Security → what the...?

I'm sitting here, browsing a site (www.tampagasprices.com) just browsing their forum. all of a sudden kerio pops up and a setup.exe from the temp directory wants permission. Of course I deny. In the task manager, a setup.exe file is running, but it won't let me terminate the process. ran hjt, doesn't show up there, normal log. Looked in services. Nothing there. I cleared out the temp directory, but it denies me to delete the setup.exe (obviously cause it's running). I'm doing my normal web browsing watching tv here, nothing special running, not downloading anything, etc. Running Panda Titanium 2004, updated, kerio personal firewall.

what's up here?

I'd guess someone posted something nasty in the forum OR there was an evil banner ad link.

Best advice -- just get away from IE. Good luck. (I assume you know about the famous "Am I Infected" FAQ...)

-- B

Any chance you can remember which Forum....they have a few ?

umm, the top one, i'm not going back there yet

said by pcdebb:

---

I'm sitting here, browsing a site (www.tampagasprices.com) just browsing their forum. ....

---

I'm sure I read an other post here today of someone with a browser type problem who said that they were surfing at their 'gas site'. I have been unable to find it again. Related?

[edit: found it finally »Alexa part of I.E.? and it looks like the site was www.pittsburghgasprices.com. Common elements - 1) IE (Archie Bell Drell Factors presently unknown) - 2) xxxgasprices.com. Should have remembered, as the first site in the OP's signature there is wonderful!]