VoodooShield said:
So Littlebits, have you tried VoodooShield? If so, what do you think?
Yes I did get to try the latest version and it did have a lot of improvements compared to the older version that I tried. Most download sites are still hosting older versions.
VoodooShield does an excellent job blocking executable files and if the user did use it correctly then it would block probably any type of malicious executable file, but I still disagree with it being novice user friendly since it does not give you enough details about the executable file on the prompts. If it had digital signatures checks and provided that info like UAC does, then the user might have a better understanding of the prompts. If the user made the wrong choice, then an infection could still occur or a safe needed executable file could get blocked. Novice users have no idea how to use custom whitelists or to respond to prompts like this.
Of coarse the option to check the file with VirusTotal is handy, still a new malicious file could not be detected by any of the scanners.
Digital signature checks should be a must to have feature. When you run an executable with UAC enabled on default, it will let you known if the file has a digital signature and will allow you to click on the info and check the certificates. I believe that is more informative then the info provided by VoodooShield. Files with digital signatures are usually the best way to find out if they are safe.
Another thing is UAC runs at the OS level above all software, whereas with VoodooShield is just runs at the software level like most other security software products. I believe UAC can offer better protection and should not be disabled. I know you can find info about UAC having vulnerabilities in the past, but there are no current vulnerabilities I can find by researching the web. Windows Update patches have fixed the previous vulnerabilities. Most malicious files that most home users are likely to encounter don't use vulnerabilities especially in UAC. Most novice users don't utilize UAC, they will just click without reading and they are most likely to do the same with VoodooShield. I don't see how VoodooShield would be any more user-friendly then UAC. Both require the user to read, check and then approve or deny.
VoodooShield runs extremely light on system resources and didn't have any conflicts with my other security products. However the main question is do I need it? and the answer is NO.
I still prefer to use my security setup with UAC on default settings.
I haven't had one single infection since 2006 because my current habits (browsing, downloading, connecting devices, etc.) along with Avast Free which can also block executable files without digital signatures, different firewalls like ZoneAlarm Free and Privatefirewall has kept me malware free.
There is no reason for me to use a paid product when free products will work.
All users are different and VoodooShield might be more useful to others.
Users who are paranoid like on security forums would be more likely to buy the product. I doubt most of the users will buy it because there are just too many free alternatives. They will probably just use up the free subscription and move on the another product.
Most similar paid anti-executable software are no longer developed.
Remember DiamondCS ProcessGuard, GhostSecurity AppDefend, System Safety Monitor, Norton Antibot, Dynamic Security Agent (now is Privatefirewall), Cyberhawk, AntiHook, ProSecurity, ClearShield, SafePC, Trust-no-exe, just to name the ones that I can think of, they are all out of business or discontinued.
The one only anti-executable software think I can think of now that is still being developed is AppGuard and NoVirusThanks EXE Radar Pro.
The rest are history, anti-executable features have been added to security suites and personal firewalls (Comodo, Online Armor, Privatefirewall, Malware Defender, Outpost, etc.) which provide more details about the executable files then what VoodooShield does.
User who do use these security suites and firewalls simply do need another stand-alone anti-executable software because it is already included.
Good luck to your business.