VoodooShield/Cyberlock

Discussion in 'other anti-malware software' started by CloneRanger, Dec 7, 2011.

  1. askmark

    askmark Registered Member

    Joined:
    Jul 7, 2016
    Posts:
    392
    Location:
    united kingdom
    @VoodooShield

    Hi Dan,

    Testing 3.41 I have found a small graphical glitch. The mini notification window that appears when a file is blocked does not appear in the same position each time. See screenshot below:

    1st time executable is run and scanned by VS pop appears expected position.

    2016-09-27_12-13-37.png

    2nd time exe is run and scanned...popup has shifted over to the left.

    2016-09-27_12-13-59.png

    Each subsequent scan, the popup shifts over to the left until eventually returning back to the far right. Then the cycle repeats again.

    Thanks

    Mark
     
  2. shmu26

    shmu26 Registered Member

    Joined:
    Jul 9, 2015
    Posts:
    1,549
    testing 3.41
    I ran my software updater, and it downloaded an update for firefox.
    but Ai said it isn't safe.
    digitally signed, good. VT score, good. But the heuristic analysis came out bad, and I was advised not to install...
     
  3. Cache

    Cache Registered Member

    Joined:
    May 20, 2016
    Posts:
    445
    Location:
    Mercia
    Here is my Process Explorer CPU and memory usage for the last two versions that I have installed:

    VS338.PNG 338 VS340.PNG 340

    As you can see, they are very similar, both being used in Always On mode. I would be interested to know why Task Manager consistently shows a much lower memory usage.
     
  4. askmark

    askmark Registered Member

    Joined:
    Jul 7, 2016
    Posts:
    392
    Location:
    united kingdom
    The reason Task Manager is showing a lower memory usage than Process Hacker and Process Explorer is, you are not comparing the same values in each program.

    Task Manager shows the amount of Private Working Set memory used by a program, so you need to select the same values in Process Hacker/Process Explorer...

    In Process Hacker the column is named "Private WS" and in Process Explorer it's called "WS Private".

    Voodooshield_Mem_Usage_2016-09-27_15-05-06.png
     
  5. burebista

    burebista Registered Member

    Joined:
    Mar 4, 2010
    Posts:
    225
    Location:
    Romania
    ^^Thanks. :thumb:
     
  6. Cache

    Cache Registered Member

    Joined:
    May 20, 2016
    Posts:
    445
    Location:
    Mercia
    Many thanks for that mark. The two columns that I see in Process Explorer are called Private Bytes and Working Set. How do I get to view " Private WS" which you are showing inserted between those two? I've had a look in PE but can't get it to display. TIA.
     
  7. askmark

    askmark Registered Member

    Joined:
    Jul 7, 2016
    Posts:
    392
    Location:
    united kingdom
    You're welcome :)

    To show WS Private, you need to right-click on any part of the column headings and then select the option "Select Columns..."

    Program_Manager_explorer_2016-09-27_16-10-23.png

    Then, select the "Process Memory" tab and then select "WS Private Bytes"

    Select_Columns_procexp_30-08-201664_2016-09-27_16-11-09.png
     
  8. Cache

    Cache Registered Member

    Joined:
    May 20, 2016
    Posts:
    445
    Location:
    Mercia
    Many thanks again mark! That issue has been bugging me for weeks! :thumb:
     
  9. askmark

    askmark Registered Member

    Joined:
    Jul 7, 2016
    Posts:
    392
    Location:
    united kingdom
    No problem. I'm glad I was able to bring an end to your frustration!
     
  10. EvjlsRain

    EvjlsRain Registered Member

    Joined:
    Apr 26, 2016
    Posts:
    31
    v3.40 and v3.41 has been working perfectly for me for 2 days. I tested them in some situations which VS usually froze in the past but it has been doing well without freeze :thumb:
    I will keep using VS for a few days to test if it can freeze or not
    Thank you Dan
     
  11. Callender

    Callender Registered Member

    Joined:
    Jan 9, 2015
    Posts:
    172
    Location:
    London UK
    Installed 3.41 and command lines section remained blank. Manually adding a command line produced a MS Visual C++ Error. Did a complete removal of VS including deleting leftovers. Reinstalled and the problem remained. Went back to an earlier version of VS and "version expired"

    Did another clean install of VS 3.41 and got the same problem. Ran this fix
    -------------------------------------------------------------------------------------------------------------------------------------------
    Selected fix description (Install/Update Visual C++ runtime):

    This fix will install the following Visual C++ redistributable packages: (including service packs)

    VC++ 2005 SP1, VC++ 2008 SP1, VC++ 2010 SP1, VC++ 2012, VC++ 2013 and VC++ 2015.
    ------------------------------------------------------------------------------------------------------------------------------------------

    Still had problems. Uninstalled VS again and deleted leftovers. Then copied old directory C:\ProgramData\VoodooShield from backup to windows partition.

    Renamed commandlines3.dat to commandlines3.bak and then renamed the old commandlines.dat file to commandlines3.dat. Seems to be working.

    Current ProgramData folder:
    VoodooShield Program Data new.jpg


    Old ProgamData folder:
    VoodooShield Program Data old.jpg

    So I'm wondering why VS command line list doesn't work when freshly installed until the old commandlines.dat file was renamed and imported.
     
  12. Gandalf_The_Grey

    Gandalf_The_Grey Registered Member

    Joined:
    Jan 31, 2012
    Posts:
    1,188
    Location:
    The Netherlands
    No freezing issues to report with version 3.40 and 3.41.
    I sometimes have the message that VoodooShield is off, would you like to activate..

    . voodooshileld off.PNG
     
  13. EvjlsRain

    EvjlsRain Registered Member

    Joined:
    Apr 26, 2016
    Posts:
    31
    log sent. VS v3.41 just froze :(
    the log contains "void"
     
  14. guest

    guest Guest

    There is an an option for that:
    "Advanced Settings" - "Notify me after [5] Minutes if VoodooShield if off"
     
  15. martk1972

    martk1972 Registered Member

    Joined:
    Dec 6, 2009
    Posts:
    6
    Location:
    Sheffield, UK
    Hi Dan, I've got VS 3.41 installed and it's been working fine until I just had a freeze.

    This is the entry in DeveloperLog.log;

    [09-28-2016 18:03:50] [ERROR] - Void OpenUserPrompt(VoodooShield.ProcessItem, Boolean ByRef, Boolean, Boolean, Int32): 12
    [09-28-2016 18:03:56] [ERROR] - Void OpenUserPrompt(VoodooShield.ProcessItem, Boolean ByRef, Boolean, Boolean, Int32): 11

    Hope this helps, keep up the good work!
     
  16. Gandalf_The_Grey

    Gandalf_The_Grey Registered Member

    Joined:
    Jan 31, 2012
    Posts:
    1,188
    Location:
    The Netherlands
    Thanks, but VoodooShield shouldn't be off. It should stay in smart mode.
     
  17. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Hmmm, I am not sure... if it continues to be an issue, please let me know. I will take a look at it and see if I can reproduce the error. Thank you!
     
  18. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Thank you guys for reporting the freeze issues... I think we are getting close. I need to ask Vlad something, and I will email him soon... I just have to figure out how to word the question.

    Anyway, please try this version, and if it freezes, please send me your DeveloperLog.log files.

    https://voodooshield.com/Download/beta3/InstallVoodooShield.exe

    Thank you guys!
     
  19. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    BTW, VS will actually stay in Smart Mode either way... whether you click yes or no to this prompt. If you click yes, it will toggle to ON, if you click no, it will stay OFF. Does that make sense?
     
  20. Gandalf_The_Grey

    Gandalf_The_Grey Registered Member

    Joined:
    Jan 31, 2012
    Posts:
    1,188
    Location:
    The Netherlands
    Why does it toggle to off, I don't want that and haven't done anything (I think) to cause it.
     
  21. Gandalf_The_Grey

    Gandalf_The_Grey Registered Member

    Joined:
    Jan 31, 2012
    Posts:
    1,188
    Location:
    The Netherlands
    Maybe it was off when windows starts and now when launching a web app it asks if I want to protect it.
     
  22. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    There are a lot of reasons VS might toggle to OFF in Smart Mode...
    1. If all of the web apps are closed
    2. VS will auto deactivate after 10 minutes if the user is not interacting with the mouse or keyboard (this is the third option in Settings / Advanced Tab)
    3. If the user manually clicks on the Desktop Shield Gadget
    4. There might be some others... I would have to think about it for awhile

    The reason VS toggles to OFF is so that it can automatically and safely build the tiny, customized whitelist when the computer is not at risk. This drastically reduces the number of dangerous affirmative user prompts. Please let me know if this doesn't make sense, thank you!
     
  23. Gandalf_The_Grey

    Gandalf_The_Grey Registered Member

    Joined:
    Jan 31, 2012
    Posts:
    1,188
    Location:
    The Netherlands
    It does make sense. The only thing is normally when opening an web app the protection is atomatically resumed and the icon turns blue. Now I got a prompt.
    Like the freezing issue it doen't occur all the time. When it does I will pay closer attention to when it happens.
    @VoodooShield It happened this morning again after a cold boot. So VoodooShield was off till I started a web app (google chrome) and got the prompt.
    To me this is not normal behaviour.
     
    Last edited: Sep 29, 2016
  24. shmu26

    shmu26 Registered Member

    Joined:
    Jul 9, 2015
    Posts:
    1,549
    I had a similar problem today, when zemana antimalware wanted to update. But this time, the update was initiated by the parent program. VS said update not safe.
    VS doesn't seem to like program updates very much...
     
  25. lunarlander

    lunarlander Registered Member

    Joined:
    Apr 30, 2011
    Posts:
    326
    Hi Dan,

    Got a question for you. You explained
    If a unwanted application got downloaded ( like a drive by infection ) VS will not run it. But when VS turns off, and start building the white list, wouldn't it include the unwanted application in the white list ?
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.