Trojan found on Unity game engine netcode

[Rodrigo A]

Hi,

I used Unity engine frequently with no problems so far with my Kaspersky Total Security but today I started to use their netcode solution to multiplayer (Netcode for Gameobjects) and Kaspersky began to find 2 trojan horses (that unity keeps re adding to funcion).

My specs:

I'm using Unity 6000.0.28f1, Netcode for GameObjects 2.2.0, Multiplayer Widgets 1.0.1, Multiplayer Tools 2.2.3, Multiplayer Services 1.0.0 and Multiplayer Center 1.0.0.
Also using Windows 11 and Kaspersky as Anti virus

Found 2: Trojan Horses(VHO:Trojan.Win32.Convagent.gen)  on paths:

App: C:\Program Files\Unity\Hub\Editor\6000.0.28f1\Editor
Obj:  D:\Desenvolvimento\Projetos\Com Git\Element Joust\Element Joust\Library\ScriptAssemblies

Obj name: Assembly-CSharp.dll

and

App: C:\Program Files\Unity\Hub\Editor\6000.0.28f1\Editor\Data

Obj: D:\Desenvolvimento\Projetos\Com Git\Element Joust\Element Joust\Library\Bee\artifacts\1900b0aEDbg.dag\post-processed

Obj name: Assembly-CSharp.dll

both "High threats"

Also I would like that since I "trust" Unity I tried to add D:\Desenvolvimento\Projetos\Com Git\Element Joust to the exclusion list to continue my work but Kaspersky keeps excluding the files... I mean I do want to know if there is really a virus there since is a Trojan or just a false positive. Is there anything I could do to help determine that?

Thanks,

Rodrigo

[Rodrigo A]

More information:
Microsoft Windows 11 Core x64 Build 26100

Kaspersky version 21.19.7.527(b)

[Flood and Flood's wife]

5 hours ago, Rodrigo A said:

Microsoft Windows 11 Core x64 Build 26100, Kaspersky version 21.19.7.527(b)

8 hours ago, Rodrigo A said:

I used Unity engine frequently with no problems so far with my Kaspersky Total Security but today I started to use their netcode solution to multiplayer (Netcode for Gameobjects) and Kaspersky began to find 2 trojan horses (that unity keeps re adding to funcion).

My specs:

I'm using Unity 6000.0.28f1, Netcode for GameObjects 2.2.0, Multiplayer Widgets 1.0.1, Multiplayer Tools 2.2.3, Multiplayer Services 1.0.0 and Multiplayer Center 1.0.0.

Found 2: Trojan Horses ( VHO:Trojan.Win32.Convagent.gen)  on paths:

App: C:\Program Files\Unity\Hub\Editor\6000.0.28f1\Editor
Obj:  D:\Desenvolvimento\Projetos\Com Git\Element Joust\Element Joust\Library\ScriptAssemblies

Obj name: Assembly-CSharp.dll

and

App: C:\Program Files\Unity\Hub\Editor\6000.0.28f1\Editor\Data

Obj: D:\Desenvolvimento\Projetos\Com Git\Element Joust\Element Joust\Library\Bee\artifacts\1900b0aEDbg.dag\post-processed

Obj name: Assembly-CSharp.dll

both "High threats"

Also I would like that since I "trust" Unity I tried to add D:\Desenvolvimento\Projetos\Com Git\Element Joust to the exclusion list to continue my work but Kaspersky keeps excluding the files... I mean I do want to know if there is really a virus there since is a Trojan or just a false positive.

1. Is there anything I could do to help determine that?

Hello @Rodrigo A, 

Welcome!

1. Read: False detections by Kaspersky applications. What to do? & What to do if a Kaspersky application blocks my website or application.
2. **Zip the High threat files**, **add a password  to the zip file - either MALWARE or INFECTED & tell support the password** 
3.  Log a request with Kaspersky Customer Service, https://support.kaspersky.com/us/b2c/us#contacts  - select either Email or Chat, then fill in the template as shown; include a *detailed history*, request the case get sent to the Kaspersky Virus Lab for their expert analysis. 
4. Select (your) Kaspersky application from the drop-down-list (A).

• *Also* -> IF using Chat - *before* ending the chat -> ask the operator to email (you) a copy of the chat transcript - otherwise (you'll) have no record of the chat*                    

Please share the outcome with the Community, when it's available? 

Thank you🙏
Flood🐳+🐋

Edited January 13 by Flood and Flood's wife
added template