False Positive? IP: 61.170.80.230

[MaikCarvalho]

When I clicked to access the Lost Castle game page that was added to my Steam wish list, it was identified as a trojan. File: C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

FalsePositive-steamwebhelper.zip Malwarebytes Website Blocked Report 2024-09-10 152819.txt

[TeMerc]

27 minutes ago, MaikCarvalho said:

When I clicked to access the Lost Castle game page that was added to my Steam wish list, it was identified as a trojan. File: C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

FalsePositive-steamwebhelper.zip 2.78 MB · 0 downloads Malwarebytes Website Blocked Report 2024-09-10 152819.txt 836 B · 0 downloads

Hi- Small sampling of detected urls and downloaded files, not an FP: VirusTotal - IP address - 61.170.80.230

[Sard]

On 9/10/2024 at 3:14 PM, MaikCarvalho said:

When I clicked to access the Lost Castle game page that was added to my Steam wish list, it was identified as a trojan. File: C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

I just had a similar thing happen; Malwarebytes blocked an outbound connection to 61.170.80.230 from C:\Program Files\Mozilla Firefox\firefox.exe, citing it as a Trojan, shortly after I opened the Steam store page for another unrelated game. I've accessed dozens of other Steam store pages without incident lately, and a scan revealed no malware detections. Repeatedly opening the offending page didn't cause any further alerts either.