" I got a CyberLock popup alert for the latter on bottom right of the screen, maybe you didn't see because it was covered by some SpyShelter popup ?"
MEN .... REALLY ?
OH GOSH
You,
see that the training mode is visible right, so please watch all the details before speaking, is not about user logs or permission, the problem is the interaction with my kernel system...
Meaby you would like a video clip in 4 K ?
Mr Dan said something ... it's ok, but ... i have authentical proof, doubt is permitted right ?, you are on a security forum with technicals questions, don't base you on the appearance of the people, go deep.....
--------- now hear me , it's the begining of a mutual respect. --------
Ok, you are in level 2, let me level you up .... ok ? so we can communicating on the same vibration, and i have no level (so you must understand i am not a competitor)
introduction :
cyberlock -> is the commander in auto pilot mode / in training mode (i am normally the commander)
cyberlockservice -> the communicator who profiling the event constantly without interruption
Vsscanner -> the executor quarantine or not quarantine (not with a user interaction only the service software)
historical :
step by step i will tell you how cyberlock from voodooshield analyse a knowing extension file, this is the way every security software does !
1) from cyberlockservices.exe (a constant profiling of all physicale or logical interactions between the system
and the user in two direction praticaly simultanously or not)
But an executor can only execute what is come from the commander right ? to stay legal i mean...
so
1.1) in the first thing come
create file -> query network footprint from the beginning of the instruction of MSIEXEC.EXE (format) -> closing file
1.2) in the second thing come
create file -> reading all the MSIEXEC.EXE file (offset and lenght) (hash) -> closing file
1.3) In the last thing come
create file -> query network footprint from the finishing of the instruction of MSIEXEC (signature) -> closing file
2) Cyberlock.EXE need to think by me, but no notification !! (Because cyberlock goes to autopilot mode BY IT SELF) ?? HOW IS IT POSSIBLE ? & WHY ? (this is not the fault of me as a user)
2.1) sending to local or/and external database IP adress because of this autopilot mode : [ 1.1) & 1.2) & 1.3) ]
AS a european citizen i need to protect my interest we have a law calling RGPD in french (Reglement Générale sur la Protection des Données)
that is why i had my urgent question to ask. i used cyberlock now from long time ago, it 's the first time i have an issue with cyberlock.
that is why i came ask for help with an expert !
*this conclude to the first part of my capture with process monitor* :
i dont need to tell the second part
but to resume what happened, without notification ....
______________________________________
sending a positve blocking respons to cyberlockservice and goes trough a Downlevel, on VSScanner
(suspending the NtOsKrnl) with an instruction in the memory allocated by a Ox24cb (witch come from VSScanner), making an exit error to MSIEXEC.EXE.
---------------------------------------------------------------------
Finally Understood ?
Good !
