file trying to be sent from my computer without my knowlage?

[marshall]

SMSS32CRYPT.EXE was blocked by my firewall-e-mail
protection. Is this a problem

[Sandi - Microsoft MVP]

Never heard of the file. Search for it on your computer, right click it,
select properties, and see if you can work out what installed it.

--
Hyperlinks are used to ensure advice remains current
_______________________________________
Sandi - Microsoft MVP since 1999 (IE/OE)
http://inetexplorer.mvps.org/


marshall wrote:
> SMSS32CRYPT.EXE was blocked by my firewall-e-mail
> protection. Is this a problem

[Chees]

We have the same problem and service32.exe generates the same message in the winsocks.log
Now I found the reasone at the Symantec-Hompage:

Found soloution:
W32.Sober.G@mm is a mass-mailing worm that uses its own SMTP engine to spread itself. The subject of the email varies, and it will be in either English or German. The email sender address is spoofed.

This worm generates files withe the above names and many more.

As it's not a Virus it's not detected by the older Version of Symantec-Antivirus.
See:
http://servicenews.symantec.com/cgi-bin/displayArticle.cgi?article=31840&group=symantec.support.generic.virus_corporate.gen eral&mini_version=sav_8_ce&product=sav_ce&product_name=Symantec+AntiVirus+Corporate+Edition&tpre=ep&version_name=8.x&

Kind Regards

Chees

marshall wrote:
SMSS32CRYPT.EXE was blocked by my firewall-e-mail
protection. Is this a problem[/QUOTE]