ShadowDefender is go

Discussion in 'sandboxing & virtualization' started by CloneRanger, Jul 6, 2010.

Thread Status:
Not open for further replies.
  1. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,833
    After reading ALL the excellent things about SD regarding TDSS/TDL etc Rootkit bypass :thumb: i've installed v1.1.0.326 today :)

    Very straightforward to install and configure, just like software should be :thumb:

    I noticed it doesn't seem to use a service, only a driver. Not saying it needs one, but i expected it might.

    Only 150k of memory usage, and no CPU % :thumb: :thumb: :thumb:

    It says it's a 30 day trial, but as Tony is sadly MIA :( i'm wondering what to do then ? Maybe somebody could PM me about it please ;)
     
  2. ViVek

    ViVek Registered Member

    Joined:
    Aug 7, 2008
    Posts:
    551
    Location:
    Moon
    MIA? :'( :'(
     
  3. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,833
    sm.gif

    Something i forgot to ask is,

    1 - Where is the virtual disk cache etc stored on XP ?

    2 - Does this get flushed/deleted, or written over ?

    3 - If so, on shutdown or reboot

    4 - I imagine it's not a Secure wipe ?

    5 - If we exited SM before shutdown, could we use a Secure delete app on it ?

    I found diskpt0.sys in C: with no file details for it, and i'm presuming that's it, if there aren't any more ?

    TIA

    *

    @lunaticdreams

    Sad but true :( https://www.wilderssecurity.com/showthread.php?t=275972
     
  4. ViVek

    ViVek Registered Member

    Joined:
    Aug 7, 2008
    Posts:
    551
    Location:
    Moon
    Thanks ,
    yes thats really sad :(
     
  5. hany3

    hany3 Registered Member

    Joined:
    Dec 2, 2007
    Posts:
    207
    these are really bad news
    and now i begin to really worry about him "i mean his health" :'(
     
  6. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,833
    Anybody got answers to my post Three 1 - 5 if you please :)
     
  7. hany3

    hany3 Registered Member

    Joined:
    Dec 2, 2007
    Posts:
    207
    when u choose to protect a partition , afile called diskpt0.sys is generated on it as a hidden system file
    all the changes done in the protected partition are supposed to directed to that file
    on restart or shutdown this file is completely deleted and regenerated at the pc start up
     
  8. survi90

    survi90 Registered Member

    Joined:
    Jun 2, 2010
    Posts:
    7
    i wonder where you got that version. On shadow defender's web site 1.1.0.325 is the latest version. here it's.
     
  9. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,833
    @hany3

    Thanks :thumb: that answers -

    1 - Where is the virtual disk cache etc stored on XP ?

    2 - Does this get flushed/deleted, or written over ?

    *

    Still not sure about,

    3 - If it's deleted on shutdown or reboot ?

    4 - I imagine it's not a Secure wipe ?

    5 - If we exited SM before shutdown, could we use a Secure delete app on diskpt0.sys ?

    *

    pidbo :thumb: posted lots of versions here https://www.wilderssecurity.com/showthread.php?t=275972

    Meriadoc :thumb: highlighted v1.1.0.326 in the same thread http://www.shadowdefender.com/phpbb/viewtopic.php?f=3&t=286

    Thanks to both :)

    Now if i could know about,

    That would be great :)
     
  10. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,833
Thread Status:
Not open for further replies.