Webroot Antivirus Error

[buugles]

I just downloaded Katakana War and Webroot keeps removing `nw.exe` because it says it detected "Trojan.Downloader.Adload". You might want to contact webroot and get that executable certified or something? Good luck!

[Oppaiou]

I am having this problem as well actually, apparently it also detected a trojan as well, not sure if this is related in any way to the game but my pc was clean before. shame because i backed this game and cannot play it at all.

[Oppaiou]

Actually FIXED, u just go into your webroot and click on the gear icon next to pc security, block and allow files tab and then change to allow. next time u run the game after verifying integrity through steam, webroot should then give u an option to allow all the time for the exe file. Hope this helps anyone with the same problem.

[Thunderhammr00]

i bought the game the other day and it worked just fine but now my anti virus keeps deleting the nw.exe file as its detecting it as a trojan downloader. it's saying it's a PDM:Trojan.win32.Bazon.a I've tried changing to a trusted application, restoring the file, ignoring the warnings but it deletes it every time. the only thing that lets me run the game is turning the anti-virus off, but i don't want to do that. The anti-virus i'm using is Kaspersky. I don't know what else to do any ideas?

[Stu]

Getting the same thing with Kaspersky. Detected : Trojan-Downloader.Win32.Adload.oyyg
Definition: Trojan-Downloaders can download and install new versions of malicious programs onto your computer – including Trojans and adware.
Would like to know why this is occurring and if anything is being done about it.

[ghost on the highway]

yeah, having the same problem with kaspersky.

[ZombieDad]

Having the same problem with Kaspersky. I guess the question is, is it a false positive or is the software actually infected with a trojan? It would be unwise to force your AV software to ignore it if it really has malicous code... I wonder if Steam has an obligation to vet vendor uploads for malware (like the Apple store)?

[Smoky]

Originally posted by ZombieDad:

Having the same problem with Kaspersky. I guess the question is, is it a false positive or is the software actually infected with a trojan? It would be unwise to force your AV software to ignore it if it really has malicous code... I wonder if Steam has an obligation to vet vendor uploads for malware (like the Apple store)?

I've had the exact same problem with my Kaspersky.

[Sleepy Duck]

Hi all,

We've been researching the cause behind the game being picked up as a false-positive by certain anti-virus software.

The issue seems to lie with the engine we used to develop the game with. While it's completely safe and virus-free, there are reports of other games that have been developed using the same engine also receiving these false-positive alerts.

We're going to submit the game to Webroot, Kaspersky, AVG, etc. in order to get it whitelisted and remove the false alerts. However, this could take some time to get approval.

For now, if you're encountering the issue, please manually add the game as an exception to your anti-virus software.

[ZombieDad]

Originally posted by Sleepy Duck:

Hi all,

We've been researching the cause behind the game being picked up as a false-positive by certain anti-virus software.

The issue seems to lie with the engine we used to develop the game with. While it's completely safe and virus-free, there are reports of other games that have been developed using the same engine also receiving these false-positive alerts.

We're going to submit the game to Webroot, Kaspersky, AVG, etc. in order to get it whitelisted and remove the false alerts. However, this could take some time to get approval.

For now, if you're encountering the issue, please manually add the game as an exception to your anti-virus software.

Thanks for the info!

[hummel]

Originally posted by Sleepy Duck:

Hi all,

We're going to submit the game to Webroot, Kaspersky, AVG, etc. in order to get it whitelisted and remove the false alerts. However, this could take some time to get approval.

Any news on this? Did you submit the game to Kaspersky etc.? I am still getting the alert.

[botcherO]

You can send it there, too: https://virusdesk.kaspersky.com. Maybe raises attention.
There is also an option to get information if it was a False-Positive or not after analysis.
I did a scan on jotti.org, just Kasp. + 1 other Scanner finds something. So i think it is a False-Positive, but i'm definitly waiting for an answer from Kaspersky before i run it.

[EagleatDC]

Same problem is observed in Symantec, I sincerely think that the engine used might have a security loophole which might make the PC vulnerable.

[Diggermoth]

Hiragana Battle seems fine, but Katakana War still has the problem here with Kaspersky. It looks like Webroot allows it now though, according to https://www.virustotal.com/ , the first link on google.
Would it be worth going through the addons to see if any added since the first game caused the problem? (I'm assuming Katakana war came second...)

[botcherO]

I sent this just now through their website's contact form:

Hello Katakana War Team!
What do you plan to do with the adware infected Steam download?
12!! from 61 Virusscanners now report an infection: (https://www.virustotal.com/de/file/e009ae79e3464fe36c3601ab9b6e65886649c5d29d27d109d032ca4b06906331/analysis/1491235759/)
AegisLab Troj.Downloader.W32.Adload!c 20170403
Fortinet W32/Generic.AC.382D11!tr 20170403
Jiangmin TrojanDownloader.Adload.tpf 20170403
Kaspersky Trojan-Downloader.Win32.Adload.oyyg 20170403
nProtect Trojan-Downloader/W32.Adload.1443840 20170403
Panda Trj/CI.A 20170403
Rising Downloader.Adload!8.D1 (cloud:5RMDxdj1ROL) 20170403
Symantec Trojan.Gen 20170403
Tencent Win32.Trojan-downloader.Adload.Pgcz 20170403
TrendMicro-HouseCall TROJ_GEN.R00XH07CQ17 20170403
VBA32 TrojanDownloader.AdLoad 20170403
ZoneAlarm by Check Point Trojan-Downloader.Win32.Adload.oyyg 20170403

I do not think that this is an false positive anymore. Seriously check & clean your development machines and report on the Steam Forums asap.

[Sleepy Duck]

Hi all,

We wanted to take a moment to address the concerns raised by botcherO.

We submitted the game for approval by a number of anti-virus companies but it seems it takes some time to process. AVG, McAfee and Malwarebytes all whitelisted it as shown by your link. (https://www.virustotal.com/de/file/e009ae79e3464fe36c3601ab9b6e65886649c5d29d27d109d032ca4b06906331/analysis/1491235759/)
Kaspersky is a major one we submitted to that hasn't yet whitelisted it.

This false-positive also occurs with a number of games developed using the RPG Maker MV engine. The plug-in we included to fetch Achievements from the Steam servers is what is causing the game to get flagged as a false-positive, because it's trying to access your computer's network and update the Achievement data. While this is completely normal behaviour, it isn't an elegant solution as it overrides RPG Maker MV's native settings, so it seems to get flagged. Our first game, Hiragana Battle, did not include this feature, and we never had a problem with false-positives.

Steam has a support article dedicated to this topic:
https://support.steampowered.com/kb_article.php?ref=4361-MVDP-3638&l=english

If anyone has any experience with getting applications whitelisted, we would greatly appreciate some advice! As mentioned, this isn't something we encountered with Hiragana Battle, and it's something we didn't foresee happening. Any and all help is very appreciated :)