FAQ

Generally, setting on Aggressive, WiseVector StopX can detect more suspicious files during static scanning, but there might be more false positives. Therefore setting on Normal or High is appropriate for most users. The settings will be effective when you perform static scanning only.

1、What is Heur.ML.***？ Malware being detected by our AI-based static analysis engine is named Heur.ML.***.

2、What is WIBD.***?  WIBD means WiseVector Intelligence Behavior Detection. Malware being detected by our advanced behavior detection is named WIBD.***.

3、What is MEMRAY.***？  “MEMRAY” means “Memory Ray”. Malware being detected by our memory detection is named MEMRAY.***. For example, MEMRAY.Malcode.** means there is malicious code in the process, our AI has detected it; MEMRAY.Potential RAT.** means there is malicious code in the process of potential remote control Trojan. If you encounter this situation please be vigilant, you may suffer property damage.

4、What is InsTracer:***? “InsTracer” means “Instruction Tracer”. Malware being detected by our Instruction Tracer is named InsTracer:***. Instruction Tracer makes identifying the original source of the malicious behavior in applications. It can effectively detect hidden threats such as DLL Side-Loading, thread hijacking and etc. At the same time, it can also detect stealth attacks in post-injection phase.

5、What is Ransomware.***？ Ransomware is a type of malware that prevents or limits users from accessing their system, either by locking the system’s screen or by locking the users’ files unless a ransom is paid. More modern ransomware families, collectively categorized as crypto-ransomware, encrypt certain file types on infected systems and forces users to pay the ransom through certain online payment methods to get a decrypt key.

6、What is Trojan.***？ Trojan is a type of malware that is often disguised as legitimate software. Trojans can be employed by cyber-thieves and hackers trying to gain access to users’ systems. Users are typically tricked by some form of social engineering into loading and executing Trojans on their systems.

7、What is PUP. ***？A PUP (potentially unwanted program) is a program that may be unwanted, despite the possibility that users consented to download it. PUPs include spyware, adware, and dialers, and are often downloaded in conjunction with a program that the user wants.

When being disconnected from network, WiseVector StopX will not be able to get updates in time, but both real-time protection and behavior detection can still work well, since they are local based.

Yes, they can work efficiently, because Real-time Protection and Advanced Protection are two parts working respectively. Advanced Protection includes Ransomware Detection, Instruction Tracer, and Memory Protection.

Files being smaller than 20M can be uploaded directly through WiseVector StopX by clicking “Upload File”. If the file is larger than 20M, please send the suspected false positive or missed malware sample to: virus@wisevector.com. You will get our reply once the analysis is completed.

That’s because you have installed an old version of Win7 without installing any patches.
Win7 without KB3033929 patch cannot recognize the dual code signing of WiseVector StopX’s kernel mode driver. Please visit https://www.microsoft.com/en-us/download/details.aspx?id=46148 to download the patch and install it. After the computer is restarted, the code signing can be recognized and the Advanced Protection can be started.

Document Protection is used to prevent users from ransomware. When Document Protection is enabled, you can add files or folders which needs particular protection, after that only trusted programs can modify the files and folders being protected. WiseVector StopX will automatically add trusted applications（ for example, explorer.exe and dllhost.exe ) which are necessary for modifying these files and folders. You can also add trusted applications manually.

The purpose of Ransomware Rollback is to backup files changes by suspicious programs in real time and revert changes caused by ransomware. The backup folder will be emptied each time WiseVector StopX starts to free up hard drive space. This feature has been designed to remain lightweight and users can hardly notice any performance degradation.