Q&A Shadow Defender vs BSOD?

Discussion in 'Shadow Defender' started by Hanmin147, Nov 20, 2016.

  1. Hanmin147

    Hanmin147 Level 28

    Jul 28, 2014
    1,786
    7,607
    Windows 10
    Avast
    Hi guys, so this just popped into my mind and I wanted to see if anyone had answers to it. So if you enabled shadow mode on your computer, made changes to the computer and before you get the chance to exit shadow mode your computer gets a BSOD. Do you think that shadow defender would be able to revert the changes even with the BSOD?
     
  2. DardiM

    DardiM Level 26
    Trusted AV Tester

    May 14, 2016
    1,567
    15,194
    France
    Windows 10
    Kaspersky
    #2 DardiM, Nov 20, 2016
    Last edited: Nov 20, 2016
    In fact Shadow Defender doesn't make changes to your files when activated : all changes are only made virtually, and only applied if you choose it (commit).
    So it doesn't need to revert any change to your files : only some SD stuff will be concerned if you didn't exit the prog on a normal way.
    "'Shadow Mode' redirects each system change to a virtual environment with no change to your real environment"
     
  3. Lockdown

    Lockdown From AppGuard
    Developer

    Oct 24, 2016
    2,705
    11,851
    AppGuard LLC Virginia, U.S.
    #3 Lockdown, Nov 20, 2016
    Last edited: Nov 21, 2016
    A BSOD is a low-level OS or hardware crash. The crash is below the level that Shadow Defender operates.

    I should point out that there is malware that can force a BSOD - like Petya.
     
  4. Der.Reisende

    Der.Reisende Level 32
    Trusted AV Tester

    Dec 27, 2014
    2,195
    23,462
    Tax Officer
    Germany
    Windows 10
    Norton
    To my experience (HUB tests, doing screenshots of the results), any change within a ShadowDefender session exited by a BSOD had the same effect as a restart, everything lost.
    That's why I upload the screenshots after each sample, as MT autosaves the draft post.
     
    frogboy, XhenEd, aragornnnn and 2 others like this.
  5. tim one

    tim one Level 19
    Trusted AV Tester

    Jul 31, 2014
    904
    9,081
    Europe
    Windows 10
    Emsisoft
    I have had similar experiences, BSOD in shadow mode, sometimes due to incompatibility issues with older versions of SD and Windows 10, and sometimes due to malware or testing of applications that worked too in depth.
    In all cases, SD has well worked, and on reboot I always got the previous situation, losting the changes made in shadow mode.
     
    frogboy, XhenEd, aragornnnn and 2 others like this.
  6. jamescv7

    jamescv7 Level 61
    Trusted

    Mar 15, 2011
    12,664
    17,723
    Web and FileMaker Developer
    Philippines
    Windows 10
    Microsoft
    It will revert any changes regardless if the system commits on BSOD.

    The nature of virtualization definitely destroys any operation related to exit commands.

    Either User mode or Kernel Mode commits the problem still it will revert the changes.
     
  7. Lockdown

    Lockdown From AppGuard
    Developer

    Oct 24, 2016
    2,705
    11,851
    AppGuard LLC Virginia, U.S.
    The condition that caused the BSOD will be reverted if it is caused within Shadow Mode. However, a hardware induced BSOD can not and will not be reverted by Shadow Defender.

    A BSOD is initiated at a level below which Shadow Defender operates. The only modification that the BSOD makes to the system is the creation of a memory dump - which Shadow Mode will erase upon exiting - unless there is a failure of Shadow Defender itself and everything is saved to disk.
     
    jamescv7, Dirk41, frogboy and 4 others like this.
  8. Hanmin147

    Hanmin147 Level 28

    Jul 28, 2014
    1,786
    7,607
    Windows 10
    Avast
    Thanks for all of your inputs, nice to see all the knowledgeable people here in our community :D
    Never knew Shadow Defender was such a robust program, gonna be more harsh with the things I throw at it in the future
     
    frogboy, DardiM and Der.Reisende like this.
  9. DardiM

    DardiM Level 26
    Trusted AV Tester

    May 14, 2016
    1,567
    15,194
    France
    Windows 10
    Kaspersky
    #9 DardiM, Nov 21, 2016
    Last edited: Nov 21, 2016
    I even tried with the reset button on the PC :oops:
    (!!! WARNING : it is very bad to do this, for the hardware and software part - you can damage your computer !!!)
    => the virtual changes were lost, and it looked as if SD had reversed all : even if it is not Shadow Defender that has reversed any changes, but the changes made under SD activated that were only virtually done, and then not "real changes" (only for the virtual work)...are you still reading ? lol) :)
     
    tim one, Der.Reisende and frogboy like this.
  10. Hanmin147

    Hanmin147 Level 28

    Jul 28, 2014
    1,786
    7,607
    Windows 10
    Avast
    Hahah yes I am still reading :p
    wow changes are discarded even using the reset button :eek:
     
    Der.Reisende and DardiM like this.
  11. DardiM

    DardiM Level 26
    Trusted AV Tester

    May 14, 2016
    1,567
    15,194
    France
    Windows 10
    Kaspersky
    #11 DardiM, Nov 25, 2016
    Last edited: Dec 1, 2016
    "changes are discarded"
    No, like I explained, the way it works, changes are not really done with SD activated :
    => only done on a virtual way (until we choose to "commit" the change : apply them)
    => with a reset, SD loses the virtual part, can't apply the changes, but that is not a problem, because that is exactly what we want : no changes.

    In fact, the only problem with error, is if you have made a lot of (virtual) changes, and want to apply them definitely, and an error occurs
    => unwanted reboot, and then not able to apply the changes

    To simplify a lot : It is like writing on a list the changes you want : example 1000 lines of wanted changes - like before going shoping : (0 changes have been made in reality - 0 money spent, etc)
    a reset etc, ... => you will only lose the list
    or a commit => list read and changed are applied
     
    tim one and Der.Reisende like this.
Loading...
Similar Threads Forum Date
Shadow Defender stopped working Shadow Defender Dec 29, 2017
On Sale! 35% OFF Shadow Defender Discounts & Deals Dec 17, 2017
Expired Shadow Defender Giveaway Giveaways Archive Oct 29, 2017