John2g
Qui Tacet Consentit
Premium
join:2001-08-10
England
3 edits | CWShredder 2.0 from Intermute
It will be a disappointment to many that Intermute do not appear to have added many, if any, CWS definitions to those already covered by Merijn, when he has responsible for it.
The list can be read here:
»cwshredder.net/cwshredder/cwschronicles.html
It appears to only remove 43 variants of CWS at a maximum when there are now in excess of 100 variants. |
|
CalamityJane
Premium,VIP,MVM
join:2002-08-27
Eustis, FL | Discussion thread is here already FYI:
»CWShredder Ver 2.0 |
|
John2g
Qui Tacet Consentit
Premium
join:2001-08-10
England
2 edits | I knew that, as I posted there around 15 times. I thought that if I added the information to the end of that thread nobody would read it.
If you want to add the information to that thread, feel free. |
|
Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC | Add it to this thread .. I will read it  |
|
TeMerc
join:2004-01-22
Phoenix, AZ
| reply to John2g
Well, I for one am still waiting to see if the new Shredder works on any of the old variants, never mind the hidden dll ones. What good is the app if it now only cleans the dll variants, but not all the rest? I must have at least 8-10 different threads I'm monitoring for any info regarding this.
And Merijn is asking all who mirror the old version to change or disable those links as he is bound contractually. Suzi has changed hers I think already.
I'm glad I have an old version DLed to my security travel disc.
--
Remember............You can NEVER be OVERPROTECTED!! |
|
John2g
Qui Tacet Consentit
Premium
join:2001-08-10
England
1 edit | I think it is just a vehicle to sell their other product SpySubtract. |
|
SUMware
Premium
join:2002-05-21 | reply to John2g
v1.59.1 is still available for download at several sites including PC World, and Major Geeks. |
|
dadkins
Can you do Blu?
Premium,MVM
join:2003-09-26
Hercules, CA | reply to John2g
I have nothing but praise for SpySubtract(been using it for about a year and a half). I'm just glad someone picked up CWShredder, it's a good app.
--
Nuke 'em all, let God sort 'em out. |
|
John2g
Qui Tacet Consentit
Premium
join:2001-08-10
England
| reply to John2g
On further reading it is unable to remove CWS.Realyellowpage
Quote
Variant 39: CWS.Realyellowpage
Approx date first sighted: March 16, 2004
Symptoms: IE pages changed to real-yellow-page.com, drxcount.biz, list2004.com or linklist.cc, hijack inexplicably returning on reboot with no file seemingly responsible
Cleverness: 10/10
Manual removal difficulty: Extremely Difficult
This variant is a nightmare. If you come across an infected machine that keeps changing back to the aforementioned sites over and over again for no visible reason, you've probably seen this one. It's like whoever is reponsible for this hired some blackhat coder and told him to make the most complex, invisible and devious hijacker he could think of. And he did. The file is randomly named, and normally hooks into the IE process, loading itself as a module into it. And then it hides the host process from the process list. Yes, you read that right, the process hosting the dll disappears from the task list and most process viewers/managers we tried.
Right now, CWShredder does not remove this variant. As soon as we figure out how to do it, we will update CWShredder for it. /Quote
--
Better to remain silent and be thought a fool, than to speak and remove all doubt. |
|
stillrunnin
So What? You Gotta Problem With That?
Premium
join:2003-12-27
Frederick,MD
clubs:
 ·Comcast
| reply to John2g
said by John2g  :I think it is just a vehicle to sell their other product SpySubtract. I think you are right my friend.
--
Spazmatic |
|
dadkins
Can you do Blu?
Premium,MVM
join:2003-09-26
Hercules, CA
1 edit | reply to John2g
Nevermind. |
|
Buddel
If it ain't broke, don't fix it.
Premium
join:2004-03-06
EU | reply to John2g
What do you think? Is the new CWShredder 2.0 worth installing or is it a waste of time? I'm still in two minds as to whether I should download the new version. As always, your opinions are highly appreciated.:) |
|
siggyx
Siggy
Premium
join:2003-12-10
Cambridge
| reply to John2g
I would recommend that everyone has CWShredder on thier system. It is still a useful application and there are still those old hijacks hanging around on the net.
--
The next best thing to being smart is being able to quote someone who is. |
|
boblandy
Premium
join:2002-05-06
| reply to John2g
the Spyware Weekly Newsletter for October 28, 2004 is touting it....
"CWShredder Returns To The Web
Until last June, Dutch college student Merijn Bellekom was fighting a one-man war against the most widespread browser hijacker on the web, CoolWebSearch. His small freeware program CWShredder was the only program able to detect and successfully remove all known variants of the CWS hijacker. Not one of the other antispyware or antivirus programs available on the web was able to keep up with all of the variants of CWS.
Last June, Merijn called it quits. CWShredder was updated for a final time and Merijn announced that no more updates would be forthcoming. Shortly after, he licensed much of the detection rules to X-Block for use in their X-Cleaner antispyware program.
CWShredder is back. Merijn has sold the source code and rights to CWShredder to Intermute. They have published an updated version at cwshredder.net. CWShredder still is a free download and now is being updated once again on a continuing basis to deal with new variants of the CWS hijacker."
--
look out kid they keep it all hid |
|
