VoodooShield/Cyberlock

Hehehe, you guys crack me up! One thing is for sure... people either LOVE or HATE VS, there is no in between . I think the haters just don't take the time to discover what VS is all about, and learn more about it. Then they use the same 4-5 arguments to bash it. I mean really, did they think that we overlooked these "issues" that they bring up? But it is funny, because I hear the same thing over and over and over again . And by no means am I calling anyone on here a hater. You guys always help me a lot with constructive criticism, and it is much appreciated!

I am going to add the feature you thought of tonight. I can either put it on the right click menu, or I can put it on the Tweaks Tab in Settings. I am reluctant to add yet another item to the right click menu, so do you think it will be a good idea to put it on the tweaks page?

 

Darn it, I was hoping that was not what he meant . I just tried one of the other application whitelisting products (obviously I cannot say which one), but it does not self protect either in the way that you are describing, basically because it does not have to (just like VS). Nothing is going to run without permission in the first place, so it is a non-issue, and I am certain that the other developers would agree. VS does protect against things like taskkill.exe, but in general, it self protects by not allowing anything else in the first place. VS 1.30 had a self protection mechanism, but it was not the best method. I did some research awhile back on self protection of processes, and basically, I could not find a good supported method. There are some "virusy" type things we can do, but then we would probably have to deal with false positives.

On a side note... while I was testing self protection of another whitelisting solution, I tried to run several Windows files, and they all ran and whitelisted automatically. I could not find an option to disable this setting though. Edit: Although, I am not sure if they are being whitelisted by path or publisher. I can tweak VS a little more to make it even more secure. But what I do know for sure is that UAC just lets them slip right by.

 

Hi Dan, I do really think that it is not something that needs to be switched on & off often therefore it is best placed in the Tweaks tab...or what about in the About tab as that is where the version of VS is identified...perhaps to counter balance the Reset Defaults button...or have I really lost it this time...?

 

OK, I can see what you mean...confusion over. VS cannot really be killed by malware under the covers and the 'someone goes onto your system and uses Task Manager to kill the .exe/service' scenario is catered for by the password protection. So best to leave something that is working great alone...having said that any serious 3rd party reviewer will be looking at self defense and how well VS protects itself so lets hope that VS passes those tests with flying colours...fingers crossed...

 

I keep ending up with two VS icons on the system tray, I wonder why that's happening.

 

If you mouse over the icons, does one disappear? What version of windows are you running?

 

Hi there, it's funny I left my PC running all day, when I return from work now I have 3 VS tray icons lol, No, they will not disappear if I hover over the icons, and I have to right click and select exit for each instance of the icon, I'm running Windows 10 Technical Preview.

http://www.realact.net/Untitled.png

 

Yeah, there were some little bugs when I tested VS with 10. The thing is, we do not want to modify the code until 10 is developed a little more further, just in case it is a bug in the OS that is causing this. So if we were to try to fix it now, something may change later, then we might get all messed up .

I am curious though, if you mouse over the icons, do they disappear? I can try 10 again a little later when I have a chance.

10 is killer by the way, huh? The only thing it is missing is a toggling desktop shield gadget / computer lock .

 

Hey, I had edited my post above to answer your question, but you answered before I did that, no they do not disappear if I mouse over them, and sure I fully understand you might not want to spend time trying to fix a bug on a beta OS, Windows 10 is really good, I'm loving it, I'm sure the final will be what most people wanted the next version of Windows to be, the bug is no biggie anyway.

 

Sounds good, thank you for letting me know. I guess that means you are triple protected, huh? . I will run it on 10 again in a debugger a little later this week and see how it does.

 

Here is 2.12 beta. I added Baldrick's idea on converting back to the free version, filtered the drag and drop upload to only include executable files and hopefully fixed an msiexec bug that TH found. Thank you!

http://www.voodooshield.com/freeoffer/Install VoodooShield.2.12 beta.exe

Edit: Oh, I also reworded some things and included the UserLog / Whitelist Editor in the free version.

 

I just used the auto-update feature to update to 2.12. The update went without issue.

 

Updated to 2.12.Great appl and great work.

 

Does one uninstall ver 2.11 first or just install 2.12 on top of 2.11? 2.11 is working really well....

 

Updated to 2.12, so far so good, I have not experienced the tray icon issue with this version btw.

 

It self Updated from 2.12 beta to 2.12 release with no issues!

 

Updated to 2.12 and working fine so far. Great work Dan.

 

I attempted to install Kaspersky 2015 today, and it progressed until it said there was 5 seconds left for the installation to complete. After that the installation never completed. I waited for about 50 minutes, and the installation continued to say there was 5 seconds left for the installation to complete. I had VS protection disabled during the entire installation. I decided to try closing VS completely from the tray icon, and Kaspersky completed it's installation about 5 seconds after closing VS from the tray icon. It seems VS is blocking Kaspersky from completing it's installation with it's protection disabled. I'm using Windows 7X64 Ultimate.

 

I am new to VoodooShield and experimenting with it (v 2.12, Windows 7 Pro) so forgive my ignorance
I have 'Deny by Default' disabled in Settings, to show prompt instead of balloon (in case the balloon disappears before I can respond).
Three questions:
1.) If I left click to 'Off' when installing new software, I still get prompts - this may be as intended, but can 'complicate' the installation. Should I right-click and select Disable Protection? What is the difference?
2.) I have had two occasions where I was only given the option to Block or Quarantine what were legitimate .exe's (though I think VS was On at the time). Is there a mechanism to allow / whitelist these?
3.) What is the significance of the red entries in the Snapshot editor?

 

VS blocked this command line string which belongs to Kaspersky Security Suite 2015. It was triggered when I disabled, and reenabled the AV protection from the tray icon. It's long enough isn't it?
"c:\windows\syswow64\rundll32.exe" "c:\program files (x86)\kaspersky lab\kaspersky internet security 15.0.1\avpuimain.dll",soundplay c:\program files (x86)\kaspersky lab\kaspersky internet security 15.0.1\skin\resources\neutral\sounds\infected.wav

 

Thank you CE, auron12, Houley456, RealAct, TH and ghodgson!!!

 

Thank you for letting me know! Can you please email me a link so I can test this tomorrow? I just want to make sure that I am using the exact version you used.

Edit: BTW, thankfully we have had VERY few bugs, mostly related to Windows 10... much less than the initial release of 1.0. I wanted to say thank you very much to all of you who have helped with beta testing, found and reported bugs. You were an incredible help!!! Thank you!

VS 2.0 still is not quite perfect, but our new developer is starting this week, he is the same guy who developed the KMD. I have pretty much reached the limits of my abilities, and he is an amazing developer, so he is going to take over. I will still be active on Wilders, maybe even more than before since I should have more free time . I am not sure if the new developer will be active on Wilders or not, but I will let you know!

 

Hi paulderdash, nice to meet you! Thank you for trying VS, if you want a free Pro license, please email me at dan@voodooShield.com.

1. In Smart Mode, VS will still protect the user space. Yeah, I would right click and choose disable protection. I am not sure when this happened, but at some point, all of us (including myself) stopped disabling our security software when we install new software. You can always drag and drop to the Desktop Shield Gadget if you want to scan it first though.

2. If only the Block and Quarantine buttons are showing, that means that a threat was detected. It depends on where you run the file from and what mode you are in. If you want to allow something, in AlwaysON mode, just left click the shield to turn VS OFF. This also applies to Smart Mode, assuming the file is not in the user space. If anything, just right click and choose disable protection or training. I hope that makes sense, if not, please let me know!

3. UserLog - Blocked files are red. Snapshot Editor - System files are red. Sorry, I should include that on that window, I will add that soon!

Thank you!

 

Cool, I will check this out too, thank you!

 

Still have the rundll quirks...

Spoiler: screenshot