Application Hijacking has been detected :s

PopWeasel · 08-08-2005, 03:48 AM

Just got this alert from my firewall :s I've used ioGroups for a long time and never got any warnings about it so I'm not sure if this is valid but I'll go ahead and post this and see if anyone else has seen this also. Maybe it's being detected now after a firewall update or something..

Code:

Application Hijacking has been detected
The application: C:\ioFTPD\scripts\ioGroups.v1.0.288\ioGroups.exe  try to launch another application: C:\Program Files\mIRC\mirc.exe  to go to remote host  fastcounter.linkexchange.com

p.s.: Just before I received this alert, I can confirm that mIRC did try to go to that url. I'm just not 100% sure if ioGroups.exe is what caused it to do this.

ADDiCT · 08-12-2005, 04:33 AM

I can assure u that ioGroups doesn't contain a single line of code that would execute another program, nor does it use sockets or DDE to communicate with any mIRC process.

PopWeasel · 08-12-2005, 05:23 PM

Yeah, when this happened I had just woke up and was like, wtf? lol.. But I've used ioGroups for like 2yrs it seems and never had any problem. Guess mirc just had a hiccup and firewall didnt like it.

Uniter · 09-18-2005, 10:37 PM

maybe it's just misbehaving spyware(malware, h4x, other)