No scheduler URLs found in master file - iysearch.com malware?

Questions and Answers : Unix/Linux : No scheduler URLs found in master file - iysearch.com malware?
Message board moderation

To post messages, you must log in.

AuthorMessage
Thingy

Send message
Joined: 28 Dec 05
Posts: 1
Credit: 99,494
RAC: 0
United Kingdom
Message 1994231 - Posted: 18 May 2019, 20:07:27 UTC

Hi

After a long period of being inactive, I decided to install boinc and re-join the seti@home project today.

I ran the following commands after installing boinc on my proxmox node:

boinccmd --join_acct_mgr http://setiathome.berkley.edu MYUSERNAME MYPASSWORD
boinccmd --project_attach http://setiathome.berkley.edu MYACCOUNTKEY

I checked the /var/log/boinc.log file and it kept reporting:

[http://setiathome.berkley.edu/] No scheduler URLs found in master file


I looked for a master_*.xml file in the /var/lib/boinc-client folder and checked its contents and I was surprised to find:

File: /var/lib/boinc-client/master_setiathome.berkley.edu.xml
File contents:
---snip---
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
  <meta name="generator" content=
  "HTML Tidy for Linux (vers 25 March 2009), see www.w3.org" />
  <meta http-equiv="Content-Type" content="text/html; charset=us-ascii" />
  <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" />

  <title>berkley.edu</title>
  <link href="//d1lxhc4jvstzrp.cloudfront.net/themes/assets/style.css" rel="stylesheet"
  type="text/css" media="screen" />
  <link href="//d1lxhc4jvstzrp.cloudfront.net/themes/assets/skenzo.css" rel="stylesheet"
  type="text/css" media="screen" />
</head>

<body>
  <div id="content">
    <iframe id="iframe" frameborder="0" src=
    "http://iyfsearch.com/?dn=berkley.edu&amp;pid=9PO755G95" name="iframe"></iframe>
  </div><script type="text/javascript">
</script>
</body>
</html>

---snip---

Searching google for iyfsearch.com shows it to be a malware domain.

I was concerned about this and thought to check if anyone else is affected by this and if this is a security problem?

My system details:
---snip---
Debian Stretch
boinc-client v7.6.33+dfsg-12
---snip---

If anyone has advice on how I can get past the error above and join seti@home please reply here. Thanks.

regards,
Jinesh
ID: 1994231 · Report as offensive
Profile tullio
Volunteer tester

Send message
Joined: 9 Apr 04
Posts: 8797
Credit: 2,930,782
RAC: 1
Italy
Message 1994342 - Posted: 19 May 2019, 17:52:45 UTC

Maybe you should write "berkeley" instead of berkley
Tullio
ID: 1994342 · Report as offensive
Profile Mr. Kevvy Crowdfunding Project Donor*Special Project $250 donor
Volunteer moderator
Volunteer tester
Avatar

Send message
Joined: 15 May 99
Posts: 3776
Credit: 1,114,826,392
RAC: 3,319
Canada
Message 1994365 - Posted: 19 May 2019, 22:08:26 UTC - in response to Message 1994342.  
Last modified: 19 May 2019, 22:09:05 UTC

ID: 1994365 · Report as offensive

Questions and Answers : Unix/Linux : No scheduler URLs found in master file - iysearch.com malware?


 
©2024 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.