Boinc.exe and Boincmgr.exe hitting www.007guard.com

Message boards : BOINC Manager : Boinc.exe and Boincmgr.exe hitting www.007guard.com
Message board moderation

To post messages, you must log in.

AuthorMessage
Ed Meadows
Avatar

Send message
Joined: 28 Jun 07
Posts: 22
United States
Message 30459 - Posted: 8 Jan 2010, 18:39:54 UTC

In my Win 7's task manager's resource monitor, it shows under the Network section that Boinc.exe and Boincmgr.exe are communicating with www.007guard.com.

I'm running two projects, climateprediction.net and malariacontrol.net

I tried to go to this site with my browser and was immediately warned by the Firefox's WOT (Web of trust) plug-in that it had a poor reputation, and McAfee site advisor red-flagged it as containing malware.

Scanning with Malwarebytes, SpyBot, HitMan Pro, and McAfee doesn't reveal any malware on my system.

Does anybody know what this is about?

Thanks!
ID: 30459 · Report as offensive
Ed Meadows
Avatar

Send message
Joined: 28 Jun 07
Posts: 22
United States
Message 30460 - Posted: 8 Jan 2010, 19:27:44 UTC - in response to Message 30459.  

I found the problem. This might be useful to anybody else who is seeing this.

SpyBot modifies the hosts file to redirect malware-related website names to localhost (127.0.0.1) to prevent communications, but fails to insert '127.0.0.1 localhost' as the first entry in the list. The first entry in the list is the '127.0.0.1 www.007guard.com' and the system ends up showing that name by mistake whenever localhost is accessed.

The article that explains this is here:

http://overclockedtech.com/?tag=007guardcom

You would think that SpyBot would have a handle on this by now.
ID: 30460 · Report as offensive

Message boards : BOINC Manager : Boinc.exe and Boincmgr.exe hitting www.007guard.com

Copyright © 2024 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.