OneDrive Update goes to http://livedog

lx07 said:

Onedrive and hidden references to dog food? : onedrive

That's 2 years old!

lx07 said:

Much older than that I think... To answer the original question, I did get an update yesterday but didn't see the error above.

However lots of current OneDrive objects still reference this old meme. For example:

Code:

  C:\Users\Hali\AppData\Local\Microsoft\OneDrive\17.3.7105.1024\FileSync.Resources.dll (5 hits)
    Line 113:             <setting name="SignUpForDogfoodUrlProd">
    Line 114:               <value>http://g.live.com/8SESkydrive/EnableDogfood</value>
    Line 116:             <setting name="SignUpForDogfoodUrlInt">
    Line 117:               <value>http://g.live.com/8SESkyDrive/EnableDogfoodINT</value>
    Line 128:             <setting name="ForumUrlDogFood">

Coders still have a sense of humor! :) Or it's a backdoor!!

johnpd said:

I installed the Fall Creators Update on one of my systems. After the update had completed, a message indicating that an update for OneDrive was available. I clicked on the update and it ended up opening my browser (Firefox) to "http://livedog". It came up as an invalid site. Anyone run into this?JohnD

Something similar happened to me this morning on the 2nd system in my profile:

1. First, I had observed Windows Update running an automatic update. (See details of that below) After that completed and restarted, I found that:

2. A browser was open that had attempted to access "http://livedog", with result ERR_NAME_NOT_RESOLVED.

3. My Windows notification area stated that there had been "trouble updating OneDrive".

4. The notification area also contained an alert from my Norton Security.

I clicked on #4, and it did a Live Update of 15 items, had me do a restart, and then gave me an alert saying I needed to run a scan. I allowed that, and it did a Quick Scan that found nothing after scanning 9,000+ items. I plan to run a deeper scan later today.

I looked at Norton Security's history, and found many suspicious events, including:

a. Many attempts starting at 0627 from IPv4 0.0.0.0 port 0, IPv6 ::0 port 0, and 10.0.1.158. I have the detailed log.

b. Blocked attempts at 0646 and 0647 by EXPLORER.EXE to access data in the thread of NS.EXE, the Norton Security engine.

Regarding #1, Windows Update history says that the following 7 updates had been installed:

A. KB4011266 for Microsoft Word;

B. KB4011265, KB4011205, KB4011276, and KB401199 for other elements of Microsoft Office;

C. KB4048951 for Adobe Flash Player;

D. KB4048954, a Cumulative Update for Windows 10 version 1703.

E. KB4049011, an Update for Windows 10 version 1703.

Between the Windows Update and the suspicious firewall traffic, I don't know which is the more likely cause of the "livedog" access and the OneDrive error message.