Reply to thread

Message

<blockquote data-quote="ChoiceVoice" data-source="post: 983044" data-attributes="member: 28876"><p>i&#039;d&nbsp; turn heuristics to max, instead of default (which seems to be more for complimentary AV usage) and try test again. i can&#039;t recall, i think infrared is on by default, but just incase, make sure. and check to see if anything is marked as untrusted, those have been flagged and are `sandboxed&#039; with limited functionality (until their weaker sigs catch up and delete them). you can beef up the firewall settings too to get warnings of if an untrusted process tries to access the net. because it can be used as a complimentary AV it doesn&#039;t jump on samples aggressively, but waits to after they execute and then makes a determination (which is why it doesn&#039;t test well), that way it doesn&#039;t fight with another AV. because of this, you will see infections in the process explorer etc being active . they should be controlled and watched, and later any malicious activity reversed (sometimes after days, cuz they are slower with their sigs). however, i can&#039;t recall if journaled and limited apps can access the internet. i think there is a firewall setting to turn that off, which would stop that activity. but the internet access might mean something failed to be stopped (?). if infected though, they clean your computer for free (likely not with your trial though, lol).</p></blockquote><p></p>

[QUOTE="ChoiceVoice, post: 983044, member: 28876"] i'd turn heuristics to max, instead of default (which seems to be more for complimentary AV usage) and try test again. i can't recall, i think infrared is on by default, but just incase, make sure. and check to see if anything is marked as untrusted, those have been flagged and are `sandboxed' with limited functionality (until their weaker sigs catch up and delete them). you can beef up the firewall settings too to get warnings of if an untrusted process tries to access the net. because it can be used as a complimentary AV it doesn't jump on samples aggressively, but waits to after they execute and then makes a determination (which is why it doesn't test well), that way it doesn't fight with another AV. because of this, you will see infections in the process explorer etc being active . they should be controlled and watched, and later any malicious activity reversed (sometimes after days, cuz they are slower with their sigs). however, i can't recall if journaled and limited apps can access the internet. i think there is a firewall setting to turn that off, which would stop that activity. but the internet access might mean something failed to be stopped (?). if infected though, they clean your computer for free (likely not with your trial though, lol). [/QUOTE]

Verification