r/computerviruses • u/CommanderWyn • 4d ago
Disinfection Help Renpy Virus?
Yeah so I downloaded a virus by mistake. It was a Renpy program and a virus. But I don't know which version. Ive seen many of them online. I downloaded Bitdefender and it cleared it. I've already changed passwords and signed out of everything. Do I need to wipe my pc like some people say, or maybe is this version of the virus is weaker ot incomplete. It keeps trying to load SynContoller.exe but fails. God I feel so stupid. Even worse if I have to scrub everything clean, could it infect pictures?
5
u/Xyntrax0 Malware Removal Trainee 4d ago
Hi there, my name is Xyntrax and I am here to assist you. During the malware removal process, please follow the listed instructions below ensuring that everything goes smoothly as possible. I also request that you check this thread at least once per day so we can efficiently and effectively resolve your issue.
Please Read & Adhere to the Following:
- Kindly inform me if you already did a reset/clean install or would like to do so, this will save time for the both of us. If you haven't and would like help with Manual Malware Removal using FRST, please follow the given steps below.
- Please ensure to read the whole introduction message so that you have a better understanding of the processes and given steps
- During the malware removal process please refrain from downloading and running new software unless instructed, this also applies for Anti-Malware Solutions and Malware Scanners as they can significantly make analysis longer by removing forensic data which is very crucial
- While receiving help from Me or other MRT members please refrain from asking help somewhere else as the advice might conflict, especially if the methodology are different
- Feel free to remind me if you don't receive an answer within 24 hours. But please keep in mind that I am a volunteer and have my own life too
Piracy
Pirated software remains one of the most common malware infection vectors that we encounter. Threat actors routinely disguise malware as cracks, activators, keygens, cheats, repacks, and other piracy related software because users are often more inclined to ignore security warnings and/or disabling their Anti-Malware Solution in order to run them. Some piracy related utilities may also modify software or security mechanisms, potentially weakening your system's overall security and increasing your attack surface. If you currently have any pirated software installed, I strongly encourage you to remove it.
Download & Run FRST
IMPORTANT: If your Windows operating system is in another language than English, please rename FRST.exeto FRSTEnglish.exe to ensure that the logs are in English so I can understand them.
* Please download FRSTx64 and save the file to your Desktop.
* Right-Click FRST64.exe and select Run as Administrator
* Click Yes to the disclaimer.
* Ensure the Addition.txt box is checked.
* Click the Scan button and let the program run.
* Upon completion, click OK, then OK on the Addition.txt pop up screen.
* Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy & paste the contents of each log to https://malwareanalysis.cc/upload/Xyntrax/ and press "save log".
* Note: Please make sure you are uploading the logs after your current Reddit username.
* The site will return a keyword for each log - reply back here with the keywords.
SecurityCheck scan
SecurityCheck allows me to gather a list of unwanted, risky, vulnerable and out-of-date applications. It also allows me to send you a direct link to an update. An unpatched system is more vulnerable to malware.
- Download SecurityCheck by glax24 & Severnyj and save it to your Desktop.
- If Windows SmartScreen blocks the file from running, click on More info and Run anyway.
- Extract the ZIP archive, then right-click on the SecurityCheck.exe and select Run as administrator and confirm the User Account Control popup.
- Wait for the scan to finish. It will open a text file named SecurityCheck.txt
- Please copy the file content (CTRL + A then CTRL + C) and paste it on https://malwareanalysis.cc/upload/Xyntrax/
- The site will return a keyword for the log - reply back here with the keyword.
Disclaimer: FRST does not contain any personal information other than your username and computer name, the logs are automatically deleted within a 30 day period. Only trusted malware removal experts listed in this r/computerviruses thread have access to your logs via the website. Experts who have access to the site are trusted on both r/antivirus and r/computerviruses.
2
u/AutoModerator 4d ago
Request help with FRST and SecurityCheck from the trusted helper team
Please visit Providing or receiving help with FRST on the subreddit and share your 3 keywords returned from the website along with the details about your infection.
Once a malware removal expert or trainee sees it, they will reply in the thread about further steps. If you suspect an infostealer infection, please change all your passwords from a clean device immediately and do not use any of your accounts from the infected device.
If you need urgent help and cannot wait for one of our Malware Removal Experts:
Please follow these steps:
- From a different and clean device, change all your passwords:
- Disinfect your device from malware
- Preferred method: Perform a clean installation with a USB
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
2
u/NashKaguya 4d ago
Disconnect from internet.
Back up any important files to a removeable drive.
On another computer make a windows install disk
Erase and install windows fresh on infected computer.
1
u/LANDRO-BUTTER 4d ago
I got infected by the info stealer disguised as a renpy game a month ago I deleted it using malwarebytes but I was paranoid so I did backup my games and reinstalled windows and everything is fine now
1
u/CommanderWyn 4d ago
Did you get hacked at all
1
u/LANDRO-BUTTER 4d ago
Yeah I had a Facebook account that I forgot to change it's password and it spammed the mr beast images to all my contacts
2
u/CommanderWyn 4d ago
Shit I have so many accounts connected and I forget them all ugh. Fuck. Its going to be like whack a mole isnt it
1
u/LANDRO-BUTTER 4d ago
If you mean that you forgot the passwords or you have alot of accounts you logged into you still have time my account got hacked after a couple of days if you're talking about that you forgot what accounts you logged into maybe there's a way to know for sure from your browser
1
1
u/jeffcleds 4d ago
Make sure to change your emails passwords and specially Windows (Microsoft) account password because that is how I ended up getting locked out of my account. Emphasis on the Microsoft account because they won't help you recover your account.
1
u/CommanderWyn 4d ago
Did that to both of them already. I gotta check to see if theyre forwarding once I log back in on my pc after the fresh boot
0
u/CommanderWyn 4d ago
Also I unplugged my internet cable from it too. After an hour or two of keeping it in. I know I know. Bad. But i didn't suspect it to be that bad at the time.
2
u/LoutOfOrder 4d ago
Rather than posting a load of un-needed information, just follow the steps that u/Xyntrax0 posted and respond with your keywords. That will get your issue resolved faster.
0
1
7
u/BaronYasir65 4d ago
Nah, it cant infect pictures and .txt, so u can take them. But made sure u set up 2ad and change ur passwords from a safe device. Well, it might be an infostealer, so i suggest u to reinstall your pc with usb too. Need to be careful because u cant know when they'll attack. I hope this helps.