VoodooShield ?

Discussion in 'other anti-malware software' started by CloneRanger, Dec 7, 2011.

  1. ghodgson

    ghodgson Registered Member

    Joined:
    Dec 20, 2003
    Posts:
    835
    Location:
    UK
    Thanks Dan,
    Installed 2.79 beta and so far so good. (running Win 7x64 and will stay that way for the foreseeable future)
     
  2. singularity

    singularity Registered Member

    Joined:
    Mar 6, 2014
    Posts:
    76
    Location:
    India
    I am running latest version 2.79 beta on Win 10 Pro x64 stable release. So far it is working fine.
    ---
    Also I had earlier submitted a support regarding a conflict between email client Mailbird and voodooshield. It seems to have solved by Mailbird latest version 2.1.7.0. Mailbird is loading messages fine now though it ask for admin rights at startup.
    ---
    Also can you add mailbird to default webapps in VS. It is quite a popular email client for windows now
     
  3. Baldrick

    Baldrick Registered Member

    Joined:
    May 11, 2002
    Posts:
    2,555
    Location:
    South Wales, UK
    Cheers, Dan...not yet on Win10 but will certainly give it a whirl...as usual.

    Regards, Baldrick
     
  4. colorado13

    colorado13 Registered Member

    Joined:
    Apr 16, 2005
    Posts:
    117
    Location:
    Orihuela, Spain
    How fast :thumb:
    Thanks, Dan
     
  5. hjlbx

    hjlbx Guest

    I have never seen a file's publisher change, but I suppose it is possible. Am I understanding correctly ?

    • Block invalid\expired certificates.
    • By default, "trusted" publishers and digital certificates should be disallowed; user can create custom list if they so choose.
    From what I understand it is much better to rely upon hashes on a file-by-file basis - as opposed to a blanket allow policy by publisher.

    I have seen, time and again, malware that whose publisher was Micrsoft, Malwarebytes, Intel, AMD, etc, etc, etc, etc, etc... some even had valid certificates !! Users trust digitally signed installers and get infected as a consequence...

    I understand the trade-off : ease-of-use versus strict enforcement of default-deny. I choose the later... and adjust it tighter or more loose depending upon my computing needs.
     
  6. hjlbx

    hjlbx Guest

    BUG

    versions 2.78beta and 2.79beta

    W8.1 x86-64

    VS will block items but does not generate any block notifications; I discovered issue by review of User Log. Mostly items from System32 and a few from Framework64 and Program Files...

    For example, defrag.exe...

    Let me know, will send DL via PM.


    Best Regards,

    HJLBX
     
    Last edited by a moderator: Jul 30, 2015
  7. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Finally, things are starting to come together ;). After over 4 years of struggling with our patent application, we received notification that it is going to be issued. It was a long and involved processes because as you know, it is extremely difficult to describe VS in words, and how it is different from anything else unless you use experience it for yourself. I was never that worried about someone stealing VS just because I always figured that once they started coding and realize what all is involved, they would quickly give up (just like all of the other 5-7 developers that I have worked with on VS), but it is nice to know that VS is genuinely unique ;).

    I was reluctant in the past to seek new investors and to grow VS even more, simply because we were not certain on the status of the patent application, but now obviously things have changed ;). We now have a lot more opportunities, and it is time to take VS to the next level.

    Now the only question is… Should we lock our computer while a web app is running?

    Thank you for all of your help, I will finish up the new features and minor bugs soon!
     
  8. hjlbx

    hjlbx Guest

  9. djg05

    djg05 Registered Member

    Joined:
    Apr 6, 2005
    Posts:
    1,563
    Congratulations Dan. Justifies all the hardwork you have put in to develop this program. I hope you get the investment you deserve.
     
  10. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    Thanks, Danny boy! :)
    Wish you and VS all the best in the future! :)
     
  11. Baldrick

    Baldrick Registered Member

    Joined:
    May 11, 2002
    Posts:
    2,555
    Location:
    South Wales, UK
    Way hey...Alright...excellent news about the patent, Dan :)
     
  12. kjdemuth

    kjdemuth Registered Member

    Joined:
    Jul 29, 2005
    Posts:
    2,975
    Location:
    Boston, MA
    Congrats Dan. A lot of hard work put in by all developers and beta testers and obviously yourself. Looking forward to continue "playing around" with this fab software.
     
  13. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,338
    Location:
    USA
    Congrats Dan
     
  14. Novastar 3d

    Novastar 3d Registered Member

    Joined:
    May 3, 2009
    Posts:
    65
    Congrats Dan. I beta tested awhile back but don't expect anything free now. I see you guys are only making 20$ bucks a year for the premium version and am happy for you.

    edit: messed up first post
     
    Last edited: Jul 31, 2015
  15. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,601
    Location:
    USA
    Congratulations on your patent! I hope it helps take your product to the next level.
     
  16. l3l312

    l3l312 Registered Member

    Joined:
    Nov 11, 2014
    Posts:
    22
    Congrats Dan! all your hard work and passion is now going to bear fruit. Awesome. Been away for a bit. was using version 222 final. Today I got a prompt stating that the version had expired. Came directly here. Downloaded 2.79 beta and I gotta say, holy mother of options and new things to tinker with. I'll have to go through 100 pages on this post so I can get a grasp on how it all works.

    Did a fresh install of 2.79beta but kept my settings dat file (all the old settings were respectfully kept on new dat file) sweet!. Installed like a charm, no hiccups to report. New GUI looks fantastic.

    On a funny note, wonder how many new/old devs posts I'll come across when I read back 100 pages ;)

    As always, best regards
    l3l312

    Edit: last time i was here was on page 248. So not that many to go through hahaha
     
    Last edited: Aug 1, 2015
  17. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    12,964
    Location:
    Ontario, Canada
    Awesome buddy and Congrats!

    Daniel :)
     
  18. hjlbx

    hjlbx Guest

    @VoodooShield

    Just realized... where is option to:

    • Allow Once
    • Allow Permanently (White-list)
    • Block Once
    • Block Permanently (Black-list)

    from within notifications...

    ?

    Best Regards,

    HJLBX
     
  19. hjlbx

    hjlbx Guest

    VS Users,

    If you see powershell.exe alert, it is very likely from wuauclt.exe > windowsupdatebox.exe > powershell.exe.

    It is Windows 10 related... Microsoft is up to its usual user system data gathering... and surreptitious install of Windows 10 nag-ware.

    However, I chose to Block powershell.exe at alert - and then used Comodo KillSwitch to see what was activating powershell... Remember, Poweliks and other malwares are now using powershell... !!!

    HJLBX
     
    Last edited by a moderator: Aug 1, 2015
  20. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    I see what you mean, good point!
     
  21. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Yeah, VS only adds the quarantined items to the quarantine list when the file is quarantined, it does not scan the C:\ProgramData\VooDooShield\Quarantine folder for existing items, like if the user deletes all of the .dat files. We could have VS scan the folder though. Thank you!
     
  22. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Cool, thank you for letting me know! I just tested this with all of the default settings, then I set a password, and it was working fine on my end. What settings did you set that are different from the default settings? That will help me reproduce the error.
     
  23. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Well, VS will only allow something by digital signature ONLY AFTER the initial / parent process is allowed that has the digital signature, and it is temporary for security reasons.

    Yeah, if the hash does not match, VS will block it. Also, if the hash does match, but the path does not, VS will block it as well. VS errors on the side of caution... we would rather block something than risk the user getting infected.
     
  24. VoodooShield

    VoodooShield Registered Member

    Joined:
    Dec 9, 2011
    Posts:
    5,881
    Location:
    United States
    Cool, thank you Gillor and paulderdash!
     
  25. hjlbx

    hjlbx Guest

    VS Settings 1.PNG VS Settings 2.PNG VS Settings 3.PNG

    Best Regards,

    HJLBX
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.