Shadow Defender Update Thread (Current Version 1.4.0.680)

[amir 957]

From my experience a ransomware works only in the virtual session.
No risk for the physical system, but...everything is possible.

Thanks

 

[Mr.X]

I have a question about Shadowdefender
Can it be used for testing malware samples instead of VM?

can it survive against a ransomware?

Yes it can, even ransomware which targets MBR. But as I always recommend, get a spare HDD for such tests. It's not a good idea to use your main system or main disk for malware testing.

 

[Mr.X]

One would then have to use additional combo to as ERP or things like that .And if it remained easily weigh it would be good, I think.

Frankly I believe adding a HIPS module or any other form of protection to Shadow Defender is completely pointless. And an old traditional HIPS is a dead technology. There are new HIPS technologies in development like ReHIPS and AdroxideHIPS

 

[frogboy]

A new version is available. 1.4.0.665

Download Link. Shadow Defender - the easiest PC/laptop security and privacy protection tool

 

[Davidov]

My translation of Czech is already on the official websites ) David Janda Shadow Defender - the easiest PC/laptop security and privacy protection tool GL

 

[frogboy]

My translation of Czech is already on the official websites ) David Janda Shadow Defender - the easiest PC/laptop security and privacy protection tool GL

Nice, well done.

 

[ewerton]

New version 1.4.0.672
link Shadow Defender - the easiest PC/laptop security and privacy protection tool

 

[Sunshine-boy]

Is Your Graphics Card Hiding a Rootkit or Keylogger? - Ivanti Blog
I want to know how Sd handles such things:notworthy:im just curious.
P.s The article is old but interesting to me!

 

[Mr.X]

Is Your Graphics Card Hiding a Rootkit or Keylogger? - Ivanti Blog
I want to know how Sd handles such things:notworthy:im just curious.
P.s The article is old but interesting to me!

SD can't handle that kind of malware at all.

 

[Sunshine-boy]

So running the malware while we are in the shaodw mode is not safe Am I Wrong?!xd risky!

 

[Mr.X]

So running the malware while we are in the shaodw mode is not safe Am I Wrong?!xd risky!

You are not wrong.

Remember SD protects only drives and logical partitions and all the software in them.

 

[509322]

So running the malware while we are in the shaodw mode is not safe Am I Wrong?!xd risky!

SD does not virtualize the GPU and other hardware firmware. Therefore, malware can infect those hardware while in Shadow Mode. This has been a long known limitation to SD.

Don't be paranoid.

 

[Mr.X]

Such types of malware attacks the firmware. Those rootkits sit at firmware level, within a chip on the graphics card.

 

[Sunshine-boy]

I know that but I just wanted to say the sd is not that great... there are ugly malware out there

 

[Mr.X]

I know that but I just wanted to say the sd is not that great... there are ugly malware out there

From that article:

Does the typical malware author need to go the greater effort of writing GPU-based malware which, by its very nature, is likely to run on only a subset of computers? I don’t think so. The amount of effort they would need to put in is unlikely to give them a good enough return.

 

[Sunshine-boy]

what kind of software virtualize the GPU and the whole hardware? I just want to have it!|

 

[Mr.X]

what kind of software virtualize the GPU and the whole hardware? I just wan to have it!

What you can do is to always turn on your pc and run a vm and work from there...

 

[509322]

I know that but I just wanted to say the sd is not that great... there are ugly malware out there

The more advanced the malware, the more specialized it is, the more specialized the malware, the more it targets its victim, the more it targets a victim, the less likely it will affect you - the average Joe.

Advanced malware means it is much less of a threat to the average Joe.

SD is one of the best security softs due to its simplicity.

 

[Sunshine-boy]

Lockdown I know it will not bother me but still possible. I'm talking about the possibility btw thanks for the information.will device guard virtualize the hardware?

 

[Mr.X]

Lockdown I know it will not bother me but still possible. I'm talking about the possibility btw thanks for the information.will device guard virtualize the hardware?

Just run a vm LOL
VIRTUAL MACHINE

Device Guard: Introduction to Windows Defender Device Guard - virtualization-based security and code integrity policies (Windows 10)