connections established even though Firefox is not running?

Discussion in 'Windows 7' started by RASelkirk, Jan 25, 2013.

  1. RASelkirk

    RASelkirk MDL Senior Member

    Feb 4, 2010
    266
    13
    10
    Hi All,

    I've noticed the last couple days that I have several "established" http connections through Firefox even though it has been shut down overnight. I use Sysinternals TCPView to observe this. I've run them through WHOIS and see where they trace back to, but don't know any more than that.

    firefox.exe:5672 TCP russ-l675.gt.rr.com:55643 176.32.96.158:http ESTABLISHED
    firefox.exe:6664 TCP russ-l675.gt.rr.com:55899 oa-in-f115.1e100.net:http ESTABLISHED
    firefox.exe:6664 TCP russ-l675.gt.rr.com:59209 72.21.91.19:http ESTABLISHED
    firefox.exe:6664 TCP russ-l675.gt.rr.com:60193 72.21.91.19:http ESTABLISHED
    firefox.exe:6664 TCP russ-l675.gt.rr.com:60853 ec2-54-234-36-132.compute-1.amazonaws.com:http ESTABLISHED

    I use Sysinternals Process Explorer to verify Firefox is not running, yet these connections exist. In fact, I use PE several times a day to verify no rogue programs are running and all looks good. I also check my running services a couple times a week, so how does this happen and what does it mean?

    TIA!

    Russ
     
  2. RASelkirk

    RASelkirk MDL Senior Member

    Feb 4, 2010
    266
    13
    10
    I think the culprit was a Firefox add-on called HMA (hide my ass). It's an anonymous proxy server you connect through so your IP can't be traced. I played with it a bit but could never get it to work. By disabling it, the mystery connections quit...

    Russ