Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
VoodooShield
CyberLock 8.0
Message
<blockquote data-quote="Fan-of-spyshelter" data-source="post: 1126153" data-attributes="member: 96367"><p>Hello every body <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite116" alt=":D" title="Big grin :D" loading="lazy" data-shortname=":D" /></p><p></p><p>well i beleive my question is quite difficult to understand, but let's have more picture right ? ^^</p><p></p><p></p><p></p><p>Mister Avethil - i need an expert , you are not enough expert for me to resolve my problem,</p><p>because i feel like i am talking with a service client when you respond to me, i am way far beyond that ^^</p><p>but thanks for your help and it's ok mister Dan, can answer me in the time he want, i am not in a hurry <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile :)" loading="lazy" data-shortname=":)" /></p><p></p><p>so let's be serious, ...</p><p></p><p>that is what i have discovered and i think the responsible of the problem is VSScanner (kernel mod driver even my cyberlock is in training mode)</p><p></p><p>step by step...</p><p></p><p>1. after ressetting my whitelist i had 106 snapschot + 4 auto allowed (training mode) rule = 110 rules.</p><p></p><p>[ATTACH=full]288646[/ATTACH]</p><p></p><p>2. i used process monitor to capture all the executions (api and memory call) with cyberlock.exe, cyberlockservice.exe, msiexec.exe</p><p></p><p>[ATTACH=full]288653[/ATTACH]</p><p></p><p>3. finally a comming answer ( a not normal exit statut by another process)</p><p></p><p>[ATTACH=full]288648[/ATTACH]</p><p></p><p>so there is a hook but this hook come from VSS and i am not the creator of this mini filter so i suggest to see in this sys drive</p><p>now i hope the creator or his mandatory could help me...</p><p></p><p>and another optional question,</p><p>Mister Dan, do you send the developperlog automaticaly to your professionnal structur or private aera from any registered user ?</p><p></p><p>if yes, can i suggest to you to give us a checkbox on cyberlock to consent to this ? because my system has verry senstive informations</p><p>and i am professionnaly exposed because i have european responsabilities ^^</p><p></p><p>see you to a next answer <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile :)" loading="lazy" data-shortname=":)" /></p></blockquote><p></p>
[QUOTE="Fan-of-spyshelter, post: 1126153, member: 96367"] Hello every body :D well i beleive my question is quite difficult to understand, but let's have more picture right ? ^^ Mister Avethil - i need an expert , you are not enough expert for me to resolve my problem, because i feel like i am talking with a service client when you respond to me, i am way far beyond that ^^ but thanks for your help and it's ok mister Dan, can answer me in the time he want, i am not in a hurry :) so let's be serious, ... that is what i have discovered and i think the responsible of the problem is VSScanner (kernel mod driver even my cyberlock is in training mode) step by step... 1. after ressetting my whitelist i had 106 snapschot + 4 auto allowed (training mode) rule = 110 rules. [ATTACH type="full" width="124px" alt="Double Screenshot before - after (training mode) - 10H16PM.png"]288646[/ATTACH] 2. i used process monitor to capture all the executions (api and memory call) with cyberlock.exe, cyberlockservice.exe, msiexec.exe [ATTACH type="full" width="123px" alt="Process monitor - (cyberlock, cyberlockservice, msiexec) no profiling.png"]288653[/ATTACH] 3. finally a comming answer ( a not normal exit statut by another process) [ATTACH type="full" width="117px" alt="Process exit because VSScanner (but i don't know where).png't know where).png"]288648[/ATTACH] so there is a hook but this hook come from VSS and i am not the creator of this mini filter so i suggest to see in this sys drive now i hope the creator or his mandatory could help me... and another optional question, Mister Dan, do you send the developperlog automaticaly to your professionnal structur or private aera from any registered user ? if yes, can i suggest to you to give us a checkbox on cyberlock to consent to this ? because my system has verry senstive informations and i am professionnaly exposed because i have european responsabilities ^^ see you to a next answer :) [/QUOTE]
Insert quotes…
Verification
Post reply
Top
