Dashboard Weather 2.2 downloading .exe files

Norton AV has been giving me regular alerts ever since I installed Kon, but it's taken me months to find out why. This afternoon I caught it. When ever Dashboard Weather 2.2 updates, an exe file is getting downloaded into my temp directory. The file is always called 6c6812d2.exe. Is anyone else having this problem? Why does an exe have to be downloaded anyway? I've scanned with three virus scanners but nothing is coming up.

Any ideas?

#311134

never got that problem and even dont know how this can happen because of my widget. the only networking thing it does is fetching some url from accuweather or weather.com

are you sure the reason is my widget? do you have it from osx-e.com or from somewhere else? and to be sure you could extract the files of the widget and search for anything unusual inside (such as ".exe" or any http: terms). again, i cant believe that my widget forces to download an exe file.

SioSae

#311147

never got that problem and even dont know how this can happen because of my widget. the only networking thing it does is fetching some url from accuweather or weather.com

are you sure the reason is my widget? do you have it from osx-e.com or from somewhere else? and to be sure you could extract the files of the widget and search for anything unusual inside (such as ".exe" or any http: terms). again, i cant believe that my widget forces to download an exe file.

SioSae

The wierd thing is it happens at exactly the same time the widget updates. I've always missed the virus alert by 20 minutes or so, but today I was here when it happened. The first thing I did was check the Last Updated time on the tooltips for the widget and it had just refreshed. The only other widgets I'm running on that machine are all Kon distributed ones. I'd be interested to know if anyone else has experienced it. Maybe a Norton bug?

#311151

Sorry, I didn't answer your question. I got it from the link on aqua-soft, as far as I can remember. I've just downloaded it again from osx-e.com, so I'll see if that makes a difference.

#311153