Install the app
How to install the app on iOS

Follow along with the video below to see how to install our site as a web app on your home screen.

Note: This feature may not be available in some browsers.

PSA: Malware detected from member's upload

I see lots of upload for RJ01617050

Triage needed if this was modified or source
 
My post after his:
1777777386480.png

1777777421370.png

1777777431880.png


Could be malware or a very aggressive DRM (scanning for reverse enginnering tools).
 
  • Like
Reactions: freezeeria
yeah they even include cheat_engine, weird huh
 
He posted more info:
SlidingSubject said:
Seems like only the ryuu download is infected, I just downloaded one from two different sources (from the slow ones) and it's fine.

Ran fc on non-data files (.rpgmv and .json, since the ones from the other source don't have their .json files encrypted), and everything was the same (a few extra empty bits at the end of libEGL.dll and libGLESv2.dll though), except for the rpg_managers.js file. I'll just comment on the differences showing the original script.

JavaScript: 
DataManager.loadDataFile = function(name, src) {

    //virus code added a call to the .bin file

    var xhr = new XMLHttpRequest();

    var url = 'data/' + src;

    xhr.open('GET', url);

    xhr.overrideMimeType('application/json');

    xhr.onload = function() {

        if (xhr.status < 400) {

            window[name] = JSON.parse(xhr.responseText);

            DataManager.onLoad(window[name]);

            //virus replaced the above two lines for a try catch, with everything following inside the try

            //it checked for the .sys file to create a console thing

            //after which it read the base64, did bitwise operations on it based on some function from the .bin file

            //and finally it executed these two lines, the b variable is the base64 that was also modified

            //window[name] = JSON.parse(b.toString('utf8').replace(/^\uFEFF/, ''));

            //DataManager.onLoad(window[name]);

        }

    };

    xhr.onerror = this._mapLoader || function() {

        DataManager._errorUrl = DataManager._errorUrl || url;

    };

    //no idea why the virus also removed the above onerror function too

    window[name] = null;

    xhr.send();

};

Also, huh, a thread was made with the virus link, I think that should be changed, it has the corrupt script.
Click to expand...
 
oh, I got an infected game from ryuugames in the past too, their ops seems to be very similar to IGG games, people still fall for it
 
Checkmate said:
oh, I got an infected game from ryuugames in the past too, their ops seems to be very similar to IGG games, people still fall for it
Click to expand...
I quite really don't like is how ryuugames operate, because the owner doesn't really checked where is the game source came from, is it safe? Or not.

It was never clarified, I think ryuugames should getting notes or something, for future Because a lot people gets infected like this
 
  • Wow
Reactions: gitama
Some games containing the Miner issues that arose at the beginning of the year are still on this site, so please check if you are an uploader.

[RJ01522545] IDOL CONFLICT

I have reported the files I personally verified directly to the uploader, but I have not checked files uploaded by other uploaders.I suspect they are sharing files from the same source, so I would appreciate it if you could check.

Add:
The CRC values for libEGL.dll and libGLESv2.dll matched those of the trial version, confirming that the infection occurred after actually running the .exe file.
 
Last edited:
i compare Ryzen111 (left), Shine (middle), Otokonoko (right), and it seems the cryptbase.dll & d3dcompiler_64.dll was still on middle & right which i think was the virus dll before?
the only other difference is the resources.pak. the size on Shine & Otokonoko was 40753879 as for Ryzen111 was 5245483.

as for other i checked (ramori, nobodyknows22, UFO, Nihonjaki90) they all have cryptbase.dll too.

Screenshot 2026-05-26 013357.png
 
  • Like
Reactions: oaklash
Momukyu said:
i compare Ryzen111 (left), Shine (middle), Otokonoko (right), and it seems the cryptbase.dll & d3dcompiler_64.dll was still on middle & right which i think was the virus dll before?
the only other difference is the resources.pak. the size on Shine & Otokonoko was 40753879 as for Ryzen111 was 5245483.

as for other i checked (ramori, nobodyknows22, UFO, Nihonjaki90) they all have cryptbase.dll too.

View attachment 101659
Click to expand...
I already fixed my file. Windows Defender was updated to detect this malware so make sure to update your windows up-to-date.
Screenshot_2742.png
 
  • Like
  • Love
Reactions: gitama, yutoku, oaklash and 1 other person
the original game only contains the one that have data.win, no unreal engine stuff.
 
Please note, this sort of thing is WAY beyond my understanding, all I know was a couple games from senior respected uploaders triggered Microsoft Defender, but I have no way of knowing if it was just false positives (only about 4 out of about 80 downloads)

If one of the Experts here could check the files out & see if there is nothing wrong with them, thank you very much, I know how important your time is.

Digital G Power:
Monoshizuka de Bijin no Mama ni Gouin ni Kyousei Shaseisaserareru Boku____物静かで美人のママに強引に強制射精させられるボク

uploaded by Nihonjaki90 on 8/16/2023

Here:
Nihonjaki90

[Japanese]  Thread '[150109][デジタルGパワー] 物静かで美人のママに強引に強制射精させられるボク'


[150109][デジタルGパワー] 物静かで美人のママに強引に強制射精させられるボク



Sample picture:



Information:
[デジタルGパワー]...
Click to expand...
​
  • Nihonjaki90
  • デジタルgパワー 物静かで美人のママに強引に強制射精させられるボク
  • Replies: 1
  • Forum: Hentai Games

Just unzipping the file causes Microsoft Defender to quarantine the Game.exe

I had to Whitelist all contents in the folder I unzipped the .rar into to stop the .exe from autodeleting

& i think I had to add "2djgame.txt file" to Game Folder to get it to run, but I don't remember how I found that out (while the game runs smoothly after all that, it still leaves me uneasy, but I'm a MASSIVE Mom+Son Inbreeding Addict, it's like literal heroin{e} to me)


Most Other games I downloaded from here seemed fine, except 2 from a small developer called Inohead Games:
Bitch KazokuFile____ビッチ家族変態な日常
ESG-001200 by Esan?
Esan

[Japanese]  Thread '[151127][イノヘッドスタジオ] ビッチ家族変態な日常 ～誰とでもヤれちゃう異常な世界～ DL版'

Oruet9c8_o.jpg


Bitch Kazoku Hentai na Nichijou ~Dare to demo Yarechau Ijou na Sekai~

Info:
Code: 
http://www.getchu.com/soft.phtml?id=877363

Title: ビッチ家族変態な日常 ～誰とでもヤれちゃう異常な世界～
Company: イノヘッドスタジオ
Release: 2015/11/27
Language: Japanese
Censorship: CEN
Total size: 230 MB

...​

& Bakunyuu Mama Haramase Netori____爆乳ママ孕ませ寝取り～極悪少年のママビッチ化計画～

uploaded by Yuuichi Sagara? (the Rapidshare link now says Premium only, but it seems I downloaded it back in 2023?)

yuuichi_sagara

[Japanese]  Thread '[141024][Inohead Studio] 爆乳ママ孕ませ寝取り ～極悪少年のママビッチ化計画～'

爆乳ママ孕ませ寝取り ～極悪少年のママビッチ化計画～
Bakunyuu Mama Haramase Netori ~Gokuaku Shounen no Mama Bitch-ka Keikaku~

zOQLuR.jpg



Release:​
2014-10-24
Developer:​
Inohead Studio
...
  • yuuichi_sagara
  • rapidgator yuuichi_sagara 爆乳ママ孕ませ寝取り ～極悪少年のママビッチ化計画～
  • Replies: 0
  • Forum: Hentai Games

& this from ANIM?

F

[Japanese]  Thread '★ 自炊 Own Bought Game ★ [150123][ANIM] 息子の友達にハメられて ～厳選Hシーンアニメーション版～ [814M]'

息子の友達にハメられて ～厳選Hシーンアニメーション版～

Brand：ANIM
Product Price：￥3,500 (Inc-Tax ￥3,780)
Release Date：2014/10/31
Gerne：欲求不満妻が若い身体に徐々に溺れていくAVG
CG Artist：non
Scenario Writer：想ファクトリー
Information：http://www.getchu.com/soft.phtml?id=827981...
  • Like
 
  • Like
Reactions: plipplopcountess
Fredo the Guide Writer said:
Please note, this sort of thing is WAY beyond my understanding, all I know was a couple games from senior respected uploaders triggered Microsoft Defender, but I have no way of knowing if it was just false positives (only about 4 out of about 80 downloads)

If one of the Experts here could check the files out & see if there is nothing wrong with them, thank you very much, I know how important your time is.

Digital G Power:
Monoshizuka de Bijin no Mama ni Gouin ni Kyousei Shaseisaserareru Boku____物静かで美人のママに強引に強制射精させられるボク

uploaded by Nihonjaki90 on 8/16/2023

Here:
Nihonjaki90

[Japanese]  Thread '[150109][デジタルGパワー] 物静かで美人のママに強引に強制射精させられるボク'


[150109][デジタルGパワー] 物静かで美人のママに強引に強制射精させられるボク



Sample picture:



Information:
[デジタルGパワー]...
Click to expand...
​
  • Nihonjaki90
  • デジタルgパワー 物静かで美人のママに強引に強制射精させられるボク
  • Replies: 1
  • Forum: Hentai Games

Just unzipping the file causes Microsoft Defender to quarantine the Game.exe

I had to Whitelist all contents in the folder I unzipped the .rar into to stop the .exe from autodeleting

& i think I had to add "2djgame.txt file" to Game Folder to get it to run, but I don't remember how I found that out (while the game runs smoothly after all that, it still leaves me uneasy, but I'm a MASSIVE Mom+Son Inbreeding Addict, it's like literal heroin{e} to me)


Most Other games I downloaded from here seemed fine, except 2 from a small developer called Inohead Games:
Bitch KazokuFile____ビッチ家族変態な日常
ESG-001200 by Esan?
Esan

[Japanese]  Thread '[151127][イノヘッドスタジオ] ビッチ家族変態な日常 ～誰とでもヤれちゃう異常な世界～ DL版'

Oruet9c8_o.jpg


Bitch Kazoku Hentai na Nichijou ~Dare to demo Yarechau Ijou na Sekai~

Info:
Code: 
http://www.getchu.com/soft.phtml?id=877363

Title: ビッチ家族変態な日常 ～誰とでもヤれちゃう異常な世界～
Company: イノヘッドスタジオ
Release: 2015/11/27
Language: Japanese
Censorship: CEN
Total size: 230 MB

...​

& Bakunyuu Mama Haramase Netori____爆乳ママ孕ませ寝取り～極悪少年のママビッチ化計画～

uploaded by Yuuichi Sagara? (the Rapidshare link now says Premium only, but it seems I downloaded it back in 2023?)

yuuichi_sagara

[Japanese]  Thread '[141024][Inohead Studio] 爆乳ママ孕ませ寝取り ～極悪少年のママビッチ化計画～'

爆乳ママ孕ませ寝取り ～極悪少年のママビッチ化計画～
Bakunyuu Mama Haramase Netori ~Gokuaku Shounen no Mama Bitch-ka Keikaku~

zOQLuR.jpg



Release:​
2014-10-24
Developer:​
Inohead Studio
...
  • yuuichi_sagara
  • rapidgator yuuichi_sagara 爆乳ママ孕ませ寝取り ～極悪少年のママビッチ化計画～
  • Replies: 0
  • Forum: Hentai Games

& this from ANIM?

F

[Japanese]  Thread '★ 自炊 Own Bought Game ★ [150123][ANIM] 息子の友達にハメられて ～厳選Hシーンアニメーション版～ [814M]'

息子の友達にハメられて ～厳選Hシーンアニメーション版～

Brand：ANIM
Product Price：￥3,500 (Inc-Tax ￥3,780)
Release Date：2014/10/31
Gerne：欲求不満妻が若い身体に徐々に溺れていくAVG
CG Artist：non
Scenario Writer：想ファクトリー
Information：http://www.getchu.com/soft.phtml?id=827981...
  • Like
Click to expand...
Microsoft Defender is NOTORIOUS for false positives. If possible, I would scan with VirusTotal.

Trojan:Win32/Malgent? This is a common false positive for genuine files. It is more of a generic catch-all than a specific threat. Now, if it is something more specific, that is when I would worry. Checking these files right now myself.

I'm not an "expert" expert but I coincidentally AM majoring in cybersecurity and specialize in malware.
 
Last edited:
Fredo the Guide Writer said:
Please note, this sort of thing is WAY beyond my understanding, all I know was a couple games from senior respected uploaders triggered Microsoft Defender, but I have no way of knowing if it was just false positives (only about 4 out of about 80 downloads)

If one of the Experts here could check the files out & see if there is nothing wrong with them, thank you very much, I know how important your time is.

Digital G Power:
Monoshizuka de Bijin no Mama ni Gouin ni Kyousei Shaseisaserareru Boku____物静かで美人のママに強引に強制射精させられるボク

uploaded by Nihonjaki90 on 8/16/2023

Here:
Nihonjaki90

[Japanese]  Thread '[150109][デジタルGパワー] 物静かで美人のママに強引に強制射精させられるボク'


[150109][デジタルGパワー] 物静かで美人のママに強引に強制射精させられるボク



Sample picture:



Information:
[デジタルGパワー]...
Click to expand...
​
  • Nihonjaki90
  • デジタルgパワー 物静かで美人のママに強引に強制射精させられるボク
  • Replies: 1
  • Forum: Hentai Games

Just unzipping the file causes Microsoft Defender to quarantine the Game.exe

I had to Whitelist all contents in the folder I unzipped the .rar into to stop the .exe from autodeleting

& i think I had to add "2djgame.txt file" to Game Folder to get it to run, but I don't remember how I found that out (while the game runs smoothly after all that, it still leaves me uneasy, but I'm a MASSIVE Mom+Son Inbreeding Addict, it's like literal heroin{e} to me)


Most Other games I downloaded from here seemed fine, except 2 from a small developer called Inohead Games:
Bitch KazokuFile____ビッチ家族変態な日常
ESG-001200 by Esan?
Esan

[Japanese]  Thread '[151127][イノヘッドスタジオ] ビッチ家族変態な日常 ～誰とでもヤれちゃう異常な世界～ DL版'

Oruet9c8_o.jpg


Bitch Kazoku Hentai na Nichijou ~Dare to demo Yarechau Ijou na Sekai~

Info:
Code: 
http://www.getchu.com/soft.phtml?id=877363

Title: ビッチ家族変態な日常 ～誰とでもヤれちゃう異常な世界～
Company: イノヘッドスタジオ
Release: 2015/11/27
Language: Japanese
Censorship: CEN
Total size: 230 MB

...​

& Bakunyuu Mama Haramase Netori____爆乳ママ孕ませ寝取り～極悪少年のママビッチ化計画～

uploaded by Yuuichi Sagara? (the Rapidshare link now says Premium only, but it seems I downloaded it back in 2023?)

yuuichi_sagara

[Japanese]  Thread '[141024][Inohead Studio] 爆乳ママ孕ませ寝取り ～極悪少年のママビッチ化計画～'

爆乳ママ孕ませ寝取り ～極悪少年のママビッチ化計画～
Bakunyuu Mama Haramase Netori ~Gokuaku Shounen no Mama Bitch-ka Keikaku~

zOQLuR.jpg



Release:​
2014-10-24
Developer:​
Inohead Studio
...
  • yuuichi_sagara
  • rapidgator yuuichi_sagara 爆乳ママ孕ませ寝取り ～極悪少年のママビッチ化計画～
  • Replies: 0
  • Forum: Hentai Games

& this from ANIM?

F

[Japanese]  Thread '★ 自炊 Own Bought Game ★ [150123][ANIM] 息子の友達にハメられて ～厳選Hシーンアニメーション版～ [814M]'

息子の友達にハメられて ～厳選Hシーンアニメーション版～

Brand：ANIM
Product Price：￥3,500 (Inc-Tax ￥3,780)
Release Date：2014/10/31
Gerne：欲求不満妻が若い身体に徐々に溺れていくAVG
CG Artist：non
Scenario Writer：想ファクトリー
Information：http://www.getchu.com/soft.phtml?id=827981...
  • Like
Click to expand...

@Fredo the Guide Writer

I checked the first file alone with VirusTotal, and while I did get some false detections I noticed a common theme; "gen"/"undefined"/"fimal" this tells me that these are generic threats that weren't given a direct name, which tell me these are blanket/generic detections. A red flag for a false positive. Kasperky, MalwareBytes, AVG and Avast all gave clear signals, and these ones aren't as famous as Microsoft Defender is for giving false positives. In other words, I think this one is fine. Examining the files, they are typical of visual novels of that time. Notice how only the executable got flagged and not any of the other files within it.

Conclusion: Highly likely a false positive, use something like Malwarebytes to be safe.

Second game: Can't access, but likely the same thing.

Third game: Can't access, I ain't paying for premium

Last game: Can certify, false positive. It detected a TORRENT without any extraction as malware. Malwarebytes didn't do that, nothing else did that, very much false positive.
 
  • Like
Reactions: oaklash and Fredo the Guide Writer
You must log in or register to reply here.
Top Bottom
Back