[Client] Game won't start due to antivirus picking up 'TR/Crypt.XPACK.Gen' pattern on the game .exe

Joker Slayer52··11 votes·16,386 views
https://imgur.com/DN7KsbZ

Server: NA

Type of Bug: Client bug

Description: After all champions have been locked in champion select and the game is about to begin, my antivirus (Avira) alerts me that access to the main game's .exe has been blocked due to it containing the pattern 'TR/Crypt.XPACK.Gen' so I can't get in the game. It won't let me reconnect. Also, after it scans the now quarantined file and marks it as clean and I restore it, when I try to reconnect the same alert pops up and the quarantine process begins again.

Video / Screenshot: https://imgur.com/DN7KsbZ Steps to reproduce: Have Avira antivirus. Wait until everyone has locked in their champion and wait for the game to begin.

Expected result: Game should start normally as it did before this patch.

Observed result: Game won't start. Antivirus alert will pop up. Reconnect button won't work.

Reproduction rate: 100%

System specs: Windows 10

35 Comments

RiotRiot Bugcheck11 votes

Hey there,

This is a false positive. We're contacting Avira and attempting to get it whitelisted on their end.

Malphas Marx2 votes

please do, this stuff tend to get me rattled and angry. Wait, why does it say "TR" then?

DrCyanide2 votes

https://malwaretips.com/blogs/remove-trcrypt-xpack-gen/

TR/Crypt.XPACK.Gen is the generic description from Avira of unknown trojans which are detected by its heuristic engine.

Basically it's just what Avira calls whatever it's AI thinks is a TRojan.

Malphas Marx1 votes

fantastic...

DrCyanide3 votes

Their AI probably picked up Riot's changes to it's Anti-Cheat system and said "Wait a minute, since when does League of Legends check all this stuff?" and flagged it as a result.

SoooRad1 votes

I'm having the exact same problem. I was in a chat with Riot Support and they said this is likely because Riot uses a data injector for patching and Avira picked it up as a Trojan Horse (similar idea, but no malware injected by Riot). Just wanted to clarify for you what's going on.

But I feel the same way. I don't want to uninstall Avira because I've been playing for over 50 patch cycles and it has never had a problem until today's patch. Hoping they get it squared away within a few days...

I've submitted a false positive report to Avira about this and I hope everyone else does too.

Joker Slayer522 votes

Hey there. Thank you for the fast response. Hope this gets fixed soon. :) I want to play ARURF! D:

Grootto1 votes

Riot Bugcheck can you please fix it fast because im trying to grind and i love your content I hope you fix it <3 :D

imaqtpiefanboi2 votes

my avira also said that it was cleaned but it still didnt work, decentitem 3056

btw if i get leaver penalty im done

Asmodious4 votes

Can you at least remove leavebuster and gave back my loose on my game?

On my point of view that riot fault to not check antivirus like avira before implement a cheatcheck on client computer. Its obviously would be reconize as trojan by antivirus. You should have been sure of beem whitelisted before release the patch... Now it have repercution on player on a potential exponential situation with a leaverbuster active that will punish player on to of Riot fault...

CMaka1 votes

Same as you I played my placement games and get 2 leaver sticks bcs of this, but I fix it:

Start your client and go on the option button and make the full repair thing. It works for me and I reconnect to the training. ( btw before that repair option I delete anti-vira I think avira blocks, you guys can try repair before deleting avira, maybe it works I don't know). Have fun and good luck summoners. Zoe [slayer-pantheon-popcorn]

Ratrox2 votes

Well, i got hit by that problem aswell, but just blaming Riot is not the right way. I can understand what you are saying but since we are customers and have a huge amount of different antivirus programs etc, it may be a bit difficult. Also they never really have problems with antivirus, its just the new anti cheat patch that reads the LoL data, which gets spotted by some of the antivirus programs, which they didnt know propably. And since they already contacted the antivirus companies, relax and wait till tomorrow and it will most likey be fixed.

Asmodious2 votes

When you implement such system, you at least check on most famous antivirus like avira... Its part of the quality controle process. Now i already fixed it by erasing avira (never liked it anyways.. was just awaiting the reason for...)

Now we can see that plenty summoner get leaverbusted and loose games because of this fact. Riot should at least do something about that and erase each curent leavebuster process and get back on point of each of these last loose...

yMpuCyka1 votes

have same LoL BUG with NO Avira or another antivirus!!! how ba dat???!

GoodBot1 votes

This creates a big issue with the leavebuster system. Care to check all this occasions of people that could not connect to games last 2 days? Some writing off our unvoluntary crime?

Malphas Marx2 votes

wait what the fuck? You too?

Styxou2 votes

Bug confirmed. Avira blocks "League of Legends.exe". I had to restore the file, and whitelist the .exe or disable the real-time protection. https://imgur.com/a/EALmEnZ

BluLuke2 votes

Same thing on my PC. Windows 8.1 Server: EUW I hope you get that fixed early! I want to play ARURF! Ty, BluLuke

StrickerX2 votes

I found a problem solution:

Do this Steps: -> Join any Game and wait to the reconnect Problems.

On Problem: -> Close League of Legends -> Open your Avira Antivirus -> GO -> Avira Antivirus -> Real protection scanner -> quarantine -> select all League of Legends Files. -> Type: Restore + select Static Format for this Files. (That antivirus does not block it anymore) -> Final -> Start League of Legends

and you are ingame for all next games!

DO NOT DISSABLE SCANNER (not need it)

King Ronaldinho2 votes

same problem EUW. i literally ran crazy. i did a bug report because i was afraid of getting problems while i have 3 afk games in a row. i am pretty facilitated that it is just a problem of LOL at all.

StrickerX1 votes

I got 4 afk games

but I got a solution: watch my topic and repeat all steps what I writen

KinqDev2 votes

Also have this „bug“. Riot pls fix fast. Please!!

CMaka2 votes

Start your client and go on the option button and make the full repair thing. It works for me and I reconnect to the training. ( btw before that repair option I delete anti-vira I think avira blocks, you guys can try repair before deleting avira, maybe it works I don't know). Have fun and good luck summoners. Zoe [slayer-pantheon-popcorn]

Shiny Poipole2 votes

For gods sake riot remove my fucking Leaver buster (i have the same problem and it fucks me). Why do you awlways manage to fuck your game. Its fucking annoying man

Lunatic Inmate2 votes

I tried to start a match and got exactly the same issue in any kind of game modes. I´m a bit upset but I´m reading I´m not the only one. Crumb of comfortitem 3151

rtbf248852201 votes

Dunno why u have avira antivirus... probably one of the worst antivirus ever. As i can see u have windows 10. the normal antivirus that he have "windows defender" is really good. Acctualy on a windows operating system having 2 antivirus working at once just mean problems. I repeat the best antivirus is the "guy itself".

Asmodious2 votes

riot, because of that bug, i got a leavebuster of 20 minutes, CAN YOU FIX THAT PLEASE!!

NekoFuyu1 votes

gots the same problem but i just deleted avira off of my laptop

Ste4lthBômb3r1 votes

Played 5 games with no problems today but just after i was finished with the champion selection for the 6th game i also got the "TR message from avira". Cant play League of Legends anymore. Only have the "recconnect screen"

Crimetim31 votes

Hey Riot,

please remove this leaver buster from my account. TY

Apex Lion1 votes

Hi, same problem here but I think I made it worse: After I restored the .exe in Avira it was no proper "exe" file anymore but some weird file with no proper ending. I ended up de- and reinstalling the game but now it doesnt even let me download the content. It goes up to 100% and then drops a "Error 004" Code on me.. I'm frustrated, does anyone have a solution for this?

Regards.

Digielf1 votes

I have the same problem, game is unplayable because of this issue

More from Report a Bug