Re: Firefox and "transferring data from 127.0.0.1"?

[David H. Lipman]

From: <isthismishugas@checkthatsite.org>

| A poster on alt.comp.freeware mentioned this site:
|
| http://redcheek.net/erm/
|
| When I got there I noticed that a message in the bottom left hand screen of
| Firefox stated: "transferring data from 127.0.0.1".
|
| The page was slow to load and full of question marks on it, along with a
| couple of download links.
|
| Site Advisor gives it a green rating and shows that several media tools on
| it appear to be clean.
|
| I closed the window as soon as I saw the message.
|
| Perhaps I haven't noticed it on more popular sites before, but how
| dangerous is that message (transferring data from 127.0.0.1) which I know
| is the local host (in other words - one's one computer).

The site is in Chinese. The question marks are replacing Chinese chars. as your display is
not showing them so the "?? is being used as a substitute character.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[MoiMoi]

In article <_AYph.396$9B6.108@trnddc07>, DLipman~nospam~@Verizon.Net
says...
> From: <isthismishugas@checkthatsite.org>
>
> | A poster on alt.comp.freeware mentioned this site:
> |
> | http://redcheek.net/erm/
> |
> | When I got there I noticed that a message in the bottom left hand screen of
> | Firefox stated: "transferring data from 127.0.0.1".
> |
> | The page was slow to load and full of question marks on it, along with a
> | couple of download links.
> |
> | Site Advisor gives it a green rating and shows that several media tools on
> | it appear to be clean.
> |
> | I closed the window as soon as I saw the message.
> |
> | Perhaps I haven't noticed it on more popular sites before, but how
> | dangerous is that message (transferring data from 127.0.0.1) which I know
> | is the local host (in other words - one's one computer).
>
> The site is in Chinese. The question marks are replacing Chinese chars. as your display is
> not showing them so the "?? is being used as a substitute character.

That's not his point.
In status bar, there is quick notation, "transferring data from
127.0.0.1", rather than "transferring from (whatever site)".
I saw it too.
Odd that once page loaded though, a reload doesn't show that.
Maybe if I cleared cache.
I didn't see any kind of script in page source that would do that, so
it's kind of a mystery, I agree.

MM

[David H. Lipman]

From: "MoiMoi" <moimoi@example.com>


|
| That's not his point.
| In status bar, there is quick notation, "transferring data from
| 127.0.0.1", rather than "transferring from (whatever site)".
| I saw it too.
| Odd that once page loaded though, a reload doesn't show that.
| Maybe if I cleared cache.
| I didn't see any kind of script in page source that would do that, so
| it's kind of a mystery, I agree.
|
| MM

I didn't see; "transferring data from 127.0.0.1"
in; IE6 SP1, FF 2.0 or Opera 9.10.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Stan Weiss]

"David H. Lipman" wrote:
>
> From: "MoiMoi" <moimoi@example.com>
>
> |
> | That's not his point.
> | In status bar, there is quick notation, "transferring data from
> | 127.0.0.1", rather than "transferring from (whatever site)".
> | I saw it too.
> | Odd that once page loaded though, a reload doesn't show that.
> | Maybe if I cleared cache.
> | I didn't see any kind of script in page source that would do that, so
> | it's kind of a mystery, I agree.
> |
> | MM
>
> I didn't see; "transferring data from 127.0.0.1"
> in; IE6 SP1, FF 2.0 or Opera 9.10.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm

Are you running any kind of Proxy on your machine?

[MoiMoi]

In article <45A85D19.82BD7504@erols.com>, srweiss@erols.com says...
> "David H. Lipman" wrote:
> >
> > From: "MoiMoi" <moimoi@example.com>
> >
> > |
> > | That's not his point.
> > | In status bar, there is quick notation, "transferring data from
> > | 127.0.0.1", rather than "transferring from (whatever site)".
> > | I saw it too.
> > | Odd that once page loaded though, a reload doesn't show that.
> > | Maybe if I cleared cache.
> > | I didn't see any kind of script in page source that would do that, so
> > | it's kind of a mystery, I agree.
> > |
> > | MM
> >
> > I didn't see; "transferring data from 127.0.0.1"
> > in; IE6 SP1, FF 2.0 or Opera 9.10.
> >
> > --
> > Dave
> > http://www.claymania.com/removal-trojan-adware.html
> > http://www.ik-cs.com/got-a-virus.htm
>
> Are you running any kind of Proxy on your machine?

I just cleared cache, but didn't see it again.
No proxy here.
Weird.

MM

[David H. Lipman]

From: "Stan Weiss" <srweiss@erols.com>


| Are you running any kind of Proxy on your machine?

No.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[MoiMoi]

In article <fRYph.399$9B6.238@trnddc07>, DLipman~nospam~@Verizon.Net
says...
> From: "MoiMoi" <moimoi@example.com>
>
>
> |
> | That's not his point.
> | In status bar, there is quick notation, "transferring data from
> | 127.0.0.1", rather than "transferring from (whatever site)".
> | I saw it too.
> | Odd that once page loaded though, a reload doesn't show that.
> | Maybe if I cleared cache.
> | I didn't see any kind of script in page source that would do that, so
> | it's kind of a mystery, I agree.
> |
> | MM
>
> I didn't see; "transferring data from 127.0.0.1"
> in; IE6 SP1, FF 2.0 or Opera 9.10.

It was brief (Firefox 2 here).
If I hadn't been looking for it wouldn't have seen it.

MM

[Hootowl]

On Fri, 12 Jan 2007 22:57:38 -0500, MoiMoi <moimoi@example.com> wrote:

>In article <_AYph.396$9B6.108@trnddc07>, DLipman~nospam~@Verizon.Net
>says...
>> From: <isthismishugas@checkthatsite.org>
>>
>> | A poster on alt.comp.freeware mentioned this site:
>> |
>> | http://redcheek.net/erm/
>> |
>> | When I got there I noticed that a message in the bottom left hand screen of
>> | Firefox stated: "transferring data from 127.0.0.1".
>> |
>> | The page was slow to load and full of question marks on it, along with a
>> | couple of download links.
>> |
>> | Site Advisor gives it a green rating and shows that several media tools on
>> | it appear to be clean.
>> |
>> | I closed the window as soon as I saw the message.
>> |
>> | Perhaps I haven't noticed it on more popular sites before, but how
>> | dangerous is that message (transferring data from 127.0.0.1) which I know
>> | is the local host (in other words - one's one computer).
>>
>> The site is in Chinese. The question marks are replacing Chinese chars. as your display is
>> not showing them so the "?? is being used as a substitute character.
>
>That's not his point.
>In status bar, there is quick notation, "transferring data from
>127.0.0.1", rather than "transferring from (whatever site)".
>I saw it too.
>Odd that once page loaded though, a reload doesn't show that.
>Maybe if I cleared cache.
>I didn't see any kind of script in page source that would do that, so
>it's kind of a mystery, I agree.

I've seen it on my Firefox a number of times, usually when Firefox
stalled briefly when beginning to load a site. I have assumed that it
was being directed to a site blocked in my HOSTS file-all of which
are, of course, redirected to 127.0.0.1.

Dan
>
>MM

[Charani]

On Sat, 13 Jan 2007 21:01:12 -0600, Hootowl wrote:

> I've seen it on my Firefox a number of times, usually when Firefox
> stalled briefly when beginning to load a site. I have assumed that it
> was being directed to a site blocked in my HOSTS file-all of which
> are, of course, redirected to 127.0.0.1.

I've seen it as well but I don't use Firefox, nor do I use a custom
HOSTS file. I've always understood 127.0.0.1 to be one's own PC and
the sites are merely checking to see if the destination is one listed
in the HOSTS file.

[Hootowl]

On Sun, 14 Jan 2007 10:00:58 +0000, Charani <me@privacy.invalid>
wrote:

>On Sat, 13 Jan 2007 21:01:12 -0600, Hootowl wrote:
>
>> I've seen it on my Firefox a number of times, usually when Firefox
>> stalled briefly when beginning to load a site. I have assumed that it
>> was being directed to a site blocked in my HOSTS file-all of which
>> are, of course, redirected to 127.0.0.1.
>
>I've seen it as well but I don't use Firefox, nor do I use a custom
>HOSTS file. I've always understood 127.0.0.1 to be one's own PC and
>the sites are merely checking to see if the destination is one listed
>in the HOSTS file.

I'm no techie, but do I know that 127.0.0.1 is your own computer. On
some systems it may be 0.0.0.0 instead. some systems work faster with
that. Win95 worked slower with it, but I've never tried it on
Win98SE. Sounds like a harmless experiment for me to try that just
might make my online life a little more convenient.

Dan