Spyware Warrior

thejynxed · Posted: Tue Nov 09, 2004 9:44 am Post subject: CWS Shredder

It seems that CWS Shredder was sold to Intermute by Merijin. Is CWS Shredder still recommended as useful now that it is owned by a larger corporate entity instead of the original author? I still use it for now at least.
_________________
"I stab thee with a rusty spork."

paperghost · Posted: Tue Nov 09, 2004 9:50 am Post subject: Re: CWS Shredder

thejynxed · Posted: Tue Nov 09, 2004 9:55 am Post subject:

I liked the older one too, but the new version 2.0 detected and cleaned two CWS variants that the original didn't detect. I have both old and new on my computer, and ran one and then the other.
_________________
"I stab thee with a rusty spork."

paperghost · Posted: Tue Nov 09, 2004 10:07 am Post subject:

There's one or two problems with the new version at the moment. For example, if you have certain entries in your Hosts file, it will say you have this HiddenDLL variant, and remove those entries from your hosts file. These entries are as follows:

ad.ca.doubleclick.net
ad.uk.doubleclick.net
ads.x10.com
leader.linkexchange.com
ln.doubleclick.net
m.doubleclick.net
m2.doubleclick.net
focusin.ads.targetnet.com
ads-03.tor.focusin.ads.targetnet.com
ads.fortunecity.com
media19.fastclick.net
media.fastclick.net
media.popuptraffic.com
adserv.internetfuel.com
ads.specificpop.com
iv.doubleclick.net
banners.valuead.com
webpdp.gator.com
ads.specificclick.com
a.tribalfusion.com

These entries are common to find in HOSTS files and I'm not sure why is picking these up at present.

TeMerc · Posted: Tue Nov 09, 2004 10:25 am Post subject:

Here is a list of threads I have been watching. As Paperghost mentioned, some host entires can be removed by the new Shredder.

Depends on which hosts file you have.

http://www.broadbandreports.com/forum/remark,11691710~mode=flat

http://www.broadbandreports.com/forum/remark,11626011~mode=flat

http://forums.net-integration.net/index.php?showtopic=23699

http://castlecops.com/postlite82883-.html

http://forums.tomcoyote.org/index.php?act=ST&f=30&t=19718&st=

http://forum.aumha.org/viewtopic.php?t=8837&highlight=

http://www.bleepingcomputer.com/forums/topict3735.html

http://pcpitstop.ibforums.com/index.php?showtopic=69579&hl=shredder

http://forums.spywareinfo.com/index.php?showtopic=31685
Software forum, all accessable

Needless to say, not many are actually using the new Shredder, tho, for almost all the sites have been mirroed with the new version.

One can only hope Intermute has a patch coming.

There are at least 3 different email\tickets that have been started, and sent to Intermute, one is mine, and no response to any as of yet.
_________________

Ultimate Countermeasures Page
Calendar Of Updates
Malware Advisor Blog

thejynxed · Posted: Tue Nov 09, 2004 2:10 pm Post subject:

I use one of the "official" HOSTS files from bluetack.co.uk. I normally keep my HOSTS file write protected (along with the +h and +s attributes) unless I am editing it. Any other recommended HOSTS file I could merge with my current file would be great.
_________________
"I stab thee with a rusty spork."