Something on your computer wants to downlad something
else onto your computer, or send something from your
computer to someplace else.  Very risky unless you know
exactly what has called curl and what it is trying to
download.  This is the kind of thing a trojan scout
might do, to get the true trojan. Or maybe it's
something sending off your address book and credit
card numbers.  Or maybe it's something entirely
benign.  Read the curl manpage, too.

One thing to try, when the LS alert comes up, is to
(i) click on some LS button, like the "once" button
(but don't click the "Allow Once" button yet), which I
believe will keep the LS alert from timing out, (ii)
move the LS window out of the way, (iii) start up
Activity Monitor, showing processes threaded, to see
what the curl process is a child of, ie what program
wants to use curl.

Re requesting good vs bad, be clear that what you're
asking for is opinions from people who might not be
trustworthy, so then what you have to do is try to get
enough opinions for you to be able to make up your own
mind.

On Wed, 1 Feb 2006, Alexander Arnett wrote:

> Does anyone know who's behind "curl" and what it's about? Which
> software is it associated with? Is it spyware, legit, something in
> between or what?
>
> Littlesnitch comes back with a message saying "curl" wants to talk to:
>
> hs47.easymediasolutions.com
> TCP port 80 http
>
> In a like vein, it's nice that Littlesnitch intercepts all these
> phone home requests but how can we reference the good/legit requests
> "white hat software" from the bad/nefarious "black hat software"
> requests?
 . . .
_______________________________________________
Littlesnitch-talk mailing list
[email protected]
http://at.obdev.at/mailman/listinfo/littlesnitch-talk

Reply via email to