Jump to content
CHall

ss.symcd.com and akamai Warnings

Recommended Posts

Started getting phone calls this morning of Malwarebytes notifications going crazy. Turns out it's blocking symcd.com website. After a little research, it seems that this has happened in the past. symcd.com is owned by Symantec and has to do with ad certificates or something. It's possible that something changed on that site that's triggering MB to block the site. For now, I've added it as an Exclusion as it appears to be benign.

Anyone else getting this or care to add some input here?  Thanks.

Edited by CHall
Typo

Share this post


Link to post
Share on other sites

This block has been removed!

Please ensure you are on the latest DB version and the block should now be resolved

As well an exclusions should work immediately 

Share this post


Link to post
Share on other sites

I have switched to Firefox Quantum recently and this morning I uninstalled an older 32bit version of Firefox since I am now using the x64 FFox as default browser. As soon as I did that MBam 3.3.1.2183 Component Package 1.0.236 Update Package 1.0.3282 started popping up alerts like the following

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 11/17/17
Protection Event Time: 9:02 AM
Log File: 5c0d7eb0-cba8-11e7-9c4a-00ff486c33ab.json
Administrator: Yes

-Software Information-
Version: 3.3.1.2183
Components Version: 1.0.236
Update Package Version: 1.0.3282
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Domain: sr.symcd.com
IP Address: 23.61.187.27
Port: [50848]
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe

 

Share this post


Link to post
Share on other sites
15 minutes ago, KDawg said:

This block has been removed!

Please ensure you are on the latest DB version and the block should now be resolved

As well an exclusions should work immediately 

Block is not removed yet. And exclusion for symcd.com does not work

Share this post


Link to post
Share on other sites

For some time now I have been running Malwarebytes and Mozilla-FireFox together on my Win7 Ultimate 64bit SP1 machine, with "DuckDuckGo" as my default Search facility, and Yahoo News (UK) as a Link.
Generally, no problems have previously arisen from the use of this configuration.

However, during the past few days Malwarebytes has begun flagging a "Malicious Website" warning on each occasion I use the Yahoo News UK Link.

The warning refers to a domain called ss.symcd.com and indicates the outbound use of C:\ProgramFiles\Mozilla Firefox\firefox.exe.

The "WhoIs" website indicates the ss.symcd.com domain is owned by Akamai in the Netherlands, and I have also found some references to Symantec.

I have searched my Registry and computer for occurrences of both ss.symcd.com and akamai, but can find none.

Does anyone know, or can suggest (a) why this should have suddenly started to be flagged, and (b) how I can get rid of it. (Other than just excluding it from the Malwarebyte scan)

At no time have I ever (knowingly) installed anything remotely connected with Symantec or Akamai.

Thanks,


Ian

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.