VoodooShield/Cyberlock

Discussion in 'other anti-malware software' started by CloneRanger, Dec 7, 2011.

  1. the mul

    the mul Registered Member

    Joined:
    Jul 31, 2003
    Posts:
    1,704
    Location:
    scotland
    I have been testing VD for a few hours and after initial install and checking VD settings, I noticed automatically deactivate my computer when idle for more than 5 minutes is unchecked by default, so I have checked this box and reset my white list and then rebooted my system while in train me mode and noticed this setting was unchecked again. I have since added all my programs to VD protection list and then rechecked the box and rebooted in both train me mode and also always on and the setting seems to stay checked so far.

    I did notice in one of my reboots that after clicking on the VD icon it disappeared and the desktop shortcut would not start VD at all, even though task manager did show it running, so after a further reboot it seems OK at the moment.

    There is one question I would like to ask and that is, should there not be a small shield icon in the bottom right hand corner of the desktop as this did appear on my second reboot of VD but has since disappeared?

    If I click on the taskbar at the bottom right hand corner VD small icon is there with the rest of my hidden icons.

    I am still running windows 7 x64 pro.
     
  2. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Thank you for the feedback! Yes, the tray icon should always be there, and the VS desktop icon should be there if it is set to "Show" in the right click menu. Is anyone else having these problems? Please let us know if it continues to have problems. Thank you!
     
  3. the mul

    the mul Registered Member

    Joined:
    Jul 31, 2003
    Posts:
    1,704
    Location:
    scotland
    Hi,

    I don't know if this was my fault or not but " Hide" was selected and I have not noticed :oops: so no doubt not a bug but I will keep testing out VD and at the moment it is working great.
     
  4. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Cool, thank you! Please let us know!
     
  5. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,269
    Location:
    Ontario, Canada
    Thanks for the update having no issues since v1.00! :thumb: Do you have a change log?

    TH
     
  6. the mul

    the mul Registered Member

    Joined:
    Jul 31, 2003
    Posts:
    1,704
    Location:
    scotland
    Hi,

    I have, automatically deactivate when my computer is idle for more than 5 minutes box checked but if I do leave my system for a while and then straight away click on a program that I have not added to VD protection list, VD blocks it but should VD not be deactivated and then only be reactivated after the 30 seconds have past or does it activate as soon as you move the cursor?

    I have automatically reactivate set to 30 seconds.
     
  7. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Hey TH, how are you? Actually, for 1.02, we just fixed the bug that would stop VS from reactivating if it had been auto deactivated after 5 minutes of idle. Thank you!
     
  8. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    It depends on whether or not a browser or email client is running when the cursor is moved to take VS out of deactivation. If a browser or email client is running when the cursor is moved, VS will turn ON. If a browser or email client is not running, it should go into training. I hope this helps, if not, please let me know.

    Thank you!
     
  9. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,269
    Location:
    Ontario, Canada
    Always great ;) and thanks for the CL!

    TH
     
  10. the mul

    the mul Registered Member

    Joined:
    Jul 31, 2003
    Posts:
    1,704
    Location:
    scotland

    I am going to test this theory out now and will report back and let you know if it does go into training while no email client or browser is running after 5 minutes.
     
  11. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,024
    Location:
    Christchurch, UK
    The balloon notification window needs to be up for a longer time for me and needs to stay up until I make a response.

    It's easy to miss a notification of a blocked program (even after training) when you are simply surfing the net.

    My reflexes are not what they were!
     
  12. the mul

    the mul Registered Member

    Joined:
    Jul 31, 2003
    Posts:
    1,704
    Location:
    scotland

    I have to agree and a log file would also be of use, so that we can see what has been blocked.

    I have also discovered that VD will block your real time protection in your AV as I discovered this after I had everything trained and was testing out an eicar file with VD set to always on and my real time protection was blocked, so I had to train VD again while testing out the eicar file and this allowed my real time protection on avira to be added to VD list. This might catch out someone with not very much experience, unless there AV comes across a virus while VD is in training mode and then there real time is added to VD.
     
  13. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,024
    Location:
    Christchurch, UK
    But what if the malware is not picked up by the signatures of the AV? :p

    This is worth checking out.
     
  14. the mul

    the mul Registered Member

    Joined:
    Jul 31, 2003
    Posts:
    1,704
    Location:
    scotland

    I would say this is something that needs an answer, have a look at a statement from their website.

    Traditional antivirus software attempts to block the 15,000+ new viruses a day. We realized that antivirus companies cannot possibly keep up with all of new viruses, so we chose to take a different approach. VoodooShield™ blocks EVERYTHING except the software you train it to allow.

    Installing and training VooodooShield™ is simple and only takes a few minutes. You will then be able to enjoy a virus-free and malware-free web browsing experience!

    So I would have to say that even though your AV might not pick up the virus, VD should protect you anyway.
    What about malwarebytes, how do you add it's Realtime Proactive Protection Module to VD in training mode without some sort of trigger first from MB?
     
  15. G1111

    G1111 Registered Member

    Joined:
    May 11, 2005
    Posts:
    2,294
    Location:
    USA
    Running Emsisoft A.M. with VoodooShield and tried to download the Eicar test virus. EAM jumped on the download and quarantined it. I then tried with the Eicar zip file. It downloaded, but as soon as I tried to unzip it EAM stopped it from opening. Both times VoodooShield had been running (blue tray icon). EAM responded first because I was not running an .exe.

    When I update a program that I have an EAM rule for the behavior blocker always prompts me, so I don't think VoodooShield is blocking my anti-virus. There have been times while surfing the VS blocked something that EAM did not react to. From my non-expert viewpoint both seem to be working properly.
     
  16. the mul

    the mul Registered Member

    Joined:
    Jul 31, 2003
    Posts:
    1,704
    Location:
    scotland

    Hi,

    I am running avira and when testing with the Eicar test virus my real time protection was blocked by VD but web protection did jump in and block all of the Eicar test files, so web protection did it's job but first and foremost you want your real time protection doing it's job as well.

    What we want to know is what happens about other security programs that have protection modules that cant be triggered with Eicar and might be blocked by VD.

    Glad to see that you have no issues with EAM.
     
  17. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Yes, we will have to make the balloon notification stay up longer, we will also at some point have a log to see what is being blocked, thank you for the feedback!
     
  18. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Yes, VS has to learn everything, otherwise it will block it.
     
  19. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    I'm not sure what you mean?
     
  20. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Exactly, VS will protect you anyway.

    As far as training goes, you might have to train VS for a couple of days, it really just depends on what software you run. Thank you!
     
  21. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Yes we have tested VS against many different AV's and AE's, sometimes VS is first to block something, and sometimes it is second. VS is extremely small, and it runs on a 1ms timer. We knew we would have to make it tiny in order to run it every 1ms, otherwise it would have high CPU utilization. Also, keep in mind, VS kills the process first, and THEN alerts you. Thank you!
     
  22. Sevens

    Sevens Guest

    I am uncomfortable with the whitelist in the cloud. I really need to be able to see and edit the whitelist to be happy with it . At this point it really isn't adding anything I don't already have except the cloud storage of the whitelist and that isn't for me. Bring the whitelist home and we are on !
     
  23. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,024
    Location:
    Christchurch, UK
    "Voodoo Shield blocked sc" after 2 days training.

    Sorry if this has been asked before but what is "sc"
     
  24. Marsman

    Marsman Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    34
  25. Sevens

    Sevens Guest

    I think it is shadow copy which is a windows process.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.