VoodooShield/Cyberlock

Discussion in 'other anti-malware software' started by CloneRanger, Dec 7, 2011.

  1. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,458
    Location:
    Ontario, Canada
    Thanks Dan installed a running very well as always. ;)

    Daniel
     
  2. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
  3. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,458
    Location:
    Ontario, Canada
    Working well as always! ;)

    TH
     
  4. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    I have installed it in VM.
    First test from malc0de: blocked 100%.
    :thumb:

    Any news about lifetime license?

    Suggestion: when popup window that asks us if we really want to run the file is shown, it is not highlighted properly IMHO.
    I would like to see its border and header in yellow/orange color (take some HIPS warning for example).
    The user should be aware that this is potentially very risky action and might lead to infection.

    Questions about .msi installer (Windows Installer Package):
    I tried to run LibreOffice setup and nothing happened. No popup from VS that it got blocked.
    VS tray icon blinked once, turned to white and quickly back to blue again (mode ALWAYS ON).
    When I checked the log, there was an entry for C:Windows\System32\msiexec.exe = blocked (parent process).

    1) Why VS didn't show popup?
    2) Why log shows only parent process?
    3) Why is msiexec.exe blocked with "Automatically allow all software from the Windows Systems folders" option enabled?
     
    Last edited: Feb 8, 2013
  5. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Cool, thank you! We are not sure about a lifetime license yet, but I will let you know as soon as we figure it out. Yes, we are going to have a custom alert screen for the next version, and I like your idea of making it red, we will definitely do that!

    1) We suppressed the balloon for certain windows processes and made VS flash just once. We need to refine the usability, so hopefully it will make sense in the next version.
    2) VS blocked its parent process before the child process could even start.
    3) msiexec is a tricky process for us to deal with, I think we are getting close, but for now we just blocked it and made VS flash, since there are not that many .msi files compared to exe. Hopefully VS users will know to just left click to temporarily turn VS OFF to run a msi file.

    Thank you!
     
  6. G1111

    G1111 Registered Member

    Joined:
    May 11, 2005
    Posts:
    2,304
    Location:
    USA
  7. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Cool, thank you G111 and TH!
     
  8. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
  9. G1111

    G1111 Registered Member

    Joined:
    May 11, 2005
    Posts:
    2,304
    Location:
    USA
  10. Fad

    Fad Registered Member

    Joined:
    Feb 25, 2009
    Posts:
    461
    Location:
    England
    I was able to install this recently (after having issues previously when testing) and thought it was a great idea, so bought it.

    Some things annoy me far too much and have been riding the internet bareback for a while now - so this could be a great addition, without driving me insane. :thumb:

    Did find a bug which I have reported, not critical but very annoying, but on the whole I`m really quite impressed by the simplicity !
     
  11. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Thank you G111 and Fad!
     
  12. Blueshoes

    Blueshoes Registered Member

    Joined:
    Feb 13, 2010
    Posts:
    226
    Are you any closer to the Mac beta yet?
     
  13. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Yes, the beta version is turning out great. It should be ready within 2 months!
     
  14. Fad

    Fad Registered Member

    Joined:
    Feb 25, 2009
    Posts:
    461
    Location:
    England
    Is there any news regarding the blacklist issues available yet, even a vague timeframe - weeks, months ?

    I`m finding that I have to leave if in OFF mode most of the time for the sake of my sanity :D
     
  15. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Yeah, it is finished, along with several other new features. It should be ready to release in 3-4 days! Thank you!
     
  16. Fad

    Fad Registered Member

    Joined:
    Feb 25, 2009
    Posts:
    461
    Location:
    England
    That`s excellent, thanks...I`m just doing a fresh install right now so I`ll hold off a while :thumb: :thumb:
     
  17. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    We just released VoodooShield 1.08. There are a lot of new features, we think you will like them! BTW, the drag and drop to scan with VirusTotal is not yet working in Windows 8, but the Scan with VirusTotal button is. We will fix this asap.
     
    Last edited: Feb 27, 2013
  18. Fad

    Fad Registered Member

    Joined:
    Feb 25, 2009
    Posts:
    461
    Location:
    England
    Only just installed, but it`s looking good....

    I think I may have come across one issue though.....when regedit is "de-blacklisted"

    then only the 32bit one in C:\Windows\SysWOW64\ is allowed through, the 64bit one in C:\Windows\ is still denied ;)

    Is this a file or path problem...I don`t know ?
     
  19. G1111

    G1111 Registered Member

    Joined:
    May 11, 2005
    Posts:
    2,304
    Location:
    USA
    Got it. One minor bug is when you open and close settings it turns the shield back on. You then have turn the "hide" on again. Also a suggestion it would be nice when, you hold the cursor over the tray icon it showed the version number, "VoodooShield 1.08"
     
  20. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Hmmm, we better check into this. Can you please tell me what you are doing to get this result? Thank you!
     
  21. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Yeah, I like the version number idea, we will include that in the next version, thank you! There is an option in Settings / Advanced - Automatically Reactivate when returning to Browser or Email. This is a new feature, and will take a little more tweaking to get it right. But I had not noticed that bug until you pointed it out. Can you please try it with the browser minimized? Hopefully it will not turn back on. Thanks again.
     
  22. Fad

    Fad Registered Member

    Joined:
    Feb 25, 2009
    Posts:
    461
    Location:
    England
    OK, if I type regedit into the start menu > run box, then I get the VS alarm bubble, and the subsequent dialog box to "Allow" which I do, but it doesn`t remember that it was allowed...

    the actions are repeatable....(regedit is ticked as Allow in the Tweaks setting page of course)

    To be quite clear, regedit DOES actually run after the alert bubble (if I catch it in time) and the dialog box have been dealt with, but the alert bubble & box appear each and every time.

    Here`s the odd part....if I search for regedit in FileLocator (which is an unbranded Agent Ransack - search program)...
    then if I click on the regedit found in SysWOW64 then no alarms go off and the program runs as expected. (I am on Win7x64 here)

    I hope I explained that clearly enough o_O
     
    Last edited: Feb 27, 2013
  23. G1111

    G1111 Registered Member

    Joined:
    May 11, 2005
    Posts:
    2,304
    Location:
    USA
    Dan - No it has nothing to do with browser, etc. VS is on. It's just when you go to and leave settings the VS logo/shield comes on in bottom right of screen. I have this set to hide, but when you go to settings the logo comes back on.
     
  24. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    I see what you mean, I will figure out why it is doing that. Thank you for catching that!
     
  25. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    I see, yeah, that is odd. I will look into it, I am sure it is an easy fix, thank you for catching that!
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.