# GoW + Malware bytes = malicious website detected

**URL:** https://community.gemsofwar.com/t/gow-malware-bytes-malicious-website-detected/19557
**Category:** Support
**Created:** [February 5, 2017, 11:09am UTC](https://community.gemsofwar.com/t/gow-malware-bytes-malicious-website-detected/19557 "2017-02-05T11:09:48Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![Mad\_Butch](https://sea1.discourse-cdn.com/flex019/user_avatar/community.gemsofwar.com/mad_butch/32/22903_2.png) [@Mad\_Butch](https://community.gemsofwar.com/u/Mad_Butch)
#### Post date: [February 5, 2017, 11:09am UTC](https://community.gemsofwar.com/t/gow-malware-bytes-malicious-website-detected/19557/1 "2017-02-05T11:09:49Z")

</div>

The game was running fine, then at the end of a battle (after playing for a few hours) I get a malware bytes anti malware popup saying: malicious website detected.

The game doesn’t even boot up anymore now:

 ![](https://us1.discourse-cdn.com/flex019/uploads/gemsofwar/original/3X/4/7/477a4b28e462a2aae8b7a6287e31060471d661d6.jpg)

And from the log of malware bytes anti malware:  
Detection, 05-Feb-17 11:59, SYSTEM, MYNAME, Protection, Malicious Website Protection, Domain, 34.193.166.194, [gemsofwar.us-east-1.elasticbeanstalk.com](http://gemsofwar.us-east-1.elasticbeanstalk.com), 1587, Outbound, D:\Games\SteamGames\steamapps\common\Gems of War\GemsOfWar.exe,

What happened?

PS. I can whitelist [gemsofwar.us-east-1.elasticbeanstalk.com](http://gemsofwar.us-east-1.elasticbeanstalk.com) in malware bytes anti malware, and play the game. But it seems very fishy to me that the website is suddenly blocked by malware bytes.

---

<div class="post-metadata">

### Author: ![Akashic](https://sea1.discourse-cdn.com/flex019/user_avatar/community.gemsofwar.com/akashic/32/21009_2.png) [@Akashic](https://community.gemsofwar.com/u/Akashic)
#### Post date: [February 5, 2017, 4:09pm UTC](https://community.gemsofwar.com/t/gow-malware-bytes-malicious-website-detected/19557/2 "2017-02-05T16:09:29Z")

</div>

I’m having the exact same problem. Stuck on the logging in screen. I shut off malware-bytes and I can get in just fine.

---

<div class="post-metadata">

### Author: ![Mad\_Butch](https://sea1.discourse-cdn.com/flex019/user_avatar/community.gemsofwar.com/mad_butch/32/22903_2.png) [@Mad\_Butch](https://community.gemsofwar.com/u/Mad_Butch)
#### Post date: [February 6, 2017, 7:21am UTC](https://community.gemsofwar.com/t/gow-malware-bytes-malicious-website-detected/19557/3 "2017-02-06T07:21:23Z")

</div>

And today the exact same thing happened to my wife, on her PC.

For now, the workaround is:  
In malware bytes, click settings, web exclusions, add domain, copy and paste “[gemsofwar.us-east-1.elasticbeanstalk.com](http://gemsofwar.us-east-1.elasticbeanstalk.com)” (without the quotes) and click ok.

---

<div class="post-metadata">

### Author: ![Akashic](https://sea1.discourse-cdn.com/flex019/user_avatar/community.gemsofwar.com/akashic/32/21009_2.png) [@Akashic](https://community.gemsofwar.com/u/Akashic)
#### Post date: [February 6, 2017, 12:37pm UTC](https://community.gemsofwar.com/t/gow-malware-bytes-malicious-website-detected/19557/4 "2017-02-06T12:37:21Z")

</div>

Thank you for the response. I added the domain you noted below and restarted. The game is still hanging on the Login bar.

Any other suggestions?

Thanks,

Akashic

---

<div class="post-metadata">

### Author: ![Haladini](https://sea1.discourse-cdn.com/flex019/user_avatar/community.gemsofwar.com/haladini/32/3794_2.png) [@Haladini](https://community.gemsofwar.com/u/Haladini)
#### Post date: [February 6, 2017, 2:23pm UTC](https://community.gemsofwar.com/t/gow-malware-bytes-malicious-website-detected/19557/5 "2017-02-06T14:23:39Z")

</div>

> [@Akashic](#):
>
> Thank you for the response. I added the domain you noted below and restarted. The game is still hanging on the Login bar.
> 
> Any other suggestions?
> 
> Thanks,
> 
> Akashic

try Settings \> Exclusions \> Add Exclusion \> Exclude an Application that connects to the Internet  
select GemsOfWar.exe (mine is located in C:\Program Files (x86)\Steam\steamapps\common\Gems of War)

---

<div class="post-metadata">

### Author: ![27sonia27](https://sea1.discourse-cdn.com/flex019/user_avatar/community.gemsofwar.com/27sonia27/32/18674_2.png) [@27sonia27](https://community.gemsofwar.com/u/27sonia27)
#### Post date: [February 6, 2017, 3:39pm UTC](https://community.gemsofwar.com/t/gow-malware-bytes-malicious-website-detected/19557/6 "2017-02-06T15:39:43Z")

</div>

You have to add IP adress.

 ![](https://us1.discourse-cdn.com/flex019/uploads/gemsofwar/original/3X/e/2/e2f1891c103cdf05fd40aca64d5fe474c9312630.jpg)

---

<div class="post-metadata">

### Author: ![binary.glitch](https://avatars.discourse-cdn.com/v4/letter/b/65b543/32.png) [@binary.glitch](https://community.gemsofwar.com/u/binary.glitch)
#### Post date: [February 7, 2017, 10:32pm UTC](https://community.gemsofwar.com/t/gow-malware-bytes-malicious-website-detected/19557/7 "2017-02-07T22:32:48Z")

</div>

> [@If Malwarebytes Anti-Malware is stopping you from loading the game, I have the solution](http://community.gemsofwar.com/t/if-malwarebytes-anti-malware-is-stopping-you-from-loading-the-game-i-have-the-solution/19756):
>
> If Malwarebytes Anti-Malware is stopping you from loading the game, I have the solution. Solution for Malwarebytes Anti-Malware 2.2.1: Open the Malwarebytes Anti-Malware application, and click on the ‘History’ tab at the top, now select the ‘Applications Log’ tab on the left hand side, now select the ‘Protection Log’ (NOT ‘Scan Log’) entry that has the date you started getting blocked in the title of the log file, now scroll down until you see gemsofwar (Gems of War with no spaces and no c…

---

<div class="post-metadata">

### Author: ![Mad\_Butch](https://sea1.discourse-cdn.com/flex019/user_avatar/community.gemsofwar.com/mad_butch/32/22903_2.png) [@Mad\_Butch](https://community.gemsofwar.com/u/Mad_Butch)
#### Post date: [February 8, 2017, 6:36am UTC](https://community.gemsofwar.com/t/gow-malware-bytes-malicious-website-detected/19557/8 "2017-02-08T06:36:55Z")

</div>

> [@Haladini](#):
>
> > [@Akashic](#):
> >
> > Thank you for the response. I added the domain you noted below and restarted. The game is still hanging on the Login bar.
> > 
> > Any other suggestions?
> > 
> > Thanks,
> > 
> > Akashic
> 
> try Settings \> Exclusions \> Add Exclusion \> Exclude an Application that connects to the Internet  
> select GemsOfWar.exe (mine is located in C:\Program Files (x86)\Steam\steamapps\common\Gems of War)

This didn’t work for me, oddly enough…  
It would be better, as the link has already changed once for my wife (different server).

---

<div class="post-metadata">

### Author: ![KAYA43V3R](https://sea1.discourse-cdn.com/flex019/user_avatar/community.gemsofwar.com/kaya43v3r/32/312_2.png) [@KAYA43V3R](https://community.gemsofwar.com/u/KAYA43V3R)
#### Post date: [February 8, 2017, 7:25am UTC](https://community.gemsofwar.com/t/gow-malware-bytes-malicious-website-detected/19557/9 "2017-02-08T07:25:34Z")

</div>

Do you try to kill the malwarebytes process, before launch the game…  
or try @27sonia27 solution but we have probably not the same ip

Check with a software like TCPView or wireshark, ip when you launch the game:  
 ![](https://us1.discourse-cdn.com/flex019/uploads/gemsofwar/original/3X/a/3/a372e63380110550031eaeed3385ad6b0eba9adf.PNG)  
for my parts when i launch the game, firstly it connect to the 23.20.124.89 (loggin server i think) then go to the server 208.66.193.86

so if i use malwarebytes premium i must add IP:23.20.124.89 (not the same as sonia)
