SpyShelter 10

Discussion in 'other anti-malware software' started by Mops21, Jul 30, 2015.

  1. guest

    guest Guest

    VS can be put in the category "anti-exe" but not HIPS o_O
     
  2. Schorg

    Schorg Guest

    Windows 10 64bit Spyshelter and VoodooShield work well on my two pc's. On Spyshelter I disable action 53 and in rules>general allow all actions for Voodoosheild. No issues.
     
  3. Poppey

    Poppey Registered Member

    Joined:
    Nov 23, 2015
    Posts:
    39
    Location:
    Germany
    Now I have done the workaround with deinstalling both programs, install SpyShelter, reboot, change the security level from automatic to ask and then install VoodooShield. The problem is, it can not finish the installation. SpyShelter ask me some decisions for Voodooshield and I press always allow. I think VoodooShield can not install the driver.
     
  4. Poppey

    Poppey Registered Member

    Joined:
    Nov 23, 2015
    Posts:
    39
    Location:
    Germany
    Ok, I will try it tomorrow or today ;-). It is now two o clock in the night. I should go to bed :)
    What I also detected is, when I start Windows 10 everything is very slow in Spyshelter. When I exit Spayshelter and start it again everythink works smoth.
     
  5. Schorg

    Schorg Guest

    Never had this issue I always have Spyshelter on ask user not automatic. Change setting to ask user and restart and try installing voodooshield again should work also make sure you untick auto block suspicious behaviour.
     
  6. co22

    co22 Registered Member

    Joined:
    Nov 22, 2011
    Posts:
    411
    Location:
    router
    ok
    try auto allow medium security level or
    or manually create allow rule for
    vsscanner.sys ->C:\Windows\system32\DRIVERS\vsscanner.sys
    VoodooShieldService.exe ->C:\Program Files\VoodooShield
    VoodooShield.exe ->C:\Program Files\VoodooShield






    edit:
    or in ask user mode go to spyshelter settings and check "Create rules in Installer Mode" is ticked
    then install VS in installer mode so make it much more easy
     
    Last edited: Oct 7, 2016
  7. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,997
    Location:
    Poland - Cracow
    And is reasonable to add processes of VS to excluded list in module "Keystrokes Encryption" - tab 'Process Filter" - option "do not encrypt keystrokes of processes cpecified below".
     
  8. VoodooShield Free in AutoPilot and Spyshelter Free in Auto-Allow (high) are a powerfull freebie combination.

    When using an Anti-exe (VS fre) plus HIPS (SpS free) I doubt whether anti-keylogging is needed.
     
  9. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,546
    Location:
    The Netherlands
    That's why I prefer virtualization, because you don't need to worry about which folder is writable or not, everything is written to a virtual file-system and registry. Would be cool if SS could offer a virtual sandbox, but of course it doesn't have to be as advanced as Sandboxie.

    If I'm correct, you posted a screenshot of HMPA's Exploit Test Tool in another thread. On Windows 32 bit SS alerts about process memory modification and DLL injection when simulating an exploit, but on my Win 8 64 bit machine it does not. So I wonder if SS is working correctly on Win 64 bit, perhaps it can not spot everything.
     
  10. Poppey

    Poppey Registered Member

    Joined:
    Nov 23, 2015
    Posts:
    39
    Location:
    Germany
    VoodooShield is now working with SpyShelter. I installed VoodooShield. After that I installed Spyshelter. The Voodoo Icon go away. Before I reboot my PC I make the hints in your posts.
    I manually create allow rule for
    vsscanner.sys ->C:\Windows\system32\DRIVERS\vsscanner.sys
    VoodooShieldService.exe ->C:\Program Files\VoodooShield
    VoodooShield.exe ->C:\Program Files\VoodooShield

    Then I do the other hint:
    VS to excluded list in module "Keystrokes Encryption" - tab 'Process Filter" - option "do not encrypt keystrokes of processes cpecified below".

    The I changed the Security Level from automatic to ask user.

    After rebooting the PC I get the VoodooShield Icon :)

    But I could be possible that I hat turn something other points in Spyshelter off or on. I creat allow rules for all Exe in the VoodooShield folder.

    But what always exists is, when I start Windows 10 and SpyShelter starts it is very slow. The SpyShelter Screen gets sometimes black. It takes very long to go from one menu to another...Then I close SpyShelter and start it again manuel, SpyShelter works very fast. But I don't know if the problem is SpyShelter or the other security software on my PC ;-)
     
  11. boredog

    boredog Registered Member

    Joined:
    Feb 1, 2015
    Posts:
    2,499
    just installed spyshelter with all my other security software off and rebooted. nothing in spyshelter is on.
     

    Attached Files:

  12. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,997
    Location:
    Poland - Cracow
    Maybe enabling SS option "run as service" can help in your case.

    Yes...you are right...and that's why I'm user of Shadow Defender...I just don't care about inclusion, exclusion or whatever :)
     
  13. Poppey

    Poppey Registered Member

    Joined:
    Nov 23, 2015
    Posts:
    39
    Location:
    Germany
    What happens when you turn it manually on?
     
  14. boredog

    boredog Registered Member

    Joined:
    Feb 1, 2015
    Posts:
    2,499
    what do you mean manually?
     
  15. Poppey

    Poppey Registered Member

    Joined:
    Nov 23, 2015
    Posts:
    39
    Location:
    Germany
    Press the red button Protection Status that is shown in your screenshot.
     
  16. co22

    co22 Registered Member

    Joined:
    Nov 22, 2011
    Posts:
    411
    Location:
    router
    in current version 10.8.6 compare to other v10 this new version are very fast
    sure it can be fast as like version 9

    do what ichito say
    and try disable windows defender i can tell this cause it run much faster
    or link from here
     
  17. Poppey

    Poppey Registered Member

    Joined:
    Nov 23, 2015
    Posts:
    39
    Location:
    Germany
    Yes, thats was it. Now SpyShelter is very fast without the procedure to close and start it again.
     
  18. boredog

    boredog Registered Member

    Joined:
    Feb 1, 2015
    Posts:
    2,499
    "Press the red button Protection Status that is shown in your screenshot."

    When I press that button, it goes green and shots right back to red again.
     
  19. SanyaIV

    SanyaIV Registered Member

    Joined:
    Oct 17, 2013
    Posts:
    278
    Is it the paid version or the trial version? The trial version did that for me as well, I think it's one of their "Hey, buy it!" 'features' of the trial. If it's the paid version then I don't know what's wrong and you should probably contact SpyShelter support.
     
  20. boredog

    boredog Registered Member

    Joined:
    Feb 1, 2015
    Posts:
    2,499
    ScreenHunter_57 Oct. 09 11.18.jpg I installed the free version and not a trial.
     
  21. boredog

    boredog Registered Member

    Joined:
    Feb 1, 2015
    Posts:
    2,499
    OK, just uninstalled the FREE version, rebooted, installed the premium trial with same results, except for one new pop up about the driver. after looking on their support site, it appears this happens with win 10 insider builds which I have.
     

    Attached Files:

  22. n8chavez

    n8chavez Registered Member

    Joined:
    Jul 19, 2003
    Posts:
    3,336
    Location:
    Location Unknown
    I'm trying to decide between the Premium and Firewall versions of SS. What advantages does the SS firewall component have over the built-in Windows firewall?
     
  23. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,546
    Location:
    The Netherlands
    If I'm correct, it's a standalone firewall. So even if you disable Win Firewall, it keeps working, but it also works alongside it. The advantage is that it will alert about outbound connections, and the network monitor makes it easy to block connections. But if you're already using a tool like Win Firewall Control, you might not need it.
     
  24. n8chavez

    n8chavez Registered Member

    Joined:
    Jul 19, 2003
    Posts:
    3,336
    Location:
    Location Unknown
    Yeah. I am using WFC. Also the SS firewall doesn't seem to be recognized in Windows as being a firewall, because I keep getting a popup to enable one.
     
  25. n8chavez

    n8chavez Registered Member

    Joined:
    Jul 19, 2003
    Posts:
    3,336
    Location:
    Location Unknown

    Why not run SBIE and SS together? A tight sandboxie.ini and the sandboxie folder added to the protected folders list in SS would seem to give great protection.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.