Install the app
How to install the app on iOS

Follow along with the video below to see how to install our site as a web app on your home screen.

Note: This feature may not be available in some browsers.

PSA: Malware detected from member's upload

hello

im here to tell you guys that im unfortunate soul that my acc got compromise.....IN Reddit

today i just scroll down reading stuff from my gacha reddit usually on my phone
i notice some weird shit going on on left side of my reddit screen
turn out i found that i followed a bunch of weird subreddit i not recognize
dont know why thay target my reddit of all place tho...

but thankfully of that it not damage much
all it did just followed a bunch of weird subreddit that im not bother goin in
Egirl / 18only / femboy whatever the fuck subreddit is that IRL 3D im not bothered followed
and using my acc posting promote some weird IPTV shit which i already removed that post
all i did was just change my pass and removed a bunch of shit thay tried to mess with my reddit

not sure about the day/time when i got hit by
judge by the promoted post / login activity
it happened around 1 month ago
which is before anime-sharing warning us about cryptominer thing
and i dont download stuff in anime-sharing
i only download from hentai-share
which is mostly re-upload in here

the game that i possible get hit by are 3 game
all 3 game i download from hentai-share site
RJ01518767 upload at HS 2025/12/15
RJ01524502 link got removed on hentai-share but i remember i download in thare
RJ01525900 which idk why anime-sharing remove this code on the list...
it upload in HS at 2025/12/24

so if admin in hentai-share see my post here
pls deleted that other 2 game that still at you site lol

so as you can see i got bullet hit 3 game and doesnt even notice
i was infected untill anime-sharing announcement here
i was thinking the same as you guys...just deleted the file and removed the registry thing and that it
solve the problem this guys just only miner my computer
nothing bad going to happened

untill 3 day ago got reality check slap in my face
i was too careless on this one
it was my fault...

anyway stay safe
if you know you infacted
removed that thing
and better change all you password

better save then sorry like me
 
  • Like
Reactions: Scale
七咲七夜 said:
This is shocking news at the end of the year.

If you have downloaded any of the games on the list, check "C:\Users\(username)\AppData\Local" and if the "syscacheapp" folder exists, you are infected. Empty the contents of the "syscacheapp" folder. (If the folder is already empty, no minors have been copied and no special measures are required. To be on the safe side, we recommend deleting the games listed.)

You can identify infected games by monitoring the "syscacheapp" folder and checking if cacheapp64.exe is generated immediately after launching the game.

Additionally, the paths to "cacheapp64.exe" and "explorer.exe" will be added to the registry at "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell", so delete the string "explorer.exe, C:\Users\(username)\AppData\Local\cacheapp64.exe". If \Shell is empty, you can delete /Shell itself.

In my case, I was infected by "カーテンのむこう NTR", "NTRギャル -オタクに優しいギャルは寝取られる-" and "人妻剣士サツキの寝取られ売春記".

We recommend monitoring the "syscacheapp" folder for a while to check if any suspicious files have been created.

Please note that these recommendations are merely personal recommendations and are not binding. Please read the Huorong report and use at your own discretion.
Click to expand...
Does deleting everything from the syscacheapp folder and the Shell registry at "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" suffice for now? Am I safe?
 
khazu said:
Does deleting everything from the syscacheapp folder and the Shell registry at "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" suffice for now? Am I safe?
Click to expand...
Maybe deleting the game(s) with revo uninstaller is an even better idea? I don't know much about all that, what other garbage could this malware have spread?
 
Has someone reuploaded RJ01507212 anywhere? I didn't download it back then because I was too bored to do so and dodge a bullet, but I really want to play it 😓
 
Checkmate said:
If it's from an Uploader or Contributor rank (you will see their badge) then it's pretty safe as we collect proof of purchase on a monthly basis
Click to expand...

This is quite a sensitive topic to ask, but I think some clarification might be needed.
The person above was asking whether uploads that are *not marked as Own Bought* are safe. You replied by saying that Uploaders and Contributors have to provide proof of purchase on a monthly basis.

Does this mean everything uploaded here are owned by uploaders? That would be a true feat because I see many who upload dozens of topics a day, spread across all different categories. Imagining that they really bought everything, they either have a very broad range of hobbies or/and they're very rich.
Do they not upload files taken elsewhere too?

What you said didn't really clear up whether the files are safe or not, particularly *non*-Own-Bought ones - which that user was asking about.

I have been reading this thread since it was posted, and if the comments below are to be believed...

lolbob said:
Man, i got a game from shine and it was on the list, seems like shine reuploaded from the user, i've now deleted the contents from the syscacheap and /shell in registery, will keep coming back to check if any new payload gets discovered.

Would it be possible to add something like update: on the banner if any new info gets revealed? Don't wanna have to read the thread everyday.

Would also appreciate getting a tag if any new stuff needs deleting/checking.

Also doing a fullscan with huorong antivirus, will post results when it finishes.

edit: full scan with huorong showed no threat detected, seems like you're fine after deleting syscacheapp and registery.
Click to expand...

Bryanis said:
I'm shocked.
Not by the fact someone did this.
But the afct that after checking this new, I double check my computer to found myself infected. And I enver downloaded from this person. Only from a couple of uploader I trusted because I've been downloading from them for years without problem.

So, it turn out they uploaded someone else work (well, it's frequent), without checking the work for malware....

Gotta delete some more works in my wiating list just to be safe and run some more AV and anti malware run now :-(
Click to expand...
That means even files shared by uploader/contributors rank are not guaranteed to be safe.

In case they do reupload from other sources, users are allowed to know this, so the users won't become complacent thinking they won't get malware just because they download from someone with a badge.
 
Last edited:
  • Like
Reactions: khazu
Apologize, I must have misread ir.

selinee said:
Does this mean everything uploaded here are owned by uploaders? That would be a true feat because I see many who upload dozens of topics a day, spread across all different categories. Imagining that they really bought everything, they either have a very broad range of hobbies or/and they're very rich.
Do they not upload files taken elsewhere too?
Click to expand...
The answer is yes to your final question, people upload files taken elsewhere too. This include Uploader and Contributor

selinee said:
What you said didn't really clear up whether the files are safe or not, particularly *non*-Own-Bought ones - which that user was asking about.
Click to expand...

User should understand nothing is 100% safe, not even Own Bought files. However, to to gain the Uploader and Contributor rank takes a lot of effort and we collect Own Bought proof from Uploader and Contributor on a monthly basis. Most Uploader and Contributor here have been doing it for years.

So I'd say if you see Own Bought mark from Uploader and Contributor member, then it's more reliable.

selinee said:
That means even files shared by uploader/contributors rank are not guaranteed to be safe.
Click to expand...

Absolutely, nothing 100% safe.

Is that clear enough?
 
  • Love
  • Like
Reactions: Scale, selinee and oaklash
some little things i notice on new game release here:
RJ01551343 = libGLESv2.dll size 3730960 / libGLESv2.dll from trial 3730944 (from https://www.rpgmakerweb.com/products/rpg-maker-mv). (seems extra 0x00 padding bytes appended at the end of the file)

RJ01550854/RJ01541755 = libGLESv2.dll size 8192528 / libGLESv2.dll from trial 8192512 (from https://trial.dlsite.com/doujin/RJ01551000/RJ01550854_trial.zip / https://trial.dlsite.com/doujin/RJ01542000/RJ01541755_trial.zip). (same extra padding)

just a little difference no idea why.
 
  • Like
  • Wow
Reactions: MrGuiW and 七咲七夜
Please note that the person who previously uploaded malware appears to have created a new account and has started posting resources on the BT site again.


（Image 1） shows the details of the resources posted by this new suspicious user, while （Image 2）shows the details of the previous malware uploader.

Image 1：
1.png


Image 2：
2.png



The first file this person uploaded was posted on January 2. After that, they began uploading a large number of self-purchased resources.


Here is the link to all files they have published.
https://www.tokyotosho.info/search....mment=true&searchName=true&username=Reeffress




Although no malware has been found in the newly uploaded files so far, there is still a significant risk, as it is highly likely that they were uploaded by the same individual.


Finally, given the current serious situation, I strongly recommend that all resources posted on the forum clearly disclose their original source.
In particular, for reposted content that was not personally purchased, the original source must be explicitly stated, so that sources can be traced efficiently and risks can be minimized.
 
  • Like
  • Love
Reactions: tuanmonkey, SorryExcuseForAPlot, pronet and 3 others
tried comparing the game to their trial version, the .exe and .dll seems same. but starting about 2026-01-20 on the torrent above, some .dll doesn't match anymore, but just a little difference in size (no idea why if there is a purpose for it or not). this mostly show on rpgmaker games.
i tried replacing the .dll from the trial and the game still run.
 
Momukyu said:
tried comparing the game to their trial version, the .exe and .dll seems same. but starting about 2026-01-20 on the torrent above, some .dll doesn't match anymore, but just a little difference in size (no idea why if there is a purpose for it or not). this mostly show on rpgmaker games.
i tried replacing the .dll from the trial and the game still run.
Click to expand...
What game was it? And what .dll file had a different size?
If that user uploaded malware and changed his methods, it could be hiding in the game script .js files, it would require someone to take a deeper look and find any malicious code hiding inside it.
 
MrGuiW said:
What game was it? And what .dll file had a different size?
If that user uploaded malware and changed his methods, it could be hiding in the game script .js files, it would require someone to take a deeper look and find any malicious code hiding inside it.
Click to expand...

all game starting from 2026-01-20 (for rpgmaker games only), i found the size difference mostly on libGLESv2.dll, when i check on hex editor they were extra 0x00 padding. if the game have trial on dlsite you can compare the js folder, they were little different but seems fine i think except for those without a trial and nothing to compare except checking the .js manually.

as for RJ01550693 this were the .dll difference, as usual small size difference.

Screenshot 2026-01-23 130103.png
 
  • Like
Reactions: MrGuiW
6624235 said:
Please note that the person who previously uploaded malware appears to have created a new account and has started posting resources on the BT site again.


（Image 1） shows the details of the resources posted by this new suspicious user, while （Image 2）shows the details of the previous malware uploader.

Image 1：
View attachment 87872

Image 2：
View attachment 87874


The first file this person uploaded was posted on January 2. After that, they began uploading a large number of self-purchased resources.


Here is the link to all files they have published.
https://www.tokyotosho.info/search....mment=true&searchName=true&username=Reeffress




Although no malware has been found in the newly uploaded files so far, there is still a significant risk, as it is highly likely that they were uploaded by the same individual.


Finally, given the current serious situation, I strongly recommend that all resources posted on the forum clearly disclose their original source.
In particular, for reposted content that was not personally purchased, the original source must be explicitly stated, so that sources can be traced efficiently and risks can be minimized.
Click to expand...
I googled this user name and found a thread about him and the recent malware torrents in SSTM forum
 
Also, in the SSTM forum post, the OP made this list with Reeffress uploaded games:
[RJ01535661] 催○アプリ支配〜総集編〜
[RJ01525727] 古代乙女の誘惑迷宮とトレジャーハンター君
[RJ01535700] 堕欲に溺れる聖職者
[RJ01536074] メ○ガキの田舎生活 ～大人はみ～んなざこざこよわよわ～
[RJ01534169] 拘束系リョナRPGの集大成！「深淵の森RPG3」
[RJ01536610] 堕落聖女～シスターの売春性活～
[RJ01537618] あまねと瘴気の小迷宮』 ローグライト風RPG
[RJ01443324] キサタマ！
[RJ01538900] 偽典NTR物語～アウタービジョン～
[RJ01534398] 港区女子に憧れた田舎娘は電車の中でめちゃくちゃにされる
[RJ01539451] 魔法少女ハルちゃん
[RJ01483219] 秘密のシェアハウスせいかつ‼
[RJ01539069]【動画付きノベルゲーム】催○アプリで人妻を調教したら娘も巻き込んで親子丼になった話〜清楚系・結衣編〜
[RJ01541148] 笑えない姪との生活
[RJ01467308] クレドニア戦記～寝取られ系シミュレーションRPG~
[RJ01537503] 誘惑の温泉旅行～理性と背徳の一泊二日～
[RJ01518691] 妹勇者せいかつ！
[RJ01417902]【Live2Dアニメーション】エローデッド ツインズ -公国陥落編-
[RJ01531442] SIMPLE QUEST -シンプル クエスト-
[RJ01536189] 押しかけ少女と異世界転移
[RJ01523923]【2026年1月28日迄CG集付属】エッチで一途なド田舎兄さまと、古式ゆかしい病弱妹 Append. 04 あすみちゃんの健全優良性活
[RJ01129751] Cosplay Collection
[RJ01308058] まいさい回想部屋誘惑図書館
[RJ01528752] ネガティブな巨乳ハーフエルフはちやほやされたい
[RJ01543723] お触り電車～見えない手と快感～
[RJ01532102] 出会い朝霧 煙草の残り香と夜明けの君
[RJ01528685] のっとめあ！ver1
[RJ01536372]ドットローグライト風RPG? ?神々のモン姦ダンジョン～聖 剣とレイナ
[RJ01536620] 連続痴○事件簿～妻は真相を孕む～
[RJ01544053] 無理難題倶楽部
[RJ01488334] 末日の中で彼女が堕落した 外伝 V1. 0
[RJ01544981] 天使たちの教会
[RJ01545796] 勇者リリアン！
[RJ01316818] ラストセックス-寝取られシミュレーションゲーム-【NTR】
[RJ01465412] 牛娘ちゃんとドレイ君のあまあまスローライフ
[RJ01536066] シュガーナイト
[RJ01497144] ヒロインヴィランズサイド
[RJ01534618] セイレン実験室
[RJ01544639] 自宅警備員 全て挿入済み
[RJ01475962] カカイタン - ギャンブルの聖伝説
[RJ01469995] 勇者脱出！〜捕まると女性モンスターにエッチなお仕置きをされるRPG〜
[RJ01481556] Link Battlers Online ~ 電脳世界で誘惑され、財布も理性も奪われるVRバトル ~
[RJ01539386] ショウカンのモノノフ
[RJ01542452] ぶっかけチョイス♡～射精量とヒロインを自由に選んでぶっかけ♡～
[RJ01527489] CITY OF REVENGE
[RJ01537996] ザーメンRPG ふたなりのノア ～精子の雨と快楽の石～
[RJ01543679] 街ヤリ〜東京編リニューアルDLsite〜
[RJ01545550] Demon King Gadaluf 2
[RJ01534131] 銀剣の戦姫
[RJ01548142] 因習村の不確かな日常
[RJ01545906] まぐわえ！最強ムテキの? ?イリョク団
[RJ01287859] 紅蓮四奏ピュアエレメン
[RJ01449418] 聖剣戦隊-戦闘員が潜入す? ??洗脳の罠
[RJ01543216] 新妻ユーナと寝取られダ? ?ジョン
[RJ01542716] サキュバス専用！逆レ○? ?娼館へようこそ
[RJ01539073] おねショタバトルRPG 光希の淫らな夢世界冒険記 初恋のお姉さんを助けるため? ??、エッチな誘惑が満載の夢? ?界に立ち向かう男の子の物語
[RJ01545892] 白薔薇のレクイエム
[RJ01512681]ドハマり！風俗体験記
[RJ01547278] ギャル喰い
[RJ01547857] 事故物件特殊清掃
[RJ01548560] 捕らわれのセイラ～機械? ?記録～
[RJ01547228] 魔法少女コレクトカード? ?トル セイントヴァルキリー
[RJ01547962] code Eros 淫逆のベローチュ
[RJ01540960] 奴○拳士
[RJ01511074] 桜子寝取られ譚
[RJ01548152] あの娘、指名できます。? ?名キャストが在籍するお店
[RJ01545517] Red & blue
[RJ01549866] アタノールのゆりかご+
[RJ01507212] 魔王城再防衛戦記
[RJ01524519] ギャルとオタクの勉強ラ? ?フ
[RJ01549112] Uber Seeds ～ご自宅で精〇注入します～
[RJ01514869] シルフィクラウン 第一部
[RJ01543578] ママサンタ義姉とイチャ? ?ブえっち野球拳
[RJ01247071] なぜか妹と脱衣じゃんけ? ?
[RJ01550216] 高飛車人妻上司を復讐調? ?
[RJ01460200] Evening Survivor
[RJ01551327] 悪の王国
[RJ01540420] 獄門ループvol1
[RJ01550693] 夢魔の旅館
[RJ01499133] くノ一性技決戦活劇 寛永夜伽合戦
[RJ01541755] LIBERTAS 家出令嬢堕落物語
[RJ01550451] 召喚した邪神系少女と毎? ?ボドゲ生活
[RJ01551343] くのいちの心得は恥ずか? ?さに耐えることです！?
[RJ01550854] おねショタファンタジーII
[RJ01545788] ゼロゾーン封鎖地区〜物 回収エスケープシューティン グゲーム
[RJ01543836] Spasibo-Spanking Simulation Box
[RJ01467028] ど～にゃの監獄島 潜入捜査禄
[RJ01482095] イケない！ 同棲らいふ
[RJ01511546] Quest Please!
[RJ01518737] ヒュプノホテルと支配さ? ?たがる女たち
[RJ01539067] Mゲーマーズ
[RJ01542584] えっちビデオをつくろう? ?～新人・瀬戸れいな～
[RJ01553088] 瞬間マゾ堕ち魔法少女
 
  • Like
Reactions: lk07
MrGuiW said:
Also, in the SSTM forum post, the OP made this list with Reeffress uploaded games:
[RJ01535661] 催○アプリ支配〜総集編〜
[RJ01525727] 古代乙女の誘惑迷宮とトレジャーハンター君
[RJ01535700] 堕欲に溺れる聖職者
[RJ01536074] メ○ガキの田舎生活 ～大人はみ～んなざこざこよわよわ～
[RJ01534169] 拘束系リョナRPGの集大成！「深淵の森RPG3」
[RJ01536610] 堕落聖女～シスターの売春性活～
[RJ01537618] あまねと瘴気の小迷宮』 ローグライト風RPG
[RJ01443324] キサタマ！
[RJ01538900] 偽典NTR物語～アウタービジョン～
[RJ01534398] 港区女子に憧れた田舎娘は電車の中でめちゃくちゃにされる
[RJ01539451] 魔法少女ハルちゃん
[RJ01483219] 秘密のシェアハウスせいかつ‼
[RJ01539069]【動画付きノベルゲーム】催○アプリで人妻を調教したら娘も巻き込んで親子丼になった話〜清楚系・結衣編〜
[RJ01541148] 笑えない姪との生活
[RJ01467308] クレドニア戦記～寝取られ系シミュレーションRPG~
[RJ01537503] 誘惑の温泉旅行～理性と背徳の一泊二日～
[RJ01518691] 妹勇者せいかつ！
[RJ01417902]【Live2Dアニメーション】エローデッド ツインズ -公国陥落編-
[RJ01531442] SIMPLE QUEST -シンプル クエスト-
[RJ01536189] 押しかけ少女と異世界転移
[RJ01523923]【2026年1月28日迄CG集付属】エッチで一途なド田舎兄さまと、古式ゆかしい病弱妹 Append. 04 あすみちゃんの健全優良性活
[RJ01129751] Cosplay Collection
[RJ01308058] まいさい回想部屋誘惑図書館
[RJ01528752] ネガティブな巨乳ハーフエルフはちやほやされたい
[RJ01543723] お触り電車～見えない手と快感～
[RJ01532102] 出会い朝霧 煙草の残り香と夜明けの君
[RJ01528685] のっとめあ！ver1
[RJ01536372]ドットローグライト風RPG? ?神々のモン姦ダンジョン～聖 剣とレイナ
[RJ01536620] 連続痴○事件簿～妻は真相を孕む～
[RJ01544053] 無理難題倶楽部
[RJ01488334] 末日の中で彼女が堕落した 外伝 V1. 0
[RJ01544981] 天使たちの教会
[RJ01545796] 勇者リリアン！
[RJ01316818] ラストセックス-寝取られシミュレーションゲーム-【NTR】
[RJ01465412] 牛娘ちゃんとドレイ君のあまあまスローライフ
[RJ01536066] シュガーナイト
[RJ01497144] ヒロインヴィランズサイド
[RJ01534618] セイレン実験室
[RJ01544639] 自宅警備員 全て挿入済み
[RJ01475962] カカイタン - ギャンブルの聖伝説
[RJ01469995] 勇者脱出！〜捕まると女性モンスターにエッチなお仕置きをされるRPG〜
[RJ01481556] Link Battlers Online ~ 電脳世界で誘惑され、財布も理性も奪われるVRバトル ~
[RJ01539386] ショウカンのモノノフ
[RJ01542452] ぶっかけチョイス♡～射精量とヒロインを自由に選んでぶっかけ♡～
[RJ01527489] CITY OF REVENGE
[RJ01537996] ザーメンRPG ふたなりのノア ～精子の雨と快楽の石～
[RJ01543679] 街ヤリ〜東京編リニューアルDLsite〜
[RJ01545550] Demon King Gadaluf 2
[RJ01534131] 銀剣の戦姫
[RJ01548142] 因習村の不確かな日常
[RJ01545906] まぐわえ！最強ムテキの? ?イリョク団
[RJ01287859] 紅蓮四奏ピュアエレメン
[RJ01449418] 聖剣戦隊-戦闘員が潜入す? ??洗脳の罠
[RJ01543216] 新妻ユーナと寝取られダ? ?ジョン
[RJ01542716] サキュバス専用！逆レ○? ?娼館へようこそ
[RJ01539073] おねショタバトルRPG 光希の淫らな夢世界冒険記 初恋のお姉さんを助けるため? ??、エッチな誘惑が満載の夢? ?界に立ち向かう男の子の物語
[RJ01545892] 白薔薇のレクイエム
[RJ01512681]ドハマり！風俗体験記
[RJ01547278] ギャル喰い
[RJ01547857] 事故物件特殊清掃
[RJ01548560] 捕らわれのセイラ～機械? ?記録～
[RJ01547228] 魔法少女コレクトカード? ?トル セイントヴァルキリー
[RJ01547962] code Eros 淫逆のベローチュ
[RJ01540960] 奴○拳士
[RJ01511074] 桜子寝取られ譚
[RJ01548152] あの娘、指名できます。? ?名キャストが在籍するお店
[RJ01545517] Red & blue
[RJ01549866] アタノールのゆりかご+
[RJ01507212] 魔王城再防衛戦記
[RJ01524519] ギャルとオタクの勉強ラ? ?フ
[RJ01549112] Uber Seeds ～ご自宅で精〇注入します～
[RJ01514869] シルフィクラウン 第一部
[RJ01543578] ママサンタ義姉とイチャ? ?ブえっち野球拳
[RJ01247071] なぜか妹と脱衣じゃんけ? ?
[RJ01550216] 高飛車人妻上司を復讐調? ?
[RJ01460200] Evening Survivor
[RJ01551327] 悪の王国
[RJ01540420] 獄門ループvol1
[RJ01550693] 夢魔の旅館
[RJ01499133] くノ一性技決戦活劇 寛永夜伽合戦
[RJ01541755] LIBERTAS 家出令嬢堕落物語
[RJ01550451] 召喚した邪神系少女と毎? ?ボドゲ生活
[RJ01551343] くのいちの心得は恥ずか? ?さに耐えることです！?
[RJ01550854] おねショタファンタジーII
[RJ01545788] ゼロゾーン封鎖地区〜物 回収エスケープシューティン グゲーム
[RJ01543836] Spasibo-Spanking Simulation Box
[RJ01467028] ど～にゃの監獄島 潜入捜査禄
[RJ01482095] イケない！ 同棲らいふ
[RJ01511546] Quest Please!
[RJ01518737] ヒュプノホテルと支配さ? ?たがる女たち
[RJ01539067] Mゲーマーズ
[RJ01542584] えっちビデオをつくろう? ?～新人・瀬戸れいな～
[RJ01553088] 瞬間マゾ堕ち魔法少女
Click to expand...

That lis gonne send chill down many person back... as there some game from well knowed circle that many want - and multiple uploader bought - as well as many more share. Many people gonna be scared, even of trustee... Hope the AV get up to it soon so that people can be a bit more happy about new works going out instead of freaking out (I now we should buy our own, but there so many getting out that not even trial can allow you to get a good idea of the work worth.....).
 
七咲七夜 said:
This is shocking news at the end of the year.

If you have downloaded any of the games on the list, check "C:\Users\(username)\AppData\Local" and if the "syscacheapp" folder exists, you are infected. Empty the contents of the "syscacheapp" folder. (If the folder is already empty, no minors have been copied and no special measures are required. To be on the safe side, we recommend deleting the games listed.)

You can identify infected games by monitoring the "syscacheapp" folder and checking if cacheapp64.exe is generated immediately after launching the game.

Additionally, the paths to "cacheapp64.exe" and "explorer.exe" will be added to the registry at "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell", so delete the string "explorer.exe, C:\Users\(username)\AppData\Local\cacheapp64.exe". If \Shell is empty, you can delete /Shell itself.
Click to expand...
I removed the "syscacheapp" file. As for"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" there was no shell located in winlogon.
 
I don't think this miner variant infect any other OS but Windows
 
PIC0 said:
the game that i possible get hit by are 3 game
all 3 game i download from hentai-share site
RJ01518767 upload at HS 2025/12/15
RJ01524502 link got removed on hentai-share but i remember i download in thare
RJ01525900 which idk why anime-sharing remove this code on the list...
it upload in HS at 2025/12/24
Click to expand...
First of all I don't know what is hentai-share site.

For the list of file, I only post what jekson5865 posted here. Because all new poster are restricted heavily on ASF to limit damages like these, the malware spreader may have posted more malware elsewhere unrestricted.

What do you mean we removed this code on the list? We have nothing to do with Hentai-share. At least I have nothing to do with it either.
 
Checkmate said:
First of all I don't know what is hentai-share site.

For the list of file, I only post what jekson5865 posted here. Because all new poster are restricted heavily on ASF to limit damages like these, the malware spreader may have posted more malware elsewhere unrestricted.

What do you mean we removed this code on the list? We have nothing to do with Hentai-share. At least I have nothing to do with it either.
Click to expand...

i remember the RJ on op post has more then that
it was originally coming from here in ASF
before edit add 3 new one and the rest was gone
unless the op removed it because confirm it has no virus in those list (my RJ01525900 included)


1769323900197.png
 
PIC0 said:
i remember the RJ on op post has more then that
it was originally coming from here in ASF
before edit add 3 new one and the rest was gone
unless the op removed it because confirm it has no virus in those list (my RJ01525900 included)


View attachment 88093
Click to expand...

I can see all post edit, and I can assure you the mod and I didn't remove anything from the list that I create initially. I only edit it to add the latest 3.

What I did was simply provide a list of thread that jekson5865 posted on ASF. There's no doubt that there may be more infected release spreading on the torrents, outside of ASF.

Can you give me the text version of the screenshot above, so I can add it to the list as well.
 
Checkmate said:
I can see all post edit, and I can assure you the mod and I didn't remove anything from the list that I create initially. I only edit it to add the latest 3.

What I did was simply provide a list of thread that jekson5865 posted on ASF. There's no doubt that there may be more infected release spreading on the torrents, outside of ASF.

Can you give me the text version of the screenshot above, so I can add it to the list as well.
Click to expand...

https://f95zone.to/threads/recent-malware-infected-games.207437/post-19066918
 
You must log in or register to reply here.
Top Bottom
Back