3 Replies Latest reply on Dec 11, 2008 11:35 PM by gtw

    Event 1095 - Z@xxx.tmp


      I have been seeing numerous event 1095 in the ePO event log. They all follow this pattern: Event 1095 Host instrusion c:\documents and settings\user name\local settings\temp\z@xxx.tmp where the xxx is one alpha and 2 numbers - Z@R54.TMP or Z@S54.TMP.

      They come in groups of a dozen (or so) at a time.

      I have checked with the users and they can not say what they were doing on their computers or on Internet Explorer.

      Anyone know where these are coming from?
      Thank you!