setup.dll is CAPTSR?

I read over the net that CAPTSR is a dangerous commercial monitoring software and its unregistered dll file is setup.dll. So I did a search on my win2k and found 3 instances: setup.dll, _setup.dll and _setup.dll. Are these really CAPTSR ? Should I delete them?

 

Hello Greeneye,

I have multiple setup.dll for InstallShield located in Program Files and Common Files. This is on XP

What are the locations for your instances?

Do not delete them before we know more.

Regards - Charles

 

is setup.dll a CAPTSR?

setup.dll in c:\program files\common files\...
_setup.dll in C:\program files\Powerquest\...
_setup.dll in C:\program files\creative\uninstall\

The search was from restricted user account.

The info comes from this site:

http://www.spywareremove.com/removeCAPTSR.html

 

setup.dll in c:\program files\common files\... depending the rest
_setup.dll in C:\program files\Powerquest\...
_setup.dll in C:\program files\creative\uninstall\

These are legitimate .dll files for Partition Magic and Sound Blaster.

The site you reference is a rogue site designed to scare you into downloading their "cleaner "

http://www.spywarewarrior.com/rogue_anti-spyware.htm

Regards - Charles

 

Captsr

The rest of the first line is:
C:\program files\common files\installshield\professional\runtime\10\01\intel32\

Thanks. I also found a site with a full list of spywares:

http://www.spywareguide.com/product_list_full.php

although it is obvious that the list is for promotive purpose I find it useful. It seems that most of the commercial monitoring softwares are difficult to remove with free softwares. With the exception of something like sandboxie .

Is there anywhere a list of the real file names of those softwares?

 

I know of no definitive list. One problem with "real" names is that the names change. As you can see, a lot of time and energy has to be devoted to keep track of sleazy products and sites, the same group will open multiple operations.

At the site I linked to, go to the home page where alot of articles and sites are linked to on this subject. There is also a forum that helps with removal.

If TeMerc reads this, maybe he knows of such list(s) other than the ones at Spyware Warrior.

Regards - Charles

 

Hi guys.

I'm not fully sure I'm grasping which 'list' we are looking for.

Are we looking for a list of files, which we could then determine if the files as listed\named can be discerned as good\bad?

Or are we looking for a list of rogue like anti-spywares?

If it's lists of file names and such you can find several lists on the front page of my site <<<<---shameless plug

Look for the drop down menu titled: Malware Databases. The SpywareGuide one is listed there along with others.

If on the other hand you're looking for a list of recommended anti-spyware and ones which are not-so-recommended, then the page posted by Charles has all you need to know. It is for the most part the 'bible site' for anti-spyware.

I just had a thought to create another section for sites which users can get file info from. There are several, tho Google searches usually comes up with the top sites too.

 

CAPTSR and others

Hi Temerc,

Very impressive site you have there. It will take me a while to read through it all.
But I can answer you right away that I wish to know the names of those "commercial monitoring softwares ", real file names that I can use to do the search on my computer. Since common names ( such as 007 Spy software ) will not help it.

That website ( http://www.spywareguide.com/product_list_full.php ) lists about 80-100 "commercail monitoring softwares ".

 

Typically, these types of 'commercial......' pieces of software are installed via employers, spouses, unsuspecting family members, like that. They are not of the malicious types, which are downloaded without the users knowledge or permission. The big difference being that in one instance, someone actually knows about the install. In the other, the drive by download or email malware code install, no one knows if the software is actually installed, except of course the criminologists behind the install, but that does not account for someone 'knowing' because the activity is criminal.

I'm unaware of any sites which list in completion all of these 'commercial' applications. Perhaps a Google search for same?

For sites that you can trust for information about .exe or .dll files and the like, the best thing to do is to Google search for them. Here are some of the sources I have come to trust when finding results via Google, in no particular order:

• WinTasks Processes
• Process Library
• Bleeping Computer
• CastleCops
• Gratis
• Prevx
• SysInfo
• Neuber

I'm sure there are a fw I'm missing, but those come to mind pretty easy. And one tip to also track down file info, if you can't find any definitive info, is to add '+ hijackthis' to any searches. This will bring all instances which also have a HJT log file, and some analysis about what was done with the file in question. This is especially helpful when there are new files out.

I hope that's been helpful and not too much more overload. But you can see what goes into each and every HJT log file analysis. Granted after looking at several hundred, if not several thousand logs, it does not take me long to get thru them. And the same goes for any seasoned HJT analyst.