VN Download risk on ryuugames?

[morphnet]

Why do ad companies lead you to a 3gb mediafire download disguised as a game that has a 14 trojan detection game.exe that does... something?

First, if you are looking for help / answers, you need to give accurate information.
Second, some detections are false positives, using virus total with / or other AV or malware detection programs can help sort through those BUT it comes down to IF you trust the source.

and lastly the better question is why click on ad links instead of the real one? Also why would you run it???? and while being connected to the internet too????

 

[DyonisXX]

First, if you are looking for help / answers, you need to give accurate information.
Second, some detections are false positives, using virus total with / or other AV or malware detection programs can help sort through those BUT it comes down to IF you trust the source.

and lastly the better question is why click on ad links instead of the real one? Also why would you run it???? and while being connected to the internet too????

I'm not looking for any help what are you smoking, cunt?

I just posted a PSA to help people avoid it

And it's obviously not a false positive, go test it

What the fuck are you hoping to achieve with your reply, at least say something productive

As for why I would run it, I clicked the mediafire download option and the ad also takes you to a mediafire download, the virus size matches the game and the virus has a bunch of folders and stuff to make it seem like it's supposed to be the game


But yeah, if you're downloading from ryuugames and you're not sure you got the actual game downloaded, check that it has ryuugames in the archive name and that it requires a password to open

 

[DyonisXX]

It's easy to avoid clicking on the wrong shit once you know what the correct buttons are but I'm gonna demonstrate how the wrong buttons look

Red leads to a virus
Green leads to the actual download link




These are back to back, they look like they're part of the actual download process, and even the colors get swapped around




This is where the virus buttons technically lead to



Now you tell me, is adshnk knowingly distributing viruses or are they letting virus distributors buy their fake 'download now' button redirect space? I don't know about you guys, but these don't seem like 3rd party download now buttons, considering I have an adblock installed

 

[morphnet]

I'm not looking for any help what are you smoking, cunt?

You ok there? forgot to take your meds or something?

I just posted a PSA to help people avoid it

You posted nonsense, 14 trojan in an exe You didn't post scan results or even the games name.

And it's obviously not a false positive, go test it

Well considering you never mentioned a name or file that would be rather difficult, that said I downloaded 4 games from them today alone without a single issue.

What the fuck are you hoping to achieve with your reply, at least say something productive

You are clearly not paying attention, either here or on that site...
I clearly said...

using virus total with / or other AV or malware detection programs can help sort through those BUT it comes down to IF you trust the source.

and my previous post included instructions shared by another member on how to use the site safely, instructions you ignored by choosing server 1 which leads to adshink instead of server 2 leads to ouo.io.

As for why I would run it, I clicked the mediafire download option and the ad also takes you to a mediafire download, the virus size matches the game and the virus has a bunch of folders and stuff to make it seem like it's supposed to be the game

Your description alone shows you don't know what you are talking about. The virus, if there actually was one, would have been inside one of the files. It is NOT the entire archive and it does not have a "bunch of folders".

This also shows poor / lax security action on your part, you should scan anything that you download (preferably with multiple apps / programs) and then scan again after it has been extracted and BEFORE you run it. For the safest side you would run it in a VM and you don't stay connected to the internet!

But yeah, if you're downloading from ryuugames and you're not sure you got the actual game downloaded, check that it has ryuugames in the archive name and that it requires a password to open

The ryuugames is correct but not all of their games need a password, mostly found with the free download marked games.

I don't know about you guys, but these don't seem like 3rd party download now buttons, considering I have an adblock installed

Did you install it AND set it up? Given the "information" you've shared in your posts I would advise you to read up on AV, adblocker, browsers etc. Most of what you wrote didn't make any sense.

Also if you had read this thread you would have seen apart from the information from the other member I quoted in my previous reply, I also gave detailed instructions on what to do and how to use the site on the 22 Nov 2024
https://f95zone.to/threads/download-risk-on-ryuugames.213639/post-15433760

 

[DyonisXX]

You ok there? forgot to take your meds or something?


Did you install it AND set it up? Given the "information" you've shared in your posts I would advise you to read up on AV, adblocker, browsers etc. Most of what you wrote didn't make any sense.

Also if you had read this thread you would have seen apart from the information from the other member I quoted in my previous reply, I also gave detailed instructions on what to do and how to use the site on the 22 Nov 2024
https://f95zone.to/threads/download-risk-on-ryuugames.213639/post-15433760

You must be registered to see the links

The virus itself is the game.exe that's inside the archive, alongside a bunch of folders and other files

If you're that curious about it go test it, I don't know if the files besides the .exe are there camoflage or relevant to the virus itself

I ran the exe through virustotal and most of the detections claimed it was a trojan, win defender also flagged it as a virus

I didn't say that there were 14 separate trojans in one fucking file, that's how many separate AV detections it had

Anyways, if you're some kinda security geek go ahead and check the virus out and tell me what you discover, to make sure you get the same one pick SERVER 1 - Mediafire and click one of the red buttons I posted in the screenshots earlier

Your description alone shows you don't know what you are talking about. The virus, if there actually was one, would have been inside one of the files. It is NOT the entire archive and it does not have a "bunch of folders".

Please use common sense, when I said "the virus" I meant the download as a whole, which isn't the actual game, not the game.exe virus file instead of the archive

 

[DyonisXX]

And once you're done nitpicking semantics and technicalities, would you like to actually address my initial question of why a URL shortening/AD display website blatantly leads users to a virus?

 

[DyonisXX]

You must be registered to see the links

Oh my bad, I misremembered, it wasn't 14, it was 51/72 vendors flagging it

 

[morphnet]

You must be registered to see the links

First of all you've been a member here long enough to know that game is not allowed to be linked here. You could have just said it's a loli game and you can't link or name it.

Second, the page tells you the file size, 4.3GB NOT 3GB meaning if the file you get is NOT that size it's not the file you want.
Third, I'm not downloading that to test it and I'm certainly not going to take the route you took.

Please use common sense, when I said "the virus" I meant the download as a whole, which isn't the actual game, not the game.exe virus file instead of the archive

I know when you said virus you meant the download as a whole, which is why it's wrong and I corrected you.

And once you're done nitpicking semantics and technicalities

Technicalities are LITERALLY how you protect yourself online...

would you like to actually address my initial question of why a URL shortening/AD display website blatantly leads users to a virus?

No, you are on the internet, you can get detailed information from security experts.

Oh my bad, I misremembered, it wasn't 14, it was 51/72 vendors flagging it

Then it looks like the file you downloaded AND ran was infected, this is still user error. People use that site every day without issues, if others don't want to take the time to educate themselves on basic PC / internet security then it's their own fault.

Now you can chalk this up to a learning experience, go look up the things I advised and the viruses in ads and come away from this with a chance of having a better online experience or you can continue to argue with me and you'll probably have to reinstall your OS soon from the bad habits you have...

 

[DyonisXX]

First of all you've been a member here long enough to know that game is not allowed to be linked here. You could have just said it's a loli game and you can't link or name it.

Second, the page tells you the file size, 4.3GB NOT 3GB meaning if the file you get is NOT that size it's not the file you want.
Third, I'm not downloading that to test it and I'm certainly not going to take the route you took.



I know when you said virus you meant the download as a whole, which is why it's wrong and I corrected you.



Technicalities are LITERALLY how you protect yourself online...



No, you are on the internet, you can get detailed information from security experts.



Then it looks like the file you downloaded AND ran was infected, this is still user error. People use that site every day without issues, if others don't want to take the time to educate themselves on basic PC / internet security then it's their own fault.

Now you can chalk this up to a learning experience, go look up the things I advised and the viruses in ads and come away from this with a chance of having a better online experience or you can continue to argue with me and you'll probably have to reinstall your OS soon from the bad habits you have...

You do realise the game is also on f95, right?

 

[morphnet]

You do realise the game is also on f95, right?

No I didn't, I apologize for the first section of my post then. The rest is still valid.

 

[FunkyJustin]

i download wrong file and even open it but it dont run, what is it (it in direct download button) View attachment 5199713

same here it's some random game with bots and players??? this isn't the game I wanted to download, this is definitely malware.

 

[FunkyJustin]

this is what the readme says on that game (full_version_9719464_local_game_installation.rar)
do not trust this readme, delete that file immediately.

 

[FunkyJustin]

I found another guide for ryuugames on reddit, stay safe out there on the seven seas!

You must be registered to see the links

 

[FunkyJustin]

I'll leave this behind as a reminder for myself (I keep forgetting how to download from there) and as a guide for others here who also want to know:

RyuuGames Download Guide (Server 1)

First, you need to disable Ublock Origin or any adblocker you have (or else some links do not work or load properly).

Step 1
For this guide, I used server 1 and mediafire, (I tried server 2 and server 3 but they don't load for me)
Take note of the file size and the password!!!

Under server 1, click on any file hosting service you want to download from:


Step 2
When you arrive in this page, wait 10 seconds and click on "LINK DOWNLOAD" :



Step 3
When you get to this page, click on "Continue":



Step 4
When you get to this page, click on I am human checkbox and solve the captcha:



Step 5
When you get to this page, click on "Click here to Continue" (very important, please follow):


Step 6
When you get to this page, middle click (with your scroll wheel) on "Continue (0/1)" to open it on a new tab (Note: Do not close this page yet) (very important, please follow):


Step 7
You should then arrive at this page where it gives you the link to your file:


But if for some reason that page doesn't give you the link (no text just a dark blue background), go back to the previous page (Step 6) and middle click on "Continue (0/1)" again, (keep trying until the link appears, that's how I got that page to show the link for this example)

Step 8
When you get the final link, simply copy it and proceed to that link and download your file (in my case, it was a mediafire link):


You would know it's the correct file if you see a similar filename to: "[Ryuugames] RY-v36768_en" and the file size matches

If the file asks for a password, refer to the password from before (below the download links) or simply use either one of these (it's often

You must be registered to see the links

):


WARNING!!!
NOTICE!
If you see this file instead (full_version_9719464_local_game_installation),
DO NOT DOWNLOAD IT, or if you did, DO NOT EXTRACT IT,
DELETE IT IMMEDIATELY!
IT IS MALWARE!



In my experience, you will get redirected to this file if you clicked on the wrong buttons on Step 5 or 6, please go back to step 1 to retry.


Update:
I tried downloading with Ublock Origin turned on, turns out it's possible but you will have to just retry whenever a page doesn't load or refuses to load properly, which means you must middle click to go to the next page (middle clicking opens page on a new tab) (except for step 5) and if that next page doesn't load, go back to the previous page and middle click the button to take you to the next page again (do this instead of refreshing the page that did not load as in my experience, it has never worked for me)

 

[BornAnime]

A good chunk of ryuugames are fine, but there are some that do in fact have malware, adware and other misc garbage. For me I'd used the site just fine for a long ass time until Aokana, which had a crap ton of malicious malware in the .exe which along with some corrupted files I tried to recover from a flash drive helped brick my HDD.

You can use it fine in most cases, but just know you are playing Russian roulette.

 

[DocRipper]

A good chunk of ryuugames are fine, but there are some that do in fact have malware, adware and other misc garbage. For me I'd used the site just fine for a long ass time until Aokana, which had a crap ton of malicious malware in the .exe which along with some corrupted files I tried to recover from a flash drive helped brick my HDD.

You can use it fine in most cases, but just know you are playing Russian roulette.

To be honest.You're playing Russian roulette everywhere, because almost all the pirate sites steal files from each other.
After all, even F95 has a malware problem and Ryuu often steals files from F95 when we have "something better" (translated,uncensored builds).
They stole tons of my repacks from here.

 

[Riasgregory64]

I'll leave this behind as a reminder for myself (I keep forgetting how to download from there) and as a guide for others here who also want to know:

RyuuGames Download Guide (Server 1)

First, you need to disable Ublock Origin or any adblocker you have (or else some links do not work or load properly).

Step 1
For this guide, I used server 1 and mediafire, (I tried server 2 and server 3 but they don't load for me)
Take note of the file size and the password!!!

Under server 1, click on any file hosting service you want to download from:
View attachment 5276102

Step 2
When you arrive in this page, wait 10 seconds and click on "LINK DOWNLOAD" :

View attachment 5276015

Step 3
When you get to this page, click on "Continue":

View attachment 5276018

Step 4
When you get to this page, click on I am human checkbox and solve the captcha:

View attachment 5276024

Step 5
When you get to this page, click on "Click here to Continue" (very important, please follow):
View attachment 5276026

Step 6
When you get to this page, middle click (with your scroll wheel) on "Continue (0/1)" to open it on a new tab (Note: Do not close this page yet) (very important, please follow):
View attachment 5276027

Step 7
You should then arrive at this page where it gives you the link to your file:
View attachment 5276030

But if for some reason that page doesn't give you the link (no text just a dark blue background), go back to the previous page (Step 6) and middle click on "Continue (0/1)" again, (keep trying until the link appears, that's how I got that page to show the link for this example)

Step 8
When you get the final link, simply copy it and proceed to that link and download your file (in my case, it was a mediafire link):
View attachment 5276063

You would know it's the correct file if you see a similar filename to: "[Ryuugames] RY-v36768_en" and the file size matches

If the file asks for a password, refer to the password from before (below the download links) or simply use either one of these (it's often

You must be registered to see the links

):
View attachment 5276077

WARNING!!!
NOTICE!
If you see this file instead (full_version_9719464_local_game_installation),
DO NOT DOWNLOAD IT, or if you did, DO NOT EXTRACT IT,
DELETE IT IMMEDIATELY!
IT IS MALWARE!

View attachment 5276070

In my experience, you will get redirected to this file if you clicked on the wrong buttons on Step 5 or 6, please go back to step 1 to retry.


Update:
I tried downloading with Ublock Origin turned on, turns out it's possible but you will have to just retry whenever a page doesn't load or refuses to load properly, which means you must middle click to go to the next page (middle clicking opens page on a new tab) (except for step 5) and if that next page doesn't load, go back to the previous page and middle click the button to take you to the next page again (do this instead of refreshing the page that did not load as in my experience, it has never worked for me)

You could still end up in the virus download page even with Ublock turned on as with my experience, I stupidly extracted the rar without verifying the file size discrepancy with my target game. I didn't run the .exe file due to playing the extraction in my background then was notified of the trojan file detection then removal by Winsec. I did open the Please ReadMe file though to read what was inside. Am I still at risk of an infection? Thanks for the confirmation of the virus btw

 

[FunkyJustin]

You could still end up in the virus download page even with Ublock turned on as with my experience,

I have never mentioned that Ublock prevents you from visiting the virus download page, only that it breaks pages (some pages become unable to load if ublock origin is on), which is why I suggested turning it off so the pages would load properly.

However, you can leave it on if you're willing to re-open the page within several attempts just so you can get it to load by middle clicking on the button that sends you to the next page instead of normally left clicking the button.

I stupidly extracted the rar without verifying the file size discrepancy with my target game. I didn't run the .exe file due to playing the extraction in my background then was notified of the trojan file detection then removal by Winsec. I did open the Please ReadMe file though to read what was inside. Am I still at risk of an infection? Thanks for the confirmation of the virus btw

If you have extracted the .rar file and read the ReadMe file, do not worry, it's just a regular text file, just don't run the .exe file and delete the extracted files and the .rar promptly, and delete it from your Recycle Bin as well to make sure.


Have fun and stay safe out there pirate!

 

[pmarker]

Can't believe how careless of me after so many years. Thanks for the info.

 

[Kazuka13]

Multiple people (including myself) pointed out the correct download method anyway.

Past that comes down to your adblockers and anti-virus really. Never turn those off no matter how much a site insists that you do.

It's ultimately not much different than downloading from any site (including here). You're at a risk regardless if you aren't buying from the official sources (DL Site, DMM, Kagura, etc.).