Spy DLL Remover

[Gnosis]

This is a good product that is comparable to Process Explorer. I like the interface better than that of Process Explorer. Line items are much easier to read due to good use of color coordination.


http://www.softpedia.com/progDownload/SpyDLLRemover-Download-124622.html

 

[Tweak]

PE being more a tool of function and created by SysInternals I would recommend it over this, Process Hacker as the "next best thing" and in some peoples opinion including mine even more preferable having used both. PH I have been able to Kill or Terminate things that PE did not allow, this app doesn't have the look or feel of either of these two apps and feels lesser somehow, less of a tech's tool would be how I would describe it but I can't be sure what I mean is being properly conveyed. Is it also portable and does it also allow to be selected as a replacement for the default Task Manager? Does it allow for file verification in the same way that PE does? If it does the job you need it to then it's all good and I thank you for the information but personally I won't be utilizing this tool.

 

[Gnosis]

Your comments are accurate. It is lower tech than Process Explorer and PH.

I keep it around in my "downoads" toolbox. It is good for a quick look. I like it because it is easier visualize the processes that are running (maybe I have bad eyes, lol).

I read your questions, and to be honest, as long as I have had it, which is over a year, I have never really used it to kill any processes, nor have I used many of it's functions other than an easy to read presentation of what might be suspect processes.

 

[Tweak]

Fair enough, thank you, also I appreciate that you took my comments as intended and not as me being a jerk or coming down on the suggestion and information you provided.

 

[savit]

SpyDllRemover - http://securityxploded.com/spydllremover.php

Download - http://securityxploded.com/getfile.php?id=3351

SpyDllRemover is the specialized tool for detecting spyware & hidden Rootkit Dlls in the System. It can also detect & remove user-land Rootkit processes as well as other spyware processes using multiple [user-land] Rootkit detection algorithms coupled with in-house Process heuristics. This makes it a generic tool for detecting & removing any known as well as unknown threats compared to traditional Antivirus Softwares which can detect only known threats.

One of the unique feature of SpyDllRemover is its ability to completely remove Spyware/Rootkit Dlls from any running Process across session boundaries using its 'Advanced Dll Ejection Method'. SpyDllRemover uses low level (user-land) Anti-Rootkit techniques which can defeat all tricks by such Rootkits to evade its detection and removal.

SpyDllRemover uses the differential color coding schemes to represent each threat levels which makes it easy to analyze and quickly differentiate between various threats. It also has 'Online Threat Verification' mechanism coupled with third party application integration to help in deeper analysis of all identified threats. With the 'Dll Search' feature, one can quickly find out all running Processes which have loaded the suspicious Dll. It's advanced report generation helps in taking quick snapshot of system (with all running Processes & Dlls) and pass it onto a specialist for further analysis.

Though this tool is useful to novice users, it is mainly designed to help the analysts to uncover spyware elements which are missed by Antivirus softwares. So this tool can also be used along side the traditional Antivirus softwares to effectively detect & protect against known as well as unknown threats.

SpyDllRemover is fully Portable software which can be directly run anywhere without installing locally. It works on wide range of platforms starting from Windows XP to latest operating system Windows 7.

 

[Tweak]

Thank you savit, being portable makes this far more interesting, not sure this can live up to its claims but if it can then it might prove useful.

What I didn't like is that it seems to only partially work on x64 based systems as seen from the FAQ.


On 64 bit systems, Why I am not able to see the Dlls for certain Processes?
SpyDllRemover is a 32 bit application, Hence does not work well when run on 64 bit Systems. Howerver it provides partial support while running on 64 bit Systems. So it will not be able to display the Dlls and perform certain actions for 64 bit Processes. However it can work well with 32 bit Processes (on 64bit Systems).

Complete support for 64 bit Systems will be added in upcoming versions.

 

[jamescv7]

Good that Spy DLL has a portable which is a +1 for that not needed an installation.

 

[Tweak]

Good that Spy DLL has a portable which is a +1 for that not needed an installation.

Oddly though the download is for both the installer and portable versions, most have a link for each, no big deal but still a little odd.

 

[Gnosis]

"Fair enough, thank you, also I appreciate that you took my comments as intended and not as me being a jerk or coming down on the suggestion and information you provided."


Actually, I am glad that you jumped in so quick. Constructive criticism and questioning is the only way we benefit from these forums sometimes, especially when a product is somewhat of an enigma to most forum members.
If you had not have commented and questioned the way that you did, a noob might have mistaken SpyDllRemover for much more than it really is (or "really is" relative to the way I use it).


Thanks for the plethora of information, Savit.

 

[Tweak]

"Fair enough, thank you, also I appreciate that you took my comments as intended and not as me being a jerk or coming down on the suggestion and information you provided."


Actually, I am glad that you jumped in so quick. Constructive criticism and questioning is the only way we benefit from these forums sometimes, especially when a product is somewhat of an enigma to most forum members.
If you had not have commented and questioned the way that you did, a noob might have mistaken SpyDllRemover for much more than it really is (or "really is" relative to the way I use it).


Thanks for the plethora of information, Savit.

I appreciate that you took time to state that, as you may have noticed I do not post too often as many here do but when I do post I try to make it a worthwhile contribution to my fellow forum members in some way, shape, or form. Post count, reputation, achievements I do not set a goal for so I tend to mainly post when a subject interests me or I might be able to help someone. I like some of what this program has to offer and being portable makes it an automatically better program in my opinion, it is something I would not have looked at in much detail had you not posted it here so thank you for that, perhaps I will find a need for it someday.

 

[Littlebits]

New version released-
What's new in SpyDLLRemover 5.0:
April 18th, 2012

· Displays new fields such as ASLR, DEP, Username for process, Marking off 32 bit processes, Advanced HTML report, Improved user friendly GUI interface.

Download (Softpedia)

Enjoy!!

 

[Prorootect]

.
Thank you Littlebits!

On my SpyDllRemover 4.5 GUI - I look on the red remark: 'New SpyDllRemover version 5.0 is available' .. so I click on this link, then find download button at the bottom of this home page, on SecurityXploded.com : http://securityxploded.com/spydllremover.php

All descriptions, FAQ and release history are here.

'Unlike most of Anti-virus solutions and detection tools which uses out dated signature based method, SpyDLLRemover uses Heuristics based techniques to detect latest threats as they emerge out of the closet.In addition to this, it also uses generic Rootkit detection techniques which helps in uncovering most of the user-land based Rootkits.'

Features:

Advanced Spyware Scanner

Hidden Rootkit Detection & Removal: Uses multiple techniques to detect user-land Rootkits:
Direct NT System Call Implementation
Process ID Brute force Method (PIDB) as first used by BlackLight
CSRSS Process Handle Enumeration Method

Unique 'Advanced DLL Ejection'

Sophisticated Auto Analysis: Dll & Process Heuristics ..

Color based Representation

Online Threat Verification

'DLL Tracer' Feature: Search for suspicious DLL within all running processes.

Cooler GUI Interface, Advanced Report, Portable Version, Integrated Installer .. for FREE.

Video demonstration on the site.

 

[Gnosis]

Cool. I always thought that Resplendence had good products. It is nice to see this.

 

[Prorootect]

In SpyDllRemover (on the VOP website) topic : http://forums.voiceofthepublic.com/smf2/index.php/topic,85.msg3445.html#msg3445 - I wrote today:

'I think this is one of the most interesting scanners for everyone, safe and easy to use - like all security tools of SecurityXploded.com.

Thank You, Nagareshwar Talekar, we attend the NEW version, please!..'

 

[Prorootect]

SpyDllRemover the NEW version is 6.0.

spydllremover_icon.png

Features:
Here are some of the special and unique features of SpyDllRemover.

• Advanced Spyware Scanner: Detects Hidden User-land Rootkit processes as well as suspicious/injected Dlls within running Processes.
  
• Hidden Rootkit Detection & Removal: Uses multiple techniques to detect user-land Rootkits
  • Direct NT System Call Implementation
  • Process ID Brute force Method (PIDB) as first used by BlackLight
  • CSRSS Process Handle Enumeration Method
• Unique 'Advanced DLL Ejection': This is one of the Advanced & Unique feature of SpyDLLRemover used to completely remove the injected DLL from Remote Process.
  
• Sophisticated Auto Analysis: Dll & Process Heuristics to help in Identification of known as well as Unknown Threats.
  
• Color based Representation: For clear and easier analysis of various type of Spyware Threats.
  
• Online Threat Verification: Scan suspicious Processes/DLLs using online services such as VirusTotal, ThreatExpert, ProcessLibrary and Google.
  
• 'DLL Tracer' Feature: Search for suspicious DLL within all running processes.
  
• Cooler GUI Interface: Attractive, Easy to Use & Customizable interface.
  
• Advanced Report: Generates complete report of Processes/Dlls along with Threat Analysis.
  
• Portable Version: You can easily run it directly without installation.
  
• Integrated Installer: It also comes with Installer to help you in local Installation & Un-installation.