ShadowDefender is go

After reading ALL the excellent things about SD regarding TDSS/TDL etc Rootkit bypass i've installed v1.1.0.326 today

Very straightforward to install and configure, just like software should be

I noticed it doesn't seem to use a service, only a driver. Not saying it needs one, but i expected it might.

Only 150k of memory usage, and no CPU %

It says it's a 30 day trial, but as Tony is sadly MIA i'm wondering what to do then ? Maybe somebody could PM me about it please

 

MIA?

 

Something i forgot to ask is,

1 - Where is the virtual disk cache etc stored on XP ?

2 - Does this get flushed/deleted, or written over ?

3 - If so, on shutdown or reboot

4 - I imagine it's not a Secure wipe ?

5 - If we exited SM before shutdown, could we use a Secure delete app on it ?

I found diskpt0.sys in C: with no file details for it, and i'm presuming that's it, if there aren't any more ?

TIA

*

@lunaticdreams

Sad but true https://www.wilderssecurity.com/showthread.php?t=275972

 

Thanks ,
yes thats really sad

 

these are really bad news
and now i begin to really worry about him "i mean his health"

 

Anybody got answers to my post Three 1 - 5 if you please

 

when u choose to protect a partition , afile called diskpt0.sys is generated on it as a hidden system file
all the changes done in the protected partition are supposed to directed to that file
on restart or shutdown this file is completely deleted and regenerated at the pc start up

 

i wonder where you got that version. On shadow defender's web site 1.1.0.325 is the latest version. here it's.

 

@hany3

Thanks that answers -

1 - Where is the virtual disk cache etc stored on XP ?

2 - Does this get flushed/deleted, or written over ?

*

Still not sure about,

3 - If it's deleted on shutdown or reboot ?

4 - I imagine it's not a Secure wipe ?

5 - If we exited SM before shutdown, could we use a Secure delete app on diskpt0.sys ?

*

pidbo posted lots of versions here https://www.wilderssecurity.com/showthread.php?t=275972

Meriadoc highlighted v1.1.0.326 in the same thread http://www.shadowdefender.com/phpbb/viewtopic.php?f=3&t=286

Thanks to both

Now if i could know about,

That would be great

 

See post 174 - https://www.wilderssecurity.com/showthread.php?p=1716724#post1716724

Ran the real Stuxnet malware yesterday, after enabling Shadow Defender ......... etc