The unofficial Shadow Defender Support Thread.

belramus you could try this

put Windows in safe mode
uninstall shadow defender from safe mode
turn off pc (not reboot)
turn on pc normally
do a clean installation of the latest version

Patrick

 

Cutting_Edgetech

Please clean up your inbox. I answered you in regard to the things you asked me about the new forthcoming SD features, but the messages cannot get to you because your inbox is full.

 

Issue with Uninstalling Shadow Defender (Assistance Needed)

Help! (Windows 7-64 bit)

I was planning on installing AX64. So, I wanted to uninstall Shadow Defender just to be safe. I did make a Restore Point prior to uninstalling Shadow Defender. Upon attempting to reboot after uninstalling SD, my computer got stuck on shutting down. I waited 15 minutes at least and decided to power it down with the power button.

Upon restart, Windows starts normally, but then Hitman Pro (free version) started running and ran for 20-30 minutes but didn't appear to be scanning any files. I attempted to cancel HP to no avail. I then attempted to close it to no avail. I had to end task with task manager. I again attempted to restart the computer and it again got stuck on shutting down. Once again, I had to power off with the power button.

Upon next reboot, Windows booted normally (no confirmation that the computer got shut down improperly). I attempted to uninstall Hitman Pro but nothing happened after attempting to uninstall it. So, I went into services and shut down the HP service. Still won't uninstall.

Like I said, I do have a system restore from before uninstalling SD. But, I'm a little leery about doing a system restore from within Windows since Windows won't shut down properly. Should I hit F-8 upon the next reboot and attempt system restore from there or from within Windows? Or, should I try to manually uninstall Hitman Pro before doing anything?

I don't know if all of this is related to the uninstall of SD, but this all started happening after uninstalling it.

I can boot into Windows and everything else appears to be working. Thoughts or suggestions?

I should note that I have a full system backup from July 20th that I used Paragon Backup & Recovery Home 10.

 

Re: Issue with Uninstalling Shadow Defender (Assistance Needed)

Alexhousek
This sounds like some sort of conflict...a couple of beasts wrestling and not wanting to give up ground.
I tend to turn off Windows system restore. I've never found it useful and unhelpful when I did have problems.
I'd uninstall anything that you think might be related to the problem. If Hitman Pro refuses to uninstall you could try F8 safe mode after complete shutdown and during bootup.
Remove hitman pro
I'd get rid of all of them and start clean.

Patrick

 

Sorry about that! I get so many pm's on here that if I don't delete my messages out every 3 weeks I run out of space.

 

Is there some type of manual uninstall tool or process for Shadow Defender?

(I searched for something like that for Hitman Pro, but I ran into a dead end.

 

To uninstall SD, I use the uninstaller in the Shadow defender folder located in the Start menu and reboot. Never a problem. There is no tool available. Good luck man.

For HMP, I haven't used it in a long time but I never had an issue using the Windows uninstaller in Control panel.

Bo

 

I think that when a couple of softwares conflict and it makes that difficult to do (maybe a kernel driver conflict)
shut down
during boot
F8 to safe mode
uninstall

or if Shadow Defender was broken
you could try a re-installalation from safe mode "over the top"
then an immediate uninstall next boot from ordinary mode (if you can)

I've not had to do this so it's just my take on the problem.

 

Good advice Patrick - in the past, I have used HMP and found that it conflicted with any ISR and/or LV app that I had running at the same time! HMP is very aggressive and detects (falsely) the ISR's 'safe' bootkit and/or the LV's driver as malware. If the OP really wants to run HMP, try its 'Compatibility Mode' setting to see if that resolves the conflict.

TS

 

I hate this type of conflict, to avoid this kind of problems is one of the reason why I stopped using real time scanners.

Bo

 

Hi Bo,

I discontinued using HMP for that very reason, but I do use (and advocate the use of) a real-time AV scanner with any ISR or LV app.
I have never experienced any such conflict with Avast, MSE, or Norton.

TS

 

I was just saying that in my case, to avoid conflicts and the stress that we get sometimes when updating, upgrading or removing real timers is one reason why I prefer not to use them. HMP is not even a real timer and still created problems for Alex as he tried to remove SD. I am not recommending anything but to avoid the issues that he experimented when he tried to uninstall SD is exactly one of the reasons why I prefer to do things without real timers.

Cheers TS

Bo

 

These sorts of conflicts happen now and again and are a nuisance (and sometimes more) when they occur. I remember a number of years ago an avg update knocked out everyones simple dns server software for a couple of days.
As I understand it these kernel level drivers operate at operating sytem level and all the other apps normally play ball underneath them. When a new kernel level "King" is introduced he sometimes lock horns with the presiding King and in the grunt and grapple for the same territory de-stabilize the operating system itself and a whole load of apps underneath. You get bog downs, lock ups, things not loading, one kernel app working and not the other.
I think that is why we are asked not to run two virus checkers at the same time
Sometimes a few uninstalls, re-boots and particular choices will remedy the problem but sometimes things can be quite painful when the system itself is brought to it's knees and starts to act like a reluctant sloth when you try to do anything. This is (as I understand it) why safe mode is good sometimes in these cases because some of the drivers aren't loaded and your freed up a bit to make certain choices needed to regain the system and stability. Anyone feel free to correct me if I'm wrong, I'm no expert. Years ago these sorts of conflicts used to mangle the old snapshot type apps regularly beyond repair resulting in horrible blue screen of death and black screens with arcane writings that could never be understood by a mere layman.

 

I did want to report back that I think I've got my PC fixed. I finally got Hitman Pro and SD to uninstall. I then did a chkdsk (that took forever). I've been able to reboot several times with no issues.

Now, I am in the process of making my first backup with AX64. Hopefully with this new tool, I won't have to go through this again....

 

Alex,

SD conflicts with AX64 (as I have reported previously), so choose one or the other!

TS

 

It seems that Shadow Defender doesn't support ASLR. Check with Process Explorer for these:

Defender.exe
DefenderDaemon.exe
ShellExt.dll

For the ShellExt.dll, here's how to check:
Quickpost: Checking ASLR

It's important for a security app to support ASLR as mentioned here:
Quickpost: “It Does No Harm…” or Does It?

We don't want SD to follow the same path as this:
Anti-virus Products Mostly Ignore Windows Security Features

Anyone can contact Tony and tell him about this?

 

Why is this important in the case of SD? (just curious).

The linked document is 3 years old. Does it apply to the current versions?

 

Shadow Defender 1.3.0.454 has been released:

 

I can just overwrite the existing install right?

 

Yes Overkill
I think that you can overwrite the existing installation but it might be better to start clean. (What do other members think?) Don't forget to save your serial number as you may be asked for it again on re-installation.

Patrick

 

For Hungarian users a member of The Official Shadow Defender Forum LaMoLa has just sent Tony a translation for ShadowDefender 1.3.0.454 in that language.

These are translations of res.ini which you can find on the Shadow Defender download page




Köszönöm Lamola

which is thank you in Hungarian

 

I noticed that SD 1.3.0.454 was released. Does this version have the Track0 and full MBR virtualization included. Not sure how to tell. I appreciate it if anyone can answer this.

 

I installed it over the top and it seems fine, is it wise to exclude eset files + registry? and do I exclude the entire directory in the registry so eset's updates are excluded while in shadow mode?

 

I'm sorry Overkill, I don't know because I don't use eset.
Maybe members here will know or you could try The Official Shadow Defender Forum (see my sig below for link)

Patrick

 

That was Wendi's suggested enhancement, but as of the latest version I do not see it.

Cruise