From owner-freebsd-chat@FreeBSD.ORG Tue Feb 8 18:47:15 2005 Return-Path: Delivered-To: freebsd-chat@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 629C816A4CE for ; Tue, 8 Feb 2005 18:47:15 +0000 (GMT) Received: from mail.wolves.k12.mo.us (duey.wolves.k12.mo.us [207.160.214.9]) by mx1.FreeBSD.org (Postfix) with ESMTP id F205643D1F for ; Tue, 8 Feb 2005 18:47:14 +0000 (GMT) (envelope-from cdillon@wolves.k12.mo.us) Received: from localhost (localhost [127.0.0.1]) by mail.wolves.k12.mo.us (Postfix) with ESMTP id 89CB01FE1D; Tue, 8 Feb 2005 12:47:14 -0600 (CST) Received: from mail.wolves.k12.mo.us ([127.0.0.1]) by localhost (mail.wolves.k12.mo.us [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 60680-03-7; Tue, 8 Feb 2005 12:47:12 -0600 (CST) Received: by mail.wolves.k12.mo.us (Postfix, from userid 1001) id 57E611FE20; Tue, 8 Feb 2005 12:47:12 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by mail.wolves.k12.mo.us (Postfix) with ESMTP id 555931A907; Tue, 8 Feb 2005 12:47:12 -0600 (CST) Date: Tue, 8 Feb 2005 12:47:12 -0600 (CST) From: Chris Dillon To: Frank Shute In-Reply-To: <20050208181532.GA8508@peach.veggie.com> Message-ID: <20050208124210.Y59681@duey.wolves.k12.mo.us> References: <20050208181532.GA8508@peach.veggie.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Virus-Scanned: amavisd-new at wolves.k12.mo.us cc: FreeBSD UK cc: FreeBSD chat Subject: Re: Spyware on FreeBSD!? X-BeenThere: freebsd-chat@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Non technical items related to the community List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Feb 2005 18:47:15 -0000 On Tue, 8 Feb 2005, Frank Shute wrote: > > Bad news, looks like my machine has been infected with some Spyware. > > I noticed that on surfing to: http://news.bbc.co.uk/ or anything > under that domain, I was getting some outgoing activity and Firefox > was after a URL (as shown by the status bar) somewhere under the > domain: > > http://bbcnewscouk.112.2o7.net/ > > A quick Google on 2o7.net confirmed my worst fears: spyware! Uh, no. 2o7.net is owned by Omniture, a web analytics company, and is used explicitly by the sites you are visiting. Nothing to do with 2o7.net is actually installed on your computer. -- Chris Dillon - cdillon(at)wolves.k12.mo.us FreeBSD: The fastest, most open, and most stable OS on the planet - Available for IA32, IA64, AMD64, PC98, Alpha, and UltraSPARC architectures - PowerPC, ARM, MIPS, and S/390 under development - http://www.freebsd.org Q: Because it reverses the logical flow of conversation. A: Why is putting a reply at the top of the message frowned upon?