• About
• Features
• How it works?
• Video Demonstration   
• Screenshots  
• FAQ on SpyDllRemover  
• Testimonials
• Release History
• Download

In addition to Spyware Dlls, it can also detect user-land Rootkit processes using multiple Anti-Rootkit techniques. It uses Heuristic analysis and 'Online Threat Verification' for deeper analysis of unknown Malware Threats.

All these unique features makes it one of the generic tool for removing known as well as Unknown Threats compared to traditional Antivirus Softwares which can detect only known threats.

SpyDllRemover is fully Portable software and works on wide range of platforms starting from Windows XP to Windows 10

• Advanced Spyware Scanner: Detects Hidden User-land Rootkit processes as well as suspicious/injected Dlls within running Processes.
• Hidden Rootkit Detection & Removal: Uses multiple techniques to detect user-land Rootkits
  • Direct NT System Call Implementation
  • Process ID Brute force Method (PIDB) as first used by BlackLight
  • CSRSS Process Handle Enumeration Method
• Unique 'Advanced DLL Ejection': This is one of the Advanced & Unique feature of SpyDLLRemover used to completely remove the injected DLL from Remote Process.
• Sophisticated Auto Analysis: Dll & Process Heuristics to help in Identification of known as well as Unknown Threats.
• Color based Representation: For clear and easier analysis of various type of Spyware Threats.
• Online Threat Verification: Scan suspicious Processes/DLLs using online services such as VirusTotal, ThreatExpert, ProcessLibrary and Google.
• 'DLL Tracer' Feature: Search for suspicious DLL within all running processes.
• Cooler GUI Interface: Attractive, Easy to Use & Customizable interface.
• Advanced Report: Generates complete report of Processes/Dlls along with Threat Analysis.
• Portable Version: You can easily run it directly without installation.

Here are some of the technical articles which throws light on how Rootkits operate under the hood and their detection methods

• 'Hidden Rootkit Process Detection'
• 'Hidden Rootkit Services Detection'
• 'Hidden Registry Detection'

•  RED :
  • Level =>[High Risk] Dangerous;
  • Description => Hidden Rootkit/Spyware;
  • Action => Remove Dll/Kill Process;
  
  
•  Orange :
  • Level =>[Medium Risk] Suspicious;
  • Description => Suspicious Rootkit/Spyware;
  • Action => Scan Online & then Remove Dll/Kill Process;
  
  
•  Yellow :
  • Level =>[Low Risk] Analysis;
  • Description => Need further analysis, It may be Spyware element;
  • Action => Scan Online & then Remove Dll/Kill Process;
  
  
•  Green :
  • Level => Good;
  • Description => System process/legitimate third party process;
  • Action => Nothing;
  
  
•  No Color :
  • Level => Normal;
  • Description => normal process/dll;
  • Action => Nothing;