Unity Nemurimouto [v0.09] [pachipoi]

[Bob69]

The Virus downloader only executed if your system time was 2025-08-14. If you started the game before the 14th you are most likely fine, but delete and redownload.

 

[Vlbc]

Any chance to make her the daughter?

 

[jeybake]

just downloaded this today from pixeldrain, is my system safe?

 

[Bob69]

just downloaded this today from pixeldrain, is my system safe?

No (if you started it and when you started it was the 14th). Yes if you didn't, deleted it and redownloaded it now.

 

[ELDuran2K4]

I DL'ed this morning. Scanned with my antivirus and came up with zero issues. said I had no infected files. Should I be worried still?

 

[Fidzius]

Huh, I guess given the recent context, the game crashing and the .EXE disappearing wasn't a bug but a feature (of security software).

 

[lHarmonyl]

Mega link in OP is safe?

 

[Bob69]

I DL'ed this morning. Scanned with my antivirus and came up with zero issues. said I had no infected files. Should I be worried still?

If you started it and it was the 14th yes. If not then no.

Also it contains a downloader that will download the malware. Scanning it before the actual malware is downloaded will do nothing.

Mega link in OP is safe?

Yes

 

[ELDuran2K4]

If you started it and it was the 14th yes. If not then no.

Also it contains a downloader that will download the malware. Scanning it before the actual malware is downloaded will do nothing.


Yes

I'm still on the 13th. won't be 14 until 7 more hours.

 

[Bob69]

I'm still on the 13th. won't be 14 until 7 more hours.

Just delete the infected one and re-download.

 

[Tuberaku]

I downloaded it but didn’t open it, I just extracted it from the RAR after ı see this post then deleted it. Could a virus have gotten in?

 

[Bob69]

I downloaded it but didn’t open it, I just extracted it from the RAR after ı see this post then deleted it. Could a virus have gotten in?

No.

 

[MisterBrickster]

Downloaded the android version, ripped it out and cleaned some files up just to be safe.

From a tertiary glance it only affects windows yeah? Just wanna make sure that it didn't shove a file somewhere.

 

[vaporeon12211]

i played the 13th and been 2 h and 15 min of the 14 for me, i already deleted it what kind of scanner i use to see if i have something

 

[abbydrago]

I downloaded and played it probably in 14th, coz Windows defender caught this downloded in temp folder.


It was automatically quarantined, and I removed it from system.
Currently scanning system with Malwarebytes and Windows defender.
Can someone suggest me what should I do to keep myself safe?

 

[Bob69]

i played the 13th and been 2 h and 15 min of the 14 for me, i already deleted it what kind of scanner i use to see if i have something

Just a Antivirus scan should be fine. Could be execute when it was running into the 14th.

I downloaded and played it probably in 14th, coz Windows defender caught this downloded in temp folder.
View attachment 5142753

It was automatically quarantined, and I removed it from system.
Currently scanning system with Malwarebytes and Windows defender.
Can someone suggest me what should I do to keep myself safe?

If it was quarantined and you deleted it its okay. Good to see WinDefender catches it. That makes the possible infections probably very rare.

 

[JustForHentai00011]

It might be nice in the future to include a SHA256 (or equivalent) hash of the infected and safe versions, just to make it easier for people to determine which they have without worrying about timestamps and such.

 

[SvenVlad]

Whew, good thing I didn't start the game. Although probably my AV would've blocked the download.

In any case, it's deleted. Thanks for letting us know.

 

[WadeBtw]

Good job not vetting downloads before putting them on site.

 

[Zeffuu]

Just a Antivirus scan should be fine. Only if you started the game on the 14 its would have been executed.

If it was quarantined and you deleted it its okay. Good to see WinDefender catches it. That makes the possible infections probably very rare.

Curious the payload timing, so the game was running on my system when it hit 12AM, and noticed some firewall pings..

First was the game exe going to ethereum-sepolia.publicnode.com:443 (104.20.24.117) 12:00am
Then an AutoIt v3 Script kicking off going to destinyshatter.one:80 (109.107.168.8) 12:01am
Then Windows Defender quarantining the same Lumma that abbydrago got at 12:01am.

So I assume the AutoIt script pulls down the Lumma?

The AutoIt script that spawned was located at appdata\local\temp\730305\partners.pif