cybot Posted May 12, 2019 ID:1312360 Share Posted May 12, 2019 this address is for Steam Content servers I.E. Game updates. Steam said their was an update for one of my games, World of Goo. But MBAM blocked the download. I tried scanning the url with virustotal, and only one site said the site was malicious, FORTINET. a check with their website, confirmed that this IP address registered as being malicious. I don't know why they think so. In order to even get anything from the steam content servers, you need to meet the following requirements: have Steam installed on your PC/MAC.Linux system registered steam account purchase a license for the game from the steam store installed steam game on the end users system. Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/11/19 Protection Event Time: 4:47 PM Log File: 178b4f80-7447-11e9-8dc5-00d86104a727.json -Software Information- Version: 3.7.1.2839 Components Version: 1.0.586 Update Package Version: 1.0.10562 License: Premium -System Information- OS: Windows 10 (Build 17763.475) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , , Blocked, [-1], [-1],0.0.0 -Website Data- Category: Trojan Domain: steam.naeu.qtlglb.com IP Address: 157.185.160.14 Port: [64063] Type: Outbound File: E:\Program Files (x86)\steam\Steam.exe (end) Link to post Share on other sites More sharing options...
Staff Dashke Posted May 12, 2019 Staff ID:1312378 Share Posted May 12, 2019 (edited) The block was added because of this file - 157.185.160.14/down.7k7k.com/box/QKInstallPack_d02.exe?wsiphost=ipdb&wsrid_tag=5ccf358a_psmgzjgord1de87_21875-64487 VT results - https://www.virustotal.com/gui/file/9bef73352d7b2aa712a300535b88e259360327c123d6f13e59cfa436280534c7/detection Edited May 12, 2019 by Dashke Link to post Share on other sites More sharing options...
cybot Posted May 12, 2019 Author ID:1312454 Share Posted May 12, 2019 that.... that is not a steam address being used..... I don't know what that 7k7k.com is for, but I don't think it's from steam or the game that got blocked, World of Goo. Link to post Share on other sites More sharing options...
Staff Dashke Posted May 13, 2019 Staff ID:1312481 Share Posted May 13, 2019 It is quite possible that they share the same IP address. Are you still experiencing the issue? If yes, you can temporarily exclude this address in your MB. Link to post Share on other sites More sharing options...
BFeely Posted November 27, 2019 ID:1347571 Share Posted November 27, 2019 Just had a block appear on my own system as soon as I resumed downloads in my Steam client. Perhaps if the domain is still providing malware you could get in touch with Valve so they can perhaps reconsider their partnership with that site for content? Link to post Share on other sites More sharing options...
BFeely Posted November 27, 2019 ID:1347572 Share Posted November 27, 2019 By the way, it is coming up a different IP address, sometimes even an IPv6 address, when I flush my DNS. Not all the IP addresses that have resolved from the DNS name steam.naeu.qtlglb.com are being blocked. Link to post Share on other sites More sharing options...
Solution MysteryFCM Posted November 27, 2019 Solution ID:1347578 Share Posted November 27, 2019 Block is being removed. Link to post Share on other sites More sharing options...
Recommended Posts