VoodooShield/Cyberlock

No issues whatsoever
Test setup Here

 

Just what's in my siggy and it's works fine nothing from VS such as freezing or crashes ever....!

Daniel

 

VS 3.29 froze shortly after I was prompted to allow a program install. Blacklist and AI scans both enabled and running in Smart mode. Sent logs to Dan.

 

Thank you guys... I will catch up soon. A few people have asked that I post the EfficacyTest app that I wrote, so here it is. It is super simple, but it just makes testing a little easier. The best part is that it will generate truly random sample sets.

www.voodooshield.com/artwork/EfficacyTest.exe

 

@VoodooShield , Dan,

All running good here on all my systems with 3.29! Running in AutoPilot!

 

Tnx for that little programs....

 

Another freeze with 3.29, this time with AI turned off and blacklist on. Sent logs to Dan.

 

interesting info on Cylance: link

 

I'm one of those who've never had any freeze problems with VS. But I don't use any 'AV' either just MBAE and ZAM.
Win 7 64 bit, always run VS in smart mode.

 

win 10 x64 , vs 3.29 ( auto pilot ) and norton security v 22.7 running smooth thanks for the updat Dan

 

Hey, Dan!

I've decided to install VS on my computer running Windows 10. I've checked the web app list, and Vivaldi browser is not there by standard.
Do you have any plans of including Vivaldi in the VS's free version in a near future?
By the way, I haven't experimented any freezes so far, but I'm only running Windows Defender with PUP detection.

Thanks in advance!

 

https://www.wilderssecurity.com/threads/ever-heard-of-cylance.382682/page-10#post-2598615

 

If you want to use VS to defend against USB threats do you need to set "Always On"? "Smart" defends just web-based threats?

BTW, I find training mode pop-ups (turn on VS) too frequent - would frighten the wife! Any chance of setting training mode for a set period, perhaps 24 hours, before pop-ups? I want to eliminate the allow/block pop-ups that invariably result in a netbook being plumped on my desk, which a training period of 24hrs should accomplish.

 

@VoodooShield A brief heads up, VS fails on Windows 10 Anniversary Update builds. Starting Aug. 2nd with that update on Windows 10, Microsoft is enforcing SHA256 hashes on all kernel-mode drivers. Not only that, but those SHA256 hashes are required to be signed by Microsoft Windows instead of the actual software publisher, So I wanted to give you a heads up since VS kmd is failing to verify sig on latest RS1 Insider builds.

Not only is this going to be bananas for security software developers, but I predict Vista-like madness for hardware developers as well. Microsoft just rendered all prior drivers deprecated. Coming to Windows 7 in 2017 as well.

 

WildByDesign, is that saying that all software or just security software? If it's all, I'll revert to Win 8.1 and turn off updates. I'm using some programs on 10 Pro that's basically orphan. The company no longer exists.

 

Just low level kernel mode stuff (.sys) such as hardware drivers but also affects kernel mode drivers used by security software as well. Most antivirus software, for example, contain multiple kernel drivers. From what I can tell so far, seems to just be enforced on C:\Windows\System32\drivers at the moment but could expand further in time as they deprecate SHA-1.

 

I would suggest 90-100%... I always leave it on default for testing. Thank you!

 

Hmmm, I am not sure what other setting. The main thing I had to do was to disable the parent process feature. If you figure out what setting, please post it, I would be curious . Thank you!

 

Sure, thank you!

 

Oh boy... So VoodooAi was disabled and it still froze? That is really good to know, but kind of unexpected. Please confirm that is the case... thank you!

 

Hey Kees, thank you... this is interesting as well: http://www.channelweb.co.uk/crn-uk/...y-in-the-middle-in-sophos-and-cylance-dispute

Man is it getting deep... and I am not talking about the thoughts .

 

Hehehe, I know... nothing makes any sense, and adding additional logging has not helped. I really do think it has to do with protected processes like Kees mentioned... I think each time it happens, dllhost.exe is involved. Basically, the log will show dllhost.exe (toward the end), then you will see taskmanager in the log (from when the user brings up the task manager to kill the gui). If everyone else sees this too, then we can focus on dllhost... please let me know!

 

Hi Jeff, nice to meet you! We will not be adding any web apps for a few months, but we might be able to after that. If you email me as support@voodooshield.com, I can set you up with a free VS Pro license, then you can just add it as a custom web app. Thank you!

 

Yeah, it is heating up.

Sophos ignored my request for a joint test, so we can actually see who performs better.

I will contact one of the AV labs and see if we can move ahead with testing VS... it is time to find out for sure . Tomorrow I will do a little more testing to make sure that the option to disable the blacklist is working properly, then I will send them an email request a test. I have already talked to them, so they are expecting my email... even though I am probably a month or so late getting back to them.

 

WOW! That's really great, Dan!
Thank you very much!