doc_101 Posted June 1, 2021 ID:1460866 Share Posted June 1, 2021 After playing left 4 dead 2, by chance I opened Malwarebytes and found multiple notifications (20 or more), which said: "Potential Threat Blocked. The following sites appear malicious:" 5/26/21 - 3:29 PM - Category: Malware Domain: N/A IP Address: 182.88.215.163 Port: 60000 Type: Outbound File: D:\SteamLibrary\steamapps\common\Left 4 Dead 2\left4dead2.exe 5/27/21 - 5:38 PM - Category: Trojan Domain: N/A IP Address: 27.41.203.137 Port: 4836 Type: Outbound File: D:\SteamLibrary\steamapps\common\Left 4 Dead 2\left4dead2.exe 5/29/21 - 7:15 PM - Category: Trojan Domain: N/A IP Address: 106.87.157.181 Port: 27024 Type: Outbound File: D:\SteamLibrary\steamapps\common\Left 4 Dead 2\left4dead2.exe It appears whether I am on the menu or on a game server. I don't understand why, I only play on official Valve servers and I don't download mods or skins from Workshop. I'm worried, can you tell me if it's a false positive? Thanks in advance. Link to post Share on other sites More sharing options...
Staff TeMerc Posted June 1, 2021 Staff ID:1460870 Share Posted June 1, 2021 16 minutes ago, doc_101 said: After playing left 4 dead 2, by chance I opened Malwarebytes and found multiple notifications (20 or more), which said: "Potential Threat Blocked. The following sites appear malicious:" 5/26/21 - 3:29 PM - Category: Malware Domain: N/A IP Address: 182.88.215.163 Port: 60000 Type: Outbound File: D:\SteamLibrary\steamapps\common\Left 4 Dead 2\left4dead2.exe 5/27/21 - 5:38 PM - Category: Trojan Domain: N/A IP Address: 27.41.203.137 Port: 4836 Type: Outbound File: D:\SteamLibrary\steamapps\common\Left 4 Dead 2\left4dead2.exe 5/29/21 - 7:15 PM - Category: Trojan Domain: N/A IP Address: 106.87.157.181 Port: 27024 Type: Outbound File: D:\SteamLibrary\steamapps\common\Left 4 Dead 2\left4dead2.exe It appears whether I am on the menu or on a game server. I don't understand why, I only play on official Valve servers and I don't download mods or skins from Workshop. I'm worried, can you tell me if it's a false positive? Thanks in advance. Hi- that range is malicious with Mozi malware: VirusTotal Link to post Share on other sites More sharing options...
doc_101 Posted June 1, 2021 Author ID:1460881 Share Posted June 1, 2021 32 minutes ago, TeMerc said: Hi- that range is malicious with Mozi malware: VirusTotal Hello, thanks for answering, that's very strange... I only play in Official servers (Valve "Dedicated" Servers) in game. I run multiple scans in my PC and I didn't find anything, I reinstalled the game and the notifications keeps appearing. I'm worried because I don't know what to do... What should I do now? Any help is appreciated Link to post Share on other sites More sharing options...
Porthos Posted June 2, 2021 ID:1461072 Share Posted June 2, 2021 You have 2 choices. Add the game to play mode. Or, As for why Malwarebytes blocks Steam and other games, this is because Steam is Torrent based software, are what are known as Peer-to-Peer (P2P) applications meaning it connects to many different servers/IP addresses (this is how files are downloaded through Torrent based software) and because of this, sometimes Torrent based software will connect to a server that is also known for hosting malicious content. This is because servers/IP addresses are often shared by multiple sites, so while what you are Playing/downloading through Torrent based software may be perfectly safe, some of the sites hosted on some of the IP addresses that Torrent based software connects to may be malicious. Such connections are not a threat however, and you may exclude Torrent based software from the Web Protection component in Malwarebytes to stop the blocks from happening without compromising your protection (your web browser and other critical web facing programs will still be fully protected from malicious websites and other malicious content). To do so, add the game exe to your exclusions using the method described under the Exclude an Application that Connects to the Internet section of this support article. 1 Link to post Share on other sites More sharing options...
doc_101 Posted June 2, 2021 Author ID:1461075 Share Posted June 2, 2021 5 minutes ago, Porthos said: You have 2 choices. Add the game to play mode. Or, As for why Malwarebytes blocks Steam and other games, this is because Steam is Torrent based software, are what are known as Peer-to-Peer (P2P) applications meaning it connects to many different servers/IP addresses (this is how files are downloaded through Torrent based software) and because of this, sometimes Torrent based software will connect to a server that is also known for hosting malicious content. This is because servers/IP addresses are often shared by multiple sites, so while what you are Playing/downloading through Torrent based software may be perfectly safe, some of the sites hosted on some of the IP addresses that Torrent based software connects to may be malicious. Such connections are not a threat however, and you may exclude Torrent based software from the Web Protection component in Malwarebytes to stop the blocks from happening without compromising your protection (your web browser and other critical web facing programs will still be fully protected from malicious websites and other malicious content). To do so, add the game exe to your exclusions using the method described under the Exclude an Application that Connects to the Internet section of this support article. Thanks for the info Porthos, if I have any other problem, I'll writing. Again, thanks!! 1 Link to post Share on other sites More sharing options...
Recommended Posts