Shadow Defender 1.1.0.258 and other minor change releases

Re: ShadowDefender 1.1.0.264 is now out !

Glad I am not alone here. similar question In my post #39

 

Re: ShadowDefender 1.1.0.264 is now out !

i didn't know that b4 about returnil free
if u r right , so my previous statement is not procise
sorry

 

so the claimed bug from our friend Alloucho is not real
i'm sure he did something wrong
thanks ErikAlbert , good job

 

It is not a bug. Probably he entered in shadow mode before the installation program had the chance to create the shorcuts. The installer had not complete it's tasks.

It was a user fault, not a bug of shadow defender.

 

I gave SD the time to install itself and I did even an extra reboot besides the install reboot to make sure SD was properly installed. And I have a clean image of course without garbage or malware.

 

Hi Erik,

I was refering to this post https://www.wilderssecurity.com/showpost.php?p=1269123&postcount=10

 

It's a pity that this post is too vague to figure out what really happened.
No step mode and no installed softwares names mentioned.

 

Re: ShadowDefender 1.1.0.264 is now out !

Hi ErikAlbert,

Thanks for your comprehensive test which confirms our belief that SD is working well and refuting Alloucho's misleading claims.

It would be true that for many of problems described in this forum, the root cause of those problems is the users themselves with their unique computer systems and software.

True as it may be, Alloucho should just opt to stay with DF. Having some ISR protection, be it SD or DF, is much better than no ISR protection

 

Re: ShadowDefender 1.1.0.264 is now out !

I had to do these tests, because my first opinion was based on second hand info, while other members were saying it wasn't true. The only way for me to verify this was doing my OWN tests.

 

Re: ShadowDefender 1.1.0.264 is now out !

Thank you Erik, as usual, you never put forth crucial information without thoroughly testing it yourself. This is much appreciated and encourages others to do the same.

 

Re: ShadowDefender 1.1.0.264 is now out !

Yes I advice other SD-users to do the same. There is a big difference between "using SD" and "testing SD".
1. When you are "using SD", you only use the functions you need and nothing else.
2. When you are "testing SD", you use ALL the functions, even when you won't use them in practice. You also try to break SD on purpose in order to find bugs, compatibility problems with security softwares, possible backup/restore problems, etc.
So "testing SD" takes alot more time than "using SD", especially if you have to do this alone.
If SD-users organize themselves a bit and they do each a part of the testing, SD can be tested thoroughly in a very short time.

 

Re: ShadowDefender 1.1.0.264 is now out !

The effort is all well and nice but FD-ISR (Genuine) still outshines them all, and remains unmatched for a long time to come IMO.

 

Re: ShadowDefender 1.1.0.264 is now out !

Erik,

I particularly agree with the part in #2 about "testing all the functions." In my case I had a big problem with not being able to sort the Exclusion List and mentioned it earlier in this thread. Guess what. It has been addressed in the recent 1.1.0.264. Automatically even. As nice as this is for users, it really had little impact on the overall usability of ShadowDefender.

Do I think my mentioning it here had any impact this being addressed? Heck no - it was a glaring deficiency that was probably on the to-do list for quite some time. The timing did make me feel good though.

ShadowDefender is a program that I use on-the-fly and when I am unsafely surfing or installing programs that do not require a reboot, as a supplement to FD-ISR. This works well for me but to be honest I have not implemented any other types of "across reboot" solutions adequately. I have tried to but I have never really given any method the due diligence that they deserve. In other words I know the theory but have not learned the idiosyncrasies of the various solutions and probable viable approaches. Unfortunately, all I found were the shortcomings and did not investigate further.

Simply lazy I guess. And I am somehow more comfortable using this combination to say FD-ISR and Sandboxie. I realize that I may be more prone but like I said, I'm more comfortable with SD and that, I believe makes me secure simply due to the fact that I "think" I know what I am doing. Yes I realize that is probably my biggest mistake - a false sense of security. I really do not compare ShadowDefender to Sandboxie even though they can be used similarly in many circumstances.

 

Re: ShadowDefender 1.1.0.264 is now out !

Indeed you can't compare SD with SB.
SD = recovery and keeps your entire system partition unchanged, but only after reboot, not between two reboots, where the virtual version changes.
SB = security and isolates good and bad objects in a sandbox to make them immediately harmless and only for sandboxed applications.
SD can't do what SB does and SB can't do what SD does.

 

Re: ShadowDefender 1.1.0.264 is now out !

I agree it remains unmatched

as probably one of the most overrated pieces of software I have ever owned (IMNSHO)

 

Re: ShadowDefender 1.1.0.264 is now out !

Agreed.

I try NOT to emphasize as much on the MBR attack vector of this limitation KillDisk (and others) can enjoy on FD-ISR and other because of it's remote potential but theres no question from what I been reading lately across other boards malware pushers are implimenting this technique on a higher scale rather then randomly, so your point is noted.

This is behind my wishlist that some developer would devise a single standalone or installer app to protect this very serious area for compromise.

In light of that, yes it's a very good thing SD addresses such potential and YES, i have tried running that obnoxious KIllDisk as i think you know, and even recently with equal (Ugh) results.

In my opinion this is far too vulnerable and an immediate threat along the same lines as a file infector virus where no AV could successfully clean affected executables.

It's a rotten piece of destructive code no doubt and at leaat ShadowDefender for one is taken the initiative to address it.

My problem and the problem with other customers/users is having to add a whole new program just to protect this single (serious) vulnerability that other programs cannot at this writing at least, are unable yet to offer.

EASTER

 

All I know is the latest release from Tony is very stable and has worked flawlessly on my computers for the last few days.

 

Hi,

Yes. the new build 264 is so far so good. except...
one isolate report claiming cs.exe is still bypassing(penetrating) SD, and causing BSOD, rebooting.

Who knows, it could be an isolated incident and very much localized.

 

cs.exe = malware ? No problem for AE.
I don't expect from SD to protect itself against malware, including killdisk, that's the job of security softwares.
ShadowProtect doesn't protect itself against malware either, why should ISR do this.
Does each software have to become a scanner ?

 

Peter, I am back to running it and nothing else. I will bust Tonys chops when he gets it wrong, but he has proven that he is continuing to make it grow.