sfxXX.tmp trying to access the internet
From: sponge (yosponge@yahoo.com)
Date: 03/14/03
- Next message: Simon Harrison: "Just a stab in the Dark for advice- Norton SW 2002 + Ports + Quake III Arena"
- Previous message: Paul Hutchings: "Netgear FR114P"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: yosponge@yahoo.com (sponge) Date: 14 Mar 2003 00:44:07 -0800
On Fri, 14 Mar 2003 00:28:09 +0000 (UTC), "Eric Parker"
<Eric_Parker_spamless@btopenworld.com> wrote:
>Hello,
>I am seeing messages like "sfxE0.tmp, sfxEA.tmp etc. is trying to
access the
>internet" from Zone Alarm when I click on a download file button on a
Web
>site.
>I did not grant it access.
>The executable 'sfxXX.tmp' (I didn't think .tmp files were
executable)
>disappears shortly after I deny it access.
>Should I be concerned about this ?
>What is it ?
>
>Any advice would be appreciated.
>
>eric
You should be extremely concerned. The .tmp files are installers.
What's happening is you are downloading ActiveX (a runnable program)
embedded in a web page. Virtually all of these are some form of
spyware. It's a good thing your IE security settings are set high
enough to even notify you
There are instructions on how to stop this at my site
(www.geocities.com/yosponge/browser.html) or there are a myriad of
postings in the Google archives.
Out of curiosity, what sites and what did they try and download? One
of my specialties is researching this kind of thing.
BTW, I STRONGLY recommend gettings the following programs, running
their updater, and using them all at least once a week:
SpyBot S&D
Ad-Aware 6
SpywareBlaster
Sponge
Sponge's Anti-Spyware Source
www.geocities.com/yosponge
- Next message: Simon Harrison: "Just a stab in the Dark for advice- Norton SW 2002 + Ports + Quake III Arena"
- Previous message: Paul Hutchings: "Netgear FR114P"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]