cannot find spy

[Jay T. Blocksom]

On Tue, 12 Apr 2005 13:26:11 +0200, in <alt.privacy.spyware>, peter krom
<jonhy@rook.com> wrote:
>
[snip]
>
> After searching through my system I Uninstalled Mozilla Firefox, this
> was aparantly the source of sending the syn to kelcos.. Now that firefox
> is no longer installed, the Syn's aren't sent anymore.
[snip]

That was near-cwertainly unnecessary; and it makes little (if any) sense,
particularly in light of your original article. Nowhere in it did you state
that the SYNs were being sent *only* when Firefox was running. And besides,
Firefox itself is *not* in any way malicious; nor is it particularly
vulnerable to attack from malware (unlike, for a very pointed example, MSIE's
susceptibility to "home page hijackers"). So why would it be "phoning home"
to Kel Ellis? No, this just doesn't add up.

I *strongly* urge you to re-examine your system *very* closely. The odds are
overwhelming that either you did not tell the full and correct story
initially, or you did *not* completely clean things up -- or both.

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet02[at]appropriate-tech.net

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this domain is expressly prohibited under
47 USC S227 and State Law. Violators are subject to prosecution.

[peter krom]

In article <5p4o5198n8r1s9d9hpkfs4a9q3i14kqhlf@news.speakeasy .net>,
not.deliverable+usenet02@appropriate-tech.net says...
> On Tue, 12 Apr 2005 13:26:11 +0200, in <alt.privacy.spyware>, peter krom
> <jonhy@rook.com> wrote:
> That was near-cwertainly unnecessary; and it makes little (if any) sense,
> particularly in light of your original article. Nowhere in it did you state
> that the SYNs were being sent *only* when Firefox was running. And besides,
> Firefox itself is *not* in any way malicious; nor is it particularly
> vulnerable to attack from malware (unlike, for a very pointed example, MSIE's
> susceptibility to "home page hijackers"). So why would it be "phoning home"
> to Kel Ellis? No, this just doesn't add up.
> I *strongly* urge you to re-examine your system *very* closely. The odds are
> overwhelming that either you did not tell the full and correct story
> initially, or you did *not* completely clean things up -- or both.

I do think that Firefox itself is a good browser, I uninstalled it
reluctantly... When exiting firefox using ->file->exit a resident
portion stayed in memory, I was able it to remove it from memory using
taskmanager and that is when I discovered the syn's were gone. I have
been looking at all network related files installed and verified them by
using the original install information and calculating crc's. All
networkrelated files are in fact original. There was one file which did
not have the same crc as the original and replaced it. I am going to
reinstall mozilla and see what happens....

Peter


---
avast! Antivirus: Uitgaande bericht is niet besmet.
Virus Gegevensbestand (VPS): 0515-1, 2005-04-12
Getest op: 13-4-2005 15:05:16
avast! auteursrecht (c) 1988-2004 ALWIL Software.
http://www.avast.com