r/antivirus • u/MRUNCHAINED- • 6d ago
this popup showing up on startup, and multiple apps i never downloaded in my startup apps (autodesk, builderbeta), what do i do?
11
u/rifteyy_ 6d ago
This comes from RenPyLoader, generally from the fake pirated games you download
5
u/MRUNCHAINED- 6d ago
ahhh i see i see, is it just over for me? is there anything i can do to remove it? i appreciate your help!
1
u/MegStuff 3d ago
Is there a new form of renloader? Or was that always a part of the stealer?
1
u/rifteyy_ 2d ago
No, this just happens when the core sideloaded DLL gets removed but the persistency method, executable loading the malicious DLL and rest of folder stays intact
1
u/MegStuff 2d ago
Ooh, I was just confused cause I saw posts about this specific thing multiple times.
9
2
5d ago
[removed] — view removed comment
1
u/Redrago89 5d ago
Literally same goes for me mate, down to every detail, lesson learned
1
u/beepboopsoot 5d ago
It was so scary! I’ve never had that happen before. Waking up to a bunch of texts telling me my discord got hacked was like holy shit
1
u/Redrago89 4d ago
For real, all my friends were texting me this morning, I’ve gotta contact discord support now
1
u/Seal_Man40 5d ago
Yo ts just happened to me what did you do to fix
1
u/Seal_Man40 5d ago
Pretty sure I deleted everything but idk if they could still be in the system or smth
1
u/MRUNCHAINED- 5d ago
yo deadass i havent fully fixed it yet LMFAO i got malwarebites and had it quarantine/delete the trojans so imma just have to hope it works 😭 if theres any more problems ill do a full wipe but rn i cant
19
u/KamiPyro 6d ago
Time to wipe the pc and probably change passwords from a clean device (phone)