Jump to content

Recommended Posts

this address is for Steam Content servers I.E. Game updates. Steam said their was an update for one of my games, World of Goo. But MBAM blocked the download.

 

I tried scanning the url with virustotal, and only one site said the site was malicious, FORTINET. a check with their website, confirmed that this IP address registered as being malicious. I don't know why they think so. In order to even get anything from the steam content servers, you need to meet the following requirements:

  • have Steam installed on your PC/MAC.Linux system
  • registered steam account
  • purchase a license for the game from the steam store
  • installed steam
  • game on the end users system.

 

 

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 5/11/19
Protection Event Time: 4:47 PM
Log File: 178b4f80-7447-11e9-8dc5-00d86104a727.json

-Software Information-
Version: 3.7.1.2839
Components Version: 1.0.586
Update Package Version: 1.0.10562
License: Premium

-System Information-
OS: Windows 10 (Build 17763.475)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: Trojan
Domain: steam.naeu.qtlglb.com
IP Address: 157.185.160.14
Port: [64063]
Type: Outbound
File: E:\Program Files (x86)\steam\Steam.exe

 

(end)

Share this post


Link to post
Share on other sites

that.... that is not a steam address being used..... I don't know what that 7k7k.com is for, but I don't think it's from steam or the game that got blocked, World of Goo.

Share this post


Link to post
Share on other sites

It is quite possible that they share the same IP address. Are you still experiencing the issue? If yes, you can temporarily exclude this address in your MB.

Share this post


Link to post
Share on other sites

Just had a block appear on my own system as soon as I resumed downloads in my Steam client.  Perhaps if the domain is still providing malware you could get in touch with Valve so they can perhaps reconsider their partnership with that site for content?

Share this post


Link to post
Share on other sites

By the way, it is coming up a different IP address, sometimes even an IPv6 address, when I flush my DNS.  Not all the IP addresses that have resolved from the DNS name steam.naeu.qtlglb.com are being blocked.

Share this post


Link to post
Share on other sites

Block is being removed.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.