Author Topic: Barrage of "Infection Blocked" warnings  (Read 12376 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Barrage of "Infection Blocked" warnings
« on: January 25, 2015, 07:58:13 AM »
Starting today I am receiving multiple warnings simultaneously regarding a blocked infection - the information is as follows:

Infection: URL:Mal
URL:        http://sr.symcb.com/sr.crl
Process:   /usr/sbin/ocspd

After doing a google search it was derterminded that ocspd performs caching and network fetching of Certificate Revocation Lists (CRLs) and Online Certificate Certificate Status Protocol (OCSP) responses. It is used by Security.framework during certificate verification. verification.
tion. Security.framework communicates with ocspd via a private RPC interface.

These are becoming quite bothersome and running a full scan with AVAST it returns no infections...

Any suggestions or comments would be greatly appreciated.

REDACTED

  • Guest
Re: Barrage of "Infection Blocked" warnings
« Reply #1 on: January 25, 2015, 08:27:12 AM »
I'm having the same problem and would love to have this resolved. It happens every time I open Firefox, Chrome or Safari. Mine are a little different than robert's, but they are essentially affecting the same process:

Infection: URL:Mal
URL: http://s2.symcb.com/
Process: /usr/sbin/ocspd

REDACTED

  • Guest
Re: Barrage of "Infection Blocked" warnings
« Reply #2 on: January 25, 2015, 08:40:11 AM »
Hi all,

same problem here. It looks like false positive.

- the Services are operated by akamai (CDN)
- the URL belongs to a Symantec CRL caching service with several URL´s
- cant find any infection inside this URL´s and tested the downloaded CRL´s Files with https://www.virustotal.com/de/
- All Browsers with included Avast are affected, cause the Browsers want to update their CRL´s and certificates.

any Ideas to stop this ?

Regards
Athome

REDACTED

  • Guest
Re: Barrage of "Infection Blocked" warnings
« Reply #3 on: January 25, 2015, 09:13:21 AM »
I have started having the same problem with s2.symcb.com

thanks

REDACTED

  • Guest
Re: Barrage of "Infection Blocked" warnings
« Reply #4 on: January 25, 2015, 02:37:27 PM »
Yup me too

sd.symcb.com/sd.crt

then when I googled the above it flagged the article that I clicked on about it


Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0