VoodooShield/Cyberlock

I know that I could have obtained a free license but I prefer to pay. I'm approaching the end of my second year of Voodooshield paid for usage and plan to renew. The free version doesn't allow adding all web apps or custom web apps that I need to add. Plus there were a few other things like custom whitelisting or whitelist editing, command line editing and so on. Actually I don't remember exactly what the limitations of the free version were but it did not meet my needs so I use VS Pro.

 

I would appreciate some clarification regarding the option "Deny by Default - Uncheck to show prompt instead of balloon".



I have been running VS with this checked and have had the mini prompt pop up occasionally, always for safe programs that I have allowed, or tried to allow. I unchecked it a few days ago and so far I have not had the full user prompt show up for any reason. However my AV update was auto-allowed yesterday as opposed to being blocked with the mini-prompt as happened on the previous occasion.

So it seems to me that with this option unchecked, VS will auto-allow a new program that it finds safe whereas when it is checked, even safe programs will be auto-blocked by the mini prompt. Is that the case? It certainly seems a better option, at least for my system. I am using VS in Always On mode.

 

Cache

I was trying to say I had it unchecked. I think I posted a screen shot of it being unchecked.
I get the user prompt instead of balloon. when trying to click on any new install exe. if I have addguard off. otherwise it blocks it first.

 

So you are saying that with it unchecked, VS will auto-block safe programs with the full prompt in the same way as the mini-prompt does? That does not appear to be my limited experience with it unchecked. However I suspect that my AV updated when I was away from my machine and VS was showing "Off" which may make a difference.

I would appreciate Dan's input on this in due course as it is still not clear to me what I can expect with this option unchecked. Logically, if you have "Deny by Default" unchecked, then you would think that VS would "Allow by Default" as long of course as the file is deemed safe. However the manual regarding the Full User Prompt indicates that the user has to make a decision to allow, block, sandbox etc. It does not say what happens when the user is not around to make a decision! Repeating myself, my limited experience is that if I am not at my PC, the Full User Prompt (if indeed it actually pops up when Always On is Off) will allow a safe file whereas the mini prompt would block it.

 

"Deny by Default" is a stricter approach for handling unknown executables. It's simply blocked.

If you don't answer the "Full Prompt" the file is automatically blocked after some time. "Blocking in ..."
And as you can see in the above post #12722 the file would be blocked: "Blocking in 18", even if it's safe and no threat is found.

 

Thanks mood, I understand that but can you confirm that the Full Prompt will appear when a PC is unattended and "Always On" is "Off". My queries have emanated from an automatic update of my AV that has a different filename with each update and therefore cannot be whitelisted. I am happy that with this option unchecked it has updated but, if the Full User Prompt does indeed always pop up, then it obviously didn't block the update on this occasion.

 

Hi, I have a very tiny question.* OK, VS is in SMART mode, after a time, the little tray icon shows red, but in task manager, both VS icons are blue and are running. So, this means VS isn't OFF right?, one, and two, in AUTOPILOT mode this doesn't seem to happen at all. Is the tray icon's turning red for any other reason besides being turned off an expected behavior?

Also, you can delete the desktop icon, right? Not the gadget which I've hidden, the icon.

*I have searched forum for answers already.

Edit: here's some examples. I hope this is coherent. Basically, I haven't done anything with VoodooShield in SMART mode, it just seems to turn red after a while.

 

I had no idea that a free 2-year VoodooShield Premium offer existed until today. I emailed the developer and he responded immediately with the info I needed to upgrade. I am at a loss for words. My expenses currently prohibit being able to afford many things, even a $15, $20 or $25 charge is out of reach. Now I have a couple years to come up with the funds to continue my protection. To Dan: thank you, sir. From the bottom of my heart.

 

"I had no idea that a free 2-year VoodooShield Premium offer existed until today. I emailed the developer and he responded immediately with the info I needed to upgrade. I am at a loss for words. My expenses currently prohibit being able to afford many things, even a $15, $20 or $25 charge is out of reach. Now I have a couple years to come up with the funds to continue my protection. To Dan: thank you, sir. From the bottom of my heart."

 

this is another scratch head setting. with my VS setup and after looking at my screen shot how does this apply ? if unattended after x amount of time file is auto blocked, I don't see hot this setting would work.

 

ok just did another attempt at the same firewall exe and this time the prompt popup shows blocking in 20 and never starts counting down. a bug? so I closed prompt with the X not selecting any option to block sand box or allow and then clicked on the setup exe again and it starting counting down right away. it never did let the exe execute. that make me wonder what that setting I posted really does? does one setting cancel the other out?

 

ok so I checked the deny by default clicked the same exe and got the balloon counting down in 20 after countdown the exe was still blocked and so what the heck is that setting I posted above all about?

 

If the protection is off there shouldn't appear any prompt
But in some cases it can (even if it's off) if you have have selected the following options:
[X] Automatically scan user space items when VoodooShield is OFF in Smart or Always ON mode
[X] Automatically run file after scan if threat is not detected when VoodooShield if OFF in Smart or Always ON mode
If the "automatic update-files" from your AV are in user-space and the files are "safe" you see no Full Prompt because they were automatically allowed.

 

Thanks mood that really clarifies the matter. I had completely forgotten Dan's post #7479 that answers my query nicely.

EDIT
I would just add that Advanced Settings appear to have changed since the manual was written and
"[X] Automatically scan user space items when VoodooShield is OFF in Smart or Always ON mode"
has been removed.

 

@VoodooShield Dan, How do I whitelist my Epson printer?
I keep getting a prompt (for example) "Blocked: c:\windows\system32\spool\drivers\x64\3\e_yarnnme.exe" even while it is allowed and whitelisted everytime I print something.
If needed I can sent you the logs.
These are the files that are blocked when printing:

Code:

23-10-2016 13:35 Blocked e_yarnnme.exe c:\windows\system32\spool\drivers\x64\3\e_yarnnme.exe 843f4ddfd4607199b7dc5a07c4edead43afd1d5a61fe5a7f0894d28f27e46620
23-10-2016 13:35 Allowed e_yarnnme.exe c:\windows\system32\spool\drivers\x64\3\e_yarnnme.exe 843f4ddfd4607199b7dc5a07c4edead43afd1d5a61fe5a7f0894d28f27e46620
23-10-2016 14:25 Blocked e_yarnnme.exe c:\windows\system32\spool\drivers\x64\3\e_yarnnme.exe 843f4ddfd4607199b7dc5a07c4edead43afd1d5a61fe5a7f0894d28f27e46620
26-10-2016 16:38 Blocked e_yarnnme.exe c:\windows\system32\spool\drivers\x64\3\e_yarnnme.exe 843f4ddfd4607199b7dc5a07c4edead43afd1d5a61fe5a7f0894d28f27e46620
26-10-2016 22:31 Blocked e_yarnnme.exe c:\windows\system32\spool\drivers\x64\3\e_yarnnme.exe 843f4ddfd4607199b7dc5a07c4edead43afd1d5a61fe5a7f0894d28f27e46620
26-10-2016 22:32 Blocked e_yarnnme.exe c:\windows\system32\spool\drivers\x64\3\e_yarnnme.exe 843f4ddfd4607199b7dc5a07c4edead43afd1d5a61fe5a7f0894d28f27e46620
21-10-2016 14:22 Allowed e_yatinme.exe c:\windows\system32\spool\drivers\x64\3\e_yatinme.exe a42eadc8546859a717f149c044235410b5908837b471889b281195c860ac558d
21-10-2016 14:58 Allowed e_ytsnme.exe c:\windows\system32\spool\drivers\x64\3\e_ytsnme.exe 2e10caa2b649410b9c8041d35f92b1e5aef538853a7ab7db3438effbe042836f
21-10-2016 14:58 Allowed e_yubnme.exe c:\windows\system32\spool\drivers\x64\3\e_yubnme.exe 465faf8d89997f03db5cf114b6e3edbf1723842d7c815558ecc1a331e883864c 

 

I find this confusing, cause I have tested VS and it still blocks stuff in Off/Smart/Red mode when no internet apps are running

 

The "OFF Mode" you refer to is in fact the Training Mode when VS is indeed off. The user has to engage Training Mode manually.

However VS also toggles to OFF when it is in SMART or Always ON mode after a period of inactivity. I think the confusion arises because when VS toggles to Off, it is still protecting your computer. At least that is my understanding.

 

If you switch VS yourself to Off, it shouldn't block anymore (except if "Custom Folders" is activated and folders on the right side are selected)
If it has switched in "Always ON"-mode to "Off" it's still protecting if you have the following option selected (and it has found "unsafe" files):
[X] Automatically scan user space items when VoodooShield is OFF in Smart or Always ON mode

 

It will block whether I switch it off manually or I close my browser. I don't have custom folders enabled W10 x64

 

I don't mean training mode, when it's in smart mode but the icon is red

 

Well the pic that you showed is the one from the website and that refers to the Training Mode or OFF Mode. When you are in Smart Mode (with default settings) and VS toggles to Off, then it will still scan files and allow or block as appropriate.

 

I apologize for that and thanks for explaining things...it shouldn't say "off" (that's very misleading) it should say smart or something similar when it's red

 

OK, this sort of answers my question above by default. So, in SMART mode, VoodooShield is off and yet on at the same time.

Guess it's AUTOPILOT time. lol!

 

This will confuse the heck out of novice users

 

OFF and Training mode is the same. Also I believe VoodooShield will still block vulnerable processes even in OFF mode.

Pehaps @VoodooShield can confirm that.