dsorx
join:2005-04-02
Pompano Beach, FL
| Weird Zone Alarm Alerts
I have been using free Zone Alarm for a long time and since upgrading to the new version, I am getting pop-ups for new programs at least once an hour. The programs are always numerical names like 17667.exe, 16747.exe. They are located in c:\windows\user\local settings\temp. When I delete these temp files, the come back again and generate new alert messages (see attached image).
I have been searching for answers and can't find any. I have scanned with NAV 2005 and Ad-Aware SE and that did not fix the problem either.
Any ideas please? Thanks. |
|
Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire
| I would just in case double check for malware/spyware
»Security »I think my computer is infected or hijacked. What should I do?
only if negative maybe suspect corrupt ZA database in which case
"
..
Go to Windows\Internet Logs and delete the 2 files that end in .RDB ..."
Cudni
--
Whether you think that you can, or that you can't, you are usually right.
Help yourself so God can help you..it does exactly what it says on the sig |
|
andyv420
join:2005-02-06 | Well.....?????? Maybe you DENY ACCESS. Thats what I would do. Common sense is very powerful. If you do not know thats coming into yuor system......then DENY accress, thats all. |
|
antiserious
The Future ain't what it used to be
Premium
join:2001-12-12
Scranton, PA
| said by andyv420  :If you do not know thats coming into yuor(sic) system......then DENY accress(sic), thats all.
... umm, those look like outgoing alerts, and I believe the OP wants to know what's causing them, not what to do with them ...
... but thanks for stopping by ...
--
... "Nobody's perfect - well, there was this one guy, but we killed Him" ... Christopher Moore, 'Lamb' ... |
|
dsorx
join:2005-04-02
Pompano Beach, FL
| reply to dsorx
Of course I am denying the requests and remembering the setting. But it is happening over and over again with different numerical files. I am in the process now of running all the adware/spyware/virus programs suggested in the hijack directions suggested earlier. Nothing major found so far, but I haven't had a pop-up in about an hour so I will keep my fingers crossed. |
|
mythology
join:2002-10-16
Seneca, SC | reply to dsorx
Try booting into safe mode and deleting your temp folders and stay away from the pr0n =p |
|
simplysup
Premium
join:2004-03-30
UK
| reply to dsorx
said by dsorx :I have been using free Zone Alarm for a long time and since upgrading to the new version, I am getting pop-ups for new programs at least once an hour. The programs are always numerical names like 17667.exe, 16747.exe. Very suspicious - my first assumption would be Adware downloaders.
They are located in c:\windows\user\local settings\temp. When I delete these temp files, the come back again and generate new alert messages (see attached image). Even more suspicious.
I have been searching for answers and can't find any. I have scanned with NAV 2005 and Ad-Aware SE and that did not fix the problem either.
Any ideas please? Thanks.
The IP address shown in your ZoneAlarm pic resolves to an address owned by Managed Solutions Group. You may wish to contact abuse@managed.com, quoting the IP address 65.75.191.240, and ask them to investigate.
I note you are running adware/spyware scans, but if they come up with nothing then you may wish to post a HijackThis log so that anything not being detected can be spotted.
--
Nigel |
|
dsorx
join:2005-04-02
Pompano Beach, FL | reply to dsorx
Follow up:
I deleted the temp files in safe mode and deleted the two .RDB files as suggested. So far...24 hours pop-up free so I think the problem is solved. Thanks to all who advised. |
|
