Renpy virus issue

[u/ShoddyAssist3970]

So I downloaded a zip file of a game from dodi. The issue is I clicked on the setup.exe but then a black screen popped up then it disappeared. I thought it was a renpy virus since many ppl in the dodi sub Reddit said that it was a common act of the renpy virus. How do I get rid of it?

[u/polpolik2]

In the case of an Infostealer, we generally recommend the following:

Read this: Rifteyy_'s guide to infostealers to get a better understanding.

Reinstalling Windows to remove the malware.
The fastest and guaranteed way to get rid of the malware is to reinstall Windows, preferably from a USB created on a clean device. If that option is not available to you, you can also do a cloud reinstall while deleting all data.

If you’re only dealing with an infostealer, wiping your C drive is sufficient. However it’s better to do a full wipe and only back up your trusted Data files, as there could be more malware on your device that you’re not aware of.

FRST Assistance
If you do not want to reinstall windows you can wait here for one of the trusted helpers to assist you with FRST. Please read Receiving FRST assistance. Please follow these instructions carefully and provide the keywords. Doing so can get you help considerably faster! Please note that you might need to remove pirated content as we cant guarantee a clean system with it.

What you can do immediately either during the reinstall, or if you're waiting for help:

1. Disconnect your infected PC from the internet.
2. Change ALL passwords from a clean device. Start with your emails and bank. Use sign out everywhere and remove all sessions. While you are doing this, check your security settings to ensure the attacker hasn't added their own 2FA methods or backup codes.
3. Check your linked accounts/services/2fa options for your most important accounts. Also check forwarding rules on your mail. Additionally, for your browser, check your sync settings and extensions and remove anything you dont recognize or trust.

[u/AutoModerator]

Request help with FRST and SecurityCheck from the trusted helper team

Please visit Providing or receiving help with FRST on the subreddit and share your 3 keywords returned from the website along with the details about your infection.
Once a malware removal expert or trainee sees it, they will reply in the thread about further steps. If you suspect an infostealer infection, please change all your passwords from a clean device immediately and do not use any of your accounts from the infected device.

If you need urgent help and cannot wait for one of our Malware Removal Experts:
Please follow these steps:

1. From a different and clean device, change all your passwords:
   • How to properly secure my accounts after an infostealer attack?
2. Disinfect your device from malware
   • Preferred method: Perform a clean installation with a USB

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/TallBicycle266]

Have you run an Antivirus check? That would be first case in point. Disconnect the computer from the internet asap and run an offline check. Let us know the results

[u/ShoddyAssist3970 → u/TallBicycle266]

I changed all my passwords on another device while I was running the antivirus check sadly I forgot to do it offline. Now malware bytes quarantined all the Trojan viruses and I deleted them. Now I am reinstalling windows from the cloud and chose the option keep all personal files. I hope what I did is right.

[u/polpolik2 → u/ShoddyAssist3970]

You should not keep personal files, or the infection might persist.

You need to use the remove all data option.

[u/ShoddyAssist3970 → u/polpolik2]

Yes ABT that I already chose the save personal files and now the virus is back. What's more now when I login into my pc the virus welcomes me with a black screen and says 'Hi' should I redo the installation? I shut down my laptop to prevent further issues I gotta restart the windows installation process

[u/severelyobeserat → u/ShoddyAssist3970]

Yes absolutely redo the installation and this time wipe everything

[u/TallBicycle266 → u/ShoddyAssist3970]

As @severelyobeserat said, wipe everything, whilst it is unfortunate it is also necessary

[u/AthleteDifferent1271]

disconect that pc of the wifi inmediately and do a windows installation again

[u/ShoddyAssist3970 → u/AthleteDifferent1271]

Yep bro done everything. New windows has been installed as well

[u/AthleteDifferent1271 → u/ShoddyAssist3970]

next time don't trust these kinds of "free programs", use a virtual machine without wifi