Solved VoodooShield - anyone use this and have comments ?

[DavidE]

Does anyone have experience with VoodooShield ?
VoodooShield™ - The User-Friendly Toggling Computer Lock.
Is it a Sandbox, or something different than any other security products ?
Any and all comments welcome.
tyia

 

[ICIT2LOL]

Hmm looks to be something I would have to try out first on my test desktop mate - just in case it goes south and my concern is how will my Kaspersky take to it as it does not like MBAM at times for example.

The free version I see would come with nag screens if what they put out (nag screen feature automatically blocked) is true but one could take that as a nag screen from them or just plain nag screens??

 

[derekimo]

Callender has a thread about it here,

VoodooShield free blocks exploits and more

 

[Callender]

I've been using it for the last three years (PRO version)

Comments: Configuration is an issue along with knowing when to switch modes. You need to know how to edit VS whitelist and VS command lines (command lines accept wildcards) and you also probably need to understand the custom folders option to avoid problems.

It's not a sandbox although it has a sandbox feature which allows the user to run a file sandboxed in order to determine if the file is safe. When a file is run in the sandbox you just get a report from the mutli AV scan engine and AI Scan (Artificial Intelligence) scan that helps you to determine if the file is safe. it's not the same as a traditional sandbox.

For all files: Anything new doesn't get to run without the user's say so and any new files are scanned by Mutil AV scan and AI scan. You get the option to Allow, Block, Sandbox or Quarantine based on the files reputation and the options may depend upon the directory the file atempts to launch from.

EDIT: Here are a few screenshots:

Whitelist a previously blocked item

Edit blocked or allowed command lines and define additional command lines if required

Custom folders option for defining automatically blocked folders. (Files will be initially blocked then scanned. Then you get a prompt on any potentially unsafe file)

Anti-Exploit. Parent Process feature disabled for extra security (but more prompts). VoodooAI is the developer's own scanner that provides advice on whether to trust a file. Users need to do their own research if advised that a file is unsafe. It might just be a new little known unsigned file that is actually safe.

Add web apps to the list to add VS protection when those apps are running.

VoodooShield User Guide (PDF) - direct download link

 

[Callender]

@Callender has a thread about it here,

VoodooShield free blocks exploits and more

Regarding the above information. Voodooshield no longer replaces UAC and the developer now recommends leaving UAC enabled.

 

[DavidE]

Great info Callender, thanks !
Thanks to everyone for all the help, much appreciated !