VoodooShield ?

Hi Dan

Been going through this but I thinkthat the concept is awesomgueste...I know that other have similar options but when linked to what VS does...awesome. Personally I would call the feature AutoPilot Pro, and only provide in the paid version...just my thoughts based on who is likely to really use something like this, etc.

I also agree with guest in terms of user choice of which engines are included & the provision of a positive detection summary without having to go outside of VS itself; keep what you have but in some way provide simple basics 'inflight' as a popup. Not perosnally sure about the slider indicating % of AV's AND nº of AV's; perhaps that could be a configuration option to allow the user to select which one is more meaningful to display for them?

Still playing around and if I have anything to add I will post back...but really cannot wait for v3.60...

Great work...as always...but when are you going to have a rest?

Regards, Baldrick

 

That feature would be awesome!

 

I think it was said that this is not possible as VT does not allow it. I may be wrong

 

Yes, I think VT is an all inclusive package - 3rd party software cannot handpick engines.

 

@shadek

It can be done, the file will be sent to VT it will be scanned with all the engines, VS will get the data back and will take only into account for the calculations the engines I want, and it will hide all the other's

 

Exactly!

 

I really am getting close... and then you guys will have my undivided attention . I know there are a lot of pm's and emails that I have not had a chance to respond to, but I really want to finish this so you guys can see what I am talking about. It is a total game changer... especially with VS's toggling.

I still think there is a very good chance that I will have the initial release this weekend. I have been running the latest version while building the rules wizard in a separate project, and VS has been the quietest it has ever been... and has never been more smooth and stable. I mean, it has been stable for almost a year now, but it is seriously firing on all cylinders.

There are tons of new features that I have always wanted to add, and finally decided to since it is going to be version 360. But by far the coolest feature is going to be the new rules wizard... although, I have to say, there are some other really cool new features as well. I forgot who requested that individual settings be saved for each user... but that is included too. This feature will actually work with roaming profiles for enterprise networks as well.

Anyway, you guys are going to be amazed. I am sure I will forget a thing or two at first, but they will be easy fixes... and Krusty will be the first to let me know .

You know... the other day I was thinking about something odd. All security products essentially start off as a deny by default kernel mode driver. So basically, they all start off as an AE / SRP. Some products stop at this point and call it a day. While others, in attempt to make the software user-friendly, add tons of exceptions.

If you ask me... the damn thing should just be locked when it is at risk .

I hope to have VS 3.59d beta for you guys soon, and I will catch up on the posts, pms, and email as well . Most likely the new rules wizard will not be 100% complete, but I will include it in the beta release... it just will not save the config. So then while you guys are beta testing, I will finish up the rules wizard, and whatever else. We really are getting close... thank you guys!!!

 

Great to see such active development. Really looking forward to version 360. Will the upgrade need uninstalling the old version?

I know I could email you, but my queries aren't urgent and may even be resolved when the new version come out, which of course takes priority.

Still, I'd like for you to eventually go over them (if they remain relevant) whenever you can. Thanks!

 

As the owner of VoodooShield , I'm still studying it ..! But I have some questions ..! Do I ask them here or email ...?

 

The quickest way to get answers to your questions is to search this thread. There is a very good chance that the issues were already discussed.
If you can't find answers, ask here..

 

Quick update... still getting close . My best guess at this point is a mid next week release, but possibly sooner, possibly later . Things are going extremely well... along with the other optimizations, I found the culprit of the database corruption issue that some people have had, and I am close to fixing it. Thank you guys, talk to you soon!

 

cool thanks for the news Dan! eagerly awaiting here

 

Hehehe, it has been a seriously rough 2 or so months, but it is going to be worth it .

 

One question

How to see VS is of what version like 3.59a, b, c or d? Because when I checked the 'About' it is stated 3.59.....even its website state the same?

Thanks

 

Not sure yet .

Quick update... I am getting really, really close. 2-3 days at the most. If everything goes perfectly, maybe even before that . Thank you guys!

 

Nice work Dan keep up the great work! After release, I have some questions for you, no rush.

 

Does VS protect a computer's mbr against ransomware?

 

It will not let it run.

 

But the question is... Is that even fair? I am pretty sure VT has rules to keep things from becoming too unfair?

Anyway, the engines submitted to VT are not usually identical to the ones in the home product. They may be less or more aggresive on VT.

No, it won't protect against MBR attacks (e.g. Petya ransomware, general bootkits). VoodooShield is an anti-executable, not a Behavior Blocker/Host Intrusion Prevention System. If you allow the program to run then it will run freely and do whatever it wants.

In other words, if you run malware and allow it to run, it will run fine. So use VS properly if you use it. Pay attention to the Ai score results and in general be careful regardless of having VS.

 

Do most anti-exe's block JS files? I can't remember.

 

+1

VoodooShield will pick up the engine process spawn unless you white list AFAIK

 

VS looks at if it is digitally signed too. Open notepad write something , save it as a .JS file, click on it and see what VS does. VS is much more than an AE.

 

OK. Here is the message for that fake .js file. Looking forward to that new console, y'all.

 

Fair? Is just data I can treat it as I want, this has nothing to do with VT policy