X
Нажмите здесь, чтобы перейти на мобильную версию сайта.

Форум поддержки

strange connection between localhost and a webiste catalysthealthasia.com

Размещено

when i start my firefox browser, there are several (from 1 to a dozen) connections from the firefox process between 127.0.0.1 and a site i have never connected to "catalysthealthasia.com" attached netstat -fb

when i start my firefox browser, there are several (from 1 to a dozen) connections from the firefox process between 127.0.0.1 and a site i have never connected to "catalysthealthasia.com" attached netstat -fb
Приложенные скриншоты

Выбранное решение

qvor said

I actually found the following in my hosts file:
127.0.0.1 catalysthealthasia.com #PHISHING ATTACK

Hmm, did you add that earlier?

So if you use

netstat -bn

does the connection show the localhost address on both sides of the connection?

Прочитайте этот ответ в контексте 0
Цитата

Дополнительные сведения о системе

Установленные плагины

  • Shockwave Flash 32.0 r0

Приложение

  • User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0

Дополнительная информация

jscher2000
  • Top 10 Contributor
8692 решений 71041 ответов
Размещено

Полезный ответ

That's troubling. If you haven't already, could you test in Firefox's Safe Mode? In its Safe Mode, Firefox temporarily deactivates extensions, hardware acceleration, any userChrome.css/userContent.css files, and some other advanced features to help you assess whether these are causing the problem.

If Firefox is not running: Hold down the Shift key when starting Firefox. (On Mac, hold down the option/alt key instead of the Shift key.)

If Firefox is running: You can restart Firefox in Safe Mode using either:

  • "3-bar" menu button > "?" Help button > Restart with Add-ons Disabled
  • (menu bar) Help menu > Restart with Add-ons Disabled

and OK the restart.

Both scenarios: A small dialog should appear. Click "Start in Safe Mode" (not Refresh).

Any difference?

That's troubling. If you haven't already, could you test in Firefox's Safe Mode? In its Safe Mode, Firefox temporarily deactivates extensions, hardware acceleration, any userChrome.css/userContent.css files, and some other advanced features to help you assess whether these are causing the problem. ''If Firefox is not running:'' Hold down the Shift key when starting Firefox. (On Mac, hold down the option/alt key instead of the Shift key.) ''If Firefox is running:'' You can restart Firefox in Safe Mode using either: * "3-bar" menu button > "?" Help button > Restart with Add-ons Disabled * (menu bar) Help menu > Restart with Add-ons Disabled and OK the restart. ''Both scenarios:'' A small dialog should appear. Click "Start in Safe Mode" (''not'' Refresh). Any difference?
Помогла ли вам это? 1
Цитата
cor-el
  • Top 10 Contributor
  • Moderator
17470 решений 157899 ответов
Размещено

Полезный ответ

Did you check the internet connection in Firefox and possibly the Windows hosts file?

You can check the connection settings.

  • Options/Preferences -> General -> Network: Connection -> Settings

If you do not need to use a proxy to connect to internet then try to select "No Proxy" if "Use the system proxy settings" or one of the others do not work properly.

See "Firefox connection settings":

Did you check the internet connection in Firefox and possibly the Windows hosts file? You can check the connection settings. *Options/Preferences -> General -> Network: Connection -> Settings If you do not need to use a proxy to connect to internet then try to select "No Proxy" if "Use the system proxy settings" or one of the others do not work properly. See "Firefox connection settings": *https://support.mozilla.org/en-US/kb/firefox-cant-load-websites-other-browsers-can
Помогла ли вам это? 1
Цитата
Размещено

Задавший вопрос

Thank you very much. Following your suggestioins - Restarting in safe mode did not change anything. I actually found the following in my hosts file: 127.0.0.1 catalysthealthasia.com #PHISHING ATTACK

Thank you again.

Thank you very much. Following your suggestioins - Restarting in safe mode did not change anything. I actually found the following in my hosts file: 127.0.0.1 catalysthealthasia.com #PHISHING ATTACK Thank you again.
Помогла ли вам это?
Цитата
jscher2000
  • Top 10 Contributor
8692 решений 71041 ответов
Размещено

Выбранное решение

qvor said

I actually found the following in my hosts file:
127.0.0.1 catalysthealthasia.com #PHISHING ATTACK

Hmm, did you add that earlier?

So if you use

netstat -bn

does the connection show the localhost address on both sides of the connection?

''qvor [[#answer-1254571|said]]'' <blockquote> I actually found the following in my hosts file:<Br> 127.0.0.1 catalysthealthasia.com #PHISHING ATTACK </blockquote> Hmm, did you add that earlier? So if you use <code>netstat -bn</code> does the connection show the localhost address on both sides of the connection?
Помогла ли вам это?
Цитата
Размещено

Задавший вопрос

Hello,

sorry for bothering you guys. I opened a case with the anti-virus team and that is their response:

"this is a policy applied to all systems and the policy is pushed by company to avoid a phishing attack "

It seems just Firefox is using the loop back address for some reason and that is why it looks like opening a strange connections.

Thank you for you help.

Hello, sorry for bothering you guys. I opened a case with the anti-virus team and that is their response: "this is a policy applied to all systems and the policy is pushed by company to avoid a phishing attack " It seems just Firefox is using the loop back address for some reason and that is why it looks like opening a strange connections. Thank you for you help.

Изменено qvor

Помогла ли вам это?
Цитата
Задать вопрос

Для ответа на сообщения вы должны войти в свою учётную запись. Пожалуйста, задайте новый вопрос, если у вас ещё нет учётной записи.