installation only, the number of processes running could be shrink down.