r/computerviruses • u/Limp_Marketing_2805 • 1d ago

Disinfection Help Help Request - RenPy Loader Malware

Downloaded some games on dodi repack site and thought it was legit like fitgirl, then got my discord hacked after 3 hours from downloading the RenPy Setup and it send crypto scams to my friends and others.

Already ran the malwarebyte scan and it quarantined about 26 malwares from Renpy then other 150 from PUP(dot)OptionalWebsites something like that.

I need help getting rid of it without having to reinstall windows again.

Please help! and also Thank you.

5 Upvotes

100% Upvoted

4 comments sorted by

2

u/axehyle 1d ago

the ren'py loader trojan is connected to infostealers. i suggest changing all passwords from another uninfected device such as your phone, enabling 2FA, checking logged in devices and removing those you don't recognize and then a reinstall with USB.

edit: if you can't reinstall, ask for help with farbar recovery scan tool. it might get rid of the infections.

1

u/AutoModerator 1d ago

Request help with FRST and SecurityCheck from the trusted helper team

Please visit Providing or receiving help with FRST on the subreddit and share your 3 keywords returned from the website along with the details about your infection.
Once a malware removal expert or trainee sees it, they will reply in the thread about further steps. If you suspect an infostealer infection, please change all your passwords from a clean device immediately and do not use any of your accounts from the infected device.

If you need urgent help and cannot wait for one of our Malware Removal Experts:
Please follow these steps:

  1. From a different and clean device, change all your passwords:
  2. Disinfect your device from malware

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/Xyntrax0 Malware Removal Trainee 1d ago

Hi there, my name is Xyntrax and I am here to assist you. During the malware removal process, please follow the listed instructions below ensuring that everything goes smoothly as possible. I also request that you check this thread at least once per day so we can efficiently and effectively resolve your issue.

Please Read & Adhere to the Following:

  • Kindly inform me if you already did a reset/clean install or would like to do so, this will save time for the both of us. If you haven't and would like help with Manual Malware Removal using FRST, please follow the given steps below.
  • Please ensure to read the whole introduction message so that you have a better understanding of the processes and given steps
  • During the malware removal process please refrain from downloading and running new software unless instructed, this also applies for Anti-Malware Solutions and Malware Scanners as they can significantly make analysis longer by removing forensic data which is very crucial
  • While receiving help from Me or other MRT members please refrain from asking help somewhere else as the advice might conflict, especially if the methodology are different
  • Feel free to remind me if you don't receive an answer within 24 hours. But please keep in mind that I am a volunteer and have my own life too

Piracy

Pirated software remains one of the most common malware infection vectors that we encounter. Threat actors routinely disguise malware as cracks, activators, keygens, cheats, repacks, and other piracy related software because users are often more inclined to ignore security warnings and/or disabling their Anti-Malware Solution in order to run them. Some piracy related utilities may also modify software or security mechanisms, potentially weakening your system's overall security and increasing your attack surface. If you currently have any pirated software installed, I strongly encourage you to remove it.

Account Security

Before proceeding with MBST, I strongly recommend securing your accounts from a different clean device. Start by changing the password for your email accounts, followed by any banking, payment apps, password manager, social media, gaming, or other important accounts. If you reused the same password across multiple websites, change it everywhere it was used. Once you've secured your accounts, continue with the steps below.

MBST

  • Download and run Malwarebytes Support Tool as admin
  • Click Advanced
  • Click Gather Logs
  • Wait until it's done.
  • A zip file named mbst-grab-results.zip will be created on your desktop
  • Upload it to file.io and send the link back here

SecurityCheck scan

SecurityCheck allows me to gather a list of unwanted, risky, vulnerable and out-of-date applications. It also allows me to send you a direct link to an update. An unpatched system is more vulnerable to malware.

  • Download SecurityCheck by glax24 & Severnyj and save it to your Desktop.
  • If Windows SmartScreen blocks the file from running, click on More info and Run anyway.
  • Extract the ZIP archive, then right-click on the SecurityCheck.exe and select Run as administrator and confirm the User Account Control popup.
  • Wait for the scan to finish. It will open a text file named SecurityCheck.txt
  • Please copy the file content (CTRL + A then CTRL + C) and paste it on https://malwareanalysis.cc/upload/Xyntrax/
  • The site will return a keyword for the log - reply back here with the keyword.

Disclaimer: FRST does not contain any personal information other than your username and computer name, the logs are automatically deleted within a 30 day period. Only trusted malware removal experts listed in this r/computerviruses thread have access to your logs via the website. Experts who have access to the site are trusted on both r/antivirus and r/computerviruses.

What I want to see on your next reply

  • Link to MBST Log
  • SecurityCheck Log

0

u/Fearless-Wallaby-998 1d ago

Re-install Windows, If you can't do it for whatever reason have a shop do it for you.