CHall Posted November 17, 2017 ID:1183813 Share Posted November 17, 2017 (edited) Started getting phone calls this morning of Malwarebytes notifications going crazy. Turns out it's blocking symcd.com website. After a little research, it seems that this has happened in the past. symcd.com is owned by Symantec and has to do with ad certificates or something. It's possible that something changed on that site that's triggering MB to block the site. For now, I've added it as an Exclusion as it appears to be benign. Anyone else getting this or care to add some input here? Thanks. Edited November 17, 2017 by CHall Typo Link to post Share on other sites More sharing options...
FredGreco Posted November 17, 2017 ID:1183816 Share Posted November 17, 2017 https://forums.malwarebytes.com/topic/215317-blocked-website/ Link to post Share on other sites More sharing options...
Jstockton Posted November 17, 2017 ID:1183819 Share Posted November 17, 2017 Same problem. Link to post Share on other sites More sharing options...
CHall Posted November 17, 2017 Author ID:1183821 Share Posted November 17, 2017 @FredGreco Thanks. We'll just leave an exclusion until it's resolved. Link to post Share on other sites More sharing options...
KDawg Posted November 17, 2017 ID:1183822 Share Posted November 17, 2017 This block has been removed! Please ensure you are on the latest DB version and the block should now be resolved As well an exclusions should work immediately Link to post Share on other sites More sharing options...
frozen Posted November 17, 2017 ID:1183827 Share Posted November 17, 2017 I have switched to Firefox Quantum recently and this morning I uninstalled an older 32bit version of Firefox since I am now using the x64 FFox as default browser. As soon as I did that MBam 3.3.1.2183 Component Package 1.0.236 Update Package 1.0.3282 started popping up alerts like the following Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 11/17/17 Protection Event Time: 9:02 AM Log File: 5c0d7eb0-cba8-11e7-9c4a-00ff486c33ab.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3282 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Domain: sr.symcd.com IP Address: 23.61.187.27 Port: [50848] Type: Outbound File: C:\Program Files\Mozilla Firefox\firefox.exe Link to post Share on other sites More sharing options...
FredGreco Posted November 17, 2017 ID:1183835 Share Posted November 17, 2017 15 minutes ago, KDawg said: This block has been removed! Please ensure you are on the latest DB version and the block should now be resolved As well an exclusions should work immediately Block is not removed yet. And exclusion for symcd.com does not work Link to post Share on other sites More sharing options...
IanGreen Posted November 17, 2017 ID:1183836 Share Posted November 17, 2017 For some time now I have been running Malwarebytes and Mozilla-FireFox together on my Win7 Ultimate 64bit SP1 machine, with "DuckDuckGo" as my default Search facility, and Yahoo News (UK) as a Link. Generally, no problems have previously arisen from the use of this configuration. However, during the past few days Malwarebytes has begun flagging a "Malicious Website" warning on each occasion I use the Yahoo News UK Link. The warning refers to a domain called ss.symcd.com and indicates the outbound use of C:\ProgramFiles\Mozilla Firefox\firefox.exe. The "WhoIs" website indicates the ss.symcd.com domain is owned by Akamai in the Netherlands, and I have also found some references to Symantec. I have searched my Registry and computer for occurrences of both ss.symcd.com and akamai, but can find none. Does anyone know, or can suggest (a) why this should have suddenly started to be flagged, and (b) how I can get rid of it. (Other than just excluding it from the Malwarebyte scan) At no time have I ever (knowingly) installed anything remotely connected with Symantec or Akamai. Thanks, Ian Link to post Share on other sites More sharing options...
Super Dave Posted November 17, 2017 ID:1183839 Share Posted November 17, 2017 False positive. Update package 1.0.3283 resolves problem Link to post Share on other sites More sharing options...
Staff Zynthesist Posted November 17, 2017 Staff ID:1183859 Share Posted November 17, 2017 Block has been removed. Ensure to update to latest DB Version. Link to post Share on other sites More sharing options...
Recommended Posts