VoodooShield/Cyberlock

Discussion in 'other anti-malware software' started by CloneRanger, Dec 7, 2011.

  1. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,269
    Location:
    Ontario, Canada
    Thanks Dano and have a great long weekend buddy!

    Daniel :)
     
  2. ProTruckDriver

    ProTruckDriver Registered Member

    Joined:
    Sep 18, 2008
    Posts:
    1,444
    Location:
    "An Apple a Day, Keeps Microsoft Away"
    Thank you Dan for all the hard work that you have been putting into VS. Enjoy your much deserved time off this long weekend. :thumb:
     
  3. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    I just installed build 2.71 on Windows 7X64 Ultimate, and VS did not stay in training mode when rebooting. I wanted to stay in training mode, and it switched itself to Smart Mode.
     
  4. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    The bug you fixed where VS was blocking everything not on the whitelist when switching to a prompt instead of the balloon is back again. I unticked automatically allow all software from the Program Files Folders, and unticked the feature to allow by parent process. VS has blocked everything from Program Files Folders except for Windows Media Player so far. The tray icon flashes multiple times, but I don't receive the prompt like I should. I get the message from Windows saying that the item may have been deleted, or moved when trying to launch my applications. The balloon works fine, but the prompt does not work at all. This bug was fixed in 2.70g. I'm using Windows 7X64 Ultimate.
     
  5. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    I think the bug that locked me out of the settings has been fixed in this build. I was able to easily reproduce it before, and I can't trigger it now.
     
  6. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    VS no longer prompts me for child processes when Automatically allow by Parent Feature is disabled. Build 2.70g prompted me for child processes from the user-space, but failed to from Program Files Folders. Build 2.71 fails to prompt me for child processes from the user-space, and the Program Files Folders. I have automatically allow by parent feature disabled.
     
  7. MrGump

    MrGump Registered Member

    Joined:
    Sep 5, 2009
    Posts:
    406
    latest VS working great
     
  8. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    2,872
    All software installed in the Program Folder is legitimate as its a protected folder. That's why its whitelisted. If you ask to be prompted to allow software to run there, you make your task of running legitimate applications a lot harder. Leave the default setting alone.
     
  9. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    That's not the point. I'm reporting bugs. All that software in the Program Files Folders can easily be whitelisted. Also who are you to tell me what settings I should use?
     
  10. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    2,872
    Its already whitelisted. That's why the checkbox is ticked as the default.

    You're of course free to modify it as you see fit but don't be surprised if programs in the Program Folder need to be prompted before they execute or they don't run at all.
     
  11. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    Excluding the path does not add applications to the whitelist. It is still possible for some files types to act as containers for malware to transfer malware from the user space to the Program Files Folders. Dan has sample files that do this. Then you also have exploits which are capable of doing the same thing. I can easily add my applications from Program Files Folders to the whitelist, and then only my applications will be allowed to execute from there. It's just added security.

    The problem isn't that i'm being prompted. The problem is that i'm not being prompted at all when I should be receiving a prompt. The prompt option does not work on my machine. Only the balloon option works. If beta testers did not go through all the options that software offer then most software would be really buggy. I spent no less than 8 hours of my time going through the settings, and reporting bugs for 2.70-2.71. Some of the testers sacrifice a lot of their time so everyone has a better product in the end. You don't want to find out your security software is buggy when it really counts. I report most of the bugs I discover by email, and I reported many for 2.70-2.71, some were critical.
     
  12. Baldrick

    Baldrick Registered Member

    Joined:
    May 11, 2002
    Posts:
    2,674
    Location:
    South Wales, UK
    All good so far here re. 71, Dan, both on Win 7 64bit & Win 8.1 32bit (tablet), and I have to say that whilst VS is light any easy on the system it is an absolute no-brainer for use on tablets where resources may well be at more of a premium than on laptops & desktops.

    As it is a long weekend over here in the UK I pan to put the latest build through its paces, and will report back if I come across anything as a result.

    Regards, Baldrick
     
  13. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    After installation VS is in Training mode.
    As soon as I register my license it automatically switches to Smart (Default) mode.

    Bug or by design?
     
  14. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,453
    Location:
    .
    @Thread
    FWIW ~ I agree with C_E
    Seems, I prefer settings similar to C_E
    Sure I can run Default....but, I don't want to.
    I want Prompts/Alerts not Balloons.
    Respectfully, gadget and blinking Icon does nothing for me. I simply do not feel it. Once my system is trained and locked. Then the only Prompt/Alert I see...should be something I want to see and read and be acutely aware of....
    gadget and balloons and blinking are superfluous for me... that's me.
    When VS blinks. What does it mean. If blinking is information then show me the information.
    Logically, I should only need information when user action is requested. On a trained locked system. Information should not be so frequent to be intrusive. I do not understand blinking and balloons and gadget to make VS minimalist. Whitelist (and if VS had as blacklist) will make VS minimalist. Trained and Locked VS will/should be silent. No matter how far I veer from Default. Eventually, my machine will be Trained. Trained and Locked = VS silent. $.02
     
    Last edited: May 23, 2015
  15. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    2,872
    My HIPS is better in this respect. As a protected folder, the Program Folder is not supposed to be modified by unknown processes - its been that way since Windows Vista. That's why malware executes in other Windows folders most users don't see because a legitimate executable should only write to the Program Folder. What one would want for VS is a process injection blocker, to block processes that are not expected in a Program Folder application. That would make it a more robust anti-executable.
     
  16. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    My HIPS is being discontinued so I decided to go ahead, and start looking for a replacement. I tried Comodo for 6 weeks, but it's way too heavy. It seems to double my boot time, and makes some applications very slow to launch. It also blocks my tray icons from loading no matter what settings I use. Comodo also prompted me for the same thing many times even though i had already created a rule to allow the event. Maybe Dan will consider adding a process injection blocker in the future, but it's best all the bugs are worked out of VS as it currently is before taking on any additional features. It was something I was thinking about bringing up to him, but the timing is not good right now.
     
  17. ProTruckDriver

    ProTruckDriver Registered Member

    Joined:
    Sep 18, 2008
    Posts:
    1,444
    Location:
    "An Apple a Day, Keeps Microsoft Away"
    What's up with this?? I did a clean uninstall of VS and a fresh reinstall of Version 2.71 and now I can't get it to register. I'm using the correct email address and I can log into my account which shows my computer. I keep getting the following:

    VS Registration confirmation.png
     
  18. ProTruckDriver

    ProTruckDriver Registered Member

    Joined:
    Sep 18, 2008
    Posts:
    1,444
    Location:
    "An Apple a Day, Keeps Microsoft Away"
    I just did a download from the VS website (Version 2.50) with same results, couldn't confirm registration. Maybe the registration website is down. I'll give it a try later today.
     
  19. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    2,872
    Online Armor is still getting database threat updates so I'm still protected.
     
  20. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    Yes, I think OA is one of the greatest security products ever created.
     
  21. Brandonn2010

    Brandonn2010 Registered Member

    Joined:
    Jan 10, 2011
    Posts:
    1,854
    I've started trying this out on my Mom's laptop after a PC Refresh. I don't doubt its protection, but it is very false-positive prone. It wouldn't let me install Panda Free because it contains bundled adware, which is kind of good, but after I disabled it, installed Panda, and re-enabled protection, it blocked Panda's agent updates as generic infections.

    Also, it keeps wanting to update, even after I let it and the PC rebooted, it wanted to update again?
     
  22. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    Ehhh....TallEmu....
     
  23. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    You can disable the cloud AV in the premium version. I do that sometimes.
     
  24. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    Yeah, that was back in the day.
     
  25. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,269
    Location:
    Ontario, Canada
    No problems here are you sure you remember the correct Credentials or Firewall blocking VS?
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.