EUniverse Updater

A scan of a Windows 2000 system, J, on October 5, 2005 with Microsoft AntiSpyware found EUniverse Updater.

Microsoft AntiSpyware Version: 1.0.615
Spyware Definition Version: 5733 (10/5/2005 11:25:03 PM)

Item Details

EUniverse Updater

Type: Adware
Adware is generally software that displays advertisements. Some advertisers may covertly install adware on your system and generate a stream of unsolicited advertisements that can clutter your desktop and affect your productivity. The advertisements may also contain pornographic or other material that you might find inappropriate. The extra processing required to track you or to display advertisements can tax your computer and hurt your system performance.

Category: Browser Modifier
Software that changes browser settings, such as the homepage, without adequate consent.

Threat Level: High
High-risk items have a large potential for harm, such as loss of computer control, and should be removed unless knowingly installed.

Author: eUniverse.com Inc./Intermix Media

Description: EUniverse is adware that runs at Windows startup. EUniverse generates pop-up advertisements, and performs a number of spyware related functions such as transmitting personal information and redirecting Internet Explorer.

High-risk items have a large potential for adverse effect, such as loss of computer control, and should be removed unless knowingly installed.

Locations

c:\winnt\system32\spool\drivers\w32x86\3\hpztsb01.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run HPDJ Taskbar Utility

The WinTasks Process Library webpage on this process, hpztsb01 - hpztsb01.exe - Process Information indicates the file is associated with the HP Deskjet Taskbar Utility. Uniblue, the creator of WinTasks provides the following advice regarding the hpztsb01.exe process:

hpztsb01.exe is a process belonging to the HP Deskjet Taskbar Utility which is installed alongside the HP deskjet range of printers. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems.

AuditMyPC.com also indicates that a file by this name is a Hewlett Packard (HP) printer driver:

The hpztsb01.exe process provides you with a system tray icon that assists when diagnosing problems with your Hewlett Packard printer. If you do not find it useful, you can disable this process. If you do not have a Hewlett Packard printer attached to your computer this process should be removed.

Since the detection of Euniverse Updater appeared to be a false positive on this system, I left the software in place and instructed Microsoft AntiSpyware to always ignore it when checking the system.