Hello, i ve been downloading games from itch.io for quite some time.

However, this is the very first time I had a trojan + virus downloaded and it is from the main executable of this game:

https://pattystudio.itch.io/the-hollows

Virus: Win32.Neshta.a

Trojan:  Trojan.Win32.Bazon.a + Trojan.MSIL.Injects.gen

All discovered by Kasperksy.

Avoid this game at all costs and I hope it gets deleted and the author banned.

Hey, an update to my previous post: I’ve suspended this account. Thanks for bringing it to our attention.

On closer inspection I see that they are using a password protected RAR file.

My recommendation: Do not download anything that comes as a password protected archive (typically RAR). We’ve seen a new malicious uploader who is using this approach to try to prevent our automated virus scanner from identifying their projects.

If you come across a page that has a download for a game as a password protected RAR file, and includes the archive password on the page’s description, do not download it and report it.

In the future we will outright ban all password protected archive files. There is no reason to provide something like that as itch.io has access control built in.

Thanks

Please report the game in question, using the report link at the bottom of the page, so that our support team can look into it. They're probably too busy to watch the community forum. Thank you.

I suggest running the game through VirusTotal to get a better picture. There often are a lot of virus scanners that produce false positives. VirusTotal will use a large number of scanners against the same file and can give you a more conclusive result than one program saying “this may have a virus”

For some reason VirusTotal upload of the main executable keeps failing. On other upload websites as well. 

Could someone else try it?

For the record this is my antivirus report:

Thank you, for not only bringing this to the community’s attention but also providing a plethora of information, obscured. You are the best! :)

Also thanks to leafo, for reacting in such a timely fashion, even with so many other things going on.