"Luraph Script"

MetaAxis · December 30, 2019, 8:11pm

Hello! And I was just creating my game on a peaceful cool day, and suddenly in the output when I was playing in studio it said repeating over and over. And when I copied and pasted it, it showed a link…:

" [Luraph Script:1: Unable to find module for asset id](rbxopenscript://www.dummy.com/dummy?scriptGuid=%7B9D0671A0%2DDFEF%2D499A%2D834C%2D860E4E7AC4DE%7D&gst=6#6)"

If this was so easy, I think I wasn’t trying enough. Please just tell me

Edit: I don’t know what this error was coming from or how it was created, but I am just confused. The only thing I just found was 4 scripts that had the SAME line of code. Here’s the line of code in each script:


--This an script of ROBLOX Studio. Do not delete it, this script secures your game from exploiters.

--Thanks.


require(4509414898):dab()

DrKittyWaffles · December 30, 2019, 8:16pm

Luraph is a lua obfuscator. It obfuscates the logic of the code by running it’s own VM in the lua VM. You are likely dealing with a backdoor. I suggest you REMOVE the script and any code relating to that.

I also recommend you disable any plugins you have enabled and do not use free models because they are likely the cause of your misfortune of having your game backdoored.

MaxEnough · December 30, 2019, 8:18pm

Looks like a common backdoor/virus. It could be because you have a infected plugin. Maybe you accidentally inserted a model from the toolbar?

Simply delete it if you don’t know what it is.

MetaAxis · December 30, 2019, 8:19pm

Okay I will try it. I guess it is because of a plugin. (Responding to both @EpicMetatableMoment and @xMax_yy)

builderboy256 · December 30, 2019, 8:19pm

Luraph is a Lua obfuscator. It’s not that hard to undo if you are familiar with the Lua 5.1 VM

MetaAxis · December 30, 2019, 8:20pm

If I delete a plugin/backdoor/virus do I also have to delete the 4 scripts that have the same line of code?

DrKittyWaffles · December 30, 2019, 8:21pm

If you have multiple scripts with the same line of code I suggest you remove the line of code if it is your script, and then disable any plugins you have and then restart studio.

MetaAxis · December 30, 2019, 8:24pm

Okay! Thanks for telling me. I was so confused on what this was. I didn’t know it was like a new update or feature.

DrKittyWaffles · December 30, 2019, 8:25pm

With a quick look at your plugins I feel the problem is this plugin.

https://www.roblox.com/library/4110705448/Gui-to-Lua

Inside that I found this line of code

finalSource = '	' .. finalSource .. scriptSource:sub(last)
local code = [[local function ]]..id..[[_fake_script() -- ]]..realParent..'.'.. script.Name..[[ 
local script = Instance.new(']]..script.ClassName..[[', ]]..realParent..[[)]]
if convert_module_scripts and Nmodulescripts ~= 0 then  
	code = code .. "\n\tlocal req = require\n\tlocal require = function(obj)\n\t"
	code = code .. "\tlocal fake = fake_module_scripts[obj]\n\t"
	code = code .. "\tif fake then\n\t"
	code = code .. "\t\treturn fake()\n\t\tend\n\t\treturn req(obj)\n\tend"
end 
code = code .. "\n\n" .. finalSource.. "\nend\ncoroutine.wrap("..id.."_fake_script)()"
return code or ''

I suggest you uninstall the Gui To Lua! plugin specifically, but if that does not solve the issue install any other plugins you might have.

MetaAxis · December 30, 2019, 8:27pm

Okay. How do I check if it has a backdoor/virus in the plugin or not?

DrKittyWaffles · December 30, 2019, 8:32pm

This is a multi step process, so listen carefully. (This can also be risky, so be careful when you’re doing this, if you install a plugin while doing this and studio keeps crashing I also made a post on how to remove the plugin: Studio not responding, a plugin's fault - #8 by DrKittyWaffles)

You will first have to install the plugin. Then you will want to open an empty baseplate so you don’t potentially infect one of your games. After that you will want to navigate to the folder on your computer containing where your plugins are located.

Your plugins are located at %localappdata%\Roblox\ which you can access by pressing the win + r key if you’re on windows.

After that look for the folder that is named according to your ROBLOX UserId.

In this case we are looking for a folder named 527473047. So when you find that folder you will want to open that folder. Inside the folder you will find an InstalledPlugins folder. You will want to open that.

Now you will want to look or the plugin you are testing, to find it look for the folder named by the Id in the URL on the site.

Inside that folder you will find another folder with a string of numbers. Just open that folder.

Now you have located the Plugin.rbxm file. You will want to drag it into studio.

Now you should see the plugin’s source code.

MetaAxis · December 30, 2019, 8:35pm

I will try that more often when I install a plugin. One more thing before I go. Did you find anything else that had a backdoor/virus? Since the Gui to Lua! had a backdoor/virus I was wondering if anything else had a backdoor/virus.

DrKittyWaffles · December 30, 2019, 8:42pm

I am currently somewhat busy and I do not really have much time to go through all of your plugins; but since I showed you how to view the source code of a module, you can do it yourself.

Some plugins you don’t need to check because they’re created by what I would considered “trusted” are: CloneTrooper1019, stravant, Davidii, Dued1, EchoReaper, memguy, DaMrNelson, OzzyPig, and ROBLOX. If you look at these people’s profiles you will probably quickly notice they all have popular games or something successful that would be in jeopardy if they were to just start releasing backdoors. (and some of them are just cool in general; cough CloneTrooper1019)

But of course you can check them if you don’t trust me. (I don’t even trust myself sometimes; “Did I lock the door when I left?”)

NeoInversion · December 31, 2019, 3:25am

This is indeed quite hilarious to see a Luraph script here, especially as its a poor quality obfuscator. But yes you are right.

GahyGoddess · December 31, 2019, 4:21am

Luraph is a terribly written lua obfuscator that can be easily deobfuscated.

JayzYeah32 · December 31, 2019, 4:14pm

There is (what I consider to be) a faster way of doing this:
Step1: Open up ‘Command bar’ in studio (should be found under the view tab)
Step2: Paste following code into the command bar

local id = 4110705448;
game:GetObjects(“rbxassetid://”…id)[1]:Clone().Parent = workspace

Step3: Press enter then check workspace (it should be in there)

DrKittyWaffles · December 31, 2019, 4:47pm

Oh thanks, that looks reasonable. @Enchanted_Tix you should consider that too.

yname · December 31, 2019, 5:05pm

If found this script that has an error about “Luraph Script”. I removed it. I think it was also making HTTP requests but I don’t have HTTPService enabled in that game at the moment.

I found a pastebin that has the same script: https://pastebin.com/raw/DA1z4yc6

Also, my first reply on the Dev Forum

RobloxNoob1203 · January 2, 2020, 4:56am

I had this same error with the https://web.roblox.com/library/4110705448/Gui-to-Lua plugin.

firsttobebear · January 2, 2020, 5:04am

Be careful when installing plugins there are other plugins like terrain editors that have installed backdoors into my game such as prompting everyone to purchase shirts and all that