Reply to thread

Message

<blockquote data-quote="AtlBo" data-source="post: 717182" data-attributes="member: 32547">Thx.&nbsp; I was looking at the situation from the perspective of why this one page on one machine.I forgot to mention one important thing.&nbsp; This AM and twice today, the system32 cmd.exe module wanted to contact the internet.&nbsp; The IPs in each case were blackholed by Threat Crowd.&nbsp; That&#039;s what started me wondering if I could be infected with a miner.&nbsp; I blocked both of those, so I&#039;m not too worried for now.&nbsp; One of them is blicked by FortKnox on a regular basis, though.&nbsp; The racing processor only happened on the one page but there was no associated bandwidth usage...maybe the blocked IPs?&nbsp; idk...I&#039;m going to monitor this for now.&nbsp; I can see how this might pick a page in Chrome to blame it somehow and then try to use the net maybe?&nbsp; However, if there is a miner here, I also think it can&#039;t connect.&nbsp; I want to see if it happens again (on a different page) before I jump to conclusions though...I haven&#039;t [USER=7463]@cruelsister[/USER] and don&#039;t.&nbsp; I made a couple of blogs using Blogger many moons ago.&nbsp; They are still there but I haven&#039;t updated them in a long time.But you jogged my memory again, I did notice that I was logged into Disqus on the affected PC on the page.&nbsp; Well, about an hour ago I deleted the account.&nbsp; That didn&#039;t resolve the processor usage issue though.&nbsp; It still happens.I try some kind of out there security type apps like IP checkers and so I risk it a little bit on this PC.&nbsp; I&#039;m OK with that.&nbsp; It&#039;s my kind of testing, which is alot safer than testing malware...I just take a calculated risk on a program sometimes even if I don&#039;t know the dev from his site, etc&nbsp; Not very often, just sometimes...and I watch on this PC with NVT ERP.Really cool that I can sync internet connection requests with activity in the NVT ERP logs btw.&nbsp; Another great reason to keep NVT running in the tray.&nbsp; However, watch out or you will have 3 years and 3 gigs of data in the NVT logs folder LOL...</blockquote>

[QUOTE="AtlBo, post: 717182, member: 32547"] Thx. I was looking at the situation from the perspective of why this one page on one machine. I forgot to mention one important thing. This AM and twice today, the system32 cmd.exe module wanted to contact the internet. The IPs in each case were blackholed by Threat Crowd. That's what started me wondering if I could be infected with a miner. I blocked both of those, so I'm not too worried for now. One of them is blicked by FortKnox on a regular basis, though. The racing processor only happened on the one page but there was no associated bandwidth usage...maybe the blocked IPs? idk... I'm going to monitor this for now. I can see how this might pick a page in Chrome to blame it somehow and then try to use the net maybe? However, if there is a miner here, I also think it can't connect. I want to see if it happens again (on a different page) before I jump to conclusions though... I haven't [USER=7463]@cruelsister[/USER] and don't. I made a couple of blogs using Blogger many moons ago. They are still there but I haven't updated them in a long time. But you jogged my memory again, I did notice that I was logged into Disqus on the affected PC on the page. Well, about an hour ago I deleted the account. That didn't resolve the processor usage issue though. It still happens. I try some kind of out there security type apps like IP checkers and so I risk it a little bit on this PC. I'm OK with that. It's my kind of testing, which is alot safer than testing malware...I just take a calculated risk on a program sometimes even if I don't know the dev from his site, etc Not very often, just sometimes...and I watch on this PC with NVT ERP. Really cool that I can sync internet connection requests with activity in the NVT ERP logs btw. Another great reason to keep NVT running in the tray. However, watch out or you will have 3 years and 3 gigs of data in the NVT logs folder LOL... [/QUOTE]

Verification