Helping friend get rid of backdoor

Hi, I’m helping my friend get rid of a server side exploit, however, it appears the virus has put a getfenv into every single script. Is there a way to do a ctrl+h across every script in the game?

It’s usually best to eliminate the root of the problem rather then its issues. This way you can prevent it from happening in the future.

If it’s a server sided backdoor, it’s more then likely a plugin. They should try looking their plugins, and verifying them. Making sure that the plugins are from reputable sources, no more botted versions, original author, good like-dislike ratio, etc. Temporarily they may try disabling all their plugins, and enabling them individually.

Yeah I made him remove all of his plugins already, but the getfenv lines are all still there.

your safest bet is to just ctrl shift f and find every time where getfenv or teleportservice are called and manually delete them

Can you please share us all of the plugins your friend has installed?