VoodooShield/Cyberlock

I haven't had the chance to test it thoroughly since you only have the opportunity to do it when VS offers you a pop-up.
I want it to run executables on an isolated environment and not rely on the possibility or not of VS to provide the pop-up to access to the feature.


@VoodooShield
It would be interesting to understand the basics of the tech behind VS sandbox, it's based on access restrictions or it can emulate an environment?

 

Well from one old guy to another, your welcome.

 

http://snup.webrootcloudav.com/SkyStoreFileUploader/upload.aspx

 

No, I do not recall the video.
Yes, a question of 2 security products, each offering different layers of protection, working well together.
And, why in particular Emsisoft or Webroot work well with VoodooShield.

Thanks!

 

Thanks!

 

Krusty,
Thanks!

 

Hi @bjm_ ,

I can confirm that when installing the latest Adobe Flash Player for Firefox the Norton fly-out did show before VS prompt, so Norton does scan files before allowing VS to react. Somewhere in there MBAM 2 would have also scanned the installer I suspect.

Cheers!

 

Actually, after thinking about it, Norton would of scanned the file on download (Download Intelligence). I guess it would also scan on execution too, probably before VS?

 

Yep, Norton does (fly-out) report on Known and Unknown.
Webroot does not (pop-up) report on Known Safe nor Unknown.
Yep, that's VoodooShield complements Webroot.

 

Issue has reoccured after activating license. UAC behaviour has returned to "Do not Dim" even though the setting says "Maximum", and sometimes hides behind Windows Explorer until you Alt+Tab back to Windows Explorer.

 

Hello VoodooShield,
Why there no VoodooShield In other languages?

 

Ah yes! I completely forgot to ask same question few days ago. I propose myself for Spanish. I've translated software for TeraByte Unlimited, EasyUEFI, SoftSphere Technologies (DefenseWall) and other minor jobs.
Dan, if interested pm me.

 

And I would like to volunteer for a Dutch translation.

 

I could review you translation and adapt it to spanish - spain

 

I do get the "threat not detected in 56 scan engines" message, so it obviously can connect out. The problem is with calculating VoodooAi -- that's where it gets stuck.

 

Great advice Kees, thank you, I appreciate that... man, we have a lot to think about . We will talk soon!

 

Very cool, thank you TH! I submitted a few samples, and it did really well! That is no surprise though, WSA is killer.

BTW, if anyone else knows of online scanners such as this, or the Kaspersky one, I would be interested in knowing about them as well... we should make a list .

 

Hmmm, that is very, very odd, thank you for letting me know! For the life of me, I do not see how VS could possibly cause this, but I am interested in figuring out why this happens. Do you have any other software installed that might be causing this? Does it only seem to happen after you have activated VS?

Also, what hides behind window explorer? Do you have a screenshot? Thank you!

 

Yeah, that is one of my top priorities, but it will probably be a few months before VS is available in other languages. It all depends on a lot of things, but I will definitely start moving in that direction, thank you!

BTW, thank you guys for offering to help with the different languages, hopefully we can work on this together soon!

 

Can you please send me a screenshot of your Control Panel Region app (first tab)? It is either a regional bug or a firewall issue... it should be easy to figure it out. Thank you!

 

The UAC popup itself, but that's just a Windows interface issue with Do Not Dim. The first time it occurred, it was on latest stable. This second time, it was on latest Insider Preview. I'm currently reinstalling my OS, will report back if I recreate the issue on a clean system.

 

Here are the first couple weeks of VoodooAi 2.0 results… I spent all of 5 minutes reviewing them, but they look pretty darn good to me. There are a few misses… but then again, you will never convince me that the computer should not be locked when it is at risk .

If anyone is really great with excel and would like to perform some detailed analysis on this raw data, please feel free to post the results.

BTW, when you see -1, -1, -1, -1 for the VT results, it means it was an unknown or zero day. (Edit: or maybe the user disabled VS's blacklist scan).

http://www.voodooshield.com/artwork/VoodooAi20.xlsx

http://www.voodooshield.com/artwork/AlgoBenchmark.png

If there are any security vendors who are impressed with the results and believe VoodooAi would be a valuable addition to their software… let’s talk!

 

Sounds great, thank you! On the UAC popup that does not come to the forefront... I think I know what you mean, and I will look into it.

 

Why don't you talk with Malwarebytes? I think they need something like VoodooAI

Avast might be willing as well since they just started to develop their cloud AV cybercapture

 

Sure, you know me, I am happy to work with everyone, and those are both great products, thank you!