MalwareBytes blocks RTP Compromised???

[Lost_Legend]

Here I get to play CS2 for free for now to give it a try before making my decision on to buy it or now. But after coming off for a break, my antivirus (MalwareBytes) went crazy into blocking this:

Date:
Today
Domain:
147.75.193.63 (which is USA?)
File:
Letter of my drive - steam - steamapp - common- cities skylines 2
Category:
Compromised
type:
Outbound

So someone tell me, is this something happened to you?

[john.glossop]

No, and I use the paid version of Malwarebytes

[uni790]

If Malwarebytes blocks something, go with it. The file is not always dangerous, everyone makes mistakes, but much better to be safe then sorry.

[Lost_Legend]

Originally posted by john.glossop:

No, and I use the paid version of Malwarebytes

Same here, it was the RTP that detect it and blocked it.

[CyberJarl]

Having the same issue since today for some reason

[Bedna]

6 months ago I reported that the game sends requests to pdx servers every 2 seconds while running, could be something like that malwarbyte detects.

Kinda hard to know since there is so little information in the original post.
But it sounds really odd if it is a RTP detection...
https://en.wikipedia.org/wiki/Real-time_Transport_Protocol

[sternenstaub70]

Originally posted by Bedna:

6 months ago I reported that the game sends requests to pdx servers every 2 seconds while running, could be something like that malwarbyte detects.

Kinda hard to know since there is so little information in the original post.
But it sounds really odd if it is a RTP detection...
https://en.wikipedia.org/wiki/Real-time_Transport_Protocol

Though Ports are usually predefined and should be used only for those services which they are defined for, it is not always the case that the named port is *really* being used for this manner.
Example: port 22 is standard for ssh, or port 21 for ftp.
For security reasons and to avoid some port hammering from outside (bots usually use the standard ports) companies often use a completely different port for the same use..

same could be with the rtp port. Though that port is being used, it's not necessarily for that purpose it is designed for.

[Lost_Legend]

Originally posted by Bedna:

6 months ago I reported that the game sends requests to pdx servers every 2 seconds while running, could be something like that malwarbyte detects.

Kinda hard to know since there is so little information in the original post.
But it sounds really odd if it is a RTP detection...
https://en.wikipedia.org/wiki/Real-time_Transport_Protocol

That scary be honest. Thank you for information man.

[ekin]

Originally posted by sternenstaub70:

Originally posted by Bedna:

6 months ago I reported that the game sends requests to pdx servers every 2 seconds while running, could be something like that malwarbyte detects.

Kinda hard to know since there is so little information in the original post.
But it sounds really odd if it is a RTP detection...
https://en.wikipedia.org/wiki/Real-time_Transport_Protocol

Though Ports are usually predefined and should be used only for those services which they are defined for, it is not always the case that the named port is *really* being used for this manner.
Example: port 22 is standard for ssh, or port 21 for ftp.
For security reasons and to avoid some port hammering from outside (bots usually use the standard ports) companies often use a completely different port for the same use..

same could be with the rtp port. Though that port is being used, it's not necessarily for that purpose it is designed for.

RTP here stands for "Real Time Protection", and it has nothing to do with the protocol you linked to...

Also, why would the game use (listen to) any specific port at all?? These ports numbers are only relevant on the server side. Otherwise, the source port (on the client-side) is randomly assigned and irrelevant except for the network protocol to keep track of sessions...