Sygate is telling me that an application called z4an.exe is trying to connect to treestomertime.net. I have blocked it from doing so but now when I open windows explorer it again tries to connect to treestompertime.net. I have searched this term in google and found nothing and when I go to www.treestompertime.net there is a blank page that says: "what do you want to find here?". this has been happening for a few weeks now. What can I do to stop it? Cheers, Helen

Hi Helen, When you say you have blocked z4an.exe from connecting did you tick the 'remember my choice' check box :-) ? Alternatively, are you able to delete it in safe mode? What anti-spyware and anti-virus program are you using? - there are many free offerings out on the net if you dont want to pay. HTH - post back if the problem continues

Try searching for the file and deleting it.If it comes back try renaming it but do not delete.if not work post another msg 31337

Hi helen Do a search for it, and upload it to here for analysis http://virusscan.jotti.dhs.org/ If any advice helps, please post back as it might help others.

I have had this same problem for some time now. At first the process was called 3u4d.exe which tried to connect to treestompertime.net. I ran a search for the file 3u4d.exe but to no avail. In task manager I could see 4 instances of 3u4d.exe running and ended them all only for them to start back up an hour later. The process name has now changed to 46qu91g.exe there are often more than one instance running and now instead of 3u4d.exe trying to connect to treestompertime it is 46qu91g.exe that attempts to connect. I searched for a file of that name, can't find one. Any ideas would be appreciated. I use xcleaner, spybot search and destroy, norton 2005 proffesional and sygate firewall.

I have the same problem, only it's called f04bg5k.exe on my system. I've deleted in the process tree, renamed it, deleted it from windows, and like the cat, it keeps coming back... Blocking it in Sygate is ok but it keeps changing properties, which is why sygate pops up and askes if you want to keep blocking it. I've just done as someone above suggested and uploaded it to http://virusscan.jotti.dhs.org/. Three of the scanners they use show it as a Trojan, which is scary. Now to find out how get rid of the damn thing....

Any luck getting rid of this thing yet? It is getting annoying. Firewall is blocking its attempts to connect but when I leave my Pc alone for some time I come back and find 5 instances of it running. Found it in C:\Windows\ it was hidden before as a system file. Deleted it, it comes back, planted a fake file with the same name, it overwrites it. Adaware and Spybot are no help.