App Review VoodooShield

[TheMalwareMaster]

Look at 0.40... It appears that something got in memory.. Or the process was suspended by VodooShield?

 

[danb]

Thank you for testing, I sincerely appreciate that!

Yeah, it looks VS auto allowed one of the files... this will happen from time to time when VS is on AutoPilot... there is no way around it.

Can you please figure out which file fully executed and post the hash so we can look it up on VirusTotal? There is about a 33% chance that it is not even malware (this happens ALL of the time with malpacks, somehow clean files sneak in), a 33% that it is a PUP, and VS could not decide either way, and 33% chance that it was a clear miss / false negative by VS in AutoPilot mode.

Either way, thank you!

 

[TheMalwareMaster]

Thank you for testing, I sincerely appreciate that!

Yeah, it looks VS auto allowed one of the files... this will happen from time to time when VS is on AutoPilot... there is no way around it.

Can you please figure out which file fully executed and post the hash so we can look it up on VirusTotal? There is about a 33% chance that it is not even malware (this happens ALL of the time with malpacks, somehow clean files sneak in), a 33% that it is a PUP, and VS could not decide either way, and 33% chance that it was a clear miss / false negative by VS in AutoPilot mode.

Either way, thank you!

I'm not the author of the video

 

[danb]

i will do a review on this soon

Very cool, thank you!