connections established even though Firefox is not running?

Discussion in 'Windows 7' started by RASelkirk, Jan 25, 2013.

  1. RASelkirk

    RASelkirk MDL Member

    Feb 4, 2010
    183
    8
    10
    Hi All,

    I've noticed the last couple days that I have several "established" http connections through Firefox even though it has been shut down overnight. I use Sysinternals TCPView to observe this. I've run them through WHOIS and see where they trace back to, but don't know any more than that.

    firefox.exe:5672 TCP russ-l675.gt.rr.com:55643 176.32.96.158:http ESTABLISHED
    firefox.exe:6664 TCP russ-l675.gt.rr.com:55899 oa-in-f115.1e100.net:http ESTABLISHED
    firefox.exe:6664 TCP russ-l675.gt.rr.com:59209 72.21.91.19:http ESTABLISHED
    firefox.exe:6664 TCP russ-l675.gt.rr.com:60193 72.21.91.19:http ESTABLISHED
    firefox.exe:6664 TCP russ-l675.gt.rr.com:60853 ec2-54-234-36-132.compute-1.amazonaws.com:http ESTABLISHED

    I use Sysinternals Process Explorer to verify Firefox is not running, yet these connections exist. In fact, I use PE several times a day to verify no rogue programs are running and all looks good. I also check my running services a couple times a week, so how does this happen and what does it mean?

    TIA!

    Russ
     
  2. RASelkirk

    RASelkirk MDL Member

    Feb 4, 2010
    183
    8
    10
    I think the culprit was a Firefox add-on called HMA (hide my ass). It's an anonymous proxy server you connect through so your IP can't be traced. I played with it a bit but could never get it to work. By disabling it, the mystery connections quit...

    Russ