Collection Video Ryanpos Collection [2025-01-10] [ryanpos_3D]

bidlocat0

bidlocat0

Newbie
Sep 27, 2019
38
99
224
nooblez said:
It seems like the original japanese version uploaded was infected with malware. When I ran the game, it created a program in my AppData.

More details here: https://f95zone.to/threads/recent-malware-infected-games.207437/post-19065182
Click to expand...
My fault, I deeply apologize. I explain in detail how to get rid of it, as I suffered from it myself. I found out about this recently, because I also noticed a strange folder in %APPDATA%/LOCAL, after which I saw the news on another game sharing forum, and everything fell into place. In general, if you don't go into too much detail, then one user started infecting games running on the Tyranoscrypt engine and also RPGMaker, modifying files such as version.dll, cryptbase.dll, libEGL.dll , then distributing them on various well-known torrent trackers. If you are interested in reading in more detail, here is the
You must be registered to see the links
.
How to get rid of it? It's very simple, you need to delete it manually, regular antiviruses do not delete it and also do not see it, the folder with the mining virus itself is located in %APPDATA%/local/cacheapp - you need to delete this folder, but first I would recommend that you open regedit and follow this path: "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ - find the "Shell" and delete, after which delete the folder itself. If for some reason the folder is not deleted, switch to safe mode and delete it.
P.S: I deleted the download link with the game, I offer my deepest apologies to anyone I infected.
 
Last edited:
  • Like
Reactions: nooblez
Zaychikz

Zaychikz

Member
Apr 3, 2020
275
491
214
bidlocat0 said:
My fault, I deeply apologize. I explain in detail how to get rid of it, as I suffered from it myself. I found out about this recently, because I also noticed a strange folder in %APPDATA%/LOCAL, after which I saw the news on another game sharing forum, and everything fell into place. In general, if you don't go into too much detail, then one user started infecting games running on the Tyranoscrypt engine and also RPGMaker, modifying files such as version.dll, cryptbase.dll, libEGL.dll , then distributing them on various well-known torrent trackers. If you are interested in reading in more detail, here is the
You must be registered to see the links
.
How to get rid of it? It's very simple, you need to delete it manually, regular antiviruses do not delete it and also do not see it, the folder with the mining virus itself is located in %APPDATA%/local/cacheapp - you need to delete this folder, but first I would recommend that you open regedit and follow this path: "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ - find the "Shell" and delete, after which delete the folder itself. If for some reason the folder is not deleted, switch to safe mode and delete it.
P.S: I deleted the download link with the game, I offer my deepest apologies to anyone I infected.
Click to expand...
Good to know thanks
 
Zaychikz

Zaychikz

Member
Apr 3, 2020
275
491
214
bidlocat0 said:
My fault, I deeply apologize. I explain in detail how to get rid of it, as I suffered from it myself. I found out about this recently, because I also noticed a strange folder in %APPDATA%/LOCAL, after which I saw the news on another game sharing forum, and everything fell into place. In general, if you don't go into too much detail, then one user started infecting games running on the Tyranoscrypt engine and also RPGMaker, modifying files such as version.dll, cryptbase.dll, libEGL.dll , then distributing them on various well-known torrent trackers. If you are interested in reading in more detail, here is the
You must be registered to see the links
.
How to get rid of it? It's very simple, you need to delete it manually, regular antiviruses do not delete it and also do not see it, the folder with the mining virus itself is located in %APPDATA%/local/cacheapp - you need to delete this folder, but first I would recommend that you open regedit and follow this path: "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ - find the "Shell" and delete, after which delete the folder itself. If for some reason the folder is not deleted, switch to safe mode and delete it.
P.S: I deleted the download link with the game, I offer my deepest apologies to anyone I infected.
Click to expand...
I dm you
 
You must log in or register to reply here.
Top Bottom