VoodooShield/Cyberlock

VS add or change anything in the Windows kernel?

 

Had to put VoodooShield in disable/install mode to be able to update Google Chrome to the latest version 54.0.2840.59 m (64-bit).

 

Just had VS go into Training mode on another PC. First I knew was a pop-up asking me whether I wanted to turn VS on.

 

Hi Dan,

I noticed that when you sign in to one account, and VS turns on and shows the icon. When you switch users to another account, VS icon does not show in the second account that you signed into. Difficult to know if VS is still active.

 

for some reason today the voodoshield icon does not ever show up on my desk top after rebooting. 3.45 beta

 

I am tied up but just wanted to mention real quick... I noticed the chrome update block as well... this is the same "File is Inaccessible or No Longer Exists" issue that caused the Windows update block. It really is not even an issue because it is super easy to fix, but I am just trying to figure out the best way to fix it so that will work for everything. In the meantime, if you guys see any similar "silent" blocks (without prompts), please let me know, and please let me know the path of the block (if possible).

A lot of people have asked about what new features we are going to be adding, now that almost all of the bugs are worked out (especially the freeze bug). I think probably the best thing to do is to wait a couple of weeks to add any new features, so that we can make sure we catch and fix every last bug. During that time, I will start working on Version 2 of VoodooAi... I have some really cool things we can add to it.

Besides VoodooAi, I have a couple of lists of new features we can add. I will combine and post them sometime soon. We do not want to make VS overly complicated, but if some of the features make sense to add, then we will. Off the top of my head... we can consider adding a blacklist feature, and also a feature that allows the user to add additional vulnerable processes (even though this is probably not needed since VS treats all Windows processes as vulnerable processes, and the other ones like java, flash, etc are all hardwired in). Anyway, we will make a list and figure out together which ones we should add and which ones we should not.

Hopefully I can catch up on the posts soon... have a great weekend everyone! Thank you for all of your help!

 

Have a great weekend Dan! And please don't make VoodooShield too complicated, love it as it is

 

+1

 

What's the last stable version of VS compatible with XP -- and where can you get it?

 

I believe it was the last version of 2. There used to be a link on the voodooshield.com site but t looks like it has been taken down.

Maybe send Dan an email - support@voodooshield.com

 

Hi Dan,

Is Voodoo Sheld going to report findings to Event Viewer? II found the Voodoo Shield Service listed in Event Viewer.

 

Hi Dan,

Could you code your installer so that it does Not call any external command line tools like sc, icacls ...etc ? My "installation admin account" is not allowed to run those things. For example the java run time installer doesn't do that, and it installs a service just like your program.

 

I agree it is a good idea to let VS 'stablilise' for a few weeks before adding new features, and also not to make VS overly complicated.

Thanks for a great product Dan, and above all your dedication and responsiveness. I am currently using AppGuard and NVT ERP on my primary laptop, but am considering replacing these with VS when it is stable.

 

Not really sure if is this the right reference for the block but here you have the specific logs for Silverlight marked as blocked on 'command line' section:

Code:

""c:\windows\system32\rundll32.exe" "c:\program files (x86)\microsoft silverlight\xapauthenticodesip.dll",dllregisterserver

Code:

"c:\windows\system32\rundll32.exe" "c:\program files (x86)\microsoft silverlight\5.1.50901.0\slmsprbootstrap.dll",setupplayreadydata

 

I have no issue with the stability of VS and use it on all my machines. The odd silent block is no big deal and the freezing issue appears to be have been completely resolved.

Personnally, I would replace NVT ERP, but keep Appguard and as it would complement VS and provide an additional layer of protection.

 

please add a way to whitelist folders. For instance, the Windows folder.

 

If voodooai has more users does it help to improve it? I guess the data sent to cloud is used for something

 

"If voodooai has more users does it help to improve it? I guess the data sent to cloud is used for something"

And your point is?

 

If voodooai can be improved or is being improved with that information or not

 

please add a way to keyword search the various lists.

 

More users = more information in the cloud.
Then the chance is higher, that VS only has to fetch the results from the cloud database. Especially in the case of "well-known" software.

 

I run in Smart mode and sometimes forget to disable VS when running an install / update, and sometimes the block shows VoodooAi at 100% unsafe.
I don't understand how the Ai works, but if users over time keep allowing the FPs, would this also affect the VoodooAi score downwards?

 

I'm not sure if "allowing a False Positive" means that the VoodooAI-Score is changed downwards.
It can be a "local decision" that doesn't affect the score in the cloud.
Maybe someone else know the answer.

 

Already in there but I don't suggest making any changes to the Windows Folder!

 

What VAi verdict are stored in the cloud?

Lets say, I set VAi sensitivity level @50 And VAi analyzes a brand new file (not analyzed by VAi previously), so VAi @50 verdict of brand new file will be stored in the cloud?

Similarly, lets say, VAi cloud databases has a verdict on a file @100 sensitivity level And on my system VAi sensitivity level is set @50...if I run the same file, do I get the databases verdict or file is re-analyzed @50 VAi?