Rosync virus is attacking my game!

It is most likely a plugin. Uninstall any plugins that are made by suspicious accounts.

3 Likes

Obviously a virus. And one made by someone who wants to hide their original ID.

If you’re sure whoever you’re working with this project on is not willing to infect the game, then check for infected plugins. If these appear in all of your scripts, then a plugin is probably at fault.

(By checking, I mean seeing if the original creator made the version you have installed)

2 Likes

It is probably a Virus
They’re usually in plugins, if you can’t find any plugins that are backdoors, try to look in the models.
Try to search in all scripts for “require” most of the requires are very hidden just do CTRL + F then search for it in every script, if you need any help i’m here.

2 Likes

Hi @Blaroo, what does CTRL + F do ?

1 Like

Malicious code that can modify the source of scripts are just about definitely caused by a malicious plugin.
Uninstall all fishy plugins, such as “Anti-Virus” plugins that have no trustworthy sources indicating that it’s an actual anti-virus.
Free models with malicious scripts/code cannot modify things in the game unless they are a ModuleScript and are directly called by you or a plugin; essentially, they only run at runtime.

1 Like

There has been a topic before of this thing, yes it is a virus.

1 Like

When you go in a script, you can search for words there, for example “local” it would show all the local that are written in the script
image

image

if you type require it will say if there is “require” written script or not.

1 Like

Thank @Blaroo, I will do that.

1 Like

This is not useful if the malicious code is in a plugin as CTRL + F doesn’t scan installed plugins.
Instead, OP should uninstall fishy plugins, restart Studio and ultimately, if something is still wrong and it keeps happening, they should uninstall all but the built-in plugins.

1 Like

I’m talking about in game scripts and models not Plugins.

In-game scripts and models cannot modify the source of a script.

  1. They only run at runtime.
  2. They can’t modify script sources due to having too low of a context level.
1 Like

Can you show me your plugins? I had the same issue and I want to verify if I had a infected plugin

Of course, i know, but sometimes in game models have it hidden pretty well.
and you should probably after uninstalling the plugin search in scripts just in case, don’t forget plugins can insert scripts and edit the source of it (Not existing ones)

Game models cannot change the code in a script because the context level for setting a script’s source is too high. Additionally, this is occurring in Edit Mode (not at run time), which means that it can’t be a game model script doing it.
(I’ve already stated this in my last post.)
If you want, I’ll expand on this in PMs.

1 Like

If there are any free models which you have added then it’s maybe that but its most likely to be a plugin. I recommend you remove plugins you have installed which are suspicious.

1 Like

I’ve experienced this issue before it is definitely a plugin. For me, this virus was caused by a plugin called 3D text maker. You can go to manage plugins and then disable ALL of your plugins. Then, open up a blank script- enable your plugins 1 by 1 and every time, type a few simple lines of code to see if Rosync appears. (I typed in game.Players:Connect- it doesn’t have to be really complicated or work.) If it does, disable that plugin immediately and delete it. If it doesn’t then the plugin you just reenabled is safe.

6 Likes

No, don’t do that, that is too much manual work having to go through every script. Just do CTRL + SHIFT + F to search through every script.

Hi @bt5191, what does “OP” mean ?

It means original poster. Just search it up in google.

Plugin, look for any unknown plugins you may have installed.

1 Like