discussion Virus in AVN games

[Mr. Tearson]

Heya, folks. Just making this announcement.

It looks like a stronger version of this virus is going around in games this time. Many of which originate from F.95zone.

Why? I don't know. I'm assuming it's just another white knight attacking the Adult Porn Game Communities.

What does it do?
From my understanding, it takes your data, bitcoin accounts, f.95 accounts, and who knows what else they'll do with this information. Regardless, as usual, take as much precaution as you can.

If you find games that aren't false positive or you aren't sure, please comment with screenshots so we can be able to confirm.

Please be sure to look in the comment sections as it may have been spoken about already.

And most importantly... REPORT THE GAME THREAD!!!
The sooner we know about the issue, the sooner we can remove and replace.

Sandboxie tutorial by @StephanieD

 

[BeowulfKnight]

Running Vn's in a sandbox (such as sandboxie) without internet is the safest way if you are concerned.

 

[fthegovernment]

is there no virus / malware protection on the server ?
why is this post not made into a global alert ?

what antivirus will pick these up ?

i've had trouble with crypto miners in games before & they are not detected unless you look through the code manually.

 

[BananaPrincess]

is there no virus / malware protection on the server ?
why is this post not made into a global alert ?

what antivirus will pick these up ?

i've had trouble with crypto miners in games before & they are not detected unless you look through the code manually.

I always scan games with avast. But I guess anti-virus doesn't pick them up?

 

[Garyh659]

Any chance we could get a list of the affected game and a time frame the infected files were available in (When they were uploaded and when they were fixed) kind of like the cuckzone thread?

Also, if they were mostly cuckzone files, does this mean games+ downloads should be safe still?

 

[Alex2033]

Anyone know which games are bad? I've downloaded a couple recently

 

[User_111574]

Anyone know which games are bad? I've downloaded a couple recently

There is an exhaustive and constantly updated list of infected games on F*95, I have it in front of my eyes, but the management of our site was not up to it, as you may have noticed. Damn, it's impossible to even repost the list of games because of the kindergarten with the distortion of the name of that resource.
And it should be noted that no infections have been detected in games on Unity, RPGM or Unreal, only RenPy.
Here recently infected games:

Amelie falls over and over again ~ An endless week in Magic Academy: 2025-08-19 T04:44 PM - 2025-08-20 T02:00 PM
Breeding City Welcomes you: 2025-08-19 T04:16 PM - 2025-08-20 T01:54 PM
I’m Falling for My Sexy Neighbor: And Her Drunk Husband Has No Clue: 2025-08-19 T00:18 PM - 2025-08-20 T05:43 PM
Maple Hills College: 2025-08-09 T04:35 AM - 2025-08-20 T05:14 PM
Nemurimouto (v0.09): 2025-08-13 T05:52 AM - 2025-08-13 T11:42 AM
Halfway House - Bonus EP Twilight's Fate: 2025-07-31 T10:35 AM - 2025-08-05 T07:23 AM - PC ONLY
Anna Exciting Affection: 2025-07-30 T08:44 AM - 2025-08-01 T03:19 PM - Both VN and Sandbox Versions.
Raptus: 2025-07-22 T04:04 PM - 2025-07-23 T08:03 PM - MAC ONLY
Shoretown Saga: 2025-07-08 T07:26 PM - 2025-07-10 T10:30 AM - MAC ONLY
Temptations of Love: 2025-06-27 T05:04 PM - 2025-06-29 T03:41 PM - MAC ONLY
Heritage: 2025-06-25 T03:18 PM - 2025-06-27 T12:33 PM - MAC ONLY

 

[Bottomdweller]

Is there anyway of checking for undetected viruses? Anything that might stand out in regedit? I heard that having a bin folder in the renpy save data could be a sign of infection and running the games offline due to some games having a downloader within it. Anything on this would be helpful

 

[User_111574]

Is there anyway of checking for undetected viruses? Anything that might stand out in regedit? I heard that having a bin folder in the renpy save data could be a sign of infection and running the games offline due to some games having a downloader within it. Anything on this would be helpful

There is a lot of useful information and instructions on the unnamed website. But I can't give you a direct link there. For an example: Properly configure a Firewall; Hardening Windows with other settings and prevent tampering etc.

About this malware:
The games are infected by a downloader. This uses Ren'Py and Python functions to download an executable and then executes it.
So, you won't find anything by scanning the infected game. It's only when the game runs (and it might be delayed or triggered at a later point within the game) that the downloader activates, downloads the executable, and then executes it.
This is why our existing procedures didn't pick this up.

 

[Bottomdweller]

There is a lot of useful information and instructions on the unnamed website. But I can't give you a direct link there. For an example: Properly configure a Firewall; Hardening Windows with other settings and prevent tampering etc.

About this malware:
The games are infected by a downloader. This uses Ren'Py and Python functions to download an executable and then executes it.
So, you won't find anything by scanning the infected game. It's only when the game runs (and it might be delayed or triggered at a later point within the game) that the downloader activates, downloads the executable, and then executes it.
This is why our existing procedures didn't pick this up.

I've seen that info, its a lot to take in and my add sometime kicks me out. I already got a custom firewall, and scan my pc daily. Just didn't see anything about what gets downloaded. Does it create files or will the anti virus neutralize it. Always wondered if something could get pass the firewall.

 

[Malakai]

Isnt this the same method that was used before? How the fuck do people even get infected by this ?
Do they turn off their windows defender or what?
Every time something trys to connect to the internet my windows firewall screams at me.
Some *.exe file trys to download another exe file? Windows defender runs amok!
Seriously...... besides i've never even heard of those games. Guess playing only M+ games does have its advantage

Thanks for the heads up tho

 

[dirtyoldman]

And it should be noted that no infections have been detected in games on Unity, RPGM or Unreal, only RenPy.
Here recently infected games:

Amelie falls over and over again ~ An endless week in Magic Academy: 2025-08-19 T04:44 PM - 2025-08-20 T02:00 PM

but this very first title in your list is an RPGM game - ??

 

[Alex2033]

There is an exhaustive and constantly updated list of infected games on F*95, I have it in front of my eyes, but the management of our site was not up to it, as you may have noticed. Damn, it's impossible to even repost the list of games because of the kindergarten with the distortion of the name of that resource.
And it should be noted that no infections have been detected in games on Unity, RPGM or Unreal, only RenPy.
Here recently infected games:

Amelie falls over and over again ~ An endless week in Magic Academy: 2025-08-19 T04:44 PM - 2025-08-20 T02:00 PM
Breeding City Welcomes you: 2025-08-19 T04:16 PM - 2025-08-20 T01:54 PM
I’m Falling for My Sexy Neighbor: And Her Drunk Husband Has No Clue: 2025-08-19 T00:18 PM - 2025-08-20 T05:43 PM
Maple Hills College: 2025-08-09 T04:35 AM - 2025-08-20 T05:14 PM
Nemurimouto (v0.09): 2025-08-13 T05:52 AM - 2025-08-13 T11:42 AM
Halfway House - Bonus EP Twilight's Fate: 2025-07-31 T10:35 AM - 2025-08-05 T07:23 AM - PC ONLY
Anna Exciting Affection: 2025-07-30 T08:44 AM - 2025-08-01 T03:19 PM - Both VN and Sandbox Versions.
Raptus: 2025-07-22 T04:04 PM - 2025-07-23 T08:03 PM - MAC ONLY
Shoretown Saga: 2025-07-08 T07:26 PM - 2025-07-10 T10:30 AM - MAC ONLY
Temptations of Love: 2025-06-27 T05:04 PM - 2025-06-29 T03:41 PM - MAC ONLY
Heritage: 2025-06-25 T03:18 PM - 2025-06-27 T12:33 PM - MAC ONLY

Thank you for the list & explanation

 

[PirateThis]

There is a lot of useful information and instructions on the unnamed website. But I can't give you a direct link there. For an example: Properly configure a Firewall; Hardening Windows with other settings and prevent tampering etc.

About this malware:
The games are infected by a downloader. This uses Ren'Py and Python functions to download an executable and then executes it.
So, you won't find anything by scanning the infected game. It's only when the game runs (and it might be delayed or triggered at a later point within the game) that the downloader activates, downloads the executable, and then executes it.
This is why our existing procedures didn't pick this up.

The malware has been found on renpy,rpgm, and unity for sure

You are correct that scanning it with any antivirus won't find it even on virustotal.

Best practices for safety include, both the configure firewall and hardening windows options you mentioned but also running in a sandbox or VM and running on a limited user(DO NOT RUN ON ADMIN) and setting up 2fa for anything you can.

Stay safe out there folks!

 

[GettinOlder]

Luckily I have McAfee on my system and it's updates are checked daily. I watch out for that type of stuff, although, I have
been wondering lately if any of these were trojans or not.
Thanks for the heads up, but I agree that this should be a Global Alert for ALL members.

 

[Night Fury]

And it should be noted that no infections have been detected in games on Unity, RPGM or Unreal, only RenPy.
Here recently infected games:

Amelie falls over and over again ~ An endless week in Magic Academy: 2025-08-19 T04:44 PM - 2025-08-20 T02:00 PM (RPGM)
Breeding City Welcomes you: 2025-08-19 T04:16 PM - 2025-08-20 T01:54 PM (RPGM)
I’m Falling for My Sexy Neighbor: And Her Drunk Husband Has No Clue: 2025-08-19 T00:18 PM - 2025-08-20 T05:43 PM (RPGM)
Maple Hills College: 2025-08-09 T04:35 AM - 2025-08-20 T05:14 PM (RPGM)
Nemurimouto (v0.09): 2025-08-13 T05:52 AM - 2025-08-13 T11:42 AM (Unity)

You must be registered to see attachments

 

[BananaPrincess]

Running Vn's in a sandbox (such as sandboxie) without internet is the safest way if you are concerned.

I can do that, but what happens to save data? When I save is the folder getting saves saved into it?
Or if I stop game will I have to start from scratch?

 

[BeowulfKnight]

I can do that, but what happens to save data? When I save is the folder getting saves saved into it?
Or if I stop game will I have to start from scratch?

It depends on the program, usually it's saved in the same sandbox, if the sandbox doesn't destroy any file after you close, the save will be there once you open again. It kind of goes program by program you'll have to look at the features of different ones.

 

[fthegovernment]

Luckily I have McAfee on my system and it's updates are checked daily. I watch out for that type of stuff, although, I have
been wondering lately if any of these were trojans or not.
Thanks for the heads up, but I agree that this should be a Global Alert for ALL members.

McAfee huh, well you got nothing to worry about than #sarcasm

 

[Captain Panda]

Just so people dont panic too much, im sure that all games that are uploaded are scanned (i will do the same when i upload) but just be careful cuz sometimes things can slip by, just double check any flags, some can be faulse positives but if you get one of those be sure to check yourself especially bigger downloads. last thing you need is something like the Great Discover Virus, that one sucks to get rid of. basically if your unsure about a file dont be scared to ask someone