Exploit making product purchase prompts spam in my game

[BasedKnowledge]

Hmm, seems old, there are two sources of virus here,
It’s either the require function or one of your plugins.
Try checking any for any module or script that has the require function, have you used a free model or script in the toolbox? There has been a lot of fake admin scripts lately that uses require() to hide their virus in.

[Jumpathy (tyler)]

Do you mind sending me the code? I can try and dump their constants, and a list of plugins you have?

[Bobogijoe (Bobo)]

Well I disabled all the plugins and I am not finding any suspicious scripts anymore, yet it is still happening… (@likeajumpingpro: not sure how feasible that is, the game has over 50,000 lines of code and hundreds of scripts)

[Jumpathy (tyler)]

Can I DM you on discord? I can help you track down the remaining scripts. The method would be annoying to explain over this reply system.

[Bobogijoe (Bobo)]

Sure, add you can send me a friend request at: Bobogijoe#4316

[Math_LuaScript (Math)]

They could likely be back-doors in some of the models, scripts or plugins that you use. Here are some resourceful community tutorials that help teach you how to remove these back-doors.

How to remove backdoors from your game

Hello, recently I’ve seen a lot of backdoor, exploit, and hack related posts on the DevForum. A couple of people asked me to release my method of removing backdoors because I usually respond to these posts with a help offering, and fix their games. I’m gonna list steps, strings, and ways to prevent getting your game backdoored. The main question of all is : “What is a backdoor?” A backdoor is something that exploiters use to gain server-sided (fully-replicated) access to your games. It is impo…

Removing Backdoors 101

My Method: Press CTRL + SHIFT + F The most common backdoors use require() So search for “Require” [require] Browse for anything out of the ordinary for example a part with a script in it should raise red flags [image] BUT Not all require scripts are bad. Many good scripts use require() For example adonis admin. [image] So if you see something suspicious open the script by clicking on it. If you are unsure about if its a backdoor. You can copy the ID [image] and paste it in here: htt…

[laughablehaha]

The first thing I would do is go into studio and press the hokeys: ctrl + shift + F

In the “Find what” box, type in : promptproductpurchase(

OR

promptgamepasspurchase(

Then, a little list of scripts will pop up showing all of the places where the player is prompted to buy a dev product. Check through all of the scripts and make sure they are valid prompts and not malicious.

If you’ve double checked and all of the purchase prompts are valid, then yes, it may be a plugin issue.

[Loisonzo (Luigi)]

I also have the same problem in my places. I was removing some scripts and welds to see if it’s gone and people told me that they still appear those annoying pop-ups.

[ZayShepherd]

It could be a problem with a free model as well, it’s a little time consuming but check to see if any models have scripts in them and/or delete unnecessary ones from the game. I had put in a flat screen TV into a game once and it would ask anyone who joined the game if they wanted to buy it too. But then again it is hard to tell what it could be.

[kodeti]

Try checking your plugins, some are malicious. I would suggest removing plugins made by less notorious users, and see if they fix the problem.

[Y35X (Maxatal)]

Sounds like a Plugin to me. Try uninstalling all of your plugins, and then from there uploading the game to Roblox after ensuring that all malicious code is once again removed.

[Sudden_Demise]

Please stop suggesting to remove all the plugins. Uploading a screenshot of his plugins is required to find out if one is backdoored. Backdoored plugins use scriptname.Source to add hidden code to prexisting scripts and code to create new ones

[Y35X (Maxatal)]

He would still in the end have to delete all of them first before he figures out which one is backdoored. He can re-add the one by one until the problem persists again. Then he could upload. Not much use uploading a photo of your plugins if you aren’t aware which one is faulty.

[Bobogijoe (Bobo)]

I do plan on finding on finding which plugin (if any) could have caused this. But in the meantime, I did uninstall all of my plugins and checked to see if there were any unknown scripts lying around before reuploading the game. The problem is still there however. How could I find if a plugin modified my script? (@Sudden_Demise)

[Sudden_Demise]

How to remove backdoors from your game

Hello, recently I’ve seen a lot of backdoor, exploit, and hack related posts on the DevForum. A couple of people asked me to release my method of removing backdoors because I usually respond to these posts with a help offering, and fix their games. I’m gonna list steps, strings, and ways to prevent getting your game backdoored. The main question of all is : “What is a backdoor?” A backdoor is something that exploiters use to gain server-sided (fully-replicated) access to your games. It is impo…

Read the strings listed in that post and paste them one by one into the CTRL + SHIFT + F menu.

Make sure to have hidden services on in the explorer aswell as these promptpurchase scripts tend to be hidden in areas such as InsertService. (insertservice is hidden by default)

[SaIamancas (Lalo)]

There’s always a source.

Look for MarketplaceService in all scripts, if you can’t find that then look for require in all scripts.

If you can’t find the above two then that means it is most definitely a sketchy plugin.

[Bobogijoe (Bobo)]

Thanks everyone! After many hours of looking for the problem it turns out that one of my plugins was causing the problem (DO NOT INSTALL: https://www.roblox.com/library/4898923432/Load-Character-Pro). I quickly installed this one thinking it was the original.

The reason why it was so hard to find was because it happened to insert a script into a model of mine that the game inserts at a random moment during the game (and only the main game). So even once I uninstalled the plugin, the model would bring the script back.

On a side note, this seems to be a big weakness for plugins in ROBLOX. I’m not quite sure what can be done, but a security update for plugins would be much needed. Of course being very cautious with which plugins you install is probably the best protection there is.

[Eh_Canadian0]

I am having problems with this too, this time it’s trying to get you to buy some kind of Owner Admin, and it only appears if your not the owner

[Eh_Canadian0]

So turns out I added a Faux version of Khols Admin Infinite and scanned the require scripts to find a line of code in the info tab which says

require(5406938800)

And guess where I track the ID down to (here obviously: [ Content Deleted ] - Roblox)

And it’s legit just a truss painted red (obviously) with a virus script in it

[Eh_Canadian0]

Removing the require line of code didn’t seem to fix it…