Location of Shadow Defenders Changes

Discussion in 'sandboxing & virtualization' started by TerryWood, Feb 8, 2015.

  1. TerryWood

    TerryWood Registered Member

    Joined:
    Jan 14, 2006
    Posts:
    703
    Hi Everyone

    Shadow Defender tracks all the changes and redirects them to an unused location on the disk. Where is this location on the hard drive and what is it called?

    Thanks

    Terry
     
  2. Robin A.

    Robin A. Registered Member

    Joined:
    Feb 25, 2006
    Posts:
    2,279
    In the root of each virtualized partition there appears the file diskpt0.sys, normally hidden. AFAIK, no more is publicly known about this. Not relevant for the use of the program.
     
  3. sourc7

    sourc7 Registered Member

    Joined:
    May 3, 2015
    Posts:
    1
    I have researched the Shadow Defender file writes, at entering shadow mode, it will write diskpt0.sys at root of the drive then I write 1GB into the shadow drive, then generate a blue screen so Shadow Defender isn't purging or delete the virtual disk on shadow drive.

    But after booting into Linux LiveCD then mount the shadow drive, the file that I created is gone and no other file except diskpt0.sys file is under ~3mb and System Volume Information Folder.

    Can anyone explain how it works in depth? Is Shadow Defender using hidden partition?
     
    Last edited: May 3, 2015
  4. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,279
    Location:
    UK
    I have never seen any evidence of a hidden partition. The GUI display shows that Shadow Defender uses the free space of each shadowed partition to hold changed disk sectors. It probably uses the hidden diskpt0.sys file(s) to keep track of the changes while in Shadow Mode.

    This is conjecture on my part, as only the developer knows exactly how Shadow Defender works; but it is the only explanation I can suggest that fits with what the GUI display shows and what I observe on my system.
     
    Last edited: May 3, 2015
  5. luciddream

    luciddream Registered Member

    Joined:
    Mar 22, 2007
    Posts:
    2,497
    my guess as well FWIW
     
  6. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    5,633
    Location:
    U.S.A. (South)
    Only the SHADOW knows :isay:
     
Loading...