{"id":8641,"date":"2012-12-18T15:47:57","date_gmt":"2012-12-18T11:47:57","guid":{"rendered":"http:\/\/regrunreanimator.com\/research\/?p=8641"},"modified":"2012-12-18T15:48:14","modified_gmt":"2012-12-18T11:48:14","slug":"shadowdefender","status":"publish","type":"post","link":"https:\/\/regrunreanimator.com\/research\/antivirus\/shadowdefender\/shadowdefender.htm","title":{"rendered":"ShadowDefender"},"content":{"rendered":"

\"\"<\/p>\n

Shadow Defender<\/h1>\n

http:\/\/www.shadowdefender.com\/<\/a><\/p>\n

Shadow Defender is an easy-to-use security solution (for Windows operating systems) that protects your PC\/laptop real environment against malicious activity and unwanted changes.<\/p>\n

Shadow Defender can run your system in a virtual environment called ‘Shadow Mode’. ‘Shadow Mode’ redirects each system change to a virtual environment with no change to your real environment. If you experience malicious activity and\/or unwanted changes, perform a reboot to restore your system back to its original state, as if nothing happened.<\/p>\n

With Shadow Defender, you have the flexibility to specify which files and folders are permanently saved to the real environment. This ensures important files and folders are kept after a reboot.<\/p>\n

Try Shadow Defender for the most effective and easy-to-use security solution.<\/p>\n

This software does not change the Windows boot time.<\/strong><\/p>\n

\"\"<\/a><\/p>\n

DEFENDERDAEMON.EXE<\/strong>
\nDescription: Shadow Defender Daemon Application SHADOWDEFENDER.COM Shadow Defender 1.2.0.346<\/strong>
\nMD5= 2613243E7A614EF13A8DB6756060C4A5<\/strong>
\nFile is signed<\/strong> and the signature was verified<\/strong>.
\nFile size= 263112<\/strong>
\nRelated registry changes:<\/strong>
\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\SHADOW DEFENDER DAEMON: “”%PROGRAM FILES%\\SHADOW DEFENDER\\DEFENDERDAEMON.EXE<\/strong>” \/AUTO”<\/div>\n
DISKPT.SYS<\/strong>
\nDescription: Shadow Defender Filter Driver SHADOWDEFENDER.COM Shadow Defender 1.2.0.346<\/strong>
\nMD5= B694B331F26B943A626ED9837A2E846D<\/strong>
\nFile is signed<\/strong> and the signature was verified<\/strong>.
\nFile size= 206872<\/strong>
\nRelated registry changes:<\/strong>
\nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\DISKPT\\IMAGEPATH: “SYSTEM32\\DRIVERS\\DISKPT.SYS<\/strong>“<\/div>\n
SHELLEXT.DLL<\/strong>
\nDescription: Shadow Defender Shell Extension SHADOWDEFENDER.COM Shadow Defender 1.2.0.346<\/strong>
\nMD5= 63DA0CB350CE74D94C7740C66615963B<\/strong>
\nFile is signed<\/strong> and the signature was verified<\/strong>.
\nFile size= 214888<\/strong>
\nRelated registry changes:<\/strong>
\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{5EE8E9E6-2853-4D28-B2DE-6529EDA0A294}\\INPROCSERVER32\\: “%PROGRAM FILES%\\SHADOW DEFENDER\\SHELLEXT.DLL<\/strong>”
\nHKLM\\SOFTWARE\\CLASSES\\TYPELIB\\{3A5C2EFF-619A-481D-8D5D-A6968DB02AF1}\\1.0\\0\\WIN32\\: “%PROGRAM FILES%\\SHADOW DEFENDER\\SHELLEXT.DLL<\/strong>“<\/div>\n

<\/p>\n

FILES ADDED:18<\/strong><\/p>\n

%APPDATA%\\MICROSOFT\\INTERNET EXPLORER\\QUICK LAUNCH\\SHADOW DEFENDER.LNK
\n%TEMP%\\~DF8AF7.TMP
\n%COMMON DESKTOPDDIRECTORY%\\SHADOW DEFENDER.LNK
\n%COMMON STARTMENU%\\PROGRAMS\\SHADOW DEFENDER\\HELP.LNK
\n%COMMON STARTMENU%\\PROGRAMS\\SHADOW DEFENDER\\SHADOW DEFENDER.LNK
\n%COMMON STARTMENU%\\PROGRAMS\\SHADOW DEFENDER\\UNINSTALL SHADOW DEFENDER.LNK
\n%PROGRAM FILES%\\SHADOW DEFENDER\\COMMIT.EXE<\/strong>
\n%PROGRAM FILES%\\SHADOW DEFENDER\\DEFENDER.EXE<\/strong>
\n%PROGRAM FILES%\\SHADOW DEFENDER\\DEFENDERDAEMON.EXE<\/strong>
\n%PROGRAM FILES%\\SHADOW DEFENDER\\EULA.RTF
\n%PROGRAM FILES%\\SHADOW DEFENDER\\HELP.CHM
\n%PROGRAM FILES%\\SHADOW DEFENDER\\RES.INI
\n%PROGRAM FILES%\\SHADOW DEFENDER\\SHELLEXT.DLL<\/strong>
\n%PROGRAM FILES%\\SHADOW DEFENDER\\UNINSTALL.EXE<\/strong>
\n%PROGRAM FILES%\\SHADOW DEFENDER\\USER.DAT
\n%SYSDIR%\\DRIVERS\\DISKPT.SYS<\/strong>
\n%WinDir%\\DISKPT.CRT
\n%WinDir%\\DISKPT.DAT<\/div>\n

FILES[ATTR]MODIFIED:8<\/strong><\/p>\n

%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\FEEDSSTORE.FEEDSDB-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\MICROSOFT FEEDS~\\MICROSOFT AT HOME~.FEED-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\MICROSOFT FEEDS~\\MICROSOFT AT WORK~.FEED-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\INTERNET EXPLORER SUGGESTED SITES~.FEED-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WEBSLICES~\\WEB SLICE GALLERY~.FEED-MS
\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS CACHE\\INDEX.DAT
\n%TEMP%\\CE4CF87733651BF1F44DD1E02FC1A8E8
\n%WinDir%\\TASKS\\USER_FEED_SYNCHRONIZATION-{600E3BA8-8EF5-4554-94FE-DB90950D3DEB}.JOB<\/div>\n

FOLDERS ADDED:2<\/strong><\/p>\n

%COMMON STARTMENU%\\PROGRAMS\\SHADOW DEFENDER
\n%PROGRAM FILES%\\SHADOW DEFENDER<\/div>\n
<\/div>","protected":false},"excerpt":{"rendered":"

Shadow Defender http:\/\/www.shadowdefender.com\/ Shadow Defender is an easy-to-use security solution (for Windows operating systems) that protects your PC\/laptop real environment against malicious activity and unwanted changes. Shadow Defender can run your system in a virtual environment called ‘Shadow Mode’. ‘Shadow Mode’ redirects each system change to a virtual environment with no change to your real […]
More…<\/u><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[8301],"tags":[8306,8307,8499,62],"_links":{"self":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/8641"}],"collection":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/comments?post=8641"}],"version-history":[{"count":2,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/8641\/revisions"}],"predecessor-version":[{"id":8645,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/8641\/revisions\/8645"}],"wp:attachment":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/media?parent=8641"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/categories?post=8641"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/tags?post=8641"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}