Got RenPy during Midterm Week

[u/Competitive-Farm6429]

I really need help on this because this laptop is my only resource for studying and I need to get this issue fixed ASAP. I'm not interested in a clean wipe now, I need to keep as much as I can. I tried downloading a notion ai pro note taking app and got this renpy virus instead (it opened and closed two command prompts).

I did not do much research. I scanned with Malwarebytes + Hitman Pro and it quarantined a 12 or so files and I removed them. I cleared my browsers, removed the cookies. I just want to know how I can fix as quickly as possible since I need to go back to turning on WiFi for my homework. I already did all the 2FA stuff.

[u/KevInChester]

On a clean device like your mobile log on to all important accounts like email, social media etc and log out of all sessions. Then change passwords and add 2fa. Adding 2fa which I see you have already done should log you out of active sessions but in my experience it seldom does.

[u/AutoModerator]

Request help with FRST and SecurityCheck from the trusted helper team

Please visit Providing or receiving help with FRST on the subreddit and share your 3 keywords returned from the website along with the details about your infection.
Once a malware removal expert or trainee sees it, they will reply in the thread about further steps. If you suspect an infostealer infection, please change all your passwords from a clean device immediately and do not use any of your accounts from the infected device.

If you need urgent help and cannot wait for one of our Malware Removal Experts:
Please follow these steps:

1. From a different and clean device, change all your passwords:
   • How to properly secure my accounts after an infostealer attack?
2. Disinfect your device from malware
   • Preferred method: Perform a clean installation with a USB

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/Xyntrax0]

Hello, is this a personal laptop you're using for studying or is it a school provided laptop?

[u/throwawayCheeseRat09]

After removing it with malwarebytes, search in C:ProgramData for a folder that looks like com_int-42 or something similar to that. Inside of it it will have a bunch of manifest files (distribution packages for linux) and a file named DecoDigi32. Get rid of all of them, Especially DecoDigi32. You likely won't be able to remove it with malwarebytes or by deleting it but force shredding it through malwarebytes or JV16powertools will work as they reboot into dos and do it there.

It will come back if you don't do this or reinstall your operating system.

Also if they're not system critical files delete them from the quarantine to be safe.