Valheim Game on Steam being blocked again

[alanogden]

LAst night Valheim was updated on steam and now its being blocked again.

[Porthos]

3 hours ago, alanogden said:

LAst night Valheim was updated on steam and now its being blocked again.

While we wait for staff to review, I want to pass some info on to you, Staff will check the IP and if not bad anymore they will delist it.

It must be due to some server(s) the games are trying to connect to. Steam and many others use p2p connections to play online. As long as the games aren't at risk for connecting to malicious content (which they shouldn't be), you should be able to simply exclude the games' executables from Web Protection using the method described under the Allow an application to connect to the Internet section of this support article.

[JPopovic]

Hello,

Please provide a log or a screenshot showing the block.

Thank you!

[Crabule]

So I believe he is talking about the same thing I am but I have a bit more information. The game has blocks under Detection History, which only happened recently as of the newest Valheim update. The game was still playable but these blocks came up during the playtime.

I added a picture with everything malwarebytes gives me.

Both text files in the picture I included are for the information on both recurring blocks, so the details are under either text name     Compromised Text     or    Trojan Text   

If there's something else that could be helpful that I didn't add let me know.

[JPopovic]

Hello,

138.197.13.200 - This IP address appears to have been cleaned up and the block will be removed.

165.227.177.96 - legit block.

If the game is still playable, then just ignore this detection, or you can exclude the games' executables from Web Protection using the method described under the Allow an application to connect to the Internet section of this support article,as Porthos has already mentioned.

Thank you!

 

[alanogden]

Yes this is the same issue I was talking about. I will have to review my lloyd when I get back to my pc to check the ip addresses to see if that 2nd one is different than mine. Since this have can be run via private server the 2nd ip could be from the private server and it's it is not I have legit issues with steam how a game especially one this poplar have have an ip address that has a legit trojan block associated to it. Previously steams stance on virus protection flags was they were all false positives and to turn off your virus malware protection. To be honest I don't worry much about getting viruses because I practice very safe browsing. But other malware I do with about and why I have had premium malware bytes for quite awhile now. Thank you Crabule for those logs

[Crabule]

Glad to have been of help and I definitely want this looked into possibly further since a reddit post has different IP addresses coming up with riskware and trojan too.  Most of it could be false positives, but if like it was said before "165.227.177.96 - legit block."  then I'll be contacting the game studio to see  if it's worth looking into. Such a nice game to just sit down and relax.

 

4 hours ago, JPopovic said:

Hello,

138.197.13.200 - This IP address appears to have been cleaned up and the block will be removed.

165.227.177.96 - legit block.

If the game is still playable, then just ignore this detection, or you can exclude the games' executables from Web Protection using the method described under the Allow an application to connect to the Internet section of this support article,as Porthos has already mentioned.

Thank you!

 

Would it be possible to make this thread a combination of other questionable IPs that have to do with the Valheim game?

 

For instance, it seems two other IP I found through detection history from a reddit post and in another malwarebyte thread are

45.155.173.151 (Riskware) Port 2457     and     185.150.25.81 (Trojan)  Port 27001     These both are shown in the added picture and their dates seems to be before the recent patch on the 25th.

 

[Porthos]

9 hours ago, Crabule said:

The game has blocks under Detection History, which only happened recently as of the newest Valheim update. The game was still playable but these blocks came up during the playtime.

As for why Malwarebytes blocks Steam and other games, this is because Steam is Torrent based software, are what are known as Peer-to-Peer (P2P) applications meaning it connects to many different servers/IP addresses (this is how files are downloaded through Torrent based software) and because of this, sometimes Torrent based software will connect to a server that is also known for hosting malicious content.  This is because servers/IP addresses are often shared by multiple sites, so while what you are Playing/downloading through Torrent based software may be perfectly safe, some of the sites hosted on some of the IP addresses that Torrent based software connects to may be malicious.  Such connections are not a threat however, and you may exclude Torrent based software from the Web Protection component in Malwarebytes to stop the blocks from happening without compromising your protection (your web browser and other critical web facing programs will still be fully protected from malicious websites and other malicious content).  To do so, add the game exe to your exclusions using the method described under the Exclude an Application that Connects to the Internet section of this support article.