Caspr.exe Spyware?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Hi All,

    Downloaded and installed TheCleaner 4.2 to test out the program and
learn about it.

    I have received "Caspr.exe - Application Error while running TheCleaner.

    Has anyone heard about Caspr.exe? Is it a Worm, Spyware or Adware
program?


--
thecreator



Re: Caspr.exe Spyware?


Quoted text here. Click to load it
TheCleaner.

http://www.wilderssecurity.com/archive/index.php/t-18127.html

Google has the answers to most fucking problems. You just have to know how
to ask :)



Re: Caspr.exe Spyware?


| Hi All,
|
|     Downloaded and installed TheCleaner 4.2 to test out the program and
| learn about it.
|
|     I have received "Caspr.exe - Application Error while running TheCleaner.
|
|     Has anyone heard about Caspr.exe? Is it a Worm, Spyware or Adware
| program?
|


Please submit a sample to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it.  In addition,
unless told
otherwise, Virus Total will provide the sample to all participating vendors.

You can also submit a suspect, one at a time, via the following email URL...
mailto:scan@virustotal.com?subject=SCAN

When you get the report, please post back the exact results.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Caspr.exe Spyware?

Hi David,

    Thanks for the links.

    Situation. Since a friend over the Internet was having problems with
running The Cleaner 4.2 version and receiving the Caspr.exe- Application
Error, I decided to download and test it myself.

    I installed The Cleaner 4.2 version  and it runs. I maintain a clean
system. After it scans Drives C and D, it goes to E where my operating
system is installed on. I got this error message when the program attempted
to scan the Ahead folders for Nero.

    The Caspr.exe file along with its two .dll files, are only found in
Program Files\The Cleaner folder when the error message is present on the
screen. I found the folder it shows up in when using TuneUp Processor
Manager, from the program called TuneUp Utilities 2006. Task Manager program
does not give file locations, like TuneUp does.

    Anyway, I can copy both .Dll files, but can't copy Caspr.exe program,
because it is in use and disappears when the error message isn't on the
screen. It isn't permanently installed by TheCleaner 4.2 version.

    McAfee has no information about this program on its Website.

    I found information at:
http://www3.ca.com/securityadvisor/pest/pest.aspx?id=59719 and
http://www.spy-bot.net/caspr-1.012.aspx .

    How do you copy a file EXE that is in use?


--
thecreator


Quoted text here. Click to load it



Re: Caspr.exe Spyware?


| Hi David,
|
|     Thanks for the links.
|
|     Situation. Since a friend over the Internet was having problems with
| running The Cleaner 4.2 version and receiving the Caspr.exe- Application
| Error, I decided to download and test it myself.
|
|     I installed The Cleaner 4.2 version  and it runs. I maintain a clean
| system. After it scans Drives C and D, it goes to E where my operating
| system is installed on. I got this error message when the program attempted
| to scan the Ahead folders for Nero.
|
|     The Caspr.exe file along with its two .dll files, are only found in
| Program Files\The Cleaner folder when the error message is present on the
| screen. I found the folder it shows up in when using TuneUp Processor
| Manager, from the program called TuneUp Utilities 2006. Task Manager program
| does not give file locations, like TuneUp does.
|
|     Anyway, I can copy both .Dll files, but can't copy Caspr.exe program,
| because it is in use and disappears when the error message isn't on the
| screen. It isn't permanently installed by TheCleaner 4.2 version.
|
|     McAfee has no information about this program on its Website.
|
|     I found information at:
| http://www3.ca.com/securityadvisor/pest/pest.aspx?id=59719 and
| http://www.spy-bot.net/caspr-1.012.aspx .
|
|     How do you copy a file EXE that is in use?
|

Kill gthe process.  Use the task manager or Process Explorer from Sysinternals.
http://www.sysinternals.com/Utilities/ProcessExplorer.html

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Caspr.exe Spyware?

Hi David,

    3 Files submitted one at a time via your E-mail Link.


--
thecreator

Quoted text here. Click to load it



Re: Caspr.exe Spyware?

Quoted text here. Click to load it

Look here for info on this malware:
http://www.spywaredb.com/remove-caspr-1-012 /

-jen



Re: Caspr.exe Spyware?

Hi David,

    One result at a time. For caspr2.dll file.

Complete scanning result of "Caspr2.zip", processed in VirusTotal at
11/05/2006
02:27:39 (CET).

[ file data ]
* name: Caspr2.zip
* size: 38521
* md5.: 88869d0557f049cdbeb54d34f2d3fd8d
* sha1: 05e01d4dd4460536fd864f50799969380b7407bb

[ scan result ]
 AntiVir    7.2.0.37/20061103    found nothing
Authentium    4.93.8/20061104    found nothing
Avast    4.7.892.0/20061103    found nothing
AVG    386/20061104    found nothing
BitDefender    7.2/20061105    found nothing
CAT-QuickHeal    8.00/20061104    found nothing
ClamAV    devel-20060426/20061104    found nothing
DrWeb    4.33/20061104    found nothing
eTrust-InoculateIT    23.73.45/20061103    found nothing
eTrust-Vet    30.3.3176/20061103    found nothing
Ewido    4.0/20061104    found nothing
F-Prot    3.16f/20061104    found nothing
F-Prot4    4.2.1.29/20061104    found nothing
Fortinet    2.82.0.0/20061104    found nothing
Ikarus    0.2.65.0/20061103    found nothing
Kaspersky    4.0.2.24/20061105    found nothing
McAfee    4888/20061103    found nothing
Microsoft    1.1609 /20061104    found nothing
NOD32v2    1.1853/20061103    found [unpack error]
Norman    5.80.02/20061103    found nothing
Panda    9.0.0.4/20061104    found [Suspicious file]
Sophos    4.10.0/20061026    found nothing
TheHacker    6.0.1.112/20061103    found nothing
UNA    1.83/20061103    found nothing
VBA32    3.11.1/20061104    found nothing
VirusBuster    4.3.15:9/20061104    found nothing

[ notes ]
packers: UPX
packers: UPX

__________________________________________________
VirusTotal is a free service offered by Hispasec Sistemas. There are no
guarantees about the availability and continuity of this service. Do not
reply
to this message. It has been generated by an automatic address that will not
handle any reply. Although the detection rate afforded by the use of
multiple
antivirus engines is far superior to that offered by just one product, these
results DO NOT guarantee the harmlessness of a file. Currently, there is not
any
solution that offers a 100% effectiveness rate for detecting viruses and
malware.
Quoted text here. Click to load it



Re: Caspr.exe Spyware?

Hi David,

    This is for Caspr1.dll file.

Complete scanning result of "Caspr1.zip", processed in VirusTotal at
11/05/2006
02:26:44 (CET).

[ file data ]
* name: Caspr1.zip
* size: 21436
* md5.: d939fd40c9b6ef8091010916cf6a8970
* sha1: d1ed4e57db5d49d626598ee5bea6b589bb7c723c

[ scan result ]
 AntiVir    7.2.0.37/20061103    found nothing
Authentium    4.93.8/20061104    found nothing
Avast    4.7.892.0/20061103    found nothing
AVG    386/20061104    found nothing
BitDefender    7.2/20061105    found nothing
CAT-QuickHeal    8.00/20061104    found nothing
ClamAV    devel-20060426/20061104    found nothing
DrWeb    4.33/20061104    found nothing
eTrust-InoculateIT    23.73.45/20061103    found nothing
eTrust-Vet    30.3.3176/20061103    found nothing
Ewido    4.0/20061104    found nothing
F-Prot    3.16f/20061104    found nothing
F-Prot4    4.2.1.29/20061104    found nothing
Fortinet    2.82.0.0/20061104    found [suspicious]
Ikarus    0.2.65.0/20061103    found nothing
Kaspersky    4.0.2.24/20061105    found nothing
McAfee    4888/20061103    found nothing
Microsoft    1.1609 /20061104    found nothing
NOD32v2    1.1853/20061103    found nothing
Norman    5.80.02/20061103    found nothing
Panda    9.0.0.4/20061104    found [Suspicious file]
Sophos    4.10.0/20061026    found nothing
TheHacker    6.0.1.112/20061103    found nothing
UNA    1.83/20061103    found nothing
VBA32    3.11.1/20061104    found nothing
VirusBuster    4.3.15:9/20061104    found nothing

__________________________________________________
VirusTotal is a free service offered by Hispasec Sistemas. There are no
guarantees about the availability and continuity of this service. Do not
reply
to this message. It has been generated by an automatic address that will not
handle any reply. Although the detection rate afforded by the use of
multiple
antivirus engines is far superior to that offered by just one product, these
results DO NOT guarantee the harmlessness of a file. Currently, there is not
any
solution that offers a 100% effectiveness rate for detecting viruses and
malware.
Quoted text here. Click to load it



Re: Caspr.exe Spyware?

Hi David,

    Last file. Caspr.exe results.

Complete scanning result of "Caspr.zip", processed in VirusTotal at
11/05/2006
02:25:25 (CET).

[ file data ]
* name: Caspr.zip
* size: 2928
* md5.: 2b7a4e01a37aa377c558a555f50f0de5
* sha1: b745ff5765c8a52eb6eb08b6ceb55535917c762a

[ scan result ]
 AntiVir    7.2.0.37/20061103    found nothing
Authentium    4.93.8/20061104    found nothing
Avast    4.7.892.0/20061103    found nothing
AVG    386/20061104    found nothing
BitDefender    7.2/20061105    found nothing
CAT-QuickHeal    8.00/20061104    found [(Suspicious) - DNAScan]
ClamAV    devel-20060426/20061104    found nothing
DrWeb    4.33/20061104    found nothing
eTrust-InoculateIT    23.73.45/20061103    found nothing
eTrust-Vet    30.3.3176/20061103    found nothing
Ewido    4.0/20061104    found nothing
F-Prot    3.16f/20061104    found nothing
F-Prot4    4.2.1.29/20061104    found nothing
Fortinet    2.82.0.0/20061104    found [suspicious]
Ikarus    0.2.65.0/20061103    found nothing
Kaspersky    4.0.2.24/20061105    found nothing
McAfee    4888/20061103    found nothing
Microsoft    1.1609 /20061104    found nothing
NOD32v2    1.1853/20061103    found nothing
Norman    5.80.02/20061103    found nothing
Panda    9.0.0.4/20061104    found nothing
Sophos    4.10.0/20061026    found nothing
TheHacker    6.0.1.112/20061103    found nothing
UNA    1.83/20061103    found nothing
VBA32    3.11.1/20061104    found nothing
VirusBuster    4.3.15:9/20061104    found nothing

__________________________________________________
VirusTotal is a free service offered by Hispasec Sistemas. There are no
guarantees about the availability and continuity of this service. Do not
reply
to this message. It has been generated by an automatic address that will not
handle any reply. Although the detection rate afforded by the use of
multiple
antivirus engines is far superior to that offered by just one product, these
results DO NOT guarantee the harmlessness of a file. Currently, there is not
any
solution that offers a 100% effectiveness rate for detecting viruses and
malware.
Quoted text here. Click to load it



Re: Caspr.exe Spyware?


| Hi David,
|
|     Last file. Caspr.exe results.
|
| Complete scanning result of "Caspr.zip", processed in VirusTotal at
| 11/05/2006
| 02:25:25 (CET).
|
| [ file data ]
| * name: Caspr.zip
| * size: 2928
| * md5.: 2b7a4e01a37aa377c558a555f50f0de5
| * sha1: b745ff5765c8a52eb6eb08b6ceb55535917c762a
|
| [ scan result ]
|  AntiVir 7.2.0.37/20061103 found nothing
| Authentium 4.93.8/20061104 found nothing
| Avast 4.7.892.0/20061103 found nothing
| AVG 386/20061104 found nothing
| BitDefender 7.2/20061105 found nothing
| CAT-QuickHeal 8.00/20061104 found [(Suspicious) - DNAScan]
| ClamAV devel-20060426/20061104 found nothing
| DrWeb 4.33/20061104 found nothing
| eTrust-InoculateIT 23.73.45/20061103 found nothing
| eTrust-Vet 30.3.3176/20061103 found nothing
| Ewido 4.0/20061104 found nothing
| F-Prot 3.16f/20061104 found nothing
| F-Prot4 4.2.1.29/20061104 found nothing
| Fortinet 2.82.0.0/20061104 found [suspicious]
| Ikarus 0.2.65.0/20061103 found nothing
| Kaspersky 4.0.2.24/20061105 found nothing
| McAfee 4888/20061103 found nothing
| Microsoft 1.1609 /20061104 found nothing
| NOD32v2 1.1853/20061103 found nothing
| Norman 5.80.02/20061103 found nothing
| Panda 9.0.0.4/20061104 found nothing
| Sophos 4.10.0/20061026 found nothing
| TheHacker 6.0.1.112/20061103 found nothing
| UNA 1.83/20061103 found nothing
| VBA32 3.11.1/20061104 found nothing
| VirusBuster 4.3.15:9/20061104 found nothing
|

I NEVER indicated that the file should be submitted in ZIP format.  Many of the
online
scanners at VT do NOT extract files from archive.  Therefore your results are
not correct.

Thse files need to be re-submitted as raw files, not in an archive.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Caspr.exe Spyware?

Hi David,

    Resubmitted files.

Complete scanning result of "Caspr2.dll", processed in VirusTotal at
11/05/2006
17:52:46 (CET).

[ file data ]
* name: Caspr2.dll
* size: 39936
* md5.: f2d7ed3d8b28a9d85114448dde3253b8
* sha1: 2b005afc51e37f48147e044e910d1d9614d1f158

[ scan result ]
 AntiVir    7.2.0.37/20061105    found nothing
Authentium    4.93.8/20061105    found nothing
Avast    4.7.892.0/20061103    found nothing
AVG    386/20061104    found nothing
BitDefender    7.2/20061105    found nothing
CAT-QuickHeal    8.00/20061104    found nothing
ClamAV    devel-20060426/20061105    found nothing
DrWeb    4.33/20061105    found nothing
eTrust-InoculateIT    23.73.45/20061103    found nothing
eTrust-Vet    30.3.3176/20061103    found nothing
Ewido    4.0/20061105    found nothing
F-Prot    3.16f/20061104    found nothing
F-Prot4    4.2.1.29/20061104    found nothing
Fortinet    2.82.0.0/20061105    found nothing
Ikarus    0.2.65.0/20061103    found nothing
Kaspersky    4.0.2.24/20061105    found nothing
McAfee    4888/20061103    found nothing
Microsoft    1.1609 /20061104    found nothing
NOD32v2    1.1853/20061103    found [unpack error]
Norman    5.80.02/20061103    found nothing
Panda    9.0.0.4/20061104    found [Suspicious file]
Sophos    4.10.0/20061026    found nothing
TheHacker    6.0.1.112/20061103    found nothing
UNA    1.83/20061103    found nothing
VBA32    3.11.1/20061105    found nothing
VirusBuster    4.3.15:9/20061105    found nothing

[ notes ]
packers: UPX
packers: UPX

__________________________________________________
VirusTotal is a free service offered by Hispasec Sistemas. There are no
guarantees about the availability and continuity of this service. Do not
reply
to this message. It has been generated by an automatic address that will not
handle any reply. Although the detection rate afforded by the use of
multiple
antivirus engines is far superior to that offered by just one product, these
results DO NOT guarantee the harmlessness of a file. Currently, there is not
any
solution that offers a 100% effectiveness rate for detecting viruses and
malware.
Quoted text here. Click to load it



Re: Caspr.exe Spyware?

Hi David,

    Resubmitted file.

Complete scanning result of "Caspr1.dll", processed in VirusTotal at
11/05/2006
17:59:04 (CET).

[ file data ]
* name: Caspr1.dll
* size: 22016
* md5.: 9376b89382a44899d9c1d86a00ce0cb4
* sha1: 459eb46aff6b7bc38e373ea4686625c2a8bd5f5a

[ scan result ]
 AntiVir    7.2.0.37/20061105    found nothing
Authentium    4.93.8/20061105    found nothing
Avast    4.7.892.0/20061103    found nothing
AVG    386/20061104    found nothing
BitDefender    7.2/20061105    found nothing
CAT-QuickHeal    8.00/20061104    found nothing
ClamAV    devel-20060426/20061105    found nothing
DrWeb    4.33/20061105    found nothing
eTrust-InoculateIT    23.73.45/20061103    found nothing
eTrust-Vet    30.3.3176/20061103    found nothing
Ewido    4.0/20061105    found nothing
F-Prot    3.16f/20061104    found nothing
F-Prot4    4.2.1.29/20061104    found nothing
Fortinet    2.82.0.0/20061105    found [suspicious]
Ikarus    0.2.65.0/20061103    found nothing
Kaspersky    4.0.2.24/20061105    found nothing
McAfee    4888/20061103    found nothing
Microsoft    1.1609 /20061104    found nothing
NOD32v2    1.1853/20061103    found nothing
Norman    5.80.02/20061103    found nothing
Panda    9.0.0.4/20061104    found [Suspicious file]
Sophos    4.10.0/20061026    found nothing
TheHacker    6.0.1.112/20061103    found nothing
UNA    1.83/20061103    found nothing
VBA32    3.11.1/20061105    found nothing
VirusBuster    4.3.15:9/20061105    found nothing

__________________________________________________
VirusTotal is a free service offered by Hispasec Sistemas. There are no
guarantees about the availability and continuity of this service. Do not
reply
to this message. It has been generated by an automatic address that will not
handle any reply. Although the detection rate afforded by the use of
multiple
antivirus engines is far superior to that offered by just one product, these
results DO NOT guarantee the harmlessness of a file. Currently, there is not
any
solution that offers a 100% effectiveness rate for detecting viruses and
malware.
Quoted text here. Click to load it



Re: Caspr.exe Spyware?

Hi David,

    Resubmitted files as requested.

Complete scanning result of "Caspr.exe", processed in VirusTotal at
11/05/2006
17:53:17 (CET).

[ file data ]
* name: Caspr.exe
* size: 3584
* md5.: 7bab2a9cfbc1efa2057663ff3bfd1cef
* sha1: 509ac87b28ab4b8ad5264c707d1e04ea570c4513

[ scan result ]
 AntiVir    7.2.0.37/20061105    found nothing
Authentium    4.93.8/20061105    found nothing
Avast    4.7.892.0/20061103    found nothing
AVG    386/20061104    found nothing
BitDefender    7.2/20061105    found nothing
CAT-QuickHeal    8.00/20061104    found [(Suspicious) - DNAScan]
ClamAV    devel-20060426/20061105    found nothing
DrWeb    4.33/20061105    found nothing
eTrust-InoculateIT    23.73.45/20061103    found nothing
eTrust-Vet    30.3.3176/20061103    found nothing
Ewido    4.0/20061105    found nothing
F-Prot    3.16f/20061104    found nothing
F-Prot4    4.2.1.29/20061104    found nothing
Fortinet    2.82.0.0/20061105    found [suspicious]
Ikarus    0.2.65.0/20061103    found nothing
Kaspersky    4.0.2.24/20061105    found nothing
McAfee    4888/20061103    found nothing
Microsoft    1.1609 /20061104    found nothing
NOD32v2    1.1853/20061103    found nothing
Norman    5.80.02/20061103    found nothing
Panda    9.0.0.4/20061104    found nothing
Sophos    4.10.0/20061026    found nothing
TheHacker    6.0.1.112/20061103    found nothing
UNA    1.83/20061103    found nothing
VBA32    3.11.1/20061105    found nothing
VirusBuster    4.3.15:9/20061105    found nothing

__________________________________________________
VirusTotal is a free service offered by Hispasec Sistemas. There are no
guarantees about the availability and continuity of this service. Do not
reply
to this message. It has been generated by an automatic address that will not
handle any reply. Although the detection rate afforded by the use of
multiple
antivirus engines is far superior to that offered by just one product, these
results DO NOT guarantee the harmlessness of a file. Currently, there is not
any
solution that offers a 100% effectiveness rate for detecting viruses and
malware.
Quoted text here. Click to load it



Re: Caspr.exe Spyware?


| Hi David,
|
|     Resubmitted files as requested.
|
| Complete scanning result of "Caspr.exe", processed in VirusTotal at
| 11/05/2006
| 17:53:17 (CET).
|

OK ( Dave shakes his head )
The report is surprisingly the same.

Suspicios is the name of this game.  I'd say remove "TheCleaner".

Where did you download "TheCleaner" ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Re: Caspr.exe Spyware?

Hi David,

    http://downloads.zdnet.com/download.aspx?&kw=the+cleaner&docid=234537

    Downloaded The Cleaner from zdnet.com . Below is information about it.

The Cleaner Professional (exe)


Source: MooSoft Development



Date:  Jun 2006



Version: 4.2 build 4319



System Requirements: Windows 98/Me/NT/2000/XP



License: Free to try



Price: $49.95



Limitations: 30-day trial



Downloads: 34

Format: Software




Size: 4,863KB




Overview: If you surf the Web or send and receive e-mail, you can't afford
to be without The Cleaner. It protects your system from Trojan horses, which
are destructive programs that masquerade as friendly applications. Version
4.2 build 4319 updated the cleaning and scanning engine to support emerging
threats.




Topics:  Antivirus - Security - Windows




Tags:  Spyware, Spyware, adware & malware, trojan horse, e-mail, Web




(Is this item miscategorized? Does it need more tags? Let us know.)

Quoted text here. Click to load it

    Caspr.exe is not installed by The Cleaner, when it is installed. Virus
Guy, do you have Nero installed on your system? Caspr.exe comes out when the
error is seen on the screen. When you close the error message, Caspr.exe and
its .dll files disappears. Caspr.exe and its .dll files can be found in
C:\Program Files\The Cleaner folder.


--
thecreator





Quoted text here. Click to load it



Re: Caspr.exe Spyware?

Everybody, for God's sake, it's SPYWARE. Yes, it is. Don't scan it,
scan it again, ask to report back the results, and all that other crap;
look:
http://www.google.com/search?q=Caspr.exe&start=0&start=0&ie=utf-8&oe=utf-8&client=flock&rls=FlockInc.:en-US:official
It's BAD.

Jesus.


Site Timeline