OpenOffice document recovery connecting to internet server--Security concern?

Zach uid000 at gmail.com
Mon Jan 23 21:17:07 UTC 2006


Hi

I just started up OpenOffice (on Ubunut 5.10) and it prompted me to
recover a document from a crash.  Thinking that this was odd, because
I didn't recall an OpenOffice crash the last time I used it, I went
ahead and attempted to recover the document.

The document recovery proceeded very slowly.  I also noticed lots of
network activity via the Network Monitory on my Gnome panel.  Quickly,
I fired up tcpdump (sadly I didn't have ethereal insalled) and saw
lots of connections to port 80 at the following host:
port-64-1954021-zzt0prespect.devices.datareturn.com

I immediately killed the process--it wouldn't stop from the gui--and
when I did, the network traffic stopped as well.

I think this is very odd, as I can't imagine why OpenOffice would be
behaving this way.  If it were a windows computer, I would assume it
had been compromised in some way.

Has anyone seen anything like this before?  Should I be worried?

Thanks
--
If you reply to a message I posted to a mailing list,
and you want me to see your reply, be sure to put my
address in the 'To:', or I might not see the message.




More information about the ubuntu-users mailing list