VoodooShield/Cyberlock

Hi mesaboogieman, nice to meet you! Yes, VS should protect against these types of attacks, but it never hurts to have additional protection!

 

Yeah, our Local Sandbox is not currently our most useful feature (Sandboxie has a MUCH better local sandbox than VS's)... we should be able to replace it at some point with a better, more useful sandbox feature, but the new local sandbox feature still will not be as robust as Sandboxie. Thank you!

 

Please keep in mind, VS is still an application whitelisting app... so there will be blocks from time to time. Having said that, I do need to hardwire in Google's Software Reporter Tool, the same way that I hardwired in Firefox's plugin-container. Thank you!

 

Nice to meet you tonino! Sure, we definitely need to promote VS... otherwise no one will now about it .

 

Hmmm, that must be what is going on. Let me think about what we can do for error handling for a situation like this. Thank you!

 

This file is probably being detected as an installer... which, if the file is detected as an installer, then the Local Sandbox button is not shown. I hope this helps, if not, please let me know, thank you!

 

Very cool, thank you John and everyone else for all of your help! I skipped a few posts (and still have several to go back and respond to, hopefully sooner than later).

 

Thanks Dan for the information and advice re emails. Voodoo running great along with Sandboxie

 

It's good to know that you can run them together, wolfrun! Thank you. Now, can you please explain why you use them together? How do they compliment each other?

 

Yup. I can assure and second that. Sandboxie complements everything else and works nice along with VS. At least in Autopilot, haven't tried other modes.

 

How hard it will be to make VS sanbox work on demand?

 

VS is a Computer Lock. Why make it more bloated when Sandboxie is already out there? I like VS as is IMO.

 

Right!

 

Well I guess I won't have to answer as you can refer to what @Peter2150 and @Mister X have stated above and I can assure you that they are much more tech savvy than I am and are also noted Sandboxie uses. As a matter of fact it is because of Pete and Mister X that I ultimately decided to give Voodooshield a go.
I was running Voodoo in "smart mode" but have been using the "always on" mode now. @Mister X , how is "autopilot mode" working with Sandboxie? Just want to add, I found this PCmag review of Voodooshield quite informative http://www.pcmag.com/article2/0,2817,2470799,00.asp

 

I missed this earlier... I am not sure what you mean by "step-aside for VoodooShield Modes". They basically work together, and what one does not block, the other should.

The reason I believe they work so well together is because both Emsisoft's and Webroot's focus is on behavior blocking, which compliments VS's lock and pre-execution AI / Blacklist nicely.

Basically...

1. Block all new, non-whitelisted files when the computer is at risk
2. If the user is interested in running a new file, provide them with pre-execution file insight
3. If the user allows the file, then monitor the process just in case

(Yeah, I know, sometimes files are blocked quicker for other reasons... but in general, I think that is probably a pretty good overall model).

 

Hi @wolfrun, so far so good, and the rest of settings are defaults. I am new to VoodooShield as I stated here and it is running fine alongside that setup so far. Obviously, I need to learn in depth about VS on the next months, hope so.

 

Webroot is known as a Companion AV. Webroot running along side another AV will yield (step-aside) to the other AV.

While WSA may try to lock files being actively scanned, WSA will not compete with an antivirus program when the latter attempts to block or take control of a file.

By "step-aside for VoodooShield Modes". I was wondering about for example AutoPilot / Antivirus Mode (VoodooShield remains in SCAN Mode).

I was wondering if for example Webroot > Scan, Monitor, Log & Rollback will yield to VS.
Hence, Does Webroot/Emsisoft step-aside for (all) VoodooShield Modes.?

Prior to Ai. I could wrap my brain (for what it's worth) around they'll (whitelist anti-executable + Webroot) working together. Ai has me wondering will Webroot serve more as a companion. Will Webroot be happy as VS companion.

I'm sure much more knowledgeable Webroot/Emsisoft + VoodooShield users are happy by the marriage.
So, I'm just ruminating.
Cheers

And they'll never fight ? Only one alpha.

 

@bjm_ For me, Webroot deletes the file before VS has a chance to block it. ie. I double click file, Webroot deletes, VS stays silent. I think VS yields for Webroot.

 

OK. Am in the same boat, learning as I go.

 

Hmm, VS yields for Webroot. VS stays silent.
Which VS Mode?
Thanks+ for your interest.

 

bjm,

My memory is fading but I think Norton also scans files before VS blocks it. However when I'm installing or updating I normally put VS in Training Mode or Install Mode these days so I'll have to check next time the opportunity arises.

 

"Smart" and "Always" both.