Trojan detected on Cell to Singularity

[Ariel Aram]

I have been doing stuff on my Acer Nitro V15 laptop with RTX 3050 normally, until then, Kaspersky Premium, the antivirus I use, have detected a random file in Cell to Singularity game as a Trojan virus, and I don't know exactly if it was just a false alarm, so I've decided to delete the file that were detected by Kaspersky.

These are the logs so far:

 
File Detected as a Trojan:

C:\Program Files (x86)\Steam\steamapps\common\Cell to Singularity\CellToSingularity_Data\Managed\Assembly-CSharp.dll

----------------

Logs:

Event: Deleted Object
User: ARAMBOOK\ariel
User Type: Launcher
App Name: avpui.exe
Application path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.18
Component: File Anti-Virus
Result of description: Deleted(s)
Type: Trojan 

[scriptr]

Same

[Ikaguia]

same

[saraosorioa]

SAME

Evento: Se detectó un objeto malicioso
Usuario: DESKTOP-748HGMF\Sara Osorio
Tipo de usuario: Iniciador
Nombre de la aplicación: CellToSingularity.exe
Ruta de la aplicación: C:\Program Files (x86)\Steam\steamapps\common\Cell to Singularity
Componente: File Anti-Virus
Descripción del resultado: Detectado
Tipo: Troyano

[kazerniel]

Hah I guess I disabled Kaspersky notifications, but this seems the likely reason why I couldn't make the game run today.

Event: Malicious object detected
User: [redacted]
User type: Initiator
Application name: steam.exe
Application path: C:\Program Files (x86)\Steam
Component: File Anti-Virus
Result description: Detected
Type: Trojan
Name: HEUR:Trojan.Win32.DarkNeuron.gen
Precision: Heuristic Analysis
Threat level: High
Object type: File
Object name: Assembly-CSharp.dll
Object path: C:\Program Files (x86)\Steam\steamapps\common\Cell to Singularity\CellToSingularity_Data\Managed
MD5 of an object: C5F2F34091BE2E3BE23C6CD5C003DA31
Reason: Machine learning
Databases release date: Today, 2024-11-10 10:26:00

[trouble8080]

Same. I am using Kaspersky Free but i have same alert too. And now game is not opening...

[Mithas Orken]

Same here, yesterday I was able to run the program by running the integrety check but today everytime the check installs the missing .dll file, Kaspersky deletes it.
I've updated the databases of Kaspersky nothing changes.

Event: Object deleted
User:
User type: Active user
Application name: steam.exe
Application path: C:\Program Files (x86)\Steam
Component: File Anti-Virus
Result description: Deleted
Type: Trojan
Name: HEUR:Trojan.Win32.DarkNeuron.gen
Precision: Heuristic Analysis
Threat level: High
Object type: File
Object name: Assembly-CSharp.dll
Object path: C:\Program Files (x86)\Steam\steamapps\common\Cell to Singularity\CellToSingularity_Data\Managed
MD5: C5F2F34091BE2E3BE23C6CD5C003DA31

[ИНТРОВЕРТ]

the same problem Kaspersky Free is detected Trojan.

[Lazio]

Same

[Draekus2]

i suppose no one thought to whitelist the game in Kaspersky

[Ariel Aram]

Αναρτήθηκε αρχικά από Draekus2:

i suppose no one thought to whitelist the game in Kaspersky

I can whitelist the game anytime I want, and I’m sure people thought about that, but they care about security overall. Like, who knows if the game actually got a virus in the latest updates?

The consumers should be careful with the possible viruses that could harm their devices, and wait for confirmations from trustable sources.

[fibia]

malwarebytes not picking it up. on doing some research that same dll file was causing game crashes back in 2020. where the devs? thought they'd be on this by now?

[Ariel Aram]

VirusTotal Info

I have sent the Cell to Singularity trojan file to VirusTotal and the results are here below.
Link for VirusTotal detection [www.virustotal.com]

3/72 security vendors flagged this file as malicious

68665100291d8e5afd6b0445c3e9bcd4e513448d8545f358898653a9c2f2fc65

Assembly-CSharp.dll 

------------------------

Popular threat label: "trojan.darkneuron"

Threat categories: "trojan"

Family labels: "darkneuron"

------------------------

Kaspersky - ⚠️ HEUR:Trojan.Win32.DarkNeuron.gen

VBA32 - ⚠️ Downloader.MSIL.gen.rexp

ZoneAlarm by Check Point - ⚠️ UDS:Trojan.Win32.DarkNeuron.gen

[lpl]

When I use VirusTotal to check the assembly dll, it gives me a rating of 0/62. Among those finding it unsuspicious is Kaspersky.

The modification date for that file is nov, 7th for me.

[Ariel Aram]

Αναρτήθηκε αρχικά από lpl:

When I use VirusTotal to check the assembly dll, it gives me a rating of 0/62. Among those finding it unsuspicious is Kaspersky.

The modification date for that file is nov, 7th for me.

Probably you forgot to update the game or sent the wrong file, I guess... That's weird, since I sent the same file to VirusTotal and it is still showing as suspicious.

[lpl]

Αναρτήθηκε αρχικά από Ariel Aram:

Αναρτήθηκε αρχικά από lpl:

When I use VirusTotal to check the assembly dll, it gives me a rating of 0/62. Among those finding it unsuspicious is Kaspersky.

The modification date for that file is nov, 7th for me.

Probably you forgot to update the game or sent the wrong file, I guess... That's weird, since I sent the same file to VirusTotal and it is still showing as suspicious.

You're right, I found my mistake. I checked the ._Assembly instead of the Assembly. With the former one I get the same warning as you do.