FS Ultralight AV flags steam server status as malicious url

Aspirant

FS Ultralight AV flags steam server status as malicious url

I have noticed that Ultralight AV flagged steam as a malicious url when I start it. This is only to check the steam server status so I had to tag it as safe or else steam would generate errors.
Has anyone noticed that? I have to make steam a safe app in order to run it. Just curious.

1 ACCEPTED SOLUTION

Accepted Solutions
F-Secure

Re: FS Ultralight AV flags steam server status as malicious url

We found the problem - an IP address had been incorrectly classified. The issue should be fixed now!

View solution in original post

7 REPLIES 7
Highlighted
Supporter

Re: FS Ultralight AV flags steam server status as malicious url

As far as I remeber I didn't have problems around steam, but I noticed that playing through steam, one of ULAV processes consumed the considerable part of the processor (probably fshoster64.exe, but I don't certainly know because I came back to FS protection)

Superuser

Re: FS Ultralight AV flags steam server status as malicious url

Hello,

 

Potentially.. there should be one desing around "malicious"-ratings and URLs.

So, if F-Secure ULAV marked it as "malicious". Another solutions - FS Protection or F-Secure IS should to have same decision about URL.

But with F-Secure ULAV "background-blocking" more visible as notification-prompt. With FS Protection it's can be not visible but "blocked" in fact. Such as.... blocked connection, but notification can be just as "blocked-page" - which missing there by connection-source.

 

I not really friendly with Steam, but with my experience about F-Secure ULAV and Steam-application probably not about your experience. Such as - without any prompts about malicious URLs (as Steam-server URLs). But maybe you able to create some of "steps", which can be as repeat-instruction for reproduce situation?!  Maybe I just have experience about another steps of use.

 

Or maybe your situation with something else around.

 

Sorry for my reply.

Aspirant

Re: FS Ultralight AV flags steam server status as malicious url

I haven't checked the status of ofhost but I will, thanks!

Aspirant

Re: FS Ultralight AV flags steam server status as malicious url

I don't understand what you mean by steps. If I remove steam from a safe app, it will immediately be triggered by ULAV as soon as I start steam.
F-Secure

Re: FS Ultralight AV flags steam server status as malicious url

Thanks for alerting us to this. We had a similar false positive a few weeks ago. I'll have our folks look into the problem.

 

The same exact mechanisms are used fto check URL reputation in all of our products, so if this is a real issue, it should also affect FSProtection.

F-Secure

Re: FS Ultralight AV flags steam server status as malicious url

We found the problem - an IP address had been incorrectly classified. The issue should be fixed now!

View solution in original post

Scholar

Re: FS Ultralight AV flags steam server status as malicious url

Hi there

 

just to let you know that FS Ultralight is again blocking steam server status websites. I've sent the 3 url to FS sample analysys as false positive.

have a nice day

p