You are here

Spybot Lite (portable)

37 posts / 0 new
Last post
Anonymous (not verified)
Spybot Lite (portable)

You can make Spybot portable simply by installing it to your C drive and then copying the files to your USB drive. I've been tinkering with it lately, trying to shrink it's 11.5MB size on my USB drive. If you're focusing on detection and removal as the functions used on your USB version of Spybot, here's a list of files that can be deleted to reduce it's size:

1. All non-English license, help, and language files - This doesn't save much space, but it's better than nothing.

2. All files in the Updates folder except 'downloaded.ini' - It appears that Spybot retains the zipped update files even after applying those updates. I saved about 2MB by deleting them. 'downloaded.ini' keeps a record of the updates you've already downloaded, so deleting this will cause Spybot to think you don't have the updates you already have. 'online.ini' will regenerate when you check for updates. (The Languages, Plugins, and Skins folders will also regenerate when you check for updates, if you've deleted them.)

3. TeaTimer.exe - Used by Resident TeaTimer, as part of a permanent installation of Spybot (can also be run seperate from Spybot). Monitors processes and detects known malicious ones that want to start and then kills them, then lets you create rules. TeaTimer also detects changes to IE settings. If you run TeaTimer from a USB drive while examining a system it might not detect any malicious processes simply because none tried to start while TeaTimer was running. Since it's only monitoring the system while running from the USB drive it might not detect a present malware infection on the system you're examining.

4. SDHelper.dll - Used by Resident SDHelper (aka Resident IE), as part of a permanent installation of Spybot. Blocks IE from downloading known malicious files. This DLL is also used by TeaTimer, however TeaTimer can run without it.

5. Blindman.exe - Used by permanent installations of Spybot to speed up the boot process when startups are disabled by Spybot. This doesn't save much space, but the file is pretty much useless for our purposes here.

6. Startup.tnfo - Provides additional info on startup programs. This info is taken straight from pacs-portal.co.uk (you can also find it at sysinfo.org).

Deleting all those files brings the size down to about 7.6MB and you still have all the functionality of scanning/detection/removal.

I'm trying to figure out what other files can be deleted too. Does anyone know exactly what each of the .sbs files in the Includes folder relate to? I know the .sbi files are used for scanning/detection, but I'm not sure about all of the .sbs files.

Ryan McCue
Ryan McCue's picture
Offline
Last seen: 15 years 1 month ago
Joined: 2006-01-06 21:27
Also...

1)Remove .sbe files, if you have them, they are exclude files, and since >when your'e changing computers the files don't stay the same, methinks >they are useless.
2).sbs files are listed as Spyware supplimental files leave them in
3)You can also get rid of English.resident.chm as this appears to be >related with Tea Timer
4)Remove all skins
5)Try removing spybotsd.xml
6)UPX *.exe and *.dll
NOTE: Most of the dlls and exes cant be packed
-----END LIST-----
I got it down to 5.79mb 8-)
----
R McCue

"If you're not part of the solution, you're part of the precipitate."

Buzzsaw (not verified)
The .sbs files are not used

The .sbs files are not used for detection, as far as I can tell. They're used by various other functions, some of which are not needed/useful for this version. That's why I'm trying to figure out exactly what each file is used for.

Ryan McCue
Ryan McCue's picture
Offline
Last seen: 15 years 1 month ago
Joined: 2006-01-06 21:27
Yes, but

they appear to be for the detection of cookies, browser hijackers etc
I have left them in.
----
R McCue

"If you're not part of the solution, you're part of the precipitate."

rellimdr (not verified)
I could only get it down to

I could only get it down to 9mb Sad

Ryan McCue
Ryan McCue's picture
Offline
Last seen: 15 years 1 month ago
Joined: 2006-01-06 21:27
UPX?

Did you UPX the lot?
----
R McCue

"If you're not part of the solution, you're part of the precipitate."

rellimdr (not verified)
I did,but I really don't

I did,but I really don't know how to work it. I just drug all the .dlls and .exe to the upx icon. Something happend I just asummed it compressed them.

Ryan McCue
Ryan McCue's picture
Offline
Last seen: 15 years 1 month ago
Joined: 2006-01-06 21:27
Instructions:

1)Move UPX.exe to the directory
2)start>run>cmd then goto the directory
3)type 'UPX *.dll' without quotes
4)type 'UPX *.exe' without quotes
Done
BTW :lol:
"I just drug all the .dlls and .exe..."
:lol:
hahaha
----
R McCue

"If you're not part of the solution, you're part of the precipitate."

rellimdr (not verified)
Dragging the .dlls and .exe

Dragging the .dlls and .exe to upx is the only way i could get it to do anything. If I click on upx to start the program it just flashes up a dos window and immediately shuts down.

Deuce
Offline
Last seen: 14 years 1 month ago
Developer
Joined: 2005-12-24 16:32
UPX is a command line prog

That is because UPX is a command line program. To use it correctly just open a command line and go to the directory with the program and run upx from there. It will find the files and compress them.

What I do is create a batch file with the following lines:

---------------------------

@echo off

upx --best --compress-icons=0 --nrv2d --crp-ms=999999 -k *.dll *.exe

pause

exit

---------------------------

This will start upx and compress .dll's and .exe's to their maximum values I found that work well, and then pause to allow me to view the results. Just copy the batch file and the upx.exe to the program folder and run.

As simple as it can get for me.

This is the same options that John uses for PFF, POO.o and all the other apps he has created for the community.

Deuce
"Portable Software: Just the beginning..."

Deuce
Portable Software: Just the beginning.

Buzzsaw (not verified)
They cannot be UPX'ed.

They cannot be UPX'ed.

Ryan McCue
Ryan McCue's picture
Offline
Last seen: 15 years 1 month ago
Joined: 2006-01-06 21:27
As I said not all but some

As I said not all but some can be.
----
R McCue

"If you're not part of the solution, you're part of the precipitate."

m2
Offline
Last seen: 13 years 9 months ago
Joined: 2006-12-12 12:00
3.39mb

3.39mb 8)
UPX 2.91 beta on all files, sometimes LZMA.
I removed dummies etc. - only Includes are still there.
At SD start I get a message that it was modified, but then everything works perfectly - finds and removes problems as before.
Does anybody know what are uti / uts files?
3.36 with some dirty hacks.

"Those people who think they know everything are a great annoyance to those of us who do." Asimov

albator
Offline
Last seen: 16 years 7 months ago
Joined: 2005-12-09 13:47
Adaware is portable too, I

Adaware is portable too, I use I without any modification

345 portable applications:
http://standalone.atspace.org/index.html

theophobia (not verified)
I like to state the obvious, obviously...

You may also remove all uninstall files...

Buzzsaw (not verified)
So obvious I forgot to

So obvious I forgot to mention it, lol.

Nerd
Offline
Last seen: 15 years 7 months ago
Joined: 2006-03-29 17:50
U can use the UPX mass

U can use the UPX mass compressor

Bahamut
Bahamut's picture
Offline
Last seen: 12 years 11 months ago
Joined: 2006-04-07 08:44
Had it ever occurred to you

Had it ever occurred to you to read the whole thread?

Vintage!

Bruce Pascoe
Offline
Last seen: 12 years 10 months ago
Joined: 2006-01-15 16:14
...

Hey, wait a minute. He said that you can use a UPX mass compressor--i.e. a utility to UPX a bunch of a files at once. That hadn't been mentioned before in this thread until he brought it up.

Seems everyone's getting just a little too edgy lately...

-
Lauren She eats everything! It's like having a goat. A giant, two-Godzillaton goat.
maggie Hey, I resent that remark! I only weigh ONE Godzillaton!
~ Spectacles: Bruce's Story

Ryan McCue
Ryan McCue's picture
Offline
Last seen: 15 years 1 month ago
Joined: 2006-01-06 21:27
Exactly

I was about to have a go at him myself, but re-read the post.
I think we should read the posts more carefully.
----
R McCue
PortaBlog Home and My Website
PortaBlog is now officially out of beta!

"If you're not part of the solution, you're part of the precipitate."

rich.bradshaw
Offline
Last seen: 11 years 5 months ago
Joined: 2006-10-05 08:41
Does the immunization work

Does the immunization work even if it's made portable?

moronoxyd
Offline
Last seen: 17 years 4 months ago
Joined: 2007-01-11 22:47
Yes. It immunizes the IE

Yes. It immunizes the IE installation on the PC it is currently running on.

stromy93
Offline
Last seen: 10 months 1 week ago
Joined: 2006-11-27 01:08
additional icon on PA menu

I'm getting an additional icon on the PA menu. I played around and discovered one's for the actual program (Spybot-SD) and the other is the external updater (Spybot - Serach & Destory). I deleted the updater in playing around and then did a refresh on the PA menu. It got rid of the 2nd icon. But when I ended up running the program and went to do the update, it said the updater was missing. But appears to go ahead and updates anyway. Does anyone else get two icons or that? Any way around the two icons on the PA menu?

Thanks

Orius
Offline
Last seen: 15 years 11 months ago
Joined: 2006-11-30 11:13
So I copied my SSD

So I copied my SSD installation to my drive and followed all of the instructions listed above. Everything works great. But there is a discrepancy in reported size. When I Select All (Ctrl A) the files in the SSD folder the total size is listed as 5.83 MB. BUT when I examine the properties of the SSD folder itself, Windows reports 10.5 MB? What is going on here? Does this have something to do with the level of compression for the files inside the folder?

Thanks
Zack

nekiruhs
Offline
Last seen: 16 years 10 months ago
Joined: 2007-01-16 17:24
Hidden Files

There are probably some hidden files in the folder, just go by the folder size.

----
Linux: Because rebooting is for adding hardware

Orius
Offline
Last seen: 15 years 11 months ago
Joined: 2006-11-30 11:13
Well, I have "hidden files

Well, I have "hidden files and folders" enabled and "hide protected operating system files" disabled for all folders. What else would make these "hidden files" visible? I would like to attempt to get my SSD size to the around the 5MB the other people have achieved.

Thanks,
Zack

Nerd
Offline
Last seen: 15 years 7 months ago
Joined: 2006-03-29 17:50
Possibly

A new version?

Kevin Porter
Kevin Porter's picture
Offline
Last seen: 10 years 8 months ago
Developer
Joined: 2007-01-10 19:25
Would it be...

Would it be legal to host the new, UPXed version of it? I am really not understanding this UPX. Thanks.

Kevin P.
The Newbie-Geek

"Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning." - Rick Cook

Ryan McCue
Ryan McCue's picture
Offline
Last seen: 15 years 1 month ago
Joined: 2006-01-06 21:27
Nope

UPX modifies the executable, which is counted as a derivative work or a moderation.
----
Ryan McCue
Current Fav. Songs:

  • Ballroom Blitz - The Misfits
  • Manic Monday - Cyndi Lauper
  • I Don't Like Mondays - The Boomtown Rats

"If you're not part of the solution, you're part of the precipitate."

Kevin Porter
Kevin Porter's picture
Offline
Last seen: 10 years 8 months ago
Developer
Joined: 2007-01-10 19:25
Thanks anyway. Kevin P. The

Thanks anyway.

Kevin P.
The Newbie-Geek

"Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning." - Rick Cook

Orius
Offline
Last seen: 15 years 11 months ago
Joined: 2006-11-30 11:13
Spybot Lite/Portable Leavings

Hmm...having a little trouble making Spybot fully portable. After following the directions in this thread, the program works fine (give or take a few warning messages about useless missing pieces), but it does leave some folders behind.

Spybot creates a set of folders under Documents and Settings/all users/Application data. These folders can be deleted after using Spybot but will be recreated w/ each use.

Is there a way to get Spybot to stop this behavior? Sorry if this is a simple/stupid question, but I am not at all versed in coding or software structure.

Thanks,

Zack

Kevin Porter
Kevin Porter's picture
Offline
Last seen: 10 years 8 months ago
Developer
Joined: 2007-01-10 19:25
Zack, Spybot Portable is

Zack,
Spybot Portable is just an experiment to make a smaller version of Spybot, not to make it "portable". It technically is a "just works" app.

Kevin P.
The Newbie-Geek

-Please Search before posting

"Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning." - Rick Cook

Ryan McCue
Ryan McCue's picture
Offline
Last seen: 15 years 1 month ago
Joined: 2006-01-06 21:27
I'm planning on

contacting the makers of Spybot S&D to get permission when we start doing freeware apps.
----
Ryan McCue
Cube Games
There are only two states in Australia: Queensland and Drunk
If you have any questions about the comment above, or anything, please don't hesitate to ask.

"If you're not part of the solution, you're part of the precipitate."

Simeon
Simeon's picture
Offline
Last seen: 10 years 1 month ago
DeveloperTranslator
Joined: 2006-09-25 15:15
Cool

"Physics is like sex. Sure, it may give some practical results, but that's not why we do it." - Richard P. Feynman

"What about Love?" - "Overrated. Biochemically no different than eating large quantities of chocolate." - Al Pacino in The Devils Advocate

utmatt20
Offline
Last seen: 17 years 7 months ago
Joined: 2007-04-04 18:24
Great Idea

They are good about getting back to you. I emailed them when I got a U3 device to see when they would offer a portable version. He just said to copy the folder as discussed in this thread. I think he would welcome your idea.

John T. Haller
John T. Haller's picture
Offline
Last seen: 3 hours 13 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Already Did

I already contacted em Wink

Sometimes, the impossible can become possible, if you're awesome!

Ryan McCue
Ryan McCue's picture
Offline
Last seen: 15 years 1 month ago
Joined: 2006-01-06 21:27
Well

I did too Wink
You take it.
----
Ryan McCue
Cube Games
So all that Airbus-delay trouble over here in Europe is because of YOU!
Simeon

"If you're not part of the solution, you're part of the precipitate."

Topic locked