VoodooShield/Cyberlock

@Triple Helix

Maby is just with you PC.

I do not have any issues with boot up and v3.57b

And I have "fast startup" turned off!

 

Is this boot time normal with fastboot off?

 

Booted this morning and VS didn't appear - no messages from Windows and no running VS processes. First time I can remember it not showing up. Have done a clean re-install removing settings and logs. I usually do this anyway so am expecting issues again, but will wait and see and report back.

EDIT: Second re-boot after re-install got the VS can't connect to its service message. Have sent logs.

 

Looks good to me. VS 357 and fast startup disabled.

 

Happy to say I'm having no problems with 3.57 on start-up at boot, or on user-switching. OTOH, I am still really keen to see per-user settings. It's becoming important as I may have to set up a Guest Account soon, and we don't really want visitors fiddling with things, do we? As well, the Missus gets a tad impatient when tech stuff appears on her account: her view is that's my department, why isn't it confined to my account?

My uneducated thinking is that per-user may best and most simply be done in the HKCU, leaving the VS Service to run from the HKLM.

 

I have reverted to 3.53.

 

True, but I'm sure there's more than just me seeing this and I'm talking about 10 to 15 seconds using 3.57 compared to 3.53.

 

I don't use fast boot either as I don't use a hibernation file.

 

I don't use fast boot and my startup with 3.57 was slower and not as smooth (icons appearing). 3.53 is fine.

 

Thank you guys for figuring out the potential fast boot issue... I will look into it more, and this will really help a lot. For now, the latest version below uses the 3.53 method that VS used for startup, and we can revisit the boot time feature once we have finished deploying the web management console.

This version should be perfectly stable and should work really well for everyone, but if you run into any problems at all, please uninstall, reboot the computer, then reinstall.

If everyone could upgrade to this version, that would be really cool, that way we are all on the same page.

www.voodooshield.com/Download/beta3/InstallVoodooShield358.exe

Thank you guys, talk to you soon!

 

I see what you are saying, and we certainly could do this, but it would complicate things tremendously. But if we have a really good reason to do so, then I am certainly open to this.

The way I have always viewed this issue is this... the whole idea of VS is to automatically and safely whitelist as many items as possible... basically automatically build the tiny, customized whitelist for the user as much as possible, while still blocking all of the bad items. While the second user is using the computer, they are essentially helping to build the whitelist, simply by using the computer. Now, if VS blocks a bad item, and they ignore the blacklist and VoodooAi warnings, and allow the item, then the computer is going to be infected anyway... whether the whitelist is for Local Machine or Current User... the end result is that the computer is infected.

This is just the way I have always viewed this, but please let me know what you think! Thank you!

 

Hi Dan
Thanks for the update. Have installed over the top of 3.53 all ok so far.

 

Cool, thank you for letting me know! Yeah, if you are running 3.53, installing over the top should work great. If you are running 3.54-3.56, I would uninstall, reboot, then reinstall. 3.57 could go either way .

 

Hi Dan

All installed here and seems to be working fine...as I never had the slowed start up issues that some had with v3.57 I cannot advise as to whether the issue is resolved but lets justr say that I have noticed no change in my previous boot up times...will advise back if I notice anything untowards...as always.

Regards, Baldrick

 

Exactly the same here, it took an extra 10 to 15 seconds for all the Tray Icons to load with 3.57 and no issues with 3.53 so we will see how 3.58 does!

 

nice work
ransom 0/61 | Go.ransomware | .shifr

**VT results removed as per Wilders terms of service

https://www.wilderssecurity.com/thr...otti-virus-total-results.180057/#post-1040840

 

Installed 3.58 over 3.57. You said it could go either way, but no big problems--startup was actually 4 seconds longer. Makes no sense but anyway, maybe un/reinstall is better. I stick with 3.57 for now. I see Petrovic's screensh--nice!

 

Petr you can't post VT links here at Wilders.

 

The file was not signed.

 

Clean reinstall of 3.58 runs very well on my system just like 3.53! Thanks Dan!

 

No issues here (before and) after upgrading to 3.58

 

I had reverted to V3.53 about a month ago due to different problems. Installed 3.58 over the top and so far so good! Thanks Dan.

 

Very cool, thank you for letting me know!!!

 

The thing about VoodooAi is this... there are around 20 features out of the 300 or so that are dedicated to the digital signature, so the digital signature certainly plays an important role in determining the VoodooAi score. BUT... if you test many tens of thousands of samples, you will quickly realize that there are a lot of files that are not signed at all, and have very low VoodooAi scores. Then again, you will see some files that are signed (valid and verified), that will have high VoodooAi scores.

So the digital signature only influences the VoodooAi score to a certain extent, and it is completely depended on the the other features. But that is the cool thing about Ai... it will spot things that humans would NEVER be able to spot.

Our Ai is not perfect, but the three current models work extremely well with VS's toggling lock. The whole idea being... a traditional anti-executable is going to block the non-whitelisted item either way, but with VoodooAi, the whole goal is to provide the user with file insight when the computer is at risk, or auto allow the obviously safe files when VS is on AutoPilot or in Smart / OFF mode.

But what is even cooler, is that VoodooAi is extremely adept with zero days, which is probably the case with Petrovic's sample.

I hope I am explaining this correctly, if not, please let me know!