Unity Nemurimouto [v0.09] [pachipoi]

4.60 star(s) 17 Votes

phantumu

New Member
Jul 1, 2022
3
3
127
It also creates a nemurimoto.exe and a weird .pif file in appdata/local/temp. So it was 3 files in my case. I've done full scans with malwarebytes and defender after that and didn't find anything else. But there is always a chance that it could've left some other files or altered existing ones. The anal tag was for the player I guess.
No .pif as far as I can see, only 2 nemurimoto.exe in local/temp.
 

accu.d

New Member
Feb 10, 2018
11
18
147
It also creates a nemurimoto.exe and a weird .pif file in appdata/local/temp. So it was 3 files in my case. I've done full scans with malwarebytes and defender after that and didn't find anything else. But there is always a chance that it could've left some other files or altered existing ones. The anal tag was for the player I guess.
I'm wondering if anyone here has noticed strange log in attempts or changes in their social media, cuz so far it seems like we're more or less safe.
Giving you all the info, I got from ChatGPT and summarized by me.
So basically virustotal can't find any threats in .exe because the .exe is not a threat. It, though, creats a nemurimoto.exe in Temp directory that is a troyan downloader. That .pif file is a troyan/some sort of a stealer. It instantly steals all the chrome/edge/opera/brave etc. cash, cookies, saved password, compresses it as archive and sends to the guy. Basically, as I undrestood, if the .pif file got created - you are fucked.

So I changed all the main passwords - mail, banks, etc - from my laptop (only the PC got infected) and went to sleep. The next morning I saw a "new attempt to log-in to your mailbox". So I changed all the passwords. And after having another chat with ChatGPT - reinstalled the system.
 

thekill

Member
Dec 9, 2018
160
82
187
im GMT+2
i dowloaded and played the game on 13/08/2025, and stoped playing it, have not opened it since...
i dont remember if a console opened when i launched
i did have a graphical glitch today on my PC 12h ago (black screen 1sec 2times, and after some small black boxes on some internet pages. these might be unrelated but i wanted to share in case)
i did the start up windows defender scan (15min) found nothing
the windows defender al lscan is going atm but it will take 6h+ :/

i still have the game files and zip, should i deleted it right now ? (i have now deleted the game files : 16/08/2025 01:00)
(game download on zip file said is 17:42, and the F95 warning says between 07:52 - 13:42 my local time) all 13/08/2025

should i be concerned ?
 
Last edited:
  • Like
Reactions: Athrowawayy

Guywithalife

Newbie
Jul 23, 2018
47
101
156
Just a Antivirus scan should be fine. Could be execute when it was running into the 14th.

If it was quarantined and you deleted it its okay. Good to see WinDefender catches it. That makes the possible infections probably very rare.
Do you really need a full reinstall of windows like some people are doing?
 

onitiyashi

Member
Jan 11, 2020
163
135
190
Holy crap it’s a good thing I decided to wait on more updates. Didnt know it was handing out viruses like Bonnie Blue
 

Guywithalife

Newbie
Jul 23, 2018
47
101
156
Downloaded the game yesterday, ran it, got to opening scene and it automatically closed the game and deleted the exe file. Afterwards, defender gave me these. I'm currently running a full scan, and nothing's popped up yet. How are my chances?

View attachment 5145237
Yeah I got this one too. Played the game for a minute and was about to close it myself cuz I didn't like it but then BOOM windows fucking closed it on its own. At the same time chrome logged me out of f95zone (probably lumma trying to get my cookies) like what happened to NoNameUkrainianMan .
wanted to shoot myself.

I logged back in, read about the hack, facepalmed and ran defender and malwarebytes in appdata folder which caught the lumma .exe and a .pif. Make sure you delete those.

Since then I've done a ton of scans and turned on full bitdefender real time protection but haven't found anything.
My f95 account or steam account which were vulnerable at that time still haven't been accessed from anywhere till now.

Have you found any log in attempts in your accounts?
 

Rashsid

New Member
Mar 8, 2024
10
17
31
I downloaded it from "Ryuugames" and my malwarebytes detected this, nothing so serious, just false positives, but i run the quarantine just in case
 

pachipoi

Member
Game Developer
Jul 30, 2022
176
746
216
I downloaded it from "Ryuugames" and my malwarebytes detected this, nothing so serious, just false positives, but i run the quarantine just in case
not false positive. malwarebytes says it's completely clean for the original files. also, ryuugames seems sketchy as heck, idk why u'd use it in general at all?
1755372710792.png
 

Rashsid

New Member
Mar 8, 2024
10
17
31
not false positive. malwarebytes says it's completely clean for the original files. also, ryuugames seems sketchy as heck, idk why u'd use it in general at all?
View attachment 5153147
I know, of course the original is completely clean, and i know if i download it from sketchy pages im in danger, i just wanted to try it and didn't know that it was here in first place
 
4.60 star(s) 17 Votes