Is this line of code a virus?

Yeah, it definitely is. They didn’t use the standard require() function since Roblox moderation bots began to remove them from the library. It is advised to remove this script.

1 Like

I let my computer be a guinea pig and opened the “Content Deleted” model on roblox studio. Almost intstantly my 16gb of ram was taken up. I closed my other apps, and roblox studio continued to eat away at any ram until it was about 96 percent usage. None of this suprised me since many times really large models will eat up ram like that, but what was weird was my disc usage shot up to about 50 percent and my transfer rate was at 100. After about 10 minutes my screen went black for a moment and when it went back on my disc was back at 0. I’d really be interested to see what the actual model is. Hope my pc doesn’t have a virus now. :slight_smile:

3 Likes

Same thing happened to me but studio wont work at all now.

1 Like

My guess is that it has an absurdly large amount of descendants inside it.

2 Likes

getfenv function is covered in this dev hub resource. Lua Globals (roblox.com)

But those numbers look like they don’t have any function. I have no idea if it’s a virus without knowing what what the script it came from does.

3 Likes

Yes. It requires a Model which is loaded with hundreds or thousands of parts which would crash the game instantly.

1 Like

The contents of the model is actually a few hundred or thousand parts, it’s strange how Roblox Studio struggled so hard with it though.

1 Like

I’ll take one for the team as I have a 64gb loaded in to my computer

1 Like

Yeah, it probably is a virus. It sorta looks like a decoded script. Or just using getfenv to hide the require. If you didn’t get this line or insert it from a model, then you should probably check every plugin you have.

1 Like

Yeah I did my best to take apart the asset, it had about 400,003 objects in it. It had a module as well, but I couldn’t read the code since it was obfuscated/encrypted.

2 Likes

I’m confused on how the developer of the model managed to even make the model, let alone publish it. A loop that prints something, like 5000 times, is already enough to crash studio on a few computers.

1 Like

This would be the type of thing to add to Code Review! Anyway, it probably is a backdoor, so delete it! <3

1 Like

Isn’t code review for posting code you made?

1 Like

Not specifically! This topic would belong in Code Review, because they don’t have an issue with the code, but they need confirmation there is nothing wrong with it!

1 Like

Haha, I actually have the exact same virus. It was in every script of the game, and there were a bunch of lines at the end of the scripts with a bunch of indents to attempt to hide it :slight_smile:

EDIT: It also makes the script editor super laggy, as well as the gameplay. It entered my game through my Builder’s plugin, and I haven’t found a way to get rid of the viruses yet…

2 Likes

I’ve gained enough information to determine that this line of code is a virus. The code translates to Teefus 0001, thank you @Vain_0 for giving me the information on this code. Teefus is a server sided exploit within the exploiting community. If you see any line of code that translates to this; get it out immediately.

3 Likes

Sorry about my friend making that.

That is for Teefus SS
Its a backdoor.

1 Like

This saved me, for some reason this was in my game and erroring like mad, I found this and knew a strategy of how to hide infection code in scripts, and as I guessed the horizontal scroll was very long, and guess what I find, the exact script in my game.

If you have to question it, better remove it to be safe than sorry.