Is this script supposed to be in Camera upon loading studio/testing game

Help and Feedback Scripting Support
#1

image
I found this script inside Camera each time I load up a new place in Studio - I think this script is suspicious because it’s obfuscated. Here is the code.

https://pastebin.com/raw/UXVmn56n

Can anybody let me know if this is a backdoor? If so - can anybody get me a link to the require module so it’s deleted or can anybody help me locate the malicious plugin causing this to appear?

1 Like
#2

Def looks sus, surely from a bad plugin or free model. Do you use free models? Could you link the plugins you have installed?

I did a constant dump

shared
env
getfenv
wait
0.2
string
reverse
eriuqer
tonumber
0x1
B63B3
E55
Name

game
GetService
Players
PlayerAdded
Connect

Around here seems to be the requiring but im not sure what the id is from here.

eriuqer
tonumber
0x1
B63B3
E55
1 Like
#3

Aha! Found it - it sure was a sneaky bugger! I had MOON ANIMATOR installed from a user using special characters to make his name look VERY similar to that of the original creator! I only found it after I clicked on his username to find out that the user had been terminated! I uninstalled the plugin and the script disappeared. How embarrassing. PSA: Always check your plugins - and the creator’s name.

1 Like