Jump to content

MalwareBytes blocking ShellShock Live (Steam Edition)

Recommended Posts

For some reason, MalwareBytes is blocking ShellShock Live (The version on Steam) from connecting to the servers (via YGN, Yahoo Gaming Network), this wasn't an issue for me until recently, I'm placing the blame on a recent Windows 10 update, but it's an annoying issue, not only that but another Steam user has this exact same issue (Reference: Steam discussion comment). My only solutions ATM to this issue is either A) Disable the Web Protection Module or B) Run my connection through NordVPN

Option B allows me to keep the Web Protection Module active.

Edited by WildCard65
Submitted early
Link to post
Share on other sites

  • Staff

***This is an automated reply***


Thanks for posting in the Malwarebytes 3 Help forum.


If you are having technical issues with our Windows product, please do the following: 


If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

  • Download Malwarebytes Support Tool
  • Once the file is downloaded, open your Downloads folder/location of the downloaded file
  • Double-click mb-support-X.X.X.XXXX.exe to run the program
    • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
  • Place a checkmark next to Accept License Agreement and click Next
  • You will be presented with a page stating, "Welcome to the Malwarebytes Support Tool!"
  • Click the Advanced Options link
    welcome mbst.png
  • Click the Gather Logs button
  • A progress bar will appear and the program will proceed to gather troubleshooting information from your computer
  • Upon completion, click OK
  • A file named mbst-grab-results.zip will be saved to your Desktop
  • Please attach the file in your next reply. Before submitting your reply, be sure to enable "Notify me of replies" like so:
     notify me.jpeg  

    Click "Reveal Hidden Contents" below for details on how to attach a file:

    To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.


One of our experts will be able to assist you shortly.


If you are having licensing issues, please do the following: 


For any of these issues:

  • Renewals
  • Refunds (including double billing)
  • Cancellations
  • Update Billing Info
  • Multiple Transactions
  • Consumer Purchases
  • Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help

If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 


Thanks in advance for your patience.

-The Malwarebytes Forum Team

Link to post
Share on other sites


First, to report this as a false positive please read the information in this topic as well as this topic then create a new thread in the Web False Positive area by clicking here and one of the Malwarebytes Research team members will check to see if this is a false positive and let you know as well as correct it by whitelisting the site if it is.

Next, in the meantime while you're awaiting a response from them you can exclude the game's executable so that it is able to connect to the servers.  To do this, please follow the instructions in this support article in the section where it says Exclude an Application that Connects to the Internet and browse to the location of the process that is being blocked when this occurs.  This will allow any connections to/from that process to any servers in Malwarebytes' block list however all other processes will still be protected by Web Protection so it's a better option than disabling Web Protection altogether.  If this does turn out to be an FP you can delete this exclusion once the Research team gets the issue corrected and the new database is published.

Link to post
Share on other sites

Right, but if Web Protection is blocking it I assume it's blocking specific IP addresses, correct?  Those might be false positives that the Research team can fix/remove from the database.

And in the meantime you can exclude the application itself from Web Protection so that it is allowed to connect without being blocked.

Link to post
Share on other sites

OK, thanks.  It could be a similar issue as the one reported here.

@dcollins would you mind taking a look?

If you would provide the following logs it could help with diagnosing the issue:

  1. Download and run the Malwarebytes Support Tool
  2. Accept the EULA and click Advanced Options on the main page (not Get Started)
  3. Click the Gather Logs button, and once it completes, attach the zip file it creates on your desktop to your next reply


Link to post
Share on other sites

Did you activate the Collect enhanced event log data for support (not recommended) option under the Event Log Data section in Settings>Application in the Malwarebytes UI by any chance?  The reason I ask is because I see a lot of debug entries in your log which I don't believe is normal.  If you turned it on for diagnostic purposes that's fine, just be sure you disable it again otherwise your logs will likely get really large really fast as it's not a setting that's meant to be enabled all the time.

Link to post
Share on other sites

Thanks. This is an issue with Web Protection we're currently tracking down. Currently the best workaround is to disable Web Protection when playing the game.

Does this issue happen everytime you play the game, or just sometimes? I can try to reproduce here so we can test and confirm any fixes we make work.

Link to post
Share on other sites

  • 3 weeks later...

This issue should be fixed in our beta that was just released. You can download the beta by going to Settings -> Applications and toggling on the beta option. After a little while, you should get the beta version which is Component Package 1.0.390 and this should hopefully resolve the issue. Please let us know.

If you don't want to try the beta, the full release should be out soon based on feedback from beta users.


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.