Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 738842" data-attributes="member: 32260">[USER=178]@Umbra[/USER] is right in the case when all storage sources are in the shadow mode. But, such setup is great only for the cautious users and many people will consider it as inconvenient..I use Shadow Defender with only system partition in the shadow mode, and sometimes (rarely) forget to commit changes (losing a few documents, downloaded files, etc.). Generally, all data is stored on other partitions / disks (not in shadow mode)..So, If the user keeps only the system partition in the shadow mode, then something like Sandboxie is required to isolate the malware embedded in media, documents, etc.Sandboxie can be useful even when all disks/partitions are in shadow mode, because Shadow Defender + anti-keylogger do not prevent stealing the files with personal content. The user can prepare the sandboxes which cannot access such data.Furthermore, one cannot keep all storage sources in the shadow mode. There is always a danger for pendrives, backup USB disks, etc. that the malware can embed something malicious in the stored documents and other files. One could avoid this by restarting the system before connecting external sources and disconnecting them as soon as possible, but as I said before, for many people that will be inconvenient.</blockquote>

[QUOTE="Andy Ful, post: 738842, member: 32260"] [USER=178]@Umbra[/USER] is right in the case when all storage sources are in the shadow mode. But, such setup is great only for the cautious users and many people will consider it as inconvenient. . I use Shadow Defender with only system partition in the shadow mode, and sometimes (rarely) forget to commit changes (losing a few documents, downloaded files, etc.). Generally, all data is stored on other partitions / disks (not in shadow mode). . So, If the user keeps only the system partition in the shadow mode, then something like Sandboxie is required to isolate the malware embedded in media, documents, etc. Sandboxie can be useful even when all disks/partitions are in shadow mode, because Shadow Defender + anti-keylogger do not prevent stealing the files with personal content. The user can prepare the sandboxes which cannot access such data. Furthermore, one cannot keep all storage sources in the shadow mode. There is always a danger for pendrives, backup USB disks, etc. that the malware can embed something malicious in the stored documents and other files. One could avoid this by restarting the system before connecting external sources and disconnecting them as soon as possible, but as I said before, for many people that will be inconvenient. [/QUOTE]

Verification