Shadow Defender is an easy-to-use security solution for Windows that protects your laptop or computer against malicious activities and unwanted changes. Shadow Defender can run your system in a virtual environment called “Shadow Mode.” Shadow Mode redirects each system change to a virtual environment with no change to your real environment. With Shadow Defender, you have the flexibility to specify which files and folders are permanently saved to the real environment. This ensures important files and folders are kept after a reboot.
Follow this guide on how to setup and use Shadow Defender for Windows:
STEP 1: Download Shadow Defender, then follow the on-screen instructions to install it.
STEP 2: After installing Shadow Defender, restart your computer.
STEP 3: After logging in, double-click the Shadow Defender icon on your computer’s system tray (within the clock area).
STEP 4: Click the Register button to proceed with the activation.
STEP 5: Enter the serial number provided with your download, then click OK to activate.
NOTE: Before entering the Shadow Mode, make sure ALL Windows Updates are finished and you have restarted the computer to allow it to configure. If in case your system goes through a Windows Update boot loop, you will need to start up in Safe Mode in order to exit the Shadow Mode.
STEP 6: In the Mode Setting section on the left pane, select the volumes to enter Shadow Mode, then click the Enter Shadow Mode button.
STEP 7: Select your preferred option on the dialog screen that will appear:
- Enter Shadow Mode on Boot – means the system will be put into Shadow Mode everytime you boot the system, until you open up the Shadow Defender program and hit Exit Shadow Mode.
- Exit Shadow Mode on Exit – means the system will be in Shadow Mode until it is shutdown or restarted.
STEP 8: Once you’re in Shadow Mode, you should see a big Shadow Mode button-like icon on your Desktop and the tray icon should now turn blue.
STEP 9: When in Shadow Mode, the main window will tell you that statistics on each volume in Shadow Mode, and how much is being used by Shadow Defender.
When using Shadow Defender for fake hunting, just enter Shadow Mode using the Shadow Defender application. Once the Shadow Mode indicator appears, you can run the applications to be tested as you normally would. Don’t worry because whatever the application does is not permanent. Everything it does is written to a Virtual File system (the Shadow Volume) thus, any changes made to the files or system settings are done virtually and are deleted as soon as you restart your system. This is also a good way to stop unwanted system changes by users of your computer.
NOTE: The longer you are in Shadow Mode and the more system changes occur, the more space the Shadow Volume will consume. Therefore, it is recommended to restart your computer every once in a while. To remove any changes a malicious app has done, simply restart your system once you are ready to do so.
Exit Shadow Mode
To exit Shadow Mode, follow these steps:
STEP 1: Open the Shadow Defender application.
STEP 2: Go to the Mode Setting section on the left pane.
STEP 3: Perform either of the following actions:
- Select a volume, then click the Exit Shadow Mode button
- Click the Exit All Shadow Modes button, then select your preferred option on the dialog screen that will appear:
- Exit Shadow Mode and reboot now
- Exit Shadow Mode and shutdown now
- Reboot or shutdown later (OS will exit Shadow Mode automatically when shutdown)
STEP 4: Click OK.