Shadowing with Shadow Defender

Discussion in 'sandboxing & virtualization' started by eastman75, Oct 27, 2009.

Thread Status:
Not open for further replies.
  1. eastman75

    eastman75 Registered Member

    Joined:
    Oct 27, 2009
    Posts:
    2
    Location:
    Ringgold, USA
    Hey everybody,

    Does anybody know how shadowing is done by Shadow Defender? This app starts as a daemon at WindowsXP start, and then -- if you need shadow protection -- you start another program which change for shadow mode actually.

    The question is this -- what does it means "to change for the shadow mode"? Where or how is it done, from the operating system point of view? The only thing that I know is that the app creates a virtual disk but you cannot see it as device.
    Then where is it? :doubt:
     
  2. SammyJack

    SammyJack Registered Member

    Joined:
    Aug 19, 2009
    Posts:
    129
  3. Osaban

    Osaban Registered Member

    Joined:
    Apr 11, 2005
    Posts:
    4,591
    It is actually there, but not seen by the operating system. That is the reason why most malware doesn't affect the system, as it is running in a completely isolated volume which is deleted with every reboot.

    http://www.storagecraft.com/products/shadowmode/shadow_mode_explained.php

    These are graphics from ShadowUser (Storagecraft) but it is basically the same principle.
     

    Attached Files:

  4. eastman75

    eastman75 Registered Member

    Joined:
    Oct 27, 2009
    Posts:
    2
    Location:
    Ringgold, USA
    Thanks a lot, Osaban! And to you, SammyJack! Both of you provided me with great information! :eek: :D
     
  5. twl845

    twl845 Registered Member

    Joined:
    Apr 12, 2005
    Posts:
    4,186
    Location:
    USA
  6. SammyJack

    SammyJack Registered Member

    Joined:
    Aug 19, 2009
    Posts:
    129
    You are welcome.
    I thank it is really very new.
    All of the post dates a recent.
    I bought the software the 8th of this
    month,and i am almost certain there
    was no mention of a forum on the main
    site.
    Hopefully they will get more populated
    with time.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.