NextPVR Forums
  • ______
  • Home
  • New Posts
  • Wiki
  • Members
  • Help
  • Search
  • Register
  • Login
  • Home
  • Wiki
  • Members
  • Help
  • Search
NextPVR Forums General General Discussion v
« Previous 1 … 9 10 11 12 13 … 159 Next »
Why Ntray and Nrecord

 
  • 0 Vote(s) - 0 Average
Why Ntray and Nrecord
p37307
Offline

Senior Member

Posts: 252
Threads: 46
Joined: Jul 2016
#1
2016-09-30, 07:24 AM (This post was last modified: 2016-10-01, 03:01 AM by p37307.)
EDITED this with explanation.

I was wondering if there is a reason why ntray and nrecord is sending and receiving data from imrk.net?

I am wondering if this is normal behavior or is my machine compromised?

I haven't caught my other NPVR machine sending and receiving data to imrk.net

Thanks,
EDIT:
Never mind. I use a host file to prevent known Trojan sites, etc, from getting out of my network.
Color me dumb. Imrk.net was the first item in my host file meant to keep known hack sites/trojans from breaking free but for whatever reason it was set to 127.0.0.1 which is the localhost and, although I am not sure if this is the exact reason, but imrk.net was first on the list as 127.0.0.1 making ipv4 loopback the imrk.net local domain. So, it is all good now and both are back to "Ipv4 loopback".

It's enough to scare a person that his server was compromised. Still running a lot of malware checks though. The computer is custom built, with all new equipment and no thrills as far as software goes.
~Paul

If you haven't broken it at least once, you're not doing it right. :eek:
JavaWiz
Offline

Posting Freak

Jacksonville, FL. USA
Posts: 2,522
Threads: 141
Joined: Dec 2006
#2
2016-09-30, 11:43 PM
Hmm... You may be hacked...
https://mailman.stanford.edu/pipermail/l...14819.html
p37307
Offline

Senior Member

Posts: 252
Threads: 46
Joined: Jul 2016
#3
2016-10-01, 01:23 AM
JavaWiz Wrote:Hmm... You may be hacked...
https://mailman.stanford.edu/pipermail/l...14819.html
Thanks. I read that one and it's about the only article about the domain. Luckily the site has been in my host file and never had the opportunity to leave my network.

This is a new system that has only been built and online for 3 months so I need to back trace and see when it started appearing and what file is the culprit. I don't even have a monitor hooked up to it. It is just a server in the closet that I remote into.
~Paul

If you haven't broken it at least once, you're not doing it right. :eek:
p37307
Offline

Senior Member

Posts: 252
Threads: 46
Joined: Jul 2016
#4
2016-10-01, 02:54 AM
Color me dumb. Imrk.net was the first item in my host file meant to loop known hack sites/trojans but for whatever reason it was set to 127.0.0.1 which is the localhost. So, it is all good now and both are back to "Ipv4 loopback".

I'm going to edit the original post with this enlightenment.
~Paul

If you haven't broken it at least once, you're not doing it right. :eek:
« Next Oldest | Next Newest »

Users browsing this thread: 1 Guest(s)



  • View a Printable Version
  • Subscribe to this thread
Forum Jump:

© Designed by D&D, modified by NextPVR - Powered by MyBB

Linear Mode
Threaded Mode