VoodooShield/Cyberlock

That is funny....besides I am too old to appreciate girls at the topless bar.

 

I think its great idea..since I am from Reno Nevada..I/We Nevadans know how and do it better than anyone
on the planet is partee' so see ya there!!

 

I am running latest beta on win 8.1 x64. As of now everything seem to work fine, I had set VS to be always ON by right clicking the tray icon. But VS turns off by itself now and then and prompt me that protection is off and turns on to smart mode when I click yes. My system was never idle and I was playing a movie and downloading was going on when it happened. I turned off "Automatically turn off when system is idle" for now and see what happens.

Also after a 3rd restart I got this
http://i.imgur.com/U5x0t54.png

 

Thanks Dan!

I'll try it out very soon (Windows 8.1).

Regards,
Kardo

 

Thanks Dan, about to install vers 2.0

Regards

 

I was testing the new Beta which i just downloaded no matter what i do i dont have anything in the log.... ‎the signing time says 11 ‎May ‎2014 10:20:00... is there is a new updated Beta ? i can only get this when i download

My OS is Windows 8.1 64 bit

 

Yes its the one ... but still get the ‎the signing time as 11 ‎May ‎2014 10:20:00

 

i use sandboxie and the browser is set to automatically delete contents after exiting ...so its might not be the issue... tried to install twice ... same issue no logs

 

Hi Dan

Congratulations on getting V 2.0 out, however I am having problems.

The digital sig shows 5.50 but suppose that shows UK time - GMT + 1

There is nothing shown in the log.

The pop up disappears too quickly, barely time to read it and get the cursor on it.

Does not appear to be blocking programs correctly. I have program that resets the SNR on boot up. This was being allowed to connect to the router.

When I did click on the pop up there was no Click/Allow window, instead going straight to the virus total option.

When loading Notepad, VS crashed after clicking on Allow. The window stayed screen. There was a delay before that window appeared.

I am running Win 8.1/64

 

I can duplicate these as well! Doesnt appear to block any! No prompts so far!

 

Hi Dan

Well all installed without a hitch...under Win7 Home 64bit. Training phase completed successfully but does not seem to be blocking anything at all. Haver also tried to look at the Cloud WhiteList and whilst the browser launches it just displays a blank page. But so far...other than that no issues so far.

Regards


Baldrick

 

Yes I can duplicate that too. Whitelist in the cloud is blank. Also doesnt seem to block anything so far.

 

Hello,

FYI...

 

I am in a rush to meet my family for lunch for Mother's day, but real quick... if anyone is still having issues with VS blocking new executables, the latest version really should work. If it doesn't, then I am sure there is a simple explanation. I will be back in a few hours and we will figure it out. Thank you!

 

Have fun and be good!

 

I am trying out 2.00 Beta on Windows 8.1 (x64): CPU usage is much improved over v.1.3. However memory use seems high to me (nearly 300MB). Also, with VS set to Always On, I opened several executable files. Although I received a prompt that Voodoo Shield blocked, each executable file opened and ran anyway. Also, no entries were generated in the log.

Cheers,

David

 

I will respond to the other posts later today, but real quick... You must be testing HUGE files with VS. VS should use around 30mb or so of memory by itself, and the VoodooShieldService should use around 11mb. What happens is that when VS blocks something, its memory space is added to VoodooShield.exe. I am sure there is a fix for this, but for everyday use, this should not be an issue. We will work on it and let you know! Thank you!

 

I restarted Voodoo Shield and memory use is better, around 20MB or so. Still saying it is blocking, but is actually allowing executable files to run.

Cheers,

David

 

I'm using Windows 7X64 Ultimate SP1. The only other real-time security application i'm using is NOD 32 AV only with it's HIPs disabled. I have discovered several new bugs so I will just list them with the one's I have already reported.

1.The customize option in the desktop toolbar to unburry your tray icons does not respond sometimes, and shutting down VS will fix the issue. When this happens it also suppresses the message from the safely remove hardware utility that informs you it is safe to unplug your device. Sometimes VS blocks access to the safely remove hardware utility all together.

2. Sometimes the VS tray icon, or shield still does not load at boot. I had one instance where the VS tray icon did not load despite both VS processes running in the task manager. When this happened the desktop gadget did load. So my conclusion is that the tray icon, and desktop gadget are not reliable on my particular setup.

3. VS is prompting me to allow, or deny trustedinstaller.exe which is part of the Windows update service. It is located in the system space so I do not understand why i'm being prompted for an action. I have automatically allow all software from the Windows Systems Folders ticked.

4. Sometimes the desktop gadget, and tray icon turn completely white as seen in the screen shot below. They stay that way to. This happens if I do not answer the bubble alert in the toolbar when prompted to allow, or deny trustedinstaller.exe. I'm not sure if failure to respond to other bubble alerts causes this, or not yet.

5. I have discovered a way to crash VS on my system. I can run a .exe installer (I have not tried .msi yet), and choose Install from the VS prompt when Prompted. Then when the installer Window appears if I choose cancel instead of run VS crashes right away. I get the following message: Unhandled exception has occurred in your application. If you click continue, the application will ignore this error, and attempt to continue. If you click quit the application will close immediately.

6. If i'm operating in Always On Mode, and I have automatically deactivate after 10 minutes of system idle ticked then when VS deactivates itself it prompts me with the following (not sure if it happens right after deactivation; maybe it takes a few minutes): "VoodooShield is OFF, and you are NOT PROTECTED! Would you like to activate VoodooShield?" It may be doing the same thing in Smart Mode, but I have not had a chance to check yet. Is this expected behavior? I don't want VS giving me this prompt unless i'm in Training Mode. If i'm Operating in Always On Mode then VS will enable it's protection as soon as I move the mouse, or press any key on the keyboard. If i'm in Smart Mode then VS will enable it's protection as soon as I launch a web application, plug in a USB device, etc.., and the userspace is already protected in Smart Mode if you have that option ticked. The only time I think that prompt is needed is when the user is in Training Mode, or if the user has disabled VS's protection by right clicking on the tray icon and choosing Disable Protection.

Bug report sent.

 

Dan, I just realized something. I forgot about having VT uploader already installed on my machine. It's 2.2 beta. I think this could cause a potential conflict. What do you think?

 

Removed VS 1.30 and installed latest VS 2 Beta. Installation was fine. Went into training mode upon install and ran my programs and rebooted. Went into smart mode and ran the Malwarebytes Anti-Exploit dll injection test. VS blocked and when I clicked on to run it only gave me two options "block" and "quarantine." There was no "allow" option. IDed it as a threat. Tried another and it did run check and gave option to install. The only thing I wonder if it is a false positive there is no way to install unless disable VS? Probably good for prevent someone from installing malware.

If you disable protection and exit VS the VSservice.exe continues to run. If you terminate that process you must reboot the computer to again run VS. I guess this is by design.

Seems to be running smooth so far on Windows 7 Professional SP1 x64. No conflicts with Emsisoift AM 9 Beta, MBAE Beta or LooknStop firewall. In smart mode running VS.exe 30 MB Ram and VSService.exe abut 10 MB, 0 CPU. Great work as usual Dan.

One minor glitch in smart mode with default setting VS blocked explorer.exe

 

If anyone is having issues with VS blocking exe's, can you please verify something for me? For 64 bit systems, there are 2 registry entries we need to check and make sure they are there. For 32 bit systems, there is just the 32bit.

The path of the registry entries is: HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls

I attached a picture so you can verify that the keys exist. Also, a reboot after installing VS is required to activate these dll's.



Also, we need to check to make sure the dll's are installed on your system. For 64bit systems, there should be a dll named cpn32.dll in the C:\Windows\System32\ folder and a cpn64.dll in the C:\Windows\SysWOW64\ folder. For 32bit systems, there will just be the cpn32.dll. The original installer had the incorrect paths, so these dll's were not being activated.

If there is a FOLDER named cpn32.dll in the System32 folder, or a FOLDER named cpn64.dll in the SysWOW64 folder, you can just uninstall VS, reboot, then manually delete them if they still exist, then reinstall VS, and it will work.

Sorry about this bug, and thank you for your help!

 

Yeah, that is a dll that VS needs to operate properly. We could have put both the 32bit and 64bit dll's in the Program Files\VoodooShield folder, but that is technically where they belong. Thank you!