Blocked site 35.232.219.224

[wirrel]

Hello!

I have a player reporting MalwareBytes is blocking our game from running as it thinks it’s a Trojan because it loads in-game news from the game’s website.  The report I was given is as follows:

-Blocked Website Details-
Malicious Website: 1
, D:\Steam\steamapps\common\SynthRiders\SynthRiders.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: Trojan
Domain: http://synthridersvr.com
IP Address: 35.232.219.224
Port: 443
Type: Outbound
File: D:\Steam\steamapps\common\SynthRiders\SynthRiders.exe

[JPopovic]

Hello,

This IP address is not blocked, but we do block the domain (synthridersvr.com).

The domain is blocked due to this js file:

 http://synthridersvr.com/wp-includes/js/jquery/ui/core.min.js 

 

VirusTotal file detection:

https://www.virustotal.com/gui/file/4b7492aa1621a2a1c936c08e163604cefe7edfaa6c8c989b08acaa3bc724ec7b/detection

 

This file should be removed in order for the domain to be unblocked.

Thank you for your understanding!

 

 

[wirrel]

Thank you for being so clear on that - it was really very helpful! The WP provider has cleaned that infection up, so that file is fixed and has a new checksum.

Is there somewhere I should go to have it rechecked?

[wirrel]

I have logged a rescan request with scumware.org, but everything else shows clean: https://www.virustotal.com/gui/url/8d7d6b490a729b9b8ce10c87c161a65c2bc5661d511cb70d5fa41506451f826a/detection

[JPopovic]

The block will be removed.

Thank you! :)

[wirrel]

Thank you so much!