Reply to thread

Message

<blockquote data-quote="DJ Panda" data-source="post: 518264" data-attributes="member: 40802">Hey so I got a contact from Voodosheild support and they told me they wanted me to post this. Voodosheild Dev response for the comment by [USER=52613]@DardiM[/USER] I quote&quot;This is no big deal at all, but we need to make something very, very clear...<a href="https://malwaretips.com/threads/1-000-malware-sample-pre-execution-efficacy-test-malware-test.60856/#post-518167" target="_blank">Video Review - 1,000 Malware Sample Pre-Execution Efficacy Test - Malware Test</a>VS was on AutoPilot during the test (the lock was OFF), so any clean / safe sample would have been automatically allowed (see 44:54 in the video)... where I installed VLC media player to simply show that the good stuff was still being allowed.All of the software was tested using the default settings, and all of the definitions were updated.&nbsp; I had to disable VS&#039;s Automatically Allow by Parent Process feature, otherwise, since all of the malware files were child processes of the test app would have been allowed.&nbsp; I also disabled &quot;Deny by Default&quot; so we could see the full user prompts, and also adjusted the countdown timer and the number of VS flashes so that the executions would happen quicker.&nbsp; Other then that, VS was using all default settings, and was on AutoPilot.Also, every prompt clearly says &quot;Threat Detected by VoodooAi!&quot;, or often times &quot;Threats Detected by Blacklist Scan and VoodooAi&quot;.&nbsp; One thing I totally forgot to mention is that the blacklist scan is only analyzing some of the files because it will only allow you to upload a few at a time... basically it limits the number of files you can upload at any given time.&nbsp; If we delayed each execution by 5-10 seconds, the blacklist scan would analyze every single file.Also, keep in mind, we can easily test with the stand alone version of VoodooAi, which does not have the blacklist scan… that is the whole purpose of the app.&nbsp; Either way, the result is the same.If you get a chance, do you mind posting this?&nbsp; Thank you!&quot;</blockquote>

[QUOTE="DJ Panda, post: 518264, member: 40802"] Hey so I got a contact from Voodosheild support and they told me they wanted me to post this. Voodosheild Dev response for the comment by [USER=52613]@DardiM[/USER] I quote [I]"This is no big deal at all, but we need to make something very, very clear... [/I] [URL='https://malwaretips.com/threads/1-000-malware-sample-pre-execution-efficacy-test-malware-test.60856/#post-518167'][I]Video Review - 1,000 Malware Sample Pre-Execution Efficacy Test - Malware Test[/I][/URL] [I] VS was on AutoPilot during the test (the lock was OFF), so any clean / safe sample would have been automatically allowed (see 44:54 in the video)... where I installed VLC media player to simply show that the good stuff was still being allowed. All of the software was tested using the default settings, and all of the definitions were updated. I had to disable VS's Automatically Allow by Parent Process feature, otherwise, since all of the malware files were child processes of the test app would have been allowed. I also disabled "Deny by Default" so we could see the full user prompts, and also adjusted the countdown timer and the number of VS flashes so that the executions would happen quicker. Other then that, VS was using all default settings, and was on AutoPilot. Also, every prompt clearly says "Threat Detected by VoodooAi!", or often times "Threats Detected by Blacklist Scan and VoodooAi". One thing I totally forgot to mention is that the blacklist scan is only analyzing some of the files because it will only allow you to upload a few at a time... basically it limits the number of files you can upload at any given time. If we delayed each execution by 5-10 seconds, the blacklist scan would analyze every single file. Also, keep in mind, we can easily test with the stand alone version of VoodooAi, which does not have the blacklist scan… that is the whole purpose of the app. Either way, the result is the same. If you get a chance, do you mind posting this? Thank you!" [/I] [/QUOTE]

Verification