This issue is a recurring one over the past several months. More a nuisance (I hope) than a threat as NIS reports its removal each time. However, it would be good to block it completely. It shows up as a numbered .tmp file. If memory serves me correctly I know there is a way to prevent the recurrence but can't recall the process.