Jump to content

ss.symcd.com and akamai Warnings


Recommended Posts

Started getting phone calls this morning of Malwarebytes notifications going crazy. Turns out it's blocking symcd.com website. After a little research, it seems that this has happened in the past. symcd.com is owned by Symantec and has to do with ad certificates or something. It's possible that something changed on that site that's triggering MB to block the site. For now, I've added it as an Exclusion as it appears to be benign.

Anyone else getting this or care to add some input here?  Thanks.

Edited by CHall
Link to post
Share on other sites

I have switched to Firefox Quantum recently and this morning I uninstalled an older 32bit version of Firefox since I am now using the x64 FFox as default browser. As soon as I did that MBam Component Package 1.0.236 Update Package 1.0.3282 started popping up alerts like the following



-Log Details-
Protection Event Date: 11/17/17
Protection Event Time: 9:02 AM
Log File: 5c0d7eb0-cba8-11e7-9c4a-00ff486c33ab.json
Administrator: Yes

-Software Information-
Components Version: 1.0.236
Update Package Version: 1.0.3282
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Domain: sr.symcd.com
IP Address:
Port: [50848]
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe


Link to post
Share on other sites

For some time now I have been running Malwarebytes and Mozilla-FireFox together on my Win7 Ultimate 64bit SP1 machine, with "DuckDuckGo" as my default Search facility, and Yahoo News (UK) as a Link.
Generally, no problems have previously arisen from the use of this configuration.

However, during the past few days Malwarebytes has begun flagging a "Malicious Website" warning on each occasion I use the Yahoo News UK Link.

The warning refers to a domain called ss.symcd.com and indicates the outbound use of C:\ProgramFiles\Mozilla Firefox\firefox.exe.

The "WhoIs" website indicates the ss.symcd.com domain is owned by Akamai in the Netherlands, and I have also found some references to Symantec.

I have searched my Registry and computer for occurrences of both ss.symcd.com and akamai, but can find none.

Does anyone know, or can suggest (a) why this should have suddenly started to be flagged, and (b) how I can get rid of it. (Other than just excluding it from the Malwarebyte scan)

At no time have I ever (knowingly) installed anything remotely connected with Symantec or Akamai.



Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.