Problem:  Reading email, browsing, and other regular use of a browser could possibly infect one with something as insidious as LivePerson cookies.<br><br>For anyone who hasn&#39;t worked for a remote hoster, LivePerson cookies are installed either as a legitimate process, allowing remote desktop keylogging and access; or as a virus trojan.  Watching a TCPDUMP one will see cookies kicking off and reporting various things back home.<br>
<br>The HOME is always in the cookie, but might be misleading.  Check out your LivePerson cookies to see where your keylogger or tracking cookie originated.<br><br>Some people report RDP and mouse type controlling behavior when these cookies until the cookies are removed (simple in Firefox, just delete the cookie file.<br>
<br clear="all">Solution: Create an exclusion List.<a href="http://www.gozer.org/"><br></a><blockquote>
In newer versions of <a href="http://www.mozilla.org/">Mozilla</a>(/<a href="http://www.mozilla.org/products/firefox/">Firefox</a>), cookperm.txt is deprecated in favor
of hostperm.1 (<a href="http://bugzilla.mozilla.org/show_bug.cgi?id=219752">http://bugzilla.mozilla.org/show_bug.cgi?id=219752</a>).

<br><br>
<a href="http://bugzilla.mozilla.org/show_bug.cgi?id=219752#c4">http://bugzilla.mozilla.org/show_bug.cgi?id=219752#c4</a>
<br>
 This patch creates a new file, named &quot;hostperm.1&quot;. The format is:

<pre>host \t cookie \t 1 \t <a href="http://www.mozilla.org">www.mozilla.org</a></pre>

so:

<pre>host    image   2       <a href="http://ads2.clearchannel.com">ads2.clearchannel.com</a><br>host    image   2       <a href="http://jinisearch.co.uk">jinisearch.co.uk</a><br>host    image   2       <a href="http://oas.villagevoice.com">oas.villagevoice.com</a><br>
host    image   2       <a href="http://aaddzz.com">aaddzz.com</a><br></pre>

... and so on

<br><br>
cookperm.txt is probably the same way, but hostperm.1 is very sensitive
to the delimiter (single tab only) and is stored in the same place as
cookperm.txt (<a href="http://kb.mozillazine.org/index.phtml?title=Profile_Folder">http://kb.mozillazine.org/index.phtml?title=Profile_Folder</a>).
</blockquote>

The list of ad servers is now available in the new <a href="http://pgl.yoyo.org/adservers/serverlist.php?hostformat=hostperm.1">hostperm.1 format</a>

<br><br>If you would like to build a LivePerson cookie for tracking, check this out:<br><br><br><br>-- <br><a href="http://www.obnosis.com">www.obnosis.com</a> (503)754-4452<br>&quot;Contradictions do not exist.&quot; A. Rand<br>