New Update CyberLock 8.0

danb

From VoodooShield
Thread author
Verified
Top Poster
Developer
Well-known
May 31, 2017
1,863
@danb so for my clarity, just leave CL running in its default mode (smart-aggressive) is usually how I have CL set when I install a CL update...
If it is an auto update it will do everything automatically for you. But for a manual update, it is best to right click and choose Exit CyberLock first. Thank you!
 

danb

From VoodooShield
Thread author
Verified
Top Poster
Developer
Well-known
May 31, 2017
1,863
WLC analysis will never give a different verdict than unsafe for an unsigned file, or it may not give any verdict at all and just keep analyzing to infinity. Quickest way to whitelist in -> WLC -> Right click on file.
There are tons of Safe WLC files that not signed, silly ;). Pretty much every single super commonly file that is not signed is considered Safe by WLC. But if it is not signed and not common, the odds of being considered Safe are not all that great. But then again, that is EXACTLY how it should be ;).
 

danb

From VoodooShield
Thread author
Verified
Top Poster
Developer
Well-known
May 31, 2017
1,863
I get that but while the file is being analyzed you get the analyzing pop up like in my screenshot above. What it's not being analyzed you can just check on whitelist.
Here is what I do for massive files like that one... Either try to launch it and have CyberLock block it, or drag and drop to CL, or like OS says, right click on the file / CyberLock scan. So do any of those 3, then click the Block button to close the prompt. Then wait about 5 minutes for a file that size and check again... it should be complete. Smaller files are much quicker... usually under 30 to 60 secs.
 

danb

From VoodooShield
Thread author
Verified
Top Poster
Developer
Well-known
May 31, 2017
1,863
Hey guys,

The Edge issue should be fixed now, but if there are any other Auto Blocks that start in Windows or Program Files please let me know!

CyberLock 7.94
SHA-256: c12cd42a11486cfaea877bdae842591779e4af181c077c23c07337fed901afbc

Have a great weekend!

Dan
 

oldschool

Level 85
Verified
Top Poster
Well-known
Mar 29, 2018
8,093
if there are any other Auto Blocks that start in Windows or Program Files please let me know!
Chrome Canary update was autoblocked, but of course it starts from C:/User/AppData ...

I checked for and Edge update and it was not blocked.
if it is not signed and not common, the odds of being considered Safe are not all that great.
Ok, good to know it generally depends on signature and reputation for a safe verdict.

Edit: 1.5 hrs. after autoblocking Chrome Canary, it was Auto allowed.
 
Last edited:

ErzCrz

Level 24
Verified
Top Poster
Well-known
Aug 19, 2019
1,355
Here is what I do for massive files like that one... Either try to launch it and have CyberLock block it, or drag and drop to CL, or like OS says, right click on the file / CyberLock scan. So do any of those 3, then click the Block button to close the prompt. Then wait about 5 minutes for a file that size and check again... it should be complete. Smaller files are much quicker... usually under 30 to 60 secs.
Thanks! I knew there was some trick to it and I was just over thinking it ;)
 

simmerskool

Level 42
Verified
Top Poster
Well-known
Apr 16, 2017
3,157
Hey guys,

The Edge issue should be fixed now, but if there are any other Auto Blocks that start in Windows or Program Files please let me know!

CyberLock 7.94
SHA-256: c12cd42a11486cfaea877bdae842591779e4af181c077c23c07337fed901afbc

Have a great weekend!

Dan
CL 7.94 installed ok over the 7.92 after manually downloading 7.94, putting 7.92 mode on Disable / Install & closing CL. No issues seen with 7.94 so far...
 

ErzCrz

Level 24
Verified
Top Poster
Well-known
Aug 19, 2019
1,355
Trying out the beta at this end. So far going well.
On a similar note, with just standard broadband, that big file will take awhile. Even an upload to VT took an age lol. Anyway, it'll finish eventually. I should get onto the developer about the lack of certificate.
 

simmerskool

Level 42
Verified
Top Poster
Well-known
Apr 16, 2017
3,157
Trying out the beta at this end. So far going well.
On a similar note, with just standard broadband, that big file will take awhile. Even an upload to VT took an age lol. Anyway, it'll finish eventually. I should get onto the developer about the lack of certificate.
did you say 65 gb? if so, I did not know you could send a file that large to VT!
 

ErzCrz

Level 24
Verified
Top Poster
Well-known
Aug 19, 2019
1,355
did you say 65 gb? if so, I did not know you could send a file that large to VT!
No, the game full download is 65gig download and takes a lot of hours. The new patch file is 438.66 but it's unsigned and sits at this for an age and occasionally I get notified of an unsafe file as I have that option ticked but still analyzing. Anyway, will get it uploaded to VT and whitelistcloud.com when wife isn't on her laptop as it makes our internet go down to a crawl.

1745086706683.png


Right clicking just tells me it's analyzing without the option to whitelist like it does with the other very small unsigned file but that analysis had finished.

1745086971263.png

1745087063530.png

Anyway, it'll clear in time. It does go from the yellow shield to to the red square icon and back to yellow again over time and the file was auto-allowed (see below spoiler) so I'll just let it get on with analyzing and it'll clear in time ;)
1745096389608.png

EDITED to add additional screenshots and information.
 
Last edited:

oldschool

Level 85
Verified
Top Poster
Well-known
Mar 29, 2018
8,093
CL 7.94 installed ok over the 7.92 after manually downloading 7.94, putting 7.92 mode on Disable / Install & closing CL. No issues seen with 7.94 so far...
@danb FYI, I had a hiccup installing 7.94. I had to kill the initial install process after it hung, with no install window showing. So I exited VS and ran the installer again and it worked as usual.
 

danb

From VoodooShield
Thread author
Verified
Top Poster
Developer
Well-known
May 31, 2017
1,863
Chrome Canary update was autoblocked, but of course it starts from C:/User/AppData ...

I checked for and Edge update and it was not blocked.

Ok, good to know it generally depends on signature and reputation for a safe verdict.

Edit: 1.5 hrs. after autoblocking Chrome Canary, it was Auto allowed.
Yes, the entire cybersecurity space relies heavily on digital signatures... and they should. I mean really, you are about to execute unknown code... you should at least know where it came from, right? But anyway, I could only imagine how low ALL of the detection rates would drop if there were not digital signatures... and this includes WLC and VoodooAi.

Thank you for letting me know about Chrome... there is one last Chrome block we need to fix... it is the uninstall.cmd command block. It is a moderately easy fix, I just have not gotten around to it yet.
 

danb

From VoodooShield
Thread author
Verified
Top Poster
Developer
Well-known
May 31, 2017
1,863
Hey Guys,

Getting very close! Here is the latest version. The last version had a few bugs in CyberLock Settings (I had made quite a few changes), but they should be fixed now. Thank you for reporting the blocks, we have only had 4 or so, but it helps a lot! The blocks may or may not be fixed in this version because a lot of that code changed, so it is hard to say. All I know for sure is that the code is pretty much dead on at this point, and exactly where we want it. But if there are any other blocks, even the ones from before, please let me know!

CyberLock 7.95
SHA-256: f6245a447d91fa42caa6cf69c43f156cda2ffdfc919c6d34413d3a5fce5e8ac2


Happy Easter!

Dan
 

ErzCrz

Level 24
Verified
Top Poster
Well-known
Aug 19, 2019
1,355
Nice one! Will give this latest version a go.

On that different note with that big file. I just took the time to upload it to whitlistcloud.com and then analysis was pretty much instant and I was just able to right click and whitelist from there ;)
 

danb

From VoodooShield
Thread author
Verified
Top Poster
Developer
Well-known
May 31, 2017
1,863
Nice one! Will give this latest version a go.

On that different note with that big file. I just took the time to upload it to whitlistcloud.com and then analysis was pretty much instant and I was just able to right click and whitelist from there ;)
Very cool, yeah, that is a great way to do it as well! I actually have whitelistcloud.com in one of my home tabs so that it is always available. I use it for SHA-256 lookups all the time. Once I finish updating our other software and TB+, I am going to add a few features to whitelistcloud.com, like the VoodooAi result and other info... and anything else I think might be handy.
 

danb

From VoodooShield
Thread author
Verified
Top Poster
Developer
Well-known
May 31, 2017
1,863
@danb VS blocked Chrome Canary.exe with a Safe result on 2 startups. Had to manually allow once last night, once today. This is new behavior.
Interesting, thank you for letting me know! Can you please email me your Developer Log?

BTW, I just finished completely reworking the WLC / VoodooAi scan in the service and gui. I had only reworked the gui before, but now the service code is reworked as well for the next version... and it is humming.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top