VoodooShield/Cyberlock

Discussion in 'other anti-malware software' started by CloneRanger, Dec 7, 2011.

  1. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    6,219
    Location:
    USA
    Just decided to test drive VoodooShield, but unfortunately without success. I was able to install v2.30 in a Windows XP SP3 VM, but after rebooting I got an error message saying that VoodooShield could not connect with its service. Rebooting, uninstalling/reinstalling = no difference. I had to get into SAFE mode to uninstall. Is running in an XP virtual machine not supported? TIA
     
  2. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    Try with the latest beta build.
     
  3. Baldrick

    Baldrick Registered Member

    Joined:
    May 11, 2002
    Posts:
    2,675
    Location:
    South Wales, UK
    Sure...understand that...but I still think that it is fine where it is.
     
  4. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    6,219
    Location:
    USA
    So are you saying that VS does work OK in an XP VM?
     
  5. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    No, I'm saying "Try with the latest beta build 2.31m.". ;)
     
  6. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    6,219
    Location:
    USA
    I'd rather have confirmation first that it is a supported configuration. Some security apps won't run in virtual machines.
     
  7. smith2006

    smith2006 Registered Member

    Joined:
    Mar 28, 2006
    Posts:
    808
    Thank you, running the latest 2.31m now. :)

    Under Whitelist, is it possible to add a feature to remove non-existent rules (uninstalled programs etc)?
     
  8. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Cool, thank you for your input and help! I agree, there are not too many more features we need to add, but then again, I thought that 2 years ago ;). But for now I am going to stop adding features for a couple of weeks or months until 100% of the bugs are worked out. I keep adding new features, and whenever new features are added, bugs are introduced. I did add one last feature that will be included in the next release. I added the parent process feature to the program files and select windows folders that we talked about. It is enabled and disabled with the original settings in Settings / Basic.
     
  9. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    6,219
    Location:
    USA
    Turned out to be a conflict with the latest version of Avast Free AV. I removed Avast and VS is working OK. Is this a known issue or a one off problem? Meanwhile VS is an interesting app. I need to take some time and familiarize myself with it.

    Can someone recommend a free AV that gets along with VS?
     
  10. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Cool, thank you, I received your email and everything I need.
     
  11. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Hmmmm, I can change this if we think we should. Basically how it works now is that if another windows requests "TopMost", then VS will hide behind it, assuming that the "Keep the desktop shield gadget always on top of other windows" option is unchecked. And if that option is checked, then VS checks every .5 seconds if another window has taken over the TopMost status, and then requests to be TopMost once again. The thing is, the way it is now, if VS is TopMost and nothing else requests TopMost, VS will stay on top until something actually requests TopMost. So we can tweak this a little and make it so VS would kinda hide, even if nothing else requests TopMost, but honestly, I really do not think you guys would like it at all. I can try it and see, and if there is a chance that I think you guys will like it, I will post a version with it like that. Thank you!
     
  12. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Hmmm, that is the very first time I have EVER seen that. Basically, there are a couple of registry entries that register the appcertdll for process creation. A while back, some virus authors thought it would be cool to use the appcertdll method from Microsoft to create some viruses. So while researching this method, we discovered that some security software can flag these reg entries as malicious and remove them. So each time VS starts, it checks to make sure these reg entries are there, otherwise, VS would run and not block anything ;). That is, it would appear that it is running, but the appcertdll would not be working, so VS would not be doing its job and blocking stuff, even though it appeared that it was. So that is what this message is... when VS detects that these reg entries are missing, you will see this alert and VS will add the reg entries automatically, but you have to reboot your computer for it to start the appcertdll. If this continues to happen, we will have to figure out what is removing our 2 reg entries. I would not worry about it for now though, but if you see this message again, please let me know! Thank you!
     
  13. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Yeah, probably so, but not for the free version, right? ;).
     
  14. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Hey Gordon, cool, thank you for letting me know! Actually, the button hides when the count is 0. I can disable the button when the count is 0 so it is greyed out, or I can show a message that says "The count is already 0.". Any of these are super easy to do, which one do you think is best? We could also just make the button do nothing if the user clicks on it when the count is already 0.
     
  15. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Cool! Also, what a lot of users might want to do is leave VS in training for an hour or so, then change to smart mode for a week or so, then change to always on. Kind of like a 3 step thing. Really, it is up to the user. I prefer smart mode, but some people prefer always on.
     
  16. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Yeah, we could, but then again, there is already a button to our website on the register page ;). Gotcha there ;). Hehehe. Really I am up for anything, so whatever everyone things is cool with me.
     
  17. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Yeah, it will. I think we already know what we are going to about the KMD, but there are a lot of things that we have to figure out first. WildByDesign introduced me to Bouncer and we have all been talking, and I really like the KMD they created, and I think it would work really well in VS. So we are probably going to be doing that soon, but there are a lot of things we have to figure out first, and a lot of things we have to wait on in order to get things going. Once we figure all of that stuff out, implementing it should actually be really straightforward and simple. They basically just have to pass VS the Process Name, Path, Command Lines, PID, etc, and since this info is already being passed from the appcertdll, it should be pretty much plug and play. Or in the case of VS plug and pray ;). Sorry it is taking longer than I thought.

    Also, I would like to mention that VS actually does work quite well without the KMD on Windows XP systems, assuming the user does not have 10+ security software solutions installed ;).
     
  18. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Cool, please keep me posted, thank you!
     
  19. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Yeah, I think we need to enable the parent process feature by default... that will fix this issue. The reason this is happening is because VS is protecting the user space.

    The parent process feature is perfectly safe as long as all of the web apps are accounted for in the web apps tab Do you guys think that most users will realize that if they are running a lesser known web app, that they will need to add it to web apps for it to be protected?
     
  20. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Hmmm, I cannot get it to do that. What OS? Are you in Training or Smart Mode with all web apps closed? Do you have any other tricks i can try to make it do that?
     
  21. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Hmmm, did it auto update itself and so now it has a new hash? That, and do you have auto allow program files disabled?
     
  22. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Hey Victek, nice to meet you. I use VS with VirtualBox all of the time and it works great for all OS's, XP through 10 (yeah, even Vista ;)). What VM software are you using? Also, if you are just testing VS, you might try Windows 7, 8 or 8.1. VS works fine under XP, but as it states on our website, there are certain limitations until we implement the KMD, then it will be just like all of the others.
     
  23. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    I
    Yeah, I think it is fine either way, whatever you 2 decide ;).
     
  24. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Cool, thank you! Yeah, just right click on one of the items and it should show a delete option. There is a small bug that someone sent me in an email recently... if you click on the data grid, then arrow up or down, then hit the delete key on the keyboard, it will delete the original item that you clicked on. It is an easy fix, but I never would have noticed that.
     
  25. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Hmmm, that is good to know, I better check that out, thank you for letting me know. VS pretty much works with everything, but you never know what can happen I guess, right?
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.