XupiterToolbar - Parasite?

What about when it appears in access log files?

[pendanticist]

Greetings,

Just found this in my access log file...

208.160.133.227 - - [12/Dec/2002:04:07:55 -0800] "HEAD /Accounting_Forensic.html HTTP/1.1" 200 0 "-" "XupiterToolbar"
208.160.133.227 - - [12/Dec/2002:04:07:57 -0800] "HEAD /Accounting_Forensic.html HTTP/1.1" 200 0 "-" "XupiterToolbar"

...which traces back to the American University in Cairo.

After doing a Goggle search on XupiterToolbar and finding, for the most part, it being referred to as a parasite.

But, I don't think that actually refers to the actual user sucking up what they view, does it?

In other words, this user might have installed the toolbar, but what they view is safe, right?

It only asked for that file, twice. That's it, nothing more...yet.

Thanks.

Pendanticist.

[guabito]

I had these:

64.53.205.185 - - [12/Dec/2002:16:32:40 +1300] "HEAD / HTTP/1.1" 403 - "-" "XupiterToolbar"

64.53.205.185 - - [12/Dec/2002:16:32:40 +1300] "HEAD / HTTP/1.1" 403 - "-" "XupiterToolbar"

CustName: WIDEOPENWEST OHIO
Address: 4822 INDIANOLA AVE COLUMBUS OH 43214
Country: US
RegDate: 2002-10-28
Updated: 2002-10-28

NetRange: 64.53.200.0 - 64.53.207.255
CIDR: 64.53.200.0/21

[Mohamed_E]

Xupiter is a nasty piece of scumware, not sure how I caught it. As I recall it attempted to make itself my home page, also took all 404's to its home.

I think I used Ad-aware to remove it.