Dana, This is my dev machine at home, not production. I'm not sure what add-on it was, but it was trying really, really, really hard to connect somewhere. As I was removing a number of add-ons at the time, I'm not sure which was the problem.
It's interesting to watch exactly what a browser connects to when its on. -- Michael On Tue, Dec 8, 2009 at 2:24 AM, Dana <[email protected]> wrote: > > what's the add-on? Maybe it's trying to compute whatever it does? Why do you > have addons on your production machine anyway? Just asking... > > On Tue, Dec 8, 2009 at 12:20 AM, Michael Dinowitz < > [email protected]> wrote: > >> >> Dana, >> >> The Trojan was on Judith's machine and I got it off. Nasty. This is >> something that comes on only with firefox and goes in/out over http. >> >> It looks like it had something to do with an add-on that I just >> removed. Add-on gone, requests gone. Now I get to find out what add-on >> is associated with vivashosting. >> >> As a side note to anyone using tcpview or process explorer, if you see >> a connection to *.1e100.net, that's Google Analytics. >> >> Thanks >> >> -- >> Michael >> >> >> >> >> On Tue, Dec 8, 2009 at 1:20 AM, Dana <[email protected]> wrote: >> > >> > somebody wants your system for its botnet? Did you ever get rid of that >> > trojan? softlayer is a big data center. Wonder who they have pissed off. >> > What ports is it trying to use? >> > >> > On Mon, Dec 7, 2009 at 11:05 PM, Michael Dinowitz < >> > [email protected]> wrote: >> > >> >> >> >> I'm watching my system try it's best to connect to www.softlayer.com >> >> (which I have blocked). It keeps rotating the ports to use and I have >> >> no clue what this is associated with or why its happening. Anyone have >> >> a clue? >> >> >> >> Thanks >> >> >> >> -- >> >> Michael >> >> >> >> >> > >> > >> >> > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-community/message.cfm/messageid:309197 Subscription: http://www.houseoffusion.com/groups/cf-community/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.5
