what's the add-on? Maybe it's trying to compute whatever it does? Why do you have addons on your production machine anyway? Just asking...
On Tue, Dec 8, 2009 at 12:20 AM, Michael Dinowitz < [email protected]> wrote: > > Dana, > > The Trojan was on Judith's machine and I got it off. Nasty. This is > something that comes on only with firefox and goes in/out over http. > > It looks like it had something to do with an add-on that I just > removed. Add-on gone, requests gone. Now I get to find out what add-on > is associated with vivashosting. > > As a side note to anyone using tcpview or process explorer, if you see > a connection to *.1e100.net, that's Google Analytics. > > Thanks > > -- > Michael > > > > > On Tue, Dec 8, 2009 at 1:20 AM, Dana <[email protected]> wrote: > > > > somebody wants your system for its botnet? Did you ever get rid of that > > trojan? softlayer is a big data center. Wonder who they have pissed off. > > What ports is it trying to use? > > > > On Mon, Dec 7, 2009 at 11:05 PM, Michael Dinowitz < > > [email protected]> wrote: > > > >> > >> I'm watching my system try it's best to connect to www.softlayer.com > >> (which I have blocked). It keeps rotating the ports to use and I have > >> no clue what this is associated with or why its happening. Anyone have > >> a clue? > >> > >> Thanks > >> > >> -- > >> Michael > >> > >> > > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-community/message.cfm/messageid:309196 Subscription: http://www.houseoffusion.com/groups/cf-community/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.5
