Introducing Diskshot™ - an alternative to Shadow Defender

Introducing Diskshot™ - an alternative to Shadow Defender

Project page : http://www.diskool.com/

Thread Index

1. Introduction
2. Suggestion for use in action
3. Additional features
4. Translations

I've posted a comparison of 'instant recovery software' before.
Only shadow defender could keep the system safe from TDSS rootkits.
Today I found another one that works - DiskShot, the safest ISR software ever!!


1. Introduction

Diskshot™ creates a sandbox to your system, and keep it safe from any malicious attacks / unwanted changes.



Basic operation

• When you create an image, it keeps your initial data from being overwritten. all changes will be stored in sandbox.

• And when it comes to recover your system, all changes within the sandbox is removed.

• Also it provides 'commit changes' option, in case you want to make permanent changes.

Here are pros' and cons' compared to other product.

Pros
MBR, Sector-level, Disk-level protection at once
(Shadow defender does not provide MBR-level protection, you need to use additional software like MBRGuard)
provides TRUE protection against low-level attacks like rootkits
(which Deep freeze, Rollback RX cannot provide, they are bulls**t)
Keeps your data after reboot
(shadow defender removes the data each reboot)
TRIM support
(Especially for SSD performance/lifespan, only Rollback Rx supports this)
Provides pre-boot emergency center
(you can recover your data even when the system is not bootable.)
Supports GRUB multi-boot system
(to do this, install your grub to PBR sector in windows partition, instead of using MBR)
(and you need to use a custom configuration 'FilterBootSector=0', if you want how to do this I'll post it)
Is being actively developed
(Currently the author of shadow defender is MIA )

Cons
No Multilanguage support
(it's a commercial software especially targeting korean companies)
(however I'm planning to provide an 'unofficial' english translation)
No Snapshot/Timeline feature (yet)
(however it will be supported in next version, as the deloper team promised)
No Hibernation

DiskShot @ home is provided free for home-user.
Ds@home - x86 : download
Ds@home - x64 : download (corrected!!)
English translation : currently in progress

You can register with this free giveaway license :
7SPUT-MQHT2-N5D8C-V7C4X-J3PK7 (valid until 2014-07-19, for 8000 users)
After the giveaway is finished, you can request a trial key (15-days) in this link :
http://www.diskshot.com/demokey

(* if you request a key in the project forum you will get unlilmited personal license for free, but it's hard for non-korean user to post in this site.. )

 

2. Suggestion for use in action

Reserved

 

3. Additional features

Bootfetch - Shortens boot time
It accelerates the boot process by making ramdrive for boot partition,
therefore boot time can be much shortened. (Up to 10.42 seconds, Ordinary HDD takes 14-17 seconds to boot)
When enabled, a logo appears upper left side during boot time.



To enable this feature, you need to allocate your first partition (up to 4096MB)
and set the filesystem to 0x37.



* NOTE : it only supports Windows 7 64bit




Virtual FDD image boot support

It can load Norton GHOST, Rescue CD, or any other external OS for further maintenance. (like BIOS update)

* Supported image list :

supported extension is *.VFD, *.FLP, *.IMA, *.IMG, *.BIF.
(does not support compressed images like *.IMZ)

to use this feature, you need to insert the boot image first.
you can do this like you use DAEMON tools or something like that :




and once FDD image is successfully mounted, you can boot with FDD anytime in DiskShot™ preboot center:




PRESS F9, and the mounted image will be loaded.


S.M.A.R.T status check

Customization


Reserved

 

4. Translations

Since this Diskshot@home software detects self-modification and rejects running,
I have to screenshot and translate the dialogs.
Please forgive me


Installation



(after click "OK" button the system will be rebooted)



Tray icon context menu



Main menu



Options menu

 

Seem to be a pretty solid tool but there's a glitch; no uninstall shortcut, no program files folder. So my question is how I remove it because the interface and menus are in Korean?

 

here is the menu to remove



guess i have to make the translation as soon as possible...

 

Thank you very much, Sir ....waiting for the English version!

 

in about 1 hour i can convey initial translation..

EDIT:: this software has self-modification defence mechanism, it rejects execution.. lol
I couldn't translate it at my disposal.
but still I'm seeking the way..

 

Is the key you supplied unlimited or is it 15-day?

Al

 

the key I supplied is valid until 2014-07-19.
this key is giveaway key for 8000 users, currently 1842 users are using

 

I uploaded the picture translation to upper thread here

and I'm contacting the developer to request multilanguage support...
so please wait

 

Awesome find and also thank you for translating it.

Small question, do you mean:

DiskShot @ home is provided free for first 8000 home-users until 2014-07-19?

 

This software is interesting! After looking at your translated screenshot. It seems a mini RollbackRx and Shadow Defender combined.

 

well, I think the developer is control freak or something, ( )

though we have to input the serial key, developer team promised to continuously provide the free serial key..
(and once you register the korean forum, you can get an unlimited key.)

and in fact this is a commercial product, but the developer decided to provide it free for home users.
I think that's why this software uses serial key method, to prevent illegal-commercial-use of companies.

 

and it protects against TDSS or some other rootkits!!!
hurray!!

according to system infection test performed 2011/01/11, 00:16.47, results are below
http://www.diskool.com/ds_tip/1111593

 

I dont think it was very good the developer of this calling other products bull***t was it?

Think i will wait for more feedback on this.its quite new and needs some testing etc.
Personally i dont think its really my sort of program and the origin seems dubious at the minute and the developer does seem arrogant and conceited when saying rollback rx etc is bull***t.

Regards.

 

omg deep freeze or rollback developers are actually bull***t.

they just ignored the rootkit 'bypass' problem, and still advertises their product is virus-free or bullet-proof !! they are lying!!

 

Where did you read that? Dax123 is not the developer.

 

Its within the first post on this thread.

 

Has this product been thoroughly tested with rootkits etc.?
Any results to check.

 

Dax123 wrote the first post, not the developer.

 

here are some articles

Light virtualization software / Partial sandbox test : the truth about rollback software

system infection test


and the second one has the realtime video proof
and they say :



From Faronics (Deep Freeze):

From Horizon Datasys (Rollback Rx, EAZ-FIX):

they STILL couldn't fix it. so they are actually a bull***t

 

Thanks for this.
How does this compare to shadow defender.?
As far as i know shadow defender is the only virtualisation program which can survive a rootkit infection.

 

shadow defender is good.

but the developer (I heard tony is his name) is still missing in action, their forums were closed.
and furthermore, it has some limitation (removing changes every boot, does not provide MBR-level protection, TRIM support)
so I looked for some another fancy software, and found this.

and returnil is also a good solution, it can protect some rootkits now.
(but it causes some performance impacts so i don't use it)

 

Can someone confirm that SD does not protect the MBR?