Uh.....Firefox?

[Kooldino]

It just happened again...it is the legit firefox.exe that is requesting it.

[Kooldino]

It just happened again...it is the legit firefox.exe that is requesting it.

And it only happens when I encounter a myspace page with a song that autoplays in it with the myspace player.

Odd.

[Marshmallowman]

ack...hmm could be a nasty media file/trojan exploit trying hack your system. (buffer overun kind of stuff)
The myspace player is probably a front end to the window meida player enigine, or has its own vulnerabilty


I would be worried save the file and run some virus scanners on it or perhaps send it to your virus scanner software support and ask them whatthey think of it.

[Marshmallowman]

Do you DEP enabled

[Jessterw]

The grand puba and I were discussing this and given the protocol being used is UDP, it's likely that the MySpace player is sending short messages back home that probably say what song or whatnot is being played, etc.

UDP is a lightweight, time-sensitive protocol that has no integrity checks, so it's really only useful for sending messages that are not vital, as in it's okay if some go missing.

Edit: Looking again at your first post, 255.255.255.255 is usually a netmask used for a host entry that specifies that the destination address of a packet must exactly match the network address for a route. Which is to say that it's probably not a specific IP address that is being referred to.

[Marshmallowman]

I would have thought they would already have known all that info server side?

[Jessterw]

Well technically speaking I don't know what they're sending, it could be anything really. For reference though, Skype uses UDP for some communications, as do a number of other apps.

[Wombat]

There are some myspace trojans.

What is firefox using to play this music? Maybe it's embedded WMP or something? Firefox even talks to ITSELF via TCP (IE uses UDP).

[Dr Mordrid]

PERHAPS this is one of those image worms that everyone's been getting paranoid about?

I heard that M$ is moving up a patch for the problem, publishing it earlier than the Tuesday target date, but the links I've been given were dead.

Dr. Mordrid

[Kooldino]

PERHAPS this is one of those image worms that everyone's been getting paranoid about?

I heard that M$ is moving up a patch for the problem, publishing it earlier than the Tuesday target date, but the links I've been given were dead.

Dr. Mordrid

M$ Just released some kind of graphical vunerability patch last night. Check it out on Windows Updates.

Also, here's an example of what would set it off on my home PC...

http://profile.myspace.com/index.cfm?fuseaction=user.viewprofile&friendID=21562596

The little player on the left that plays "the clarks - shimmy low" I think is what causes it.