VoodooShield/Cyberlock

@mood #9341
Was your computer idle before you inserted your usb/flash drive?
If you have this option checked:
[X] Automatically deactivate after (10) minutes of system idle
, VS deactivates itself and after that VS doesn't notice an usb/flash drive.

Was not idle! On Windows 10 Pro!

@ghodgson #9340
That's good to hear.
Regarding your other problem of VS not toggling to on when you insert a USB - in Basic settings (next to the bottom) is the 'Activate in smart mode when USB is inserted' ticked ?

Gordon

Yes! It is check and was check! On Windows 10 Pro!

Thanks guy for the suggestions. Totally appreciated!

 

Bug report:

Using Edge (yeah I know...), while watching youtube videos in Full Screen the Desktop Shield Gadget does NOT appear on screen. It does show on all other browsers when watching in full screen just not Edge.

Thanks!

 

Quick update... almost there . Sorry it is taking so long, I just want to work out as many bugs as possible since all of the user prompt and mini prompt code is pretty much new. I will catch up with you guys soon, and should have a release tomorrow or Sunday at the latest . On a side note... Vlad did some really cool things that I was not even aware that he did. He really did an amazing job and made my job a lot easier.

Thanks again, I will respond to the posts I missed asap .

 

Cool, please install 3.10 if you are running Windows 10 .

 

Hi Dan

Hope that you are well?

Thanks for the update...but as ever...and I know I used to say this a lot...take you time/don't get pressured into release something if you are not happy with it. We are a patient lot and will happily wait until the Maestro of the VoodooShield 'magic' believes his latest concoction is ready...

Regards, Baldrick

 

Great!!!! You release on weekends too!!!

Looking forward to the release...But Yes, dont hurry & only release if you are satisfied with the build.

And the official website still mention 3.09 on download, though the download gives 3.10.
Would be better if the correct latest version is mentioned.

 

Tried it and got this

 

I can second that! Crashing once it starts!

 

Salutations/Greetings!!!

Been using VoodooShield v3.10 Beta for awhile with very few problems!!!
With Windows 10 Pro! Accept for small problems that, I posted.

Could you tell me when VoodooShield v3.11 Beta is ready, please?

Kind regards,

 

Dan,

You're not the only one using AI - Meet MIT's New Cyber-Attack Detection Tool

 

Yeah... that is very cool stuff!!! What MIT is doing is quite similar to to what Palo Alto Networks (among others) is doing with Ai... it is more on the network level as opposed to endpoint protection like VS / VoodooAi. I am a little surprised that they are so far only detecting 85% of malware... although that is certain to get a lot better, I am sure they have some of the best data scientists in the world that will soon achieve a 99% or so detection rate.

What VoodooAi does it a lot more similar to the way Cylance utilizes Ai... the main differences being that they use Amazon Web Services for their modeling, whereas VoodooAi uses IBM Watson in the initial stages, and Microsoft Azure for the final analysis. Well, the other differences are they have teams of data scientists (as opposed to just Molly and I), and their product is only available to the enterprise. I would be curious to compare the two head to head... I have only been able to make 3 comparisons, and VoodooAi did very, very well. I think Ai is going to play a huge role in computer security over the next few decades, but it is not the silver bullet... it is never going to be absolutely perfect, but it is quite adept in finding the really bad unknown and zero day malware. So when combined with other technologies, it is extremely useful.

Anyway, I am finally finished with this version, sorry it took so long. I thought it would take like 2-3 days, but there was a lot of stuff that needed to be done, mainly on the user prompt. I really think it turned out well, and I think you guys will like it a lot. The blacklist / VoodooAi integration worked even better than what I thought it was going to, and the user recommendations are going to be extremely helpful for novices and intermediate users. The funny thing is... there were really not that many big obstacles the last 10-12 days... it was just a massive amount of grunt work and fine tuning . Once you see this version, I am going to ask for your guy's opinion on a few things and then make a few tweaks... but that will be super easy.

I still have to compile this version and then install it on a few machines to do one final check (since there were so many changes)... but I should have a version tonight or tomorrow at the latest! Then I will rest a little, then catch up on the posts I missed .

 

I'm ready to install it when it's ready.

 

Nice one, Dan

And thanks for the explanation on the AI 'options'...you are correct that there is a lot of chatter in terms of AI and what it can bring to the AM toolkit...so your expose was helpful.

And as C_E stated I too am "...ready to install it when it's ready."

Regards, Baldrick

 

VoodooShield,

Bring it on...I too am ready to install it...

 

Here is the latest version, hopefully I did not forget anything, if so, please let me know . If you have any problems, please delete the files in your C:\ProgramData\VoodooShield directory… but please do not do this first… please test it as it is to see if other users might experience issues.

I think just about everything is fixed and the user prompt and mini prompts are in great shape.

The only outstanding bugs that I know of are:

1. Windows 10 Remote Sandbox not working (should be an easy fix)

2. We need to double check that the Custom Folders is working the way everyone would like them to. Vlad made some really cool changes to this feature, and I just want to make sure they work as everyone expects.

Most or all of the vulnerable processes are hardwired in, but there is a space in Settings / Advance where I am going to add a feature to customize these. I just have not figured out exactly the best way to do it yet . I will work on that while you guys check out this version.

The user prompt has a lot of new features. Please check out the folder icon next to the Process Path at the top, and the details button.

You will at times see a progress circle and it will say “Calculating VoodooAi”. If that file has already been analyzed by VoodooAi, it is stored in the database, so the progress circle is skipped when this file is analyzed again, since retrieving data from the database is a lot faster than uploading the file for analysis. The question is… do we show the “Calculating VoodooAi” graphic when the file is already in the database, just so users will not wonder why the graphic is not being displayed? Please let me know what you think! Also… I am just using a simple animation for this screen for now… I would love to what really cool ideas you guys might have to replace this animation. I was thinking kind of like a heartbeat monitor type graph, going across the screen, and drawing the peaks for each of the algorithms. Anyway, I just used a simple plain one for now, we can easily add a really cool one soon.

Also, on the Details panel, there are 3 graphs that show the raw VoodooAi probabilities for each algorithm… this serves several purposes. First, the composite VoodooAi score includes several other factors that are not included in the VoodooAi raw data. For example, if the blacklist scan detects 45 hits, the VoodooAi composite graph will be adjusted… but only to a certain extent. That is… if the VoodooAi score is super low, it will not affect the composite score nearly as much. See, we want to protect the user, but we do not want to automatically peg the composite VoodooAi score whenever there are 7 or more hits. That would be cheating, and it messes up the results, so that is why I chose to display the raw VoodooAi scores. The raw VoodooAi scores will also be helpful because you guys will be able to tell me which algorithms are doing well, and which ones are not. There are a lot of algorithms we can choose from, (neural network, decision forest, decision jungle, support vector machine, etc), but showing the 3 algorithm results will really help us fine tune VoodooAi.

The auto decision worked out really well, although I need to dial it back a little… it is a little too over protective. But this is easy and I can work on this while you guys are checking out this version.

For a while there has been an issue with VS freezing from time to time on certain systems. I think I know what is causing it, and I think it is fixed in this version. If not, at this point I at least have a very good idea what is up with this issue, and it should be an easy fix. Just please let me know if you experience this issue… most users do not.

In the interest of simplifying VS, there are a few silly old options in settings that I removed. If there is something that I removed that you guys really, really want me to put back, please let me know.

There were a few really cool recommendations or bugs that were post on wilders the last couple of weeks, but I have not had a chance to respond to them yet. Anyway, those are added or fixed, and I will respond to the post soon to let them know that it was been fixed or added.

Please install over the top of your current VS and see how it goes! If you run into issues, please uninstall this version and reinstall it. If that still does not work, just uninstall it and install the old version .

BTW, the version number is still 3.10… long story, I will fix it .

Also, if your screen dpi is larger than the default 100%, some of the user prompt text might be cut off… it is an easy fix, but I just now noticed this issue, so I will fix it tonight.

Thanks again for all of your guys help! Vlad made my job super easy, so thank you Vlad!

As they say… here goes nothing .

http://www.voodooshield.com/artwork/InstallVoodooShield310beta.exe

 

BTW, I should be able to respond to the posts I missed tonight or tomorrow. Thank you!

 

Ooops, I just noticed a small bug in Smart Off and Always Off mode when a clean item is auto allowed... the mini prompt flashes real quick then disappears... it is an easy fix, and no biggie.

 

Dan, do you mean Smart On and Always On mode? What is Always Off mode?

 

Cheers, Dan

This will be installed very shortly and will be testing away over the next day or so. Will feedback if anything untoward, or seemingly untoward is found.

Regards, Baldrick

 

Well, when VS is in Smart Mode or Always ON mode, but it is OFF at the time, if the file is determined to be clean by the blacklist scan and VoodooAi, then it is auto allowed, kinda like Scan & Allow mode... so VS should not show the mini prompt at all. But there is a small bug where the mini prompt flashes for a quick second, but it is an easy fix.

BTW, for the most part, when VS is in Smart Mode or Always ON mode, but it is OFF at the time, it should pretty much act like Scan & Allow mode.

Also, I am not convince that the freezing issue is completely fixed, but I will focus on that next. I at least have a very good idea what is causing it. So if VS freezes for anyone, please let me know. It has happened for a while now, but it does not happen all that often, and it only happens on some systems. Anyway, I am on it .

 

Very cool, thank you Baldrick! I will catch up on the other posts soon!

 

Is this new version? Should not be v3.11 beta?

Can you tell/write more about AI technology (or did you already post about it)?
I know about this but can you write a little more, please:
"What VoodooAi does it a lot more similar to the way Cylance utilizes Ai... the main differences being that they use Amazon Web Services for their modeling, whereas VoodooAi uses IBM Watson in theinitial stages, and Microsoft Azure for the final analysis. Well, the other differences are they have teams of data scientists (as opposed to just Molly and I), and their product is only available to the enterprise. I would be curious to compare the two head to head... I have only been able to make 3 comparisons, and VoodooAi did very, very well. I think Ai is going to play a huge role in computer security over the next few decades, but it is not the silver bullet... it is never going to be absolutely perfect, but it is quite adept in finding the really bad unknown and zero day malware. So when combined with other technologies, it is extremely useful."

Some friend on Croatian forum said to me that from this (above) just can't read on which specific technology are you talking about?

 

Dan, in Windows Live Mail, if I click to update emails and RSS Feeds, I now have to allow Microsoft Feeds Synchronisation every time. It would be good if this could be whitelisted or at least if I whitelist it, it should not be scanned and blocked again. I thought this would happen with the earlier talk about child processes.

Thanks.

 

Yeah, it is 3.11beta, but the installer says 3.10 (I mentioned that above, but I did not explain it very well). Obviously, this is an easy fix.

Yeah, if you search this thread for VoodooAi or Machine Learning, there is a lot of info on here, and I pretty much described our Ai feature at length... I pretty much talked everyone's ears off on it . But if there is something that I need to explain further, I would be happy to... it is really interesting technology, and I spent 6 months learning about it and playing with it, so I should be able to help answer some questions if needed.

I am not sure what you mean by "Some friend on Croatian forum said to me that from this (above) just can't read on which specific technology are you talking about?". There really is not a readily available Ai API... you have to develop it on your own. Although, I am trying to make the VoodooAi API available to everyone . You can use machine learning platforms like Amazon Web Services, Azure and IBM Watson... but there is a lot of stuff you have to figure out and do on your own. If someone is looking to develop their own Ai platform and they have questions, I would be happy to help if they think I would be of help. Is that what you mean?

 

Yeah... I forgot to mention that... my Outlook does that to a process every once in a while too. It will be an easy fix, but I have to find a way to reproduce the block consistently, so I can fix the code and test it. I will put this on my to do list, thank you!