League of Legends Client (Garena) causing RTP Detection as Trojan?

[codomirry]

I've been getting these alerts from my Malwarebytes installation last sunday (07/03) and today (07/05) about an RTP detection event and it apparently detected something from one of my game files for League of Legends. This isn't coming from the Riot Client but it's coming from the Garena Client (for Southeast Asia).

Is this a false alert or is this something serious?

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 7/5/22
Protection Event Time: 6:14 AM
Log File: a4960eae-fbe6-11ec-9b28-3c7c3f4c2caa.json

-Software Information-
Version: 4.5.9.198
Components Version: 1.0.1699
Update Package Version: 1.0.56797
License: Premium

-System Information-
OS: Windows 10 (Build 19043.1766)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, D:\Garena\32774\LeagueClient\LeagueClientUxRender.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: Trojan
Domain: 
IP Address: 52.84.229.33
Port: 443
Type: Outbound
File: D:\Garena\32774\LeagueClient\LeagueClientUxRender.exe



(end)

 

[Porthos]

48 minutes ago, codomirry said:

Is this a false alert or is this something serious?

While we wait for staff to review, I want to pass some info on to you, Staff will check the IP and if not bad anymore they will delist it.

It must be due to some server(s) the games are trying to connect to. Steam and many others use p2p connections to play online. As long as the games aren't at risk for connecting to malicious content (which they shouldn't be), you should be able to simply exclude the games' executables from Web Protection using the method described under the Allow an application to connect to the Internet section of this support article.

[BjelakovicL]

Hi,

The IP block will be removed. Sorry for the inconvenience.