Shadowing with Shadow Defender

Discussion in 'sandboxing & virtualization' started by eastman75, Oct 27, 2009.

Thread Status:
Not open for further replies.
  1. eastman75

    eastman75 Registered Member

    Joined:
    Oct 27, 2009
    Posts:
    2
    Location:
    Ringgold, USA
    Hey everybody,

    Does anybody know how shadowing is done by Shadow Defender? This app starts as a daemon at WindowsXP start, and then -- if you need shadow protection -- you start another program which change for shadow mode actually.

    The question is this -- what does it means "to change for the shadow mode"? Where or how is it done, from the operating system point of view? The only thing that I know is that the app creates a virtual disk but you cannot see it as device.
    Then where is it? :doubt:
     
  2. SammyJack

    SammyJack Registered Member

    Joined:
    Aug 19, 2009
    Posts:
    129
  3. Osaban

    Osaban Registered Member

    Joined:
    Apr 11, 2005
    Posts:
    4,215
    It is actually there, but not seen by the operating system. That is the reason why most malware doesn't affect the system, as it is running in a completely isolated volume which is deleted with every reboot.

    http://www.storagecraft.com/products/shadowmode/shadow_mode_explained.php

    These are graphics from ShadowUser (Storagecraft) but it is basically the same principle.
     

    Attached Files:

  4. eastman75

    eastman75 Registered Member

    Joined:
    Oct 27, 2009
    Posts:
    2
    Location:
    Ringgold, USA
    Thanks a lot, Osaban! And to you, SammyJack! Both of you provided me with great information! :eek: :D
     
  5. twl845

    twl845 Registered Member

    Joined:
    Apr 12, 2005
    Posts:
    4,186
    Location:
    USA
  6. SammyJack

    SammyJack Registered Member

    Joined:
    Aug 19, 2009
    Posts:
    129
    You are welcome.
    I thank it is really very new.
    All of the post dates a recent.
    I bought the software the 8th of this
    month,and i am almost certain there
    was no mention of a forum on the main
    site.
    Hopefully they will get more populated
    with time.
     
Loading...
Thread Status:
Not open for further replies.