VoodooShield/Cyberlock

It appears that ntunecmd is still being blocked. Whenever I enable VS it almost immediately pops up saying that it was blocked.

 

Hey noons, how are you? Can you please exit out and restart VS, it should be fixed. If not please let me know. Thank you!

 

Weird that worked.. Is there some sort of updates/cloud service integrated with vs? I swear I have restarted it several times...

 

@Voodooshield

Your software will block anything that the user does not first allow, I understand this. But what about software that is allowed though VS that will infect you? Most malware seems to work invisibly and not alert the user to what it is doing, how does VS help? Seems to me that a user must be 100% sure software is not malicious before allowing it through VS, and what person in the world can guarantee that? All we can do is try to get software from reputable sources and scan those files with anti-virus before installing them.

I am making this point because my friend is telling me that it's better to just use disk imaging like Deep Freeze to simple restore a system, but of course this doesn't really allow you to keep software you want.

I am enjoying using your software and it does make me feel secure but as I have stated before, isn't VS security only as good as the decisions I make? I can let malware through VS easily, cant I? And if I do allow it through, VS can't roll back all the changes, and that's even if I know the software I let through is doing anything naughty, which I probably wont.

also, how will VS protect me from rogue jpeg's and things of that nature if I have already allowed a jpeg viewer to run through VS? Point being, I tell VS to allow a picture viewer to run so it is trusted, then I download some jpeg with an exploit and it runs because the software it access is trusted by VS.

 

Yes it has! https://www.wilderssecurity.com/showpost.php?p=1986221&postcount=50

TH

 

AWESOME missed this somehow!!!!

 

To make a long story short... the VAST majority of viruses are the silent drive-by viruses, and this is exactly why VS was developed. If VS blocks something that you asked to run, then you should allow it. If VS blocks something that you did NOT ask to run, you should just assume it is a virus. And of course the user should only download software from trustworthy sources. If you do download from questionable sources, you can always scan with a traditional antivirus and take your chances.

On the jpeg question, basically, when a new process is spawned through an exploit, VS will kill it.

https://www.wilderssecurity.com/showpost.php?p=2015835&postcount=471

I hope this answers your questions, if not, please let me know. Thank you!

 

Thank you TH and noons! Yeah, VS is cloud based so we can make adjustments that automatically fixes things for us when we run into small issues. If there is a serious bug, we have to release a new version to correctly resolve the problem.

 

This is the first version that has actually accepted my registration info although I registered back at the start of the process. Anyway, different but looks quite effective.

Quick question though why is UAC disabled after install, or is it just me? I've been away from XP for too long and can't quite get a grip on applications running as admin without my specific approval.

Thanks

 

No it is not just you, UAC is also disabled on windows 7 x64 as well.

What I would like to be able to do is access a list of all the programs you have protected in voodooshield.
I know that if you miss anything while ALWAYS ON is selected, you can always just train that program and add it to voodooshield.

 

You can enable UAC again but apparently VD works better without UAC.

 

Hi,

Yes I did look at that and just a reboot to activate UAC again but I though there must be a reason for voodooshield disabling it, so i have just left it disabled and was waiting to see what others would say on UAC being disabled.

 

Any thoughts on pairing VS along with Spyshelter Firewall?

 

Hi Chris, VS does work with UAC, but it is redundant to have both running, and it works better without it, so the installer disables UAC. You can re enable UAC if you like. We always thought that UAC was a decent idea, but it's purpose was never to kill viruses, there are many articles on the internet about this. Basically, VS does everything UAC does, and more. We could always add an option on the settings screen to enable / disable UAC. I hope this makes sense, if not, please let me know! Thank you!

 

Hi Buckslayr, we actually haven't thought of that yet, but I am sure at some point we will probably pair VS with something. Thank you!

 

SpyShelter is an anti keylogger / hips application with a two way firewall. Do you see any conflicts with adding VoodooShield?

 

Yes I understand the logic. I don't use UAC to stop viruses per se but to alert when processes try to elevate which could be sign of something malicious taking place.

if I can just re-enable it fine. The option at instal would be nice.

Cheers

 

Just installed, ran all my programs in training mode, then put in always on mode
so far running as smooth as butter. Thanks

 

My guess is there should be no problems as I am running VS along with what's in my signature. I can't say for sure though.

 

Thanks. I'm going to give it a try.

 

I am running Avira and it is detecting this with voodooshield.

Virus or unwanted program 'TR/Dropper.Gen7 [trojan]'
detected in file 'C:\Program Files (x86)\VoodooShield\VoodooShield.exe.
Action performed: Deny access.

No doubt a false detection from Avira but I cant submit the file as it says I do not have permission so will just to exclude this from realtime protection and scanning, will just have to wait and see if maybe someone from voodooshield will contact Avira on my behalf.

 

I have noticed with Windows 7 x64 SP1 that if you leave the system idle for more than 5 minutes it does go into train me mode but after some activity it will not go back to always on, it just stays in train me mode.

I have now unchecked the deactivate computer when idle setting and will see how things go with VD.

Just an update I have left my system in idle with the deactivate box unchecked and VD stays in always on mode but if I select a program that i have not trained, even though VD is in always on mode nothing pops up and says that the program is blocked, so it seems as if it is still in train me mode but is showing always on mode. I have turned VD off and back on and it is in always on mode and if I select a program that is not trained, VD pops up and blocks it without issue, so going to try once again to leave VD in idle and check again if the same issue exists.

Update two After leaving the system in idle once again with the deactivate box still unchecked and in always on mode voodooshield is working as it should and blocked a program that I did not train but VD only started to work properly once I exited the program and restarted VD, so there is still a bug when you have the deactivate selected in VD on windows x64 but seems OK if you disable this feature.

 

Can you elaborate on why VS works better without UAC? Is it more stable, more responsive, no conflict with UAC?

And if true, then shouldn't UAC be permanently disabled.

 

Yeah, we should probably do that soon!

 

Cool, thank you!