What is scinstallcheck.mcafee.com

[ffigueroag]

Hello,

Anyone know if this scinstallcheck.mcafee.com is a real service of McAfee?

Our vulnerability scanner detect like backdoor in a asset.

-----------

XXXX found the following suspicious entry in the Windows hosts file,
C:\WINDOWS\system32\drivers\etc\hosts :

0.0.0.1 scinstallcheck.mcafee.com

Solution

Remove the suspicious entries from the host file, update your antivirus software, and remove any malicious software.

--------------

[cdinet]

I know of no such url, but the sc part of it might refer to solidcore.  Let me move this to them to see if they are aware of anything like that.

[ffigueroag]

Good cdnet, I will wait for you

[ktankink]

Hi @ffigueroag That FQDN value appears to be related to the McAfee Consumer product SafeConnect.  Please reach out to McAfee Consumer Support if further details are needed.  https://www.mcafee.com/support/

Ref https://forums.mcafee.com/t5/PC-Optimization/Host-File-Identified-To-Be-Corrupt/td-p/670508

[ffigueroag]

Hi ktankink,

I understand, but why I see that on my system if we have enterprise solutions McAfee ePO + ENS

[cdinet · Accepted solution]

Have you installed or upgraded adobe reader?  If you look at this site, that installs safe connect as an add-on by default.  You would need to deselect that to not install it.

https://get.adobe.com/reader/