VoodooShield/Cyberlock

Discussion in 'other anti-malware software' started by CloneRanger, Dec 7, 2011.

  1. Djigi

    Djigi Registered Member

    Joined:
    Aug 13, 2012
    Posts:
    554
    Location:
    Croatia
    Why VS prompt about some stuff when is obviously that file is safe?
    Like this:
    Chrome.PNG

    How to set VS not to warn when the score with VT 0/57, file is digitally signed and when Ai "Safe"?
     
  2. Gandalf_The_Grey

    Gandalf_The_Grey Registered Member

    Joined:
    Jan 31, 2012
    Posts:
    1,188
    Location:
    The Netherlands
    Dan it seems that the issue with Nitro Reader on Windows 10 is almost resolved with version 3.46.
    When opening a pdf file the shield in the notification area of the task bar VoodooShield turns blue. So it seems that it is recognized as web app.
    When going to the web app page on VoodooShield it doesn't show Nitro Reader running. I still have to press auto detect additional running web apps for nitrop~4
    After that you see nitrop~4 running as web app on that page.
     
  3. Baldrick

    Baldrick Registered Member

    Joined:
    May 11, 2002
    Posts:
    2,674
    Location:
    South Wales, UK
    Hi Dan

    HAve for the first time had VS put something into Quarantine...not sure why that was as the item quarantined was the picasa.exe which has been on my system & used for many years whilst VS has been installed. But the main point of the post is to report that once I had found out what had happened I tried torestore the item from Quarantine; by right clicking it & selecting 'Restore' from the context menu displayed...and nothing happened. I tried this a few times, rebooted and tried again but no joy...it would not restore, so either I was doing something wrong or there is an issue with the restore feature in Quarantine.

    In the end I just deleted the item from Quarantine (that worked...;)) and reinstalled Picasa.

    Hope that helps? :D

    Regards, Baldrick
     
  4. EvjlsRain

    EvjlsRain Registered Member

    Joined:
    Apr 26, 2016
    Posts:
    31
    is it possible to make VS protect against bad browser extensions/PUPs? :)
    like adding the ability to scan .crx file

    thank you
     
  5. Cache

    Cache Registered Member

    Joined:
    May 20, 2016
    Posts:
    445
    Location:
    Mercia
    Not sure if this is related to the bug you have found but I noticed yesterday what I thought was a bug. I noticed that a system file (raserver.exe) had been allowed to run for the first time whilst I was changing some Windows settings. I checked and saw that it had been whitelisted. I then deleted it out of the whitelist and later went back to the User Log and right clicked the process file to try and whitelist it again. It is greyed out and says "Already whitelsited". I have closed and restarted VS but get the same result.
     
    Last edited: Nov 12, 2016
  6. Cache

    Cache Registered Member

    Joined:
    May 20, 2016
    Posts:
    445
    Location:
    Mercia
    If you run VS in AutoPilot mode then you would not get the prompt for such a file.

    So I assume you are in either Smart or Always On mode. In which case, when the computer is locked (GUI says ON) you will get the prompt. If unlocked, it should auto allow without a prompt.

    At least that is my understanding. As the User Guide points out, if you don't like prompts then AutoPilot might be the best mode for you.
     
  7. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Yeah, I believe these are all symptoms of the same bug... I am working on a fix, sorry about that, thank you!
     
  8. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Ok, I know exactly what is wrong, and I think it is fixed... let me test it for a half day or day just to make sure, then I will release a new version.
     
  9. Cache

    Cache Registered Member

    Joined:
    May 20, 2016
    Posts:
    445
    Location:
    Mercia
    Well done Dan! Thanks for the updating us on your progress.
     
  10. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,209
    Location:
    Among the gum trees
    Cool Dan! Thanks for the update. :cool:
     
  11. plat1098

    plat1098 Guest

    VS 346 (b): do not touch PowerShell w/a ten foot pole. Other than that, continues to function well in all respects.
     
  12. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Ok, I believe all of these issues are fixed… they are all essentially the same issue. VS handles process on multiple threads, so that more than one prompt can be displayed at one time. It was simply mixing up the threads, and was confused… I believe because one single line of code was out of place. This is also true for Baldrick’s issue (thank you Baldrick, sorry about that).

    Multi-threading is not easy to work with, especially when it comes to handling processes. But it was important to me a long time ago to not freeze the entire computer while waiting for a user response to a prompt (before showing the next prompt), like UAC and most others do. If we did not have this multi-threading to deal with, VS would be infinitely easier to work on… but I believe it is worth it.

    Anyway, VS is not going to mess up for me until 5 minutes after I post it on here, so I might as well post it and see what happens ;). I am only half joking about this btw… I swear, it happens every time.

    So anyway, I think it is fixed, but if there are any issues, please let me know. The good news is that I know exactly what is causing it… unlike the infamous freeze issue. So if there are still a couple of issue, they should be easy to fix.

    https://voodooshield.com/Download/beta3/InstallVoodooShield347.exe

    Thank you guys, I will catch up on the posts asap!
     
  13. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,209
    Location:
    Among the gum trees
    Well done Mate, it sure does looks like you've solved my Chrome / Norton Toolbar bug.

    I was still prompted for the Toolbar after putting VS in Training Mode and opening Chrome, but since I allowed the toolbar the once I haven't been prompted again.

    ... Oh, and the Secuina PSI tray icon shows up too.
     
  14. lunarlander

    lunarlander Registered Member

    Joined:
    Apr 30, 2011
    Posts:
    326
    Hi Dan,

    Does VS 347 contain the new AI ?
     
  15. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,209
    Location:
    Among the gum trees
    Unfortunately it works on one machine but is not on the second machine with the same setup. I'm getting prompted every time I open chrome again.
     
  16. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,209
    Location:
    Among the gum trees
    That method does not work on my machine.
     
  17. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,209
    Location:
    Among the gum trees
    For some reason on one of my three machines I keep being prompted for Chrome (which is actually the Norton Toolbar), but on the other two machines I am not prompted.

    If I put the troubled machine in Autopilot mode Chrome is scanned and the toolbar opens. All three machines have the same software and configurations so I just don't understand why I have this issue on 1/3 machines. :confused:

    Edit: I just found this in the DeveloperLog.Log.
    Code:
    [11-13-2016 15:55:23] [ERROR] - Exception in GetSHA256b (file does not exist or access denied): langid
    Related??
     
    Last edited: Nov 13, 2016
  18. wasgij6

    wasgij6 Registered Member

    Joined:
    Mar 29, 2011
    Posts:
    321
    Dan said it would be a couple more weeks before it was ready

     
  19. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,209
    Location:
    Among the gum trees
    I think I've solved the issue on my problem machine. I deleted Chrome from the whitelist, restarted my machine, put VS in Training Mode, open Chrome, put VS in Smart Mode = no more prompts for Chrome (Norton toolbar). :thumb:
     
  20. Baldrick

    Baldrick Registered Member

    Joined:
    May 11, 2002
    Posts:
    2,674
    Location:
    South Wales, UK
    Hi Dan

    Hope that you are well...not working too hard this weekend?;)

    Thanks for the heads up on the Quarantine 'issue' and for the rapid fix (no need to apologise...and for what?).

    Have installed .47 and giving a run through so will advise back as to whether I find anything further...as per usual.

    Regards, Baldrick
     
    Last edited: Nov 13, 2016
  21. M3gatron

    M3gatron Registered Member

    Joined:
    Oct 3, 2016
    Posts:
    41
    Location:
    ::1
    It seems to be fixed- I was running a task from a task scheduler launching the following command

    powershell -ExecutionPolicy bypass -File "F:\xxx.ps1"


    @VoodooShield whilst installation it states "While VoodooShield™ is compatible with UAC, to avoid redundant blocking of new executable files, you might consider disabling User Account Control (UAC) while VoodooShield™ is running."

    are there any known issue with using UAC along with voodooshield?

     
  22. M3gatron

    M3gatron Registered Member

    Joined:
    Oct 3, 2016
    Posts:
    41
    Location:
    ::1
    @VoodooShield another cosmetic issue is that when editing (deleting/adding) entries in whitelist or command line, the window is refreshed and displayed the first entry (try a delete the last entry for example and you will notice that the windows goes up to the first line)

    Also deleting multiple entries is not "user friendly". (attached) - maybe expand vertically the window

    Also it appears that when trying to launch a file with no threats detected via VT I am able to click on "Threat not detected" and it actually performs a google search for this term!
     

    Attached Files:

    Last edited: Nov 13, 2016
  23. ghodgson

    ghodgson Registered Member

    Joined:
    Dec 20, 2003
    Posts:
    835
    Location:
    UK
    Hi, - This issue has been there for a long time and I believe it's been reported several times here previously, but presently I don't think it's very far up Dan's 'to do' list.
     
  24. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,209
    Location:
    Among the gum trees
    I had a prompt for Chrome on one of my other machines this morning that was opening yesterday without prompting. After allowing it I'm not prompted any more.
     
  25. plat1098

    plat1098 Guest

    Do others use the Snapshot/Advanced Snapshot features? I use this frequently and find that it's effective in app. whitelisting.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.