VoodooShield/Cyberlock

I would like to see an option to allow software by Digital signature, but only allow digital signatures from publishers that the user deems trustworthy. It would be really nice to be able to add, and remove digital signatures from a whitelist that the user maintains. To me it is a bad ideal just to allow any digital signature from a security stand point of view. The user should only allow digital signatures that are needed for the software on their machine. The more digital signatures the user has as trusted the greater the risk of encountering malware that is suing a digital signature that the user has white listed on their machine.

 

No worry.

 

No issue here now.

 

Good Evening! Dan...just renewed my license...and my Version still states V 1.30...and when I click on check updates...it states I have the latest version. Will this change upon rebooting? Sincerely...Securon

 

It's because he is still fine tuning VS 2.00 but if you like you can download the latest here as it's working pretty well: https://www.wilderssecurity.com/threads/voodooshield.313706/page-182#post-2412233 just make sure to uninstall v1.30 and reboot and make sure you do a search (VoodooShield) for any leftover files and folders and delete them and go to the VS website and remove your PC from the list as when you install v2 it will start a new Whitelist.

Daniel

 

Good Evening! Like Webroot...Triple...I can Always Depend On Your Coverage! I can wait for the VS 2.00 Version...I've just reinstalled Webroot...Appguard...and Voodoo Shield...as Homeland Security MK 20...Like My TiCats...Winners All! Sincerely...Securon

 

OK - got it now.

Thanks PaulBB.

feandur

 

Your very Welcome a couple of us are working with Dan behind the scene's doing more testing and working out the last couple of bugs.

Cheers,

Daniel

 

Hi Dan still having issue of VS not showing on Boot up but VoodooShieldService.exe is running and no sign of VoodooShield.exe and I try the uncheck and recheck to Start with Windows.

Daniel

 

Cool, thank you for letting me know! I think we are going to remove the button / icon in the web apps tab, and just go back to the timer, so that it detects new web apps automatically. But I will just make it detect every 15 seconds instead of 5 seconds, and hope that works well for everyone.

 

Sorry about that Feandur, and thank you for the help PaulBB!!!

 

Cool, thank you. I will still see if it is possible to have the balloons remain indefinitely, until the user clicks on them, just in case some users prefer the balloons.

 

I see... I will have to test this with launchy and see what is going on. Thank you!

 

Sounds great, thank you Baldrick and Cutting_Edgetech!

 

The only change with the freezing is that VS freezes after leaving the Web Apps tab open for 15 seconds instead of 5. The freezing usually begins after VS has been running for around 2 hours, and it progressively gets worse the longer VS is running. Many times VS does not recover if VS has been running for several hours so VS has to be killed from the task manager. I can also allow Windows to close VS since it will ask if I want to close VS, or wait for VS to respond.

 

It should be super easy to add, but really we should think about whether we should add that or not. I am almost thinking that we should err on the side of caution, especially since the user can just left click VS to turn it off. What do you guys think?

 

I think turning off protection would be more dangerous because the user would have no control over what is allowed to execute then. The user turns off protection to allow a false positive, and then at the same time allows other executions they did not want to allow. You could give a warning prompt when the user clicks on allow informing the user not to allow the execution unless they are sure it is a false positive so they would have to click allow twice.

 

Yeah, I agree that we have to be careful with digital signatures, and just not allow anything that has one. VS already temporarily allows by digital signature... there is an option on the Settings / Basic tab. Basically, if a user allows something that has a digital signature, it will temporarily allow all new processes with the same digital signature, until something else with a different digital signature is allowed (or until VS is auto deactivated). Then any process that has the same digital signature as the NEW one is allowed. We might add a limited list of digital signatures in the future, but I am still a little reluctant. Thank you!

 

Sounds great, thank you!

 

Thank you TH for the help! Securon... VS is free to all Wilder's users, so please email me at dan@voodooshield.com, and I will refund your payment.

 

Hmmmm, does this happen after deleting the 4 (out of 5) files from C:\ProgramData\VoodooShield ? Thank you!

 

Sounds good... I will have a new version today, I think that issue is fixed. I will post a link in a few hours. Thank you!

 

Is it possible to put a link to click on for more information about the file that has been detected? I was thinking we was able to click on a link to go to Virus Total in some older builds to see how many AV engines, and which engines detected the threat.

 

Yeah, I see what you mean. So should we just have a little button, or a little link? Thank you!

 

No problem!