Welcome to SecurityForumz.com!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Firefox and "transferring data from 127.0.0.1"?

 
   Security Forums (Home) -> General Discussions RSS
Next:  spyherarse pcbutts worm removal  
Author Message
isthismishugas

External


Since: Jan 12, 2007
Posts: 1



(Msg. 1) Posted: Fri Jan 12, 2007 9:13 pm
Post subject: Firefox and "transferring data from 127.0.0.1"?
Imported from groups: alt>comp>virus, others (more info?)

Back to top
Login to vote
Plan9

External


Since: Jan 12, 2007
Posts: 1



(Msg. 2) Posted: Fri Jan 12, 2007 11:28 pm
Post subject: Re: Firefox and "transferring data from 127.0.0.1"? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Where I live it was 1/12/2007 10:13 PM, when
isthismishugas.RemoveThis@checkthatsite.org wrote:
> A poster on alt.comp.freeware mentioned this site:
>
> http://redcheek.net/erm/
>
>
> When I got there I noticed that a message in the bottom left hand screen of
> Firefox stated: "transferring data from 127.0.0.1".

The html source contains:
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
Could the data transfer merely be Foxfire getting gb2312 from localhost?

 >> Stay informed about: Firefox and ""transferring data from 127.0.0.1""? 
Back to top
Login to vote
David H. Lipman

External


Since: Jul 04, 2003
Posts: 1752



(Msg. 3) Posted: Sat Jan 13, 2007 3:44 am
Post subject: Re: Firefox and "transferring data from 127.0.0.1"? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

From:

| A poster on alt.comp.freeware mentioned this site:
|
| http://redcheek.net/erm/
|
| When I got there I noticed that a message in the bottom left hand screen of
| Firefox stated: "transferring data from 127.0.0.1".
|
| The page was slow to load and full of question marks on it, along with a
| couple of download links.
|
| Site Advisor gives it a green rating and shows that several media tools on
| it appear to be clean.
|
| I closed the window as soon as I saw the message.
|
| Perhaps I haven't noticed it on more popular sites before, but how
| dangerous is that message (transferring data from 127.0.0.1) which I know
| is the local host (in other words - one's one computer).

The site is in Chinese. The question marks are replacing Chinese chars. as your display is
not showing them so the "?? is being used as a substitute character.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
 >> Stay informed about: Firefox and ""transferring data from 127.0.0.1""? 
Back to top
Login to vote
MoiMoi

External


Since: Aug 25, 2006
Posts: 99



(Msg. 4) Posted: Sat Jan 13, 2007 3:44 am
Post subject: Re: Firefox and "transferring data from 127.0.0.1"? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

In article , DLipman~nospam~@Verizon.Net
says...
> From:
>
> | A poster on alt.comp.freeware mentioned this site:
> |
> | http://redcheek.net/erm/
> |
> | When I got there I noticed that a message in the bottom left hand screen of
> | Firefox stated: "transferring data from 127.0.0.1".
> |
> | The page was slow to load and full of question marks on it, along with a
> | couple of download links.
> |
> | Site Advisor gives it a green rating and shows that several media tools on
> | it appear to be clean.
> |
> | I closed the window as soon as I saw the message.
> |
> | Perhaps I haven't noticed it on more popular sites before, but how
> | dangerous is that message (transferring data from 127.0.0.1) which I know
> | is the local host (in other words - one's one computer).
>
> The site is in Chinese. The question marks are replacing Chinese chars. as your display is
> not showing them so the "?? is being used as a substitute character.

That's not his point.
In status bar, there is quick notation, "transferring data from
127.0.0.1", rather than "transferring from (whatever site)".
I saw it too.
Odd that once page loaded though, a reload doesn't show that.
Maybe if I cleared cache.
I didn't see any kind of script in page source that would do that, so
it's kind of a mystery, I agree.

MM
 >> Stay informed about: Firefox and ""transferring data from 127.0.0.1""? 
Back to top
Login to vote
David H. Lipman

External


Since: Jul 04, 2003
Posts: 1752



(Msg. 5) Posted: Sat Jan 13, 2007 4:02 am
Post subject: Re: Firefox and "transferring data from 127.0.0.1"? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

From: "MoiMoi"


|
| That's not his point.
| In status bar, there is quick notation, "transferring data from
| 127.0.0.1", rather than "transferring from (whatever site)".
| I saw it too.
| Odd that once page loaded though, a reload doesn't show that.
| Maybe if I cleared cache.
| I didn't see any kind of script in page source that would do that, so
| it's kind of a mystery, I agree.
|
| MM

I didn't see; "transferring data from 127.0.0.1"
in; IE6 SP1, FF 2.0 or Opera 9.10.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
 >> Stay informed about: Firefox and ""transferring data from 127.0.0.1""? 
Back to top
Login to vote
Stan Weiss

External


Since: Jan 12, 2007
Posts: 1



(Msg. 6) Posted: Sat Jan 13, 2007 4:02 am
Post subject: Re: Firefox and "transferring data from 127.0.0.1"? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"David H. Lipman" wrote:
>
> From: "MoiMoi"
>
> |
> | That's not his point.
> | In status bar, there is quick notation, "transferring data from
> | 127.0.0.1", rather than "transferring from (whatever site)".
> | I saw it too.
> | Odd that once page loaded though, a reload doesn't show that.
> | Maybe if I cleared cache.
> | I didn't see any kind of script in page source that would do that, so
> | it's kind of a mystery, I agree.
> |
> | MM
>
> I didn't see; "transferring data from 127.0.0.1"
> in; IE6 SP1, FF 2.0 or Opera 9.10.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm

Are you running any kind of Proxy on your machine?
 >> Stay informed about: Firefox and ""transferring data from 127.0.0.1""? 
Back to top
Login to vote
MoiMoi

External


Since: Aug 25, 2006
Posts: 99



(Msg. 7) Posted: Sat Jan 13, 2007 4:02 am
Post subject: Re: Firefox and "transferring data from 127.0.0.1"? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

In article , DLipman~nospam~@Verizon.Net
says...
> From: "MoiMoi"
>
>
> |
> | That's not his point.
> | In status bar, there is quick notation, "transferring data from
> | 127.0.0.1", rather than "transferring from (whatever site)".
> | I saw it too.
> | Odd that once page loaded though, a reload doesn't show that.
> | Maybe if I cleared cache.
> | I didn't see any kind of script in page source that would do that, so
> | it's kind of a mystery, I agree.
> |
> | MM
>
> I didn't see; "transferring data from 127.0.0.1"
> in; IE6 SP1, FF 2.0 or Opera 9.10.

It was brief (Firefox 2 here).
If I hadn't been looking for it wouldn't have seen it.

MM
 >> Stay informed about: Firefox and ""transferring data from 127.0.0.1""? 
Back to top
Login to vote
MoiMoi

External


Since: Aug 25, 2006
Posts: 99



(Msg. 8) Posted: Sat Jan 13, 2007 4:02 am
Post subject: Re: Firefox and "transferring data from 127.0.0.1"? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

In article , srweiss RemoveThis @erols.com says...
> "David H. Lipman" wrote:
> >
> > From: "MoiMoi"
> >
> > |
> > | That's not his point.
> > | In status bar, there is quick notation, "transferring data from
> > | 127.0.0.1", rather than "transferring from (whatever site)".
> > | I saw it too.
> > | Odd that once page loaded though, a reload doesn't show that.
> > | Maybe if I cleared cache.
> > | I didn't see any kind of script in page source that would do that, so
> > | it's kind of a mystery, I agree.
> > |
> > | MM
> >
> > I didn't see; "transferring data from 127.0.0.1"
> > in; IE6 SP1, FF 2.0 or Opera 9.10.
> >
> > --
> > Dave
> > http://www.claymania.com/removal-trojan-adware.html
> > http://www.ik-cs.com/got-a-virus.htm
>
> Are you running any kind of Proxy on your machine?

I just cleared cache, but didn't see it again.
No proxy here.
Weird.

MM
 >> Stay informed about: Firefox and ""transferring data from 127.0.0.1""? 
Back to top
Login to vote
David H. Lipman

External


Since: Jul 04, 2003
Posts: 1752



(Msg. 9) Posted: Sat Jan 13, 2007 2:05 pm
Post subject: Re: Firefox and "transferring data from 127.0.0.1"? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Back to top
Login to vote
Virus Guy

External


Since: Aug 05, 2005
Posts: 431



(Msg. 10) Posted: Mon Jan 29, 2007 7:49 pm
Post subject: Re: Firefox and "transferring data from 127.0.0.1"? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

isthismishugas.TakeThisOut@checkthatsite.org wrote:

> A poster on alt.comp.freeware mentioned this site:
>
> http://redcheek.net/erm/
>
> When I got there I noticed that a message in the bottom left hand
> screen of Firefox stated: "transferring data from 127.0.0.1".

That page contains the following link:

http://211.100.17.98/cgi-sys/Counter?df=redcheek.net.dat&ft=4

The IP address 211.100.17.98 seems to have a questionable past.
Perhaps you are running some software (like Spybot SD?) that has
blocked that particular IP and replaced it with the local host. Are
you running a customized HOSTS file?
 >> Stay informed about: Firefox and ""transferring data from 127.0.0.1""? 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
constant data transfer to internet - worm? trojan? - Sorry if I sound a bit green but I have a problem with my PC when connected to the internet. I am using XP Pro and when online with no programmes (apparently) running, there is constant data traffic. I'm using broadband. Using task manager, there doesn'...

Spyware or a benign virus on my PC ? - Daily I get a series of bitmap files appearing in my C:\Windows\temp directory. They have names like jeep.bmp, pirates.bmp, and beyonce.bmp. I routinely clean out the directory, but the files reappear. Can anyone tell me what might be going on on my PC,....

Damn trojan in my temp (probably). Advice needed. - Ok , this is how the situation has. 3 days my firewall poped up and an application in my C:\Documents And Settings\Administrator\Local Settings\temp wanted to connect at port 80 of an address. It had a weird icon and a weird name ( Rar1.exe). I denied....

Running a trojan program and Virus programs a waste of time? - Thanks for opinions of the knowledgable ones:>) Regards Buddy B

Poss trojan? - I just updated my AVG database, and it picked up a back door Ap trojan. Details are: C:\Windows\system32\XUDERSD.exe. When I try to remove it to quarantine, a message says the file cannot be removed. I checked it with V.3.5 of The Cleaner, which doesn't...
   Security Forums (Home) -> General Discussions All times are: Pacific Time (US & Canada)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]