sygate personal catches IE attempting www.rdxrp.com

From: adam (adamwebb@hotmail.com)
Date: 03/20/02 

From: adamwebb@hotmail.com (adam)
Date: 19 Mar 2002 18:09:51 -0800

I've just switched from ZA to Sygate. I'm happy so far.

Something interesting: I installed and quickly removed Morpheus
(preview edition) two days ago. Upon removing ZA and installing SPF,
all my programs are being stopped before accessing the network (as
they should).

One in particular is bugging me. Internet Explorer has a start page of
"about: blank" and when starting up SPF prompts me to give IE access
to www.rdxrp.com [206.142.53.204] - when I click 'yes' I am sent to my
about: blank page as I should be.

I've noted that IE is exchanging some information with the IP in
question. When you surf to that page...it's a Morpheus page.

I can't pull any useful information from the packet log, and packet
analyzers aren't giving me much more either. It doesn't seem like
there is much information being passed (some stuff about
rdxr020304.dat and rdxrDLL etc). I've looked for these files on my PC
with no luck.

Any ideas on this would be greatly appreciated.

Quantcast