2.60 star(s) 18 Votes

LK2FK

Newbie
Mar 27, 2020
36
16
My computer did download a weird file at the time, and I discovered it because it was blocked by my installation of IDM. But I didn't know it was a virus at the time, so I just cancelled the download request. Later I found out that the reason was this game. I have used anti-virus software to delete the archived EXE, and there is no trace of ransomware on my computer so far, but I am still worried that there may be other factors because my computer is too messy and reinstalling is the last thing I want to do. Does anyone know what the ultimate impact of this virus will be?
Best way to be sure is to try one of this free tools from .
I use Kaspersky for more than 20 years and they are very good at detecting and removing malware and ransomware.
Good luck!
 
  • Like
Reactions: Hausmeister1967

joelurmel

Engaged Member
Nov 3, 2022
2,104
3,670
Best way to be sure is to try one of this free tools from .
I use Kaspersky for more than 20 years and they are very good at detecting and removing malware and ransomware.
Good luck!
All antivirus are good when it knows what they have to remove...
Unfortunately, when a new virus come, they are all bad, and you have to wait for a cure if someone have reported the suspect activity.
 

LK2FK

Newbie
Mar 27, 2020
36
16
All antivirus are good when it knows what they have to remove...
Unfortunately, when a new virus come, they are all bad, and you have to wait for a cure if someone have reported the suspect activity.
True, but it is better to have one that is up to date.
No security (no matter what kind) can offer 100% protection. Even though it will not be able to clean it, at least it will let you know that the file is infected and you can block it.
 

joelurmel

Engaged Member
Nov 3, 2022
2,104
3,670
True, but it is better to have one that is up to date.
No security (no matter what kind) can offer 100% protection. Even though it will not be able to clean it, at least it will let you know that the file is infected and you can block it.
Nope, because heuristic detection is no longer available in new antivirus products.
 

Neko-Chan Pacifica

Well-Known Member
Jul 6, 2021
1,012
1,035
can we have a mega link please...the links on op are too slow and or in gofile's case, often ends up in time outs because all the download spots have been taken, on top of it generally being a crappy slow host like the rest of them on front page.
 

J68

Newbie
Mar 4, 2018
54
51
Here's my WT & Gallery Mod for Milfania EP 6.

The Mod got the same virus code from yesterday.
The game files were public " 2025-02-26 T11:18 AM - 2025-02-26 T11:20 PM ", if you downloaded it in that timeframe please make sure to check your system
You don't have permission to view the spoiler content. Log in or register now.



You don't have permission to view the spoiler content. Log in or register now.
Hello, any idea when you could provide a clean mod?
 

tomas024

Member
Apr 30, 2018
141
98
Hello, any idea when you could provide a clean mod?
If you use the extra spare time, you could review previous messages (this and few pages back), you will see the modder will post an update later after the modder clean his compromised system. Also the modder will process his/her plan how to release the next mod update. At the mean time, be patience for the WT mod to be release.

Thanks
 
  • Like
Reactions: tmu500

danokyzu

Member
Jul 23, 2018
188
91
i have malwarebytes it did not say a thing
i also have windows defender active and it did not say a thing

i dont realy know if i have the virus or not i unpacked the file at 02.03.2025 i did not see any the main howdo i know for sure im not infected?

Edit i think im good i downloaded on the 1. März 2025
but for the future is malwarebytes and windows Def enough would the ring alarm if a game has a virus?
 
Last edited:

tomas024

Member
Apr 30, 2018
141
98
try to scroll bro, someone has reported the mod had viruses like the game yesterday.
We always try our best to ensure that files shared on F95 are safe. All attachments are scanned, uploaders scan each upload with at least 1 AV (usually 2) and we have multiple procedures in place to prevent malware being shared.

However, unfortunately over the past few days, we've discovered 4 games which have had malware downloaders: Pill King, My early life, Lust Academy, We Are Lost. This includes compressed versions, as well as downloads from third party sites including rpdl.

If you've downloaded any of these on Windows during the timeframes below, please scan your system ASAP. The links within the affected threads have been updated and are now safe. To be clear, the developers of these games are entirely innocent, there is a bad actor infecting these and then sharing them.

The way the downloader functions makes it near impossible to automatically detect, we'll be examining our methods and trying to improve how we share files in future. If you haven't already, please ensure you are running an up to date Anti-Virus, and if possible, one that monitors file creation and execution, for example, , and always report a thread if you think something isn't right.

Infected links were active in the OP during these timeframes (GMT):
Pill King: 2024-05-08 T10:10 AM - 2024-05-08 T3:29 PM
My Early Life: 2024-05-08 T10:51 AM - 2024-05-08 T7:31 PM
Lust Academy: 2024-05-08 T12:38 PM - 2024-05-08 T7:25 PM
We Are Lost: 2024-05-10 T11:03 AM - 2024-05-10 T6:21 PM
Raven: 2024-05-20 T2:29 PM - 2024-05-21 T08:30 AM
Depths Revival: 2024-05-21 09:42 AM - 2024-05-21 11:20 AM
The Seven Realms (R3 only): 2024-06-01 T11:16 AM - 2024-06-01 T8:53 PM
A Town Uncovered 2024-06-14 T01:48 PM - 2024-06-14 T04:33 PM
The Neverwhere Tales: 2024-07-31 T08:51 AM - 2024-08-01 T04:20 AM
A Promise Best Left Unkept - Aya Edition: 2024-07-29 T03:07 PM - 2024-08-01 T06:55 AM
Altered Destiny: 2024-08-22 T20:15 PM - T2024-08-22 21:09 PM
School, Love & Friends: 2024-11-05 T08:13 PM - 2024-11-05 T09:45 PM
Dreams of Reality: 2024-12-28 T10:53 PM - 2024-12-29 T11:49 AM
Milfania: 2025-02-26 T11:18 AM - 2025-02-26 T11:20 PM
Pervert Action: Timelapse: 2025-02-26 T1:13 PM - 2025-02-27 T3:06 PM

The links were shared in the thread and request threads by the bad actor earlier than these times, so if you downloaded the latest version of these games directly from the bad actor's posts, you are at risk.

You don't have permission to view the spoiler content. Log in or register now.
Check this list of infected games
 
Jan 4, 2022
20
8
Here's my WT & Gallery Mod for Milfania EP 6.

The Mod got the same virus code from yesterday.
The game files were public " 2025-02-26 T11:18 AM - 2025-02-26 T11:20 PM ", if you downloaded it in that timeframe please make sure to check your system
You don't have permission to view the spoiler content. Log in or register now.



You don't have permission to view the spoiler content. Log in or register now.
Where is the download linK?
 

-CookieMonster666-

Message Maven
Nov 20, 2018
12,560
18,605
My antivirus just blocked a threat from this vn. Autolt3.exe tried to execute a script in the background.

View attachment 4627552
When did you download the game? If in the timeframe listed on the OP, this should be expected. In that case, delete your copy of the game and download a new copy from the OP. If your copy was obtained after the dates indicated, it should be safe: a clean copy of the game was obtained and replaced all previous downloads that had been infected. If you got a copy after the replacement, this would be a false positive.
 
  • Like
Reactions: Darklord_1965

kamimed

Newbie
Dec 29, 2019
41
140
script.rpy is the file without the downloader and this is what I've modified and added the clean WT-Mod.
script.virus.rpy is the original file from ripson mod.
downloader.txt is the downloader code removed from the original Ripson mod

Thank you for providing the code, this helped a lot as I was trying to find a way to prevent future infections.

I worked with ChatGPT on this one and came up with a block_network.rpy mod, if the game tries to access the internet the action will be blocked and you will get a notification.

Tested it with the downloader code you have provided and with 0x52_URM (automatically checks for updates online), internet access was blocked successfully.

I will attack the mod here and put the code for review


You don't have permission to view the spoiler content. Log in or register now.
 
2.60 star(s) 18 Votes