"Spy vs Spy" <aJB@jbk.jk> wrote:
> Every few seconds, my Kerio Personal Firewall pops up a message saying
> 'Window Explorer' from my computer wants to connect to 207.36.117.38, port
> 80
>
> After I click on 'Deny' a few minutes, the box 'Windows Explorer has
> generated error blah blah' comes up after which the Quick Launch bar
> becomes unusable for a while.
>
> I have turned off Windows AutoUpdates but the issue persists.
>
> Any idea why it wants to connect to that IP address ? How can I stop it
> from wanting to connect to any external site ?
>
> Is it really Windows Explorer or some other application masquerading like
> Windows Explorer ?
>
> Thanks.

You've got something "phoning home"
IP you posted resolves to this:

OrgName: CyberGate, Inc.
OrgID: CYBG
Address: 3250 W. Commercial Blvd. Suite 200
City: Ft. Lauderdale
StateProv: FL
PostalCode: 33309
Country: US

NetRange: 207.36.0.0 - 207.36.255.255
CIDR: 207.36.0.0/16
NetName: GATE-CIDR-2
NetHandle: NET-207-36-0-0-1
Parent: NET-207-0-0-0-0
NetType: Direct Allocation
NameServer: NS.VALUEWEB.NET
NameServer: NS2.VALUEWEB.NET
Comment:
RegDate: 1996-01-23
Updated: 2000-11-28

TechHandle: CN313-ARIN
TechName: Network Administrator, CyberGate Network
TechPhone: +1-954-334-8080
TechEmail: netadm@valueweb.net

If you have not run an Ad-aware or SpyBot scan - do so immediately.
Ad-aware here: http://ftp.pcworld.com/pub/new/priva...ty/aaw6181.exe
SpyBot here: http://spybot.eon.net.au/files/spybotsd_mainapp.exe

In the meantime, Block that connect out request -

HTH

--

siljaline

"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_