Virus detected

[blackheart2]

TL;DR: Naxia appears to have installed a trojan on startup.

FYI, here is an email I sent to Naxia's support:

I purchased your game Naxia from Steam today. When I started it up, Windows Defender immediately* identified a file name 'version.dll' in my $USER\AppData\Local\Temp folder and quarantined it. Windows Defender says this file is a trojan designated

Trojan:Win32/Occamy.C1B

I uploaded it to VirusTotal and VirusTotal confirms that 47 engines detect this as a threat. Here are the details:

https://www.virustotal.com/gui/file/1b3f266aa8c67a00723f9cfbd10349b05a71525e1c0402454320dca01b472311/details

While I do not know how to confirm that Naxia created this file**, its timestamp does agree with two of the folders in the Naxia folder in SteamApps. In the meantime, I have deleted the file and uninstalled your game.

Are you aware of this issue? Can you confirm that your application creates a file with this name in this directory? I note that this file is a Mono/.NET Assembly and your game uses Unity and [therefore] probably also C#. If this file is one created by your game, do you agree that it is a security threat?

---

* More precisely, a second after the cutscene started.
** I guess I could try to reproduce this in a VM, but I don't have one handy and I am not sure I want to investigate this further.

[Aral]

Hi,
As you notice this file is a Mono / .NET Assembly that game uses by Unity.
it seems that it created by Unity3d, we did not create this file manually. we will talk with unity about this issue and investigate the problem, thanks for your feedback.

[blackheart2]

Thanks for your response.

Can you tell us what version of Unity3D is responsible for this version.dll file? That way I can confirm with them independently and let your other users know what they had to say.

[Aral]

2019.3.10f1

[blackheart2]

Thank you. I contacted Unity support, and I will reply if I hear back from them.

[katta83]

I've got the same problem with version.dll (but also with version.dll/data0001.res and ersion.dll/data0000.res), antivirus detected a HEUR:Trojan.Win32.Generic and deleted it. 2 days after that antivirus popped up for a new threat (UDS:DangerousObject.Multi.Generic) on naxia.exe

[Celendrin]

Lol funny I just started wondering about this a few days ago,

after I seen a game I thought looked cool being given out for 'free'.

I almost downloaded it but then remembered hearing about virus's being on games on steam,

is this some kind of new 'thing' happening nowadays?

Where game devs are starting to see there's more potential in sticking viruses on people's computers to hack their financial accounts than actually making good games to sell?

(I say this after 3 weeks ago I had 2 credit cards defrauded from using this computer I game with).

Hmm.

[ZeroOps]

Unable to launch. Kaspersky blocked Naxia.exe

When I first tried to launch Naxia an error stating Naxia.exe could not be found. As I investigated further, more error messages popped up. I then added Naxia.exe to the Kaspersky whitelist and that still did not solve the issue. Finally, I had to manually set UNBLOCK STARTUP on the Naxia.exe file in Kaspersky's Manage Applications module. When I try to start the game now, I am still getting the "missing executable" error. I have verified the files and it says that I file was not able to be verified.

I restarted my PC and tried to launch game. It updated (again) so I clicked "Play Game" and nothing happened. Tried launching it again and "missing executable" error. Re-verified that the Naxia.exe was in the local folder. I uninstalled/reinstalled game. I paused Kaspersky and was able to launch the game successfully. I unpaused Kaspersky and it will not launch - same exe error.

After 10 minutes of creating specials rules and exceptions in Kaspersky (in several different modules), I was able to run the game with Kaspersky on. I have never had to go through all of this to run anything, much less a game. Not sure what kind of code the Naxia.exe file has in it, but Kaspersky wants nothing to do with it. Hopefully, this is the end of this tale.

[katta83]

My Kaspersky found 2 viruses associated to this game: on version.dll detected a HEUR:Trojan.Win32.Generic and on naxia.exe a UDS:DangerousObject.Multi.Generic. I've got the threath notification some day after the installation. I immediately unistalled the game, requested refund and formatted PC...

[Aral]

Originally posted by ZeroOpsFG:

When I first tried to launch Naxia an error stating Naxia.exe could not be found. As I investigated further, more error messages popped up. I then added Naxia.exe to the Kaspersky whitelist and that still did not solve the issue. Finally, I had to manually set UNBLOCK STARTUP on the Naxia.exe file in Kaspersky's Manage Applications module. When I try to start the game now, I am still getting the "missing executable" error. I have verified the files and it says that I file was not able to be verified.

I restarted my PC and tried to launch game. It updated (again) so I clicked "Play Game" and nothing happened. Tried launching it again and "missing executable" error. Re-verified that the Naxia.exe was in the local folder. I uninstalled/reinstalled game. I paused Kaspersky and was able to launch the game successfully. I unpaused Kaspersky and it will not launch - same exe error.

After 10 minutes of creating specials rules and exceptions in Kaspersky (in several different modules), I was able to run the game with Kaspersky on. I have never had to go through all of this to run anything, much less a game. Not sure what kind of code the Naxia.exe file has in it, but Kaspersky wants nothing to do with it. Hopefully, this is the end of this tale.

Hello
We scanned the Game content with different software and we could not find any issue yet but we investigate more and will let you know the result.
For the DLL file you talking about, it is more likely a file that Unity Engine generates automatically but we are not sure yet.

[Sérgio Farias]

Também estou tendo problemas com o Game - Kaspersky detecta o executável como VIRUS !!!!

[CrazyK]

Had same issue. Game is imbeded with trojans/malware and blocked from opening. Uninstalled and requested refund. Game looked great. But not with these shenanighans.

[jarkeld]

Naxia.exe Keeps getting flaggedd as a Malware

Hi Community, I keep getting this warning from Kaspersky total security 2020 that naxia.exe is a malware, and for my own reasons I don't want to keep Kasperky shut down to play this, anyone knows a turn around for this?

[jarkeld]

On a new development, I started to get error screens from windows from other apps missing the the icons or some .dll . Other apps that had nothing to do with Naxia. All after I installed the game and turned Kaspersky to run the game once. I´m not going to request a refund, I´ll give the chance to the developer to se this.

[Aral]

we are looking around this issue.
also, take a look at this link, which may help you.
https://support.steampowered.com/kb_article.php?ref=4361-MVDP-3638

[ves328]

me as well