VoodooShield discussion

[Gandalf_The_Grey]

hi anyone latest version of voodoo? Ths

Here you can find the latest version: VoodooShield ?

 

[shmu26]

Among other fixes and features, the dev announced that the latest version (359b) has this important improvement:
"VS now starts with the service, so it should start much faster."

 

[Sunshine-boy]

Hi.
Let's say some one wants to use vs(free)in the auto pilot mode.
Since it's the free version, you can't touch the settings so these options are already checked:
Automatically allow the whitelisted item in the voodoo AI cloud database.
Automatically allow items that match a digital signature in the whitelisted snap shot.

Ok? so if a user has Adgaurd in the white list snapshot that means if smth with Adgaurds dig sing want to run on his/her PC VS allow it by default lets think it's a digitally signed malware but it has detection rate in the virus total
Will vs block it in auto pilot mode?vs in auto pilot mode consider the settings?or only the detection rate from vt?

 

[icotonev]

Hello.! Is there a translation of the program in Bulgarian? I, like a very big fan of a program, see that she, in Bulgaria, is starting to attract many admirers ...

 

[TheMalwareMaster]

Hello.! Is there a translation of the program in Bulgarian? I, like a very big fan of a program, see that she, in Bulgaria, is starting to attract many admirers ...

Only in english now

 

[enaph]

Some news regarding the upcoming new release:

 

[frogboy]

Some news regarding the upcoming new release:
View attachment 160951

Nice, looking forward to this latest update. Cheers @pablozi for the info.

 

[TheMalwareMaster]

Is there anything to scan multiple files with the lastest version of VoodooAI? I'm helping Dan to find malicious files not flagged as "unsafe", in order to train AI, but scanning each file manually is hard work

 

[boredog]

Is there anything to scan multiple files with the lastest version of VoodooAI? I'm helping Dan to find malicious files not flagged as "unsafe", in order to train AI, but scanning each file manually is hard work

Dan was using some program to run multiple files but I can't remember what his setup was. Maybe send him an e-mail and ask what setup he was using.

 

[Windows_Security]

The problem here is Dan said he was testing WHitelisting anti exe's Appguard doesn't even have a whitelist, and it isn't really an AE. Bogus test.

Okay long ago when Eirik was still with Blueridge I tested AppGuard a lot, as far as I remember, it has:
1. Deny execution for User Folders (in default settings it allows/whitelists all signed programs)
2. Run vulnerable script processing/rich content apllications in a limited user container (not allowed to write to Windows and Program Files folder, HKLM)
3. Memory access protection (it was developed to as exploit mitigation)
4. Private folders feature to limit access to specific folders by some programs.

So you are telling AppGuard dropped the Deny Execute feature I mentioned as first or is it some sort of definition question? I am just asking because you call American Football, football while they are allowed to throw and catch the ball as with rugby, plus you are using a oval shaped rugby ball.

 

[shmu26]

Okay long ago when Eirik was still with Blueridge I tested AppGuard a lot, as far as I remember, it has:
1. Deny execution for User Folders (in default settings it allows/whitelists all signed programs)
2. Run vulnerable script processing/rich content apllications in a limited user container (not allowed to write to Windows and Program Files folder, HKLM)
3. Memory access protection (it was developed to as exploit mitigation)
4. Private folders feature to limit access to specific folders by some programs.

So you are telling AppGuard dropped the Deny Execute feature I mentioned as first?

AG still blocks execution from user space.

 

[Windows_Security]

Okay thx, does it also still auto-allow signed executables in default mode?

 

[TheMalwareMaster]

Dan was using some program to run multiple files but I can't remember what his setup was. Maybe send him an e-mail and ask what setup he was using.

That is the EfficacyTest. I don't know if it's for my purpose, but I'll try, thank you

 

[TheMalwareMaster]

So... Guys... It appears that Dan is having some troubles at the other forums. He lost his developer badge and it looks like he is no longer able to post there. The same man that helped me solve the troubles with my account there (I was unable to post).
So, if Dan is OK, I propose to continue the Whole discussion here

 

[shmu26]

Okay thx, does it also still auto-allow signed executables in default mode?

If they are on the Trusted Vendors list they have installation/update rights. But this is getting off topic.

 

[danb]

So everyone wants to know what is going on. It is quite simple.

Truth is absolute and it always comes out in the end.

To the security forums users, I just want to say thank you for all of your support throughout the years!

VS 4.0 will be ready soon... it should be ready sometime this week for sure.

 

[danb]

BTW, I am completely swamped with pms and emails (and trying to finish up VS 4.0), and if I do not get a chance to reply to one of them, please understand .

 

[Brodyaga]

(and trying to finish up VS 4.0)

Thanks, we look forward to ......

 

[shmu26]

And please feel comfortable to post here as much and as often as you wish. It is our pleasure and honor to read your posts.

 

[boredog]

That is the EfficacyTest. I don't know if it's for my purpose, but I'll try, thank you

Yes he shows a video of it on the home page. I know at one time he was offering it to people that wanted to test VS. He might be too busy to mess with it now.