TPS108


· Overview ·
· Origins ·
· Distribution ·
· Operation ·
· Risks ·
· Detection and Removal ·
· Research ·



Overview

Summary:

TPS108 is an IE Browser Helper Object. It monitors web pages requested and data entered into forms, sends this information to its home server, and opens pop-up advertisement windows. It also has the capability to update itself and install other software. TPS108 appears to be yet another revision of VX2.Transponder.

Vendor Notes:

"TPS108 is an innovative Deal Companion that gives you the best "private sale" offers from the coolest music, video and apparel companies on the web. Names you know. Brands you trust. And best of all, with TPS108 your privacy is assured. We do not obtain any personal information form you. Specifically, we do not collect your browsing activity nor do we build a profile. Surf and save money!"

See Also:

VCatch · VX2

Category:

Browser Helper Object: (BHO). A component that Internet Explorer will load whenever it starts, shares IE's memory context, can perform any action on the available windows and modules. A BHO can detect events, create windows to display additional information on a viewed page, monitor messages and actions. Microsoft calls it "a spy we send to infiltrate the browser's land." BHOs are not stopped by personal firewalls, because they are seen by the firewall as your browser itself. Some exploits of this technology search all pages you view in IE and replace banner advertisements with other ads. Some monitor and report on your actions. Some change your home page.

Adware: Software that displays popup/popunder ads when the primary user interface is not visible or which do not appear to be assocaited with the product.

Variants:

  • VX2.Transponder
  • Similar Pests:

    Browser Helper Object · Adware

    Origins

    Group:

    TPS108,Inc.

    Vendor:

    TPS108

    Mailing Address:

    TPS108, Inc., PO Box 28909, Las Vegas NV 89126

    Phone:

    800-348-9657

    EMail:

    optout@tps.org, legal@tps108.org, techsupport@TPS108.org

    Date of Origin:

    June, 2003

    Distribution

    Distribution:

    Bundled with VCatch. Seems to be bundled with subscriptions to porn sites run by Webdream/Digital Rooster. On installation it misleadingly describes itself as a viewer for adult video content.

    Prevalence:

  • TPS108: 0.5%
  • VX2.Transponder: 4.1%
  • More Info

    Clot Factor:

  • TPS108: 6
  • The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.

    Growth:

  • TPS108: Insufficient data to report growth
  • VX2.Transponder: Insufficient data to report growth
  • Operation

    Advertising:

    Yes. TPS108 opens pop-up advertisements depending on targeted URLs being browsed, targeted terms being entrered into forms (this is aimed at search engines), and how much browsing is being done - the software tries to hide by not opening advertisements when little is happening.

    "There are a vast number of offers and services available to Internet users that TPS108 may display. In addition, TPS108.org negotiates exclusive offers to maximize value for users. TPS108's goal is to show users information about these offers and services - right at the moment when they need it. For example, if you visit a travel site - we might show you how to save 40% on travel at a competitive travel site. If you visit a retail site, you might see an offer for a coupon at offering the same products at a lower price.

    TPS108's information and offers are provided to users by showing a limited number of relevant coupons and ads in the form of interstitials ("pop-up ads") and other ad formats. These offers and ads are shown when users visit various sites across the Internet, based on URLs visited by the user and local country or zip code of the user. TPS108 offers are delivered independently from the site the user happens to be visiting when they see a TPS108 offer and are not endorsed or affiliated with anyone other than TPS108.org." -- http://www.tps108.org/privacy.htm

    Browser Performance:

    Likely to slow performance of Internet Explorer.

    Risks

    Privacy Issues:

    Yes. TPS108 reports back to its servers with URLs you have visited, things you have entered into web forms (even 'secure' ones), your computer configuration, and software you have installed. If your e-mail address is configured in Outlook Express, it will be sent and sold for junk e-mail targeting.

    Privacy Policy:

    http://www.tps108.org/privacy.htm

    Security Issues:

    Yes. The software updates itself silently and may automatically install any other "third party software" as with VX2. "You understand, acknowledge and agree that installation of an Application permits the downloading to your computer by TPS108 of software which allows us to update the Application and install other Applications, and that such downloads and updates may occur without notice to you." -- http://www.tps108.org/privacy.htm

    Stability Issues:

    Recent versions may hang Internet Explorer and Explorer. May trigger Windows XP error reporting.

    Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.



    Manual Removal:

    TPS108, Inc. provides these removal instructions: "If you want to uninstall, you can do so easily through the add/remove function in your control panel. You can access your control panel by going to:

    1. Start (typically, the button in the bottom left of your screen)
    2. Choose SETTINGS
    3. Choose CONTROL PANEL
    4. Choose ADD/REMOVE PROGRAMS
    5. Select TPS108
    6. Click on ADD/REMOVE In the absence of an entry in ADD/REMOVE PROGRAMS please use on of the following methods: For Windows98 and WindowsXP users:

    a) To permanently disable the software click "Start" and then "Run" and type the following command which unregisters the software: regsvr32 c:\windows\TPS108.dll -u" 

    b) To completely remove the software: reboot and then Find and Delete the fileTPS108.dll.

    For Windows2000, WindowsME and WindowsNT users:

    a) To permanently disable the software click "Start" and then "Run" and type the following command which unregisters the software: "regsvr32 c:\winnt\TPS108.dll -u"

    b) To completely remove the software: reboot and then Find and Delete the file TSP108.dll.

    TPS108.dll installs itself into your Windows directory. Before you can delete this file you will need to deregister it. Enter the following command from the command line for Windows 95/98/Me:

    "%WinDir%\SYSTEM\regsvr32.exe" /u "%WinDir%\TPS108.dll"

    Or for Windows NT/2000/XP:

    regsvr32 /u "%WinDir%\TPS108.dll"

    After doing this and restarting the computer you can delete the file. There will also be some keys in the registry under HKLM\Software\TPS108, which you can clean up.

    Stop Running Processes:

    Kill these running processes with Task Manager:

    Clean Registry:

    Remove these registry items (if present) with RegEdit:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Research

    More Info:

  • http://www.tps108.org/removal.htm
  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
  • Research By:

  • Andrew Clover
  • PestPatrol's Pest Research Center
  • Last Revised:

    April 05, 2005