Solved Completely uninstall Shadow Defender.

[eonline]

Briefly explain your current issue(s)

Completely uninstall Shadow Defender.

Steps taken to resolve, but have been unsuccessful

revo
frst

Hello, yesterday I uninstalled shadow defend by force with revo. Turns out there's still the shadowdaemon left in my system and I can't remove it. I can't reinstall shadow defender either because it tells me I'm in shadow mode. There's also an orphan icon on my desktop that never fades away. Attached are images. Well, if anyone can help me out very grateful beforehand. Greetings.

 

[Snickers102]

I suppose you don't have a backup? Have you tried searching your boot drive and deleting everything that includes "shadow defender" in the file name as well as in the registry?

 

[eonline]

I suppose you don't have a backup? Have you tried searching your boot drive and deleting everything that includes "shadow defender" in the file name as well as in the registry?

I did do all that, but it doesn't work. Thank you.

 

[codswollip]

Assuming you have rebooted your system... check your Windows Services... do you see an entry beginning with "{0CBD4F48-". You will want to stop/delete that service.

Path to executable... "C:\Program Files\Shadow Defender\Service.exe"

 

[eonline]

I don't have that folder and I found that process in the regedit but after deleting it it regenerates. Thank you very much.

 

[codswollip]

You must reboot after uninstalling SD. Have you done that? Shutdown (power off), then restart.

 

[illumination]

Open File explorer, click on local disk "C" click in the "local search "C" box and type Shadow Defender, remove traces from search.

Open Regedit: click "edit" then "find" again type shadow defender, delete traces carefully. I should mention you can toggle "F3" on the keyboard to move through all selections found in the registry once if finds the traces.

restart system, and try to install SD again.

 

[Ink]

uninstalled shadow defend by force with revo

In general, don't do this again.

Forcing removal of security software is always a risky and a tricky situation, since most hook into the OS. You should uninstall with the default uninstaller, reboot, then if available, a dedicated tool. Or manually remove traces afterwards. For non-security software, a third-party Uninstaller should work without many issues.

Now you have to manually remove all traces. Good luck.

If all else fails, Reset your PC (Keeping personal files).

 

[Andy Ful]

Reboot to the safe mode. Install Shadow Defender. Reboot normally. Exit shadow mode. Uninstall Shadow Defender.

 

[Lightning_Brian]

@illumination and @Telos are right. @Andy Ful gives info too. These are the steps that I would personally take. Follow what they are staying @Emanuel Tomasin . Keep us posted!

~Brian

 

[eonline]

I'm still in shadow mode so manual changes or deletions have no effect. Thank you.

 

[eonline]

I can't reboot into safe mode shadow won't let me.

 

[gin]

try reset windows

 

[ForgottenSeer 69673]

Not sure you knew but I think if you have fast start enabled, SD will come back in shadow mode because windows does not completely shut down.

To turn off Fast Startup
REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power" /V HiberbootEnabled /T REG_dWORD /D 0 /F

To enable hibernate
powercfg -h on

:: To turn on Fast Startup
REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power" /V HiberbootEnabled /T REG_dWORD /D 1 /F

 

[Snickers102]

And hopefully you'll make a backup next time

 

[ForgottenSeer 69673]

And hopefully you'll make a backup next time

Yes I had SD mess up my system so bad one time. I had to restore an image. Everyone should be imaging their systems now days.

 

[eonline]

I'm telling you, it's all taken care of. What I did was boot from a Windows 10 CD and run the bcdedit command to put the boot in safe mode, then I installed the shadow and then uninstalled it. Thank you very much for the prompt response. Greetings.

 

[ForgottenSeer 69673]

Good on you that you got it fixed. I however would not be without SD.

 

[Andy Ful]

@ticklemefeet is probably right about Fast Start. Anyway, when you can reboot normally to safe mode, the ShadowDefender driver will not be loaded and you will be outside the shadow mode.

Edit.
I was too late and posted after the problem was solved.
Good work.

 

[ForgottenSeer 69673]

I use Marcrium on a 256 gig USB 3.0 stick and only full images.