2

I'm from Vietnam and started to play League of Legends which I have downloaded from the official site here for the Vietnamese version.

Viruses were detected when I ran a virus-scan on the files via virustotal.com.

So my question is, should I run the game when the virus-scan reports viruses?

  1. FileLoader.dll
  2. launcher.maestro.dll
  3. CRiotLauncherElevateCOM.dll
  4. LolClient.exe
  5. LolClient.swf

The same virus results apply for the English version of LoL - results available here.

  • 13
    I don't normally use websites to search for viruses, as they can be untrustworthy, I recommend downloading a program like Malwarebytes Anti-Malware to search for viruses/.PUPs – TrapHappy Oct 22 '15 at 14:39
  • 5
    Maybe not, but I would still trust an antivirus program better than a website, maybe it's just me – TrapHappy Oct 22 '15 at 14:52
  • @TrapHappy Wikipedia is saying fine things about it. I'd still use a standalone antivirus program, like Norton, or the likes. – Ethan Bierlein Oct 22 '15 at 15:22
  • 1
    I second Malwarebytes Anti-Malware. It's very good software and free to boot, I've recovered several machines using it. – Lucas Leblanc Oct 22 '15 at 19:18
  • 1
    Guys! Chillax; virustotal is a service where you upload file, or checksum of the file; and then virustotal checks this file/checksum against 30-40 virus databases from vendors like ESET, AVG... etcetera. So there is no harm what so ever (only UPLOAD). I myself use virustotal to make sure when I download any kind of file from not known source; I don't own any other anti-virus program; and have no issues since 2008 (win xp pro) or 2010 (laptop - win 7 pro). I personally trust vendors like Kaspersky, ESET, AVG if all 3 are green then file should be fine. – Kyslik Nov 9 '15 at 15:11
15

The files are only pinging as bad on one or two anti-virus programs and not on any of the more reputable ones. Anti-virus software isn't perfect and false positives happen.

It is far more likely that one anti-virus program is wrong about it being a virus than it is that almost all of them are. The files are probably safe.

  • This is a great answer, and I should point out that in some cases sites like VirusTotal will not be correct. I will post a link to an article that goes over some of the information, but AV companies will mark files as malicious (due to false-positives or bad practices). arstechnica.com/security/2015/08/… – dakre18 Oct 22 '15 at 15:27
  • 1
    "It is far more likely that one anti-virus program is wrong about it being a virus than it is that almost all of them are." This statement is true. – Marcks Thomas Oct 22 '15 at 16:33
  • 1
    @BlueRaja-DannyPflughoeft Just like Marcks said, i would agree with that statement rather than to say it's 100% false. I would reword that to say it's not always true, otherwise your sentence sounds more like you are saying AV companies are never wrong. Think of it this way, he is saying the probability of 1 AV being wrong is much greater than 20 different AV programs being wrong. That implies 1 AV can have a false-positive and 19 other AV programs say the file is safe. – dakre18 Oct 22 '15 at 21:44
4

As most of the antiviruses did not find anything harmful in the files, I would say, the remaining one may be a false alarm. I do not trust those antiviruses either. I would say since you downloaded the game from the official site and those alarm raising antiviruses are not really trustworthy(IMO), feel free to play your game.

3

To me, this sounds like a wrong alert. Or you downloaded something from the wrong source. Just for safety, I'd delete the game completely and redownload it from the OFFICIAL website. Riot wouldn't place any viruses in their games themselves, but maybe you tried to download a hack or something. These are usually viruses.

Note: Even if you delete it, if there was a virus, just deleting the game probably won't solve it.

3

I'm answering the question :

So my question is, should I run the game when the virus-scan reports viruses?

If you're sure that your machine is infected, there are two possibilities :

  1. Your machine infected before you login to LoL : You shouldn't login any of your game/online accounts, the malware can be a Keylogger .
  2. Your machine infected after you login to LoL : The malware can listen your connection and send the connection information to the attacker. You may trust LoL itself, because in login phase your LoL username/password is possibly going over encrypted connection. And after login, periodic 'login check' mechanism will check you through an encrypted connection. But still encrypted packets may be stripped. But this gets harder as your password gets stronger.

If you trust LoL you should keep your password strong.

And this is kinda old(2012), but worth to look at. LoL's security announcement .

  • Well, I scan the file right after I donwload the client i.e. before I execute anything. – Nam G VU Oct 22 '15 at 14:45
  • I think the trojan/virus results are false-positive as others' said. These are safe files. – TheSoulkiller Oct 22 '15 at 15:02
0

I think you downloaded from the wrong place.

Based on information from this thread. The official downloads are actually here.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.