Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: VoodooShield free blocks exploits and more

04 Dec 2014   #1
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
VoodooShield free blocks exploits and more

VoodooShield is free for home users and works alongside your other onboard security to provide additional protection. It's not perfect though and does require some configuration and requires users to make some decisions on what to allow if a file gets blocked.

Important Note: It did cause a problem with blocking scripts on SevenForums but there's a workaround. Change VoodooShield to "Training Mode" when first visiting and posting on SevenForums and VoodooShield will learn that it's a safe site and allow scripts to run.

Important Note 2: VoodooShield will replace UAC. If you subsequently uninstall VoodooShield you'll need to reapply UAC settings manually.

For anyone interested - watch the video here to get an idea of how it works and how to whitelist files that might get blocked even though you want to allow them to run. Basically any executable that's not in the whitelist gets scanned by multiple AV engines when it attempts to run and you get a notification if a threat is found. You also get the option to allow, block or sandbox.

How it works:



Blocking a blackhole exploit kit:



VoodooShield FAQ

VoodooSheild Home

Screenshots from my machine:

VoodooShield free blocks exploits and more-voodooshield-scan-file.jpg

VoodooShield free blocks exploits and more-voodooshield4.jpg

VoodooShield free blocks exploits and more-voodooshield1.jpg

VoodooShield free blocks exploits and more-voodooshield2.jpg

VoodooShield free blocks exploits and more-voodooshield3.jpg

More Info:

With ‘white list’, VoodooShield aims to change antivirus game

Now the free version is listed on MajorGeeks:

Download VoodooShield - MajorGeeks




My System SpecsSystem Spec
.
07 Dec 2014   #2
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Blocking CryptoLocker Test

Here's a video showing what happens when attempting to run a CryptoLocker sample against VoodooShield and a few other layers of protection.

Explanation:

Downloaded a CryptoLocker Sample and saved to a folder on the Desktop. Comodo detects the file straight away. Set Comodo to ignore and allow the file to remain in the folder and added it to exclusions.

Manually ran the CryptoLocker executable with admin rights.

SecureAge detects the file attempting to run then scans it and reports a threat. I ignore the offer to block and instead choose to allow.

VoodoShield then blocks the file but choosing to click on the pop up balloon will allow the file to run.

I choose to let VoodooShield allow the file to run but before the file actually runs VoodooShield uploads the file for scanning and reports a threat.

This time I choose to Quarantine the file. Comodo then needs to be configured to allow the quarantine operation.

File is quarantined and renamed and this can be seen in the VoodooShield log.

Conclusion: It's best to have layers of protection just in case something slips through your first or second layer of defence!



Quarantine:

VoodooShield free blocks exploits and more-quarantine.jpg


My System SpecsSystem Spec
01 Jan 2015   #3
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
VoodooShield Pro

Well I just upgraded to VoodooShield Pro ($19.99 for one year) and here's screenshots of the settings that you don't get access to in the free version. The free version worked well for me but I needed to add some apps that are not covered by the free version most notably a few non standard browsers.

General Options:
VoodooShield free blocks exploits and more-voodooshield-settings-1.jpg
Adavnced:
VoodooShield free blocks exploits and more-voodooshield-settings-2.jpg
Add non-default apps:
VoodooShield free blocks exploits and more-voodooshield-settings-3.jpg
Tweaks - left default settings:
VoodooShield free blocks exploits and more-voodooshield-settings-4.jpg
Allow executables to run from defined folders. Will not be scanned or blocked:
VoodooShield free blocks exploits and more-voodooshield-settings-5.jpg
Whitelist manager:
VoodooShield free blocks exploits and more-voodooshield-settings-6.jpg
Command Line:
VoodooShield free blocks exploits and more-voodooshield-settings-7.jpg


My System SpecsSystem Spec
.

Reply

 VoodooShield free blocks exploits and more




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Will Certain Updates open me up to Exploits?
I am just wondering... You can call me a noob if you want =) My way of thinking is that the least amount of software that you do not use is installed.... that more protected it will be. For instance... I do not use Silverlight whatsoever. Nor do i use Microsoft Security Essentials. Are there...
Windows Updates & Activation
Browser exploits.
Source - TippingPoint offers hackers $100,000 for browser and phone exploits | Security Central - InfoWorld
Browsers & Mail
Researchers up ante, create exploits for IE7, IE8
VULNERABILITIES Researchers have created attack code that exploits a zero-day vulnerability in Internet Explorer 7 (IE7) as well as in the newest IE8 -- even when Microsoft's recommended defensive measure is turned on. … On Sunday, Dino Dai Zovi, a security vulnerability researcher…, crafted...
System Security
With Exploits on the Way, It's Critical Win 7 Testers R
More at: DailyTech - With Exploits on the Way, It's Critical Win 7 Testers Run Tool to Safeguard Their PCs
News


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 20:22.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App