View Full Version : Shadowing with Shadow Defender
eastman75
October 27th, 2009, 02:35 PM
Hey everybody,
Does anybody know how shadowing is done by Shadow Defender? This app starts as a daemon at WindowsXP start, and then -- if you need shadow protection -- you start another program which change for shadow mode actually.
The question is this -- what does it means "to change for the shadow mode"? Where or how is it done, from the operating system point of view? The only thing that I know is that the app creates a virtual disk but you cannot see it as device.
Then where is it? :doubt:
SammyJack
October 27th, 2009, 05:25 PM
This thread helped me when I was attempting to understand light virtualization:
http://www.wilderssecurity.com/showthread.php?t=230459&highlight
Also,Shadow defender now has a web-forum at:
http://www.shadowdefender.com/phpbb/index.php?sid=8462a3c063ceff92077088d05e4d1149
Osaban
October 28th, 2009, 09:29 PM
-{ Quote: "Hey everybody,
Does anybody know how shadowing is done by Shadow Defender? This app starts as a daemon at WindowsXP start, and then -- if you need shadow protection -- you start another program which change for shadow mode actually.
The question is this -- what does it means "to change for the shadow mode"? Where or how is it done, from the operating system point of view? The only thing that I know is that the app creates a virtual disk but you cannot see it as device.
Then where is it? :doubt:" }-
It is actually there, but not seen by the operating system. That is the reason why most malware doesn't affect the system, as it is running in a completely isolated volume which is deleted with every reboot.
http://www.storagecraft.com/products/shadowmode/shadow_mode_explained.php
These are graphics from ShadowUser (Storagecraft) but it is basically the same principle.
eastman75
October 29th, 2009, 06:39 AM
-{ Quote: "It is actually there, but not seen by the operating system. That is the reason why most malware doesn't affect the system, as it is running in a completely isolated volume which is deleted with every reboot.
http://www.storagecraft.com/products/shadowmode/shadow_mode_explained.php
These are graphics from ShadowUser (Storagecraft) but it is basically the same principle." }-
Thanks a lot, Osaban! And to you, SammyJack! Both of you provided me with great information! :o ;D
twl845
October 29th, 2009, 08:13 AM
-{ Quote: "This thread helped me when I was attempting to understand light virtualization:
http://www.wilderssecurity.com/showthread.php?t=230459&highlight
Also,Shadow defender now has a web-forum at:
http://www.shadowdefender.com/phpbb/index.php?sid=8462a3c063ceff92077088d05e4d1149" }-
SammyJack - Thanks for the forum url. I signed right up. It's kind of minimalistic. :)
SammyJack
October 29th, 2009, 08:32 PM
-{ Quote: "SammyJack - Thanks for the forum url. I signed right up. It's kind of minimalistic. :)" }-
You are welcome.
I thank it is really very new.
All of the post dates a recent.
I bought the software the 8th of this
month,and i am almost certain there
was no mention of a forum on the main
site.
Hopefully they will get more populated
with time.
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums