Shadowing with Shadow Defender

Hey everybody,

Does anybody know how shadowing is done by Shadow Defender? This app starts as a daemon at WindowsXP start, and then -- if you need shadow protection -- you start another program which change for shadow mode actually.

The question is this -- what does it means "to change for the shadow mode"? Where or how is it done, from the operating system point of view? The only thing that I know is that the app creates a virtual disk but you cannot see it as device.
Then where is it?

 

This thread helped me when I was attempting to understand light virtualization:

https://www.wilderssecurity.com/showthread.php?t=230459&highlight

Also,Shadow defender now has a web-forum at:

http://www.shadowdefender.com/phpbb/index.php?sid=8462a3c063ceff92077088d05e4d1149

 

It is actually there, but not seen by the operating system. That is the reason why most malware doesn't affect the system, as it is running in a completely isolated volume which is deleted with every reboot.

http://www.storagecraft.com/products/shadowmode/shadow_mode_explained.php

These are graphics from ShadowUser (Storagecraft) but it is basically the same principle.

 

Thanks a lot, Osaban! And to you, SammyJack! Both of you provided me with great information!

 

SammyJack - Thanks for the forum url. I signed right up. It's kind of minimalistic.

 

You are welcome.
I thank it is really very new.
All of the post dates a recent.
I bought the software the 8th of this
month,and i am almost certain there
was no mention of a forum on the main
site.
Hopefully they will get more populated
with time.