| Index | Recent Threads | Unanswered Threads | Who's Active | Guidelines | Search |
 |
World Community Grid Forums
Category: Retired Forums
Forum: UD Windows Agent Support [Read Only]
Thread: Application Hijacking? |
| No member browsing this thread |
|
Thread Status: Active Total posts in this thread: 4
|
|
| Author |
|
|
Chris20
Cruncher Joined: Nov 20, 2004 Post Count: 3 Status: Offline Project Badges: 
|
Hi, I got an alert from my firewall a few hours ago asking if I wanted to allow or block wcgridHCMD.exe.
I can't remember if I granted it access but I've just checked the firewalls Log Viewer and it says... Time - 09/03/2007 22:21:22 Security Type - Application Hijacking Severity - Critical Direction - Outgoing Protocol - None Source Host - 0.0.0.0 Source MAC - [not sure if I should post this part for security reasons so I've removed it just in case] Destination Host - 0.0.0.0 Destination MAC - FF-FF-FF-FF-FF-FF Application Name - C:\ProgramFiles\WorldCommunityGrid\ud_12694780.exe User Name - Chris Domain - Chris Security - Normal Occurrences - 1 Begin Time - 09/03/2007 22:20:21 End Time - 09/03/2007 22:20:21 Application Hijacking has been detected The application: C:\ProgramFiles\WorldCommunityGrid\ud_12694780.exe try to launch another application: C:\ProgramFiles\WorldCommunityGrid\ud_12694780_0.dir\wcgridHCMD.exe Is this a mistake by my firewall or does my PC have a security issue? Bit worrying when it says "Severity - Critical".  Chris |
||
|
|
cio_redulla
Advanced Cruncher Philippines Joined: Apr 24, 2006 Post Count: 130 Status: Offline Project Badges: 
|
Hi, I got an alert from my firewall a few hours ago asking if I wanted to allow or block wcgridHCMD.exe. Application Hijacking has been detected The application: C:\ProgramFiles\WorldCommunityGrid\ud_12694780.exe try to launch another application: C:\ProgramFiles\WorldCommunityGrid\ud_12694780_0.dir\wcgridHCMD.exe Is this a mistake by my firewall or does my PC have a security issue? Bit worrying when it says "Severity - Critical". Chris Your firewall is just over-reacting,  . The UD Agent is trying to launch the Muscular Dystrophy program, that's perfectly OK. You can add a rule to your firewall to allow this kind of behavior exhibited by the agent.cio_redulla  [Edit 1 times, last edit by cio_redulla at Mar 10, 2007 1:36:55 AM] |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Hello Chris20,
cio_redulla is right. The grid client program orchestrates the application program or programs by starting and stopping their execution. Some anti-virus programs allow this for known programs in the Operating System but are very suspicious of other programs that do this. The 'hijacking' is just a program using high level functions the same way a computer user does. Ordinary users call up programs and start them running the same way that the grid client does. Most other application programs do not. Lawrence |
||
|
|
Sekerob
Ace Cruncher Joined: Jul 24, 2005 Post Count: 20043 Status: Offline |
Have just updated the "Agent, Project Versions and Processes" post in the Start Here forum which provides info on the activity that is involved. For WCG Agent and the HCMD project you should see 3 items in the Taskmanager of your Operating System: UD.exe, wcgridHCMD.exe and with the just released version 1.0.1.4 that has the application number "ud_12694780.exe". Latter will change with each version change!
----------------------------------------
WCG
Please help to make the Forums an enjoyable experience for All! |
||
|
|
|