New
#1
Transmission to strange website during startup
I don't know if this is the correct group for this discussion but during startup of my PC this morning, I was watching the resource monitor from Task manager/Performance and noticed that svchost.exe was attached to a 'odd character group.odd character group.akamaitechnologies.com . This only lasted for about 10 seconds and disappeared but I have never heard of that '.com' (the 'odd character group' above is my interpretation of the characters that preceded the .com).
I looked up the .com and it's apparently a tracking site for online businesses. Norton IS and SuperAntiSpyware never flagged this as a tracking bug either. I did a search for 'akamai' and found a XML file in C:\Users\me\AppData\LocalLow\Microsoft\InternetExplorer\DOMStore\OSKRU0OM. I looked in the file location but could not find the DOMStore folder but clicking on the file attributes in the search (Open file location) brought up the folder and the XML file. What concerns me is the following content of the XML file where the www.-------.com below is the name of a credit card I have.
<?xml version="1.0"?>
<root><item htime="30329548" ltime="4218607792" value="{"v":1381968498,"t":1413504480}" name="frt"/><item htime="30331353" ltime="2835958512" value="{"v":"http://www.--------------.com/","t":1414279560}" name="location.href"/><item htime="30331353" ltime="2060268512" value="{"v":1382759958819,"t":1414279500}" name="zone::92247::expiration"/></root>
Does anyone think this is a rootkit or spyware that's getting past my firewall? Worse, someone is trying to get to my credit card.
Specs are Win 7 Pro 64bit latest service pack and security updates.
Thanks.