true; I remember going through a security log wondering why the heck this machine kept connecting to google, and finally figuring out it was an addon ;)
On Tue, Dec 8, 2009 at 2:03 AM, Michael Dinowitz <mdino...@houseoffusion.com > wrote: > > Dana, > > This is my dev machine at home, not production. I'm not sure what > add-on it was, but it was trying really, really, really hard to > connect somewhere. As I was removing a number of add-ons at the time, > I'm not sure which was the problem. > > It's interesting to watch exactly what a browser connects to when its on. > > -- > Michael > > > > > On Tue, Dec 8, 2009 at 2:24 AM, Dana <dana.tier...@gmail.com> wrote: > > > > what's the add-on? Maybe it's trying to compute whatever it does? Why do > you > > have addons on your production machine anyway? Just asking... > > > > On Tue, Dec 8, 2009 at 12:20 AM, Michael Dinowitz < > > mdino...@houseoffusion.com> wrote: > > > >> > >> Dana, > >> > >> The Trojan was on Judith's machine and I got it off. Nasty. This is > >> something that comes on only with firefox and goes in/out over http. > >> > >> It looks like it had something to do with an add-on that I just > >> removed. Add-on gone, requests gone. Now I get to find out what add-on > >> is associated with vivashosting. > >> > >> As a side note to anyone using tcpview or process explorer, if you see > >> a connection to *.1e100.net, that's Google Analytics. > >> > >> Thanks > >> > >> -- > >> Michael > >> > >> > >> > >> > >> On Tue, Dec 8, 2009 at 1:20 AM, Dana <dana.tier...@gmail.com> wrote: > >> > > >> > somebody wants your system for its botnet? Did you ever get rid of > that > >> > trojan? softlayer is a big data center. Wonder who they have pissed > off. > >> > What ports is it trying to use? > >> > > >> > On Mon, Dec 7, 2009 at 11:05 PM, Michael Dinowitz < > >> > mdino...@houseoffusion.com> wrote: > >> > > >> >> > >> >> I'm watching my system try it's best to connect to www.softlayer.com > >> >> (which I have blocked). It keeps rotating the ports to use and I have > >> >> no clue what this is associated with or why its happening. Anyone > have > >> >> a clue? > >> >> > >> >> Thanks > >> >> > >> >> -- > >> >> Michael > >> >> > >> >> > >> > > >> > > >> > >> > > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-community/message.cfm/messageid:309202 Subscription: http://www.houseoffusion.com/groups/cf-community/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.5
