Hi All, I've noticed the last couple days that I have several "established" http connections through Firefox even though it has been shut down overnight. I use Sysinternals TCPView to observe this. I've run them through WHOIS and see where they trace back to, but don't know any more than that. firefox.exe:5672 TCP russ-l675.gt.rr.com:55643 176.32.96.158:http ESTABLISHED firefox.exe:6664 TCP russ-l675.gt.rr.com:55899 oa-in-f115.1e100.net:http ESTABLISHED firefox.exe:6664 TCP russ-l675.gt.rr.com:59209 72.21.91.19:http ESTABLISHED firefox.exe:6664 TCP russ-l675.gt.rr.com:60193 72.21.91.19:http ESTABLISHED firefox.exe:6664 TCP russ-l675.gt.rr.com:60853 ec2-54-234-36-132.compute-1.amazonaws.com:http ESTABLISHED I use Sysinternals Process Explorer to verify Firefox is not running, yet these connections exist. In fact, I use PE several times a day to verify no rogue programs are running and all looks good. I also check my running services a couple times a week, so how does this happen and what does it mean? TIA! Russ
I think the culprit was a Firefox add-on called HMA (hide my ass). It's an anonymous proxy server you connect through so your IP can't be traced. I played with it a bit but could never get it to work. By disabling it, the mystery connections quit... Russ