The Planet hosts a SPYWARE program "Universa Application".
Information collected from this spyware application is sent to 70.84.127.98 port 80.
The program works by saving a number of winXX.tmp files in the Windowstemp folder. After time, these files "grow" into winXX.tmp.exe and start running as user processes. You can kill processes and delete the source exe, but another winXX.tmp.exe starts up soon thereafter. There is no "host" application running from what I can determine.
Major adware and spyware programs do not pick up this spyware. This may be a variant of 123bar, which is not running on the system.
Any ideas?
Full Version: The Planet Hosts SPYWARE: Universa Application
Most spyware is legal. Ethically dubious? Yes but legal. Therefore, TP doesn't really care what it does unless it breaks the law.
Any ideas? Yep, LART the user, rerun spyware destroyers after updating them and if that doesn't work, reinstall the O/S.
Any ideas? Yep, LART the user, rerun spyware destroyers after updating them and if that doesn't work, reinstall the O/S.
Sounds like another IP to add to your firewalls then. 
AFAIK spyware is not illegal, but if you feel they are up to something dubious please report it to us.
AFAIK spyware is not illegal, but if you feel they are up to something dubious please report it to us.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.