RobloxChatService script creating virus?

I know this sounds ridiculous but…

In my place where zero free models have been used, there is suddenly a virus that prompts me to buy a shirt every time I test. This is especially odd for me because I have not used a free model in this place before, and this just started happening today when I opened the place for the first time. I was working on another place that is brand new, only one script other than the defaults and it still had the issue. So I started checking the default scripts and RobloxChatService was the first one. I disabled it and the problem stopped. I then opened a brand new place and copied and pasted that script in there and it proved the issue. Anybody else experiencing this?

Edit: I forgot to mention that I disabled every plugin before opening this new place. But I also haven’t installed a new plugin in ages and this issue just happened today.

Could you elaborate as to what RobloxChatService is and what it is meant to do?

As for Creating gamepass prompts, I would believe that this is being cause by a plugin you may have installed.

No idea. The only code inside of it is require(5770222512) I just checked a shared world and it’s there as well. I’ve seen it in my places for awhile now. I forgot to mention, but I just edited it in, that I disabled every plugin I used before opening the new world.

1 Like

The workspace script is most likely a virus, I don’t think Roblox inserts any chat scripts into workspace
Edit: I just checked and they don’t

1 Like

It’s probably a malicious plugin inserting a script with that name to avoid suspicion.

4 Likes

You guys are probably right and it’s the first thing I checked. The thing that got me was though is the fact that I’ve seen this script for a long time and it just started happening today. I also only have a few plugins, each of which are legit.

Yeah I’ve noticed this too with some of my plugins, the scripts randomly become active, either they’re timed or it’s because Roblox keeps removing the modules so they have to be updated. Make sure all plugins you have are from trusted sources. I’d reckon 95% of plugins in the marketplace at the moment have some backdoor, since just like the model marketplace, it’s unmoderated and contaminated.

1 Like

First off, I don’t think it’s the Roblox Chat Service at least the official one. If you could check your plugins make sure none of them are fake, also check that RobloxChatService script in workspace, I’ve never seen that done before…

2 Likes

It may be a plugin you have installed rather then a model inside of the game.

I wouldn’t say unmoderated, stuff gets deleted every now and then, however just not as heavily moderated as shirts and games.

This is from a virus plugin. Have you happened to have installed a plugin recently? This is a common dumper I’ve seen in quite a few plugins recently.

I dont know what you gave that plugin access to because this shouldn’t be possible with the recent script injection permission prompt.


Ok funny story about where that module goes, it’s an obfuscated script whose webhook I’ve been attacking for the past week, and it’s hilarious how many times he’s trying to fight me.

Even though you disabled all the plugins I think you should take a look at the plugins you are using, here is what you should be looking out for:

  • What is the name of the creator? fs the name RobloxPluginCreator or something similar delete it! Always check it is the real creator of the plugin.
  • How many favorites does it have? If it have 20,000 downloads and 20 favorites you should be sceptical about it, always check for this.
  • What is the like to dislike ratio on it? If it has 5 likes but 200 dislikes firstly it might be a bad plugin but secondly it could also have a virus in it, people don’t favorite and like things that have viruses in them trust me!
1 Like

This isn’t the chat plugin, this is a plugin that you’ve installed with a virus.
Check your plugins and try to delete them then install a new original plugins.

Obviously, this is a backdoor.

https://www.roblox.com/library/5770222512

A blatant Aureus SS loader.

Please link me to all of the plugins that you have installed or made your inventory unprivated, as this needs to be a plugin.

Roblox created scripts are never found in places like Workspace or ServerScriptService. They’re viruses and should get removed.

Viruses are usually caused by plugins or free models.

I just looked through the module this script requires and it without a doubt is a virus. The code that it is running is obfuscated which usually is done just to hide malicious code.

The actual script causing these clothing prompts is probably the nicer of the side effects it is probably causing to your game. The harm would be from allowing exploiters to have a direct window to infect code to the server.

Worse comes to worse you may need to redownload Roblox Studio since I have heard that disabling plugins does not mean they can still be running in the background.