Odd HL2.exe Inbound Firewall

kYuKi

Poster Extraordinaire
=(e)=
Joined
May 2, 2010
Messages
2,354
2h38xte.jpg



Any ideas?

Explain to me why Steam is trying and connect to the internet without any of your services running in the background/online.
Better wording for that. Also, its HL2.EXE, not Steam itself. The most major port destination is 27005, but I am seeing it random from 49164 to 62442 and in between.
 
Last edited:
Extremely strange. Please keep us updated on this ticket/story.
 
99.36.242 is generally the start of an IP for most AT&T services (From what I could find.). Whats the dudes ISP? I would consult his ISP before consulting valve.

An even better question, Is this your issue or are you just looking for information on it?
 
99.36.242 is generally the start of an IP for most AT&T services (From what I could find.). Whats the dudes ISP? I would consult his ISP before consulting valve.

An even better question, Is this your issue or are you just looking for information on it?

Looking for information on it. Valve shouldn't be trying to connect to me when the client is offline, especially if its a game exe.

It's been almost two weeks and no reply.
 
Every time you load TF2 or any other game and every time you disconnect from TF2 or any other game, you will be probbed on the port 27005 with that IP coming from the service HL2.exe(For Source only) or Steam.exe. It's checking your backpack, or cards, or game time, or way way more. Were there updates? Did you spend something? Did you get new items in your backpack? Steam does a LOT in the background, even when you're not playing video games.

If something malicious was trying to gain access to your PC that bad, they could overload your Commando firewall with specialized techniques and gain access. I don't think you're the target of anything malicious at this time.

Ports from 1024 to 49151 are registered ports, they are used by vendors. (Think Steam, Microsoft, Apple, etc) Any ports from 49151 and beyond are private/dynamic ports. That means that any program can run a service on the ports whenever it chooses.

If you REALLY wanna know what service is running on these ports, your firewall should be able to tell you.

p.s. Steam doesn't sneak around, make sure you read Steam's Terms of Service and if you sincerely think Steam is trying to breach your privacy, uninstall Steam and all Steam related products and never play on Steam again.
 
Last edited:
Every time you load TF2 or any other game and every time you disconnect from TF2 or any other game, you will be probbed on the port 27005 with that IP coming from the service HL2.exe(For Source only) It's checking your backpack, or cards, or game time, or way way more. Were there updates? Did you spend something? Did you get new items in your backpack? Steam does a LOT in the background, even when you're not playing video games.

If something malicious was trying to gain access to your PC that bad, they could overload your Commando firewall with specialized techniques and gain access. I don't think you're the target of anything malicious at this time.

Ports from 1024 to 49151 are registered ports, they are used by vendors. (Think Steam, Microsoft, Apple, etc) Any ports from 49151 and beyond are private/dynamic ports. That means that any program can run a service on the ports whenever it chooses.

If you REALLY wanna know what service is running on these ports, your firewall should be able to tell you.

p.s. Steam doesn't sneak around, make sure you read Steam's Terms of Service and if you sincerely think Steam is trying to breach your privacy, uninstall Steam and all Steam related products and never play on Steam again.

Good informative post RIC, but still. TF2/HL2.exe shouldn't be connecting to me when I've been disconnected from Steam Services. Not only has this happened to TF2, but Gmod as well.

At that current time I don't believe there were updates or any new items I haven't checked out before.

With that being said, I lowered some settings to see if it triggers it, but so far nothing. Thing is, I've allowed the EXE and Steam services through the firewall. It's just odd that I was getting popups from many different IP's and ports.
 
Last edited by a moderator:
Yeah, I hear you.

Hopefully someone from Steam will be able to give you an official response soon.
 
Back
Top