question

fractalis avatar image
2 Votes"
fractalis asked MariusIspas-3115 commented

Microsoft Edge - Bitdefender Blocking Suspicious Connection On Load

Recently my Bitdefender started reporting a Suspicious Connection being opened up whenever I load Microsoft Edge that is going out to https://extensionwebstorebase.edgesv.net. I've uninstalled all my extensions, but this connection still seems to be initiated. I've tried searching the registry for references to this URL, but can't seem to find any references to it. Has anyone encountered this? Is there any way to track down where this URL is being initiated from and change it or remove it? I've always tried repairing my Edge installation but that did not seem to help either.

Thanks in advance for the consideration and any help you might provide.

windows-10-generalms-edge
· 1
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MariusIspas-3115 avatar image MariusIspas-3115 ·

Same problem here. It started on the 11th of December (last year) and is still on. Unfortunately, it seems that Microsoft is not interested in updating its certificate.

0 Votes 0 ·

3 Answers

GerardKrupa-2527 avatar image
3 Votes"
GerardKrupa-2527 answered GerardKrupa-2527 edited

I'm seeing the same thing. Based on whois, it looks like the domain belongs to Microsoft but when you open it, you just get the following (it renders the HTML source because the Content-Type header is missing) with a 400 error code:

<h2>Our services aren't available right now</h2><p>We're working to restore all services as soon as possible. Please check back soon.</p>0X4+sYQAAAADnlA0ex70uRY51Z3H2czU1TE9OMjFFREdFMTAxNgBFZGdl

When I looked at the site certificate it did appear to be valid but the start date/time was about 2 minutes ago so it likely wasn't valid when the first connection was blocked or there's some clock skew that mean the validity period hadn't started as far as my desktop is concerned.

154969-2021-12-05-10-18-33-bitdefender-security-center.png



2021-12-05-10-18-33-bitdefender-security-center.png (39.1 KiB)
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CharlesMULLENDERS-3140 avatar image
0 Votes"
CharlesMULLENDERS-3140 answered

J'ai exactement les mêmes notifications critiques de Bitdefender depuis le Novembre 29 à 9:19 AM et ce plusieurs fois par jour.

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered

Hi there,

You would need an IP-to-country database to look up the origin of any websites. If you think the link is safe you can try to whitelist a site blocked by Bitdefender on your Windows computer.

Click Protection on the navigation menu on the Bitdefender interface.
In the Online Threat Prevention pane, click on Settings.
Click on Manage exceptions.
Click on + Add an Exception.

If I suggest you to submit a request to Microsoft to fix the incorrect blocking of the website.


--If the reply is helpful, please Upvote and Accept it as an answer--

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.