VoodooShield/Cyberlock

Applocker works great but it is extremely daunting to manage and build the whitelist. VS automatically builds the whitelist for you, and has several features to give you insight on the file (blacklist, VoodooAi, digital signature, user recommendations, etc). VS also is a lot more user-friendly so that even a novice can use it... whereas a novice would never be able to use Applocker. In the end, it is probably the same level of protection... it is just a question of usability. Also, keep in mind that VS also has VoodooAi, which is quite similar to SmartScreen. I guess you can think of VS as one program that is an enhanced version of UAC, SmartScreen and Applocker... all in one. Thank you!

 

Great point... this is true as well, thank you!

 

Thank you fax!

 

Very cool... please let me know if you think we need to tweak it in any way, thank you!

 

Cool, thank you, please run the 3.08 freeze test version and let me know!

 

Yeah, exactly kees, thank you for pointing this out!

 

Sure, thank you as well! Please try the 3.08 freeze test and let me know how it does!

 

This is completely fixed, thank you! (if not, please let me know)

 

Cool, thank you for letting me know... btw, which cloud option are you referring to?

 

Yeah, there is an option in Settings / Advanced for VS to auto deactivate after 10 minutes... this is to auto allow background processes, like backups and stuff. When the user returns to the computer, VS will turn back on. Thank you!

 

Yeah, Vlad thought he was going to have time, but it turns out that he does not. We will fix the freeze issue, then add the new features once VS is completely stable, thank you!

 

Thank you Kees... I hope to sell my consulting business soon and focus only on VS. Everything will be so much easier once I do this .

 

Thank you Cache, Tyrizian, clubhouse1, josin and indian11 for your kind words, I appreciate that very much!

 

Cool, thank you, this should be fixed, if not, please let me know!

 

Cool, thank you... it turned out to be an easy fix, we should be good to go!

 

Cool, if you need a license, please email me at support at voodooshield.com, I will set one up for you. Are you sure that the files are being quarantined, and just not blocked? Thank you!

 

Very cool, thank you Gordon, Baldrick, Antarctica and TH!

 

Hmmm, a web app must have been trying to spawn notepad. Do you remember what the scenario was? Thank you!

 

Cool, we should be able to add that. BTW, what happens when you keep the prompt open for a while when VS is calculating VoodooAi? Like, how long does it take? Thank you!

 

Thank you for letting me know. I am not sure what your procedure was... did you reset your whitelist or delete Launchy from the whitelist? If you reset your whitelist and took and advanced snapshot, then Launchy will probably be whitelisted since it is still in the registry, under recent programs.

 

Yeah, VS will block drive by downloads and RATs. VS might block the temp file or not... it depends on a lot of things, like if the file is a parent process of the installer, or if both the installer and the temp file is signed with the same signature. Either way, the whole idea of VS is to block as little as possible, but to block what needs to be blocked. Thank you!

 

Thank you for the explanation Dan - that makes perfect sense to allow background processes to run with VS off.

 

Ok, I think I am 100% caught up on the posts... sorry it took so long, if I missed anything, please let me know.

For now, anyone who is experiencing the freeze issue, please run the 3.08 freeze test version... please keep in mind that the dismhost bug is not fixed in this version.

If you are running any other version, there is no reason to post a freeze or send me the logs.

Also, thank you guys for sending me your logs the last week or so... sorry if I did not respond to the emails, but I wanted to let you know that I did receive all of the logs. Thank you!

 

The one that I'm getting frequently is rundll32.exe appxdeplotmentextensions.onecore.dll,shellrefresh

 

Yeap, windows store updating apps. You will get this on all VS versions.
Already reported to Dan several times.