False positive

[bmxmenma]

Hi,

I recently played rust on a custom server and got a notification from Malwarebytes flagging it as a Trojan and blocking it. Is this a false positive, or an actual issue?

The website data that was flagged is here:

-Website Data-
Category: Trojan
Domain: 
IP Address: 82.209.17.209
Port: 28015
Type: Outbound
File: D:\SteamLibrary\steamapps\common\Rust\RustClient.exe

appreciate the help thanks.

[Porthos]

While we wait for staff to review, I want to pass some info on to you, Staff will check the IP and if not bad anymore they will delist it.

It must be due to some server(s) the games are trying to connect to. Steam and many others use p2p connections to play online. As long as the games aren't at risk for connecting to malicious content (which they shouldn't be), you should be able to simply exclude the games' executables from Web Protection using the method described under the Allow an application to connect to the Internet section of this support article.

 

[thisisu]

Hello,

It looks like IP is involved with malware traffic so we will keep it blocked for now and I recommend allowing MBAM to continue blocking the IP.

Details: https://www.joesandbox.com/analysis/414367/0/html

Regards

[bmxmenma]

Ok il keep MBAM. thanks a lot for the help.

[thisisu]

No problem