Exploit or Admin?

Help and Feedback Scripting Support
#1

So, over the past few days I have been having a main issue with my game.

It starts as soon as we join the game the GUI shows up and asks people to buy a shirt, its nothing related to my game and even if people try to continuously close it it returns. I have gone through every script, searched: PromptPurchase, MarketPlaceService, and nothing shows up that is related to the issue. I did notice however it always returns when the admin is in game and when its not the issue is gone, no matter what admin it is it always returns. If someone can help, please do!!
Issue
Picture is from studio

1 Like
#2

Please search first before posting. This topic has been posted ad nauseam on the forums.
https://devforum.roblox.com/search?q=random%20shirt%20category%3A55

2 Likes
#3

So if admin is on, the prompt spams and when they leave it stops? Could be an exploit. Do you have some kind of remote that prompts a purchase to a player that they could be abusing? I know you said

But maybe look for anything that uses remotes with the prompting.

#5

you can control + F and type in marketplace service to see anything that has to do with the marketplace. And you should also do “require” because sometimes the thing that caused it can be a module accessed by require

3 Likes
#6

It is Ctrl + Shift F to search through all of the scripts in the game.

I would recommend using the RoDefender plugin if the above solution does not work.

2 Likes
#7

These steps in order should find potentially malicious scripts.

  1. Hit Alt + S or click File –> Settings

  2. Go to Studio in settings

  3. I’m not sure what it’s called, but it should be called “Show Hidden Objects in Explorer”. This will show (all?) services, many backdoors insert scripts into hidden services to make it harder to find and remove.

  4. Then look through the explorer using the search function at the top. Using Ctrl + Shift + F to find suspicious keywords can help too. Now look for scripts in places a normal game wouldn’t put them in. Inspect their source. And maybe share one that looks suspicious.

4 Likes
#8

There is the AllowThirdPartySales property which can be used to stop these prompts however, this’ll mean you won’t be able to sell assets from other users at all.

2 Likes
#9

Maybe it’s a very hidden script. Maybe is using something like this:

require(283928322)

Maybe it’s calling a script which is doing that. Or maybe a plugin. Could you send us a place as example? Also, are you using Toolbox stuff?

1 Like
#10

I think it’s very likely a backdoor, or smthn.

#11

It’s a free model clearly (30)

1 Like
#12

It is a backdoor most likely from a malicious plugin, try to remove all your plugins and check the ServerScriptService for any scripts with the name “Handler”. The contents of the script should look something like this:

require(3419556*1000):Run()

Delete the script.
It is a back door which just leads to even more back-doors.

1 Like
#13

If it helps, a friend of mine had a GUI plugin that caused all of his games to startup with a certain GUI that he could not get rid of. Once he got rid of the plugin, the GUI was removed from all his games.

I believe it is malware in a plugin or some hidden script, as others are saying as well.

1 Like
#14

I have before and it hasn’t helped at all

#15

I do and it always returns no matter how many times I remove the script

#16

Try looking in the output, when testing in Studio Test Mode.
It could help with finding a script , that does that.
Good luck.

#17

It’s because you have a plugin that’s inserting it.

#18

You could try to delete or remove some scripts and see when the pop-up stops playing.

Also, you could send us the place which has this exploit? You can remove some stuff so some people can’t steal your work.

Also, remember that

require(3849839483)

The numbers are an example of an id for a link, try to search the link and find if it has something or anything else.

#19

You haven’t spent enough time reading, attempting the solutions given to other users or learning the concept behind combating this then. There is no possible way that searching does not help you when there are countless threads on this same issue.

3 Likes