Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

fbstatic-a.akamaihd.net virus?


  • Please log in to reply
4 replies to this topic

#1 Blinkstar

Blinkstar

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:08:42 PM

Posted 30 March 2015 - 02:18 PM

I just switched firewalls from pctools to the default windows 7 firewall and added Windows Firewall Notifier so I could see what was trying to connect out ... I immediately got a message about outgoing connections to fbstatic-a.akamaihd.net.

 

Googled "fbstatic-a.akamaihd.net" and got a bunch of hits many of which seemed suspicious in and of themselves (i.e. "Cleanmypcnow.net"--not real, just a made up example). As far as I can tell this either has something to do with facebook--and I'm not on facebook--or it's a browser hijacker. I suspect the latter. I blocked it and now I can't connect to the internet at all on my desktop pc.( Not sure how much of this has to do with additional changes made by windows firewall + windows firewall notifier, however ).

 

Please note that I started a thread a long time ago about issues with my internet connection, but missed a response from someone trying to help me. I was reminded of this by a user here who suggested I PM the person who first tried to help me in my old thread which had since been closed.

 

If that is what I should do in this instance, just tell me and I will. Not sure this is a continuation of my old thread however, as I didn't know anything about fbstatic-a.akamaihd.net on my pc until today.

 

EDIT: forgot to mention that when I try to save a file to my desktop I get a message telling me my desktop "refers to a location that is not available ..."

 

EDIT: reset windows firewall to default settings and now I can connect to the net again.


Edited by Blinkstar, 30 March 2015 - 02:36 PM.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,771 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:42 PM

Posted 30 March 2015 - 07:31 PM

Akamai Technologies is a U.S. Internet Content Delivery Network (CDN) responsible for serving approximately 15-20 percent of all web traffic. Akamai operates a network of servers around the world and rents space to customers who want their web sites to work faster by distributing content from locations close to the user. A CDN receives data and places it on various legitimate servers all over the world. This allows the content (images, music, movies, etc) to load faster because it is delivered to the end user from the nearest server holding the content. Akamai has several CDN networks and akamai.net; akamaiedge.net; akamaihd.net are a few of them.

Facebook, YouTube and Twitter all use akamaihd.net as a CDN to speed up their services. For example, if you upload photos on Facebook they are actually uploaded to akamaihd.net. When someone requests to view a Facebook photo the request is sent to the nearest akamaihd server which returns the photo more quickly than a server at a distant location. This is the reason why you may see an address in the status bar (or a javascript file) which indicates "transferring data from fbstatic-a.akamaihd.net" or "fbcdn-sphotos-f-a.akamaihd.net" when using Facebook, or something similar (i.e. "cdncache1-a.akamaihd.net", "rvzr-a.akamaihd.net", etc) when visiting other websites using Akamai. These addresses are subdomains which show Akamai where visitors go and the percentage of visitors...they are normal but some users have reported this process actually slows their access to social media sites.

Also when accessing web sites like Facebook, Yahoo, Bing, Gmail and Twitter, a message may pop-up with an alert advising that a security issue was detected on "xxx.a.akamaihd.net" and ask that you confirm the certificate. If you attempt to connect to a web site over HTTPS, it will often reveal Akamai. See Akamai and SSL.

I have not been able to find one major anti-virus vendor which reports this issue as being related to malware infection. However, if you conduct a Google search, the results will show numerous sites reporting this as a virus. When searching for malware removal assistance on the Internet, it is not unusual to find numerous hits from untrustworthy and scam sites which mis-classify detections or provide misleading information. This is deliberately done more as a scam to entice folks into buying an advertised fix or removal tool. In some cases if the fix is a free download, users may be enticed to download a malicious file or be redirected to a malicious web site. I have personally contacted the Akamai Support Team for a more official explanation but they have not replied back.

In most cases, browser slowness, crashing or unresponsiveness when attempting to visit Facebook is an issue with Facebook itself, not an indication of malware infection. Permanently blocking anything related to akamaihd.net may result in not being able to view web pages correctly...therefore attempting to do that is not the solution.

Sometimes just clearing the cache and resetting your browser settings to default helps reslove the proglem.

If there is pop-up advertising showing "rvzr-a.akamaihd.net" in the address, the issue appears to be due to advertising that happens to redirect to a service which uses that particular Akamai domain for the ads or a "doggy browser extension/software" (PUP related to anything below) doing the same.

BetterSurf
Covert File for Free
Define Ext 1
Download keeper 1.6, DDoowload keeper 1.6, DoWnlOad KeeEper 1.6, DownnlOadd KeepEr 1.6, DowLOAd keePer 1.6
DP1815
DMUninstaller
Feven 1.8
Fwd downloader
LyricsGet, LyricsBuddy-1
Media Player 1.1
MyShooper
PassShow
Plus-HD 1.3, HD-Plus 3.5
PPNGconvvErt, PNGconvert
SafeSaver
Savings Bull
ScorpionSaver
Video player
VisualBee
Voice Search
WatchItNoAds 2.7
Websteroids
WordOv


These are the most common solutions to eliminating the pop-up ads.

1. Go to Programs and Features (Add/Remove Programs) in Control Panel. From within Add/Remove Programs look for anything in the list above and select Remove.

2. Open your browser and disable (uncheck) all extensions. Make a list, then one by one, re-enable each extension to see if the pop-ups start appearing again with that particular extension. Once you identify the responsible extension...permanently remove it but let me know which one it was so I can update the above list.

3. The next step is to try clearing the cache and resetting your browser settings to default:

4. If the above did not resolve the problem, then create a new browser user profile.


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 Blinkstar

Blinkstar
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:08:42 PM

Posted 03 April 2015 - 12:22 PM

Thank you so much for your very thorough and detailed response, quietman!

 

I do not see any unsual pop up ads. I do see my connection slowing down considerably, webpages refusing to load--particularly google--and sometimes messages from Firefox saying "This connection is untrusted."

 

I did clear my cache but it didn't seem to make much if any difference.

 

The strange thing about the "fbstatic" address is that I never go to facebook. I don't have a facebook account. But as long as it isn't evidence of a virus I shall look for other possible causes for the issues I mentioned above.

 

Thanks again!



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,771 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:42 PM

Posted 03 April 2015 - 02:42 PM

Not a problem.

I will look around some more too and see if I can find any new information.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,771 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:42 PM

Posted 03 April 2015 - 03:44 PM

I just read a post where a user on Facebook installed Blur (formerly DoNotTrackMe} and that resolved the issue for them. You may want to check it out.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users