Sniper's Anti-Virus v12.0 | Script Source Scanner

Sniper's Anti-Virus v12.0

Sniper's Anti-Virus v12.0 - Creator Store

About

Sniper’s Anti-Virus is one of the best anti-virus plugins on Roblox Studio, this is a free, 26KB plugin (as of 7/14/2026), and powerful anti-virus using a large list of obsolete Roblox viruses. Sniper’s Anti-Virus also uses a multitude of checks for scanning backdoors and other viruses.

This anti-virus is designed to look for almost any type of virus with a single click without lagging your computer (depending on the amount of parts scanned at once, if your computer will lag when scanning it will be very brief for most of the time). If the anti-virus detects an object as malicious with certainty, it will move it to a quarantine folder that is at Lighting to prevent unwanted changes from being permanent.

Example:

if string.match(source, "require%s*%(%s*%d+%s*%)") then
	return true, "numeric require"
end

if string.match(source, "require%s*%(.+%.Value%s*%)") then
	return true, "require from .Value"
end

if string.match(source, "require%s*%(.+WaitForChild.+%.Value%s*%)") then
	return true, "dynamic require chain"
end
require(123) -- flagged
require(script.Pose.Value) -- flagged

local moduleId = script:WaitForChild("Config"):WaitForChild("LoaderId").Value
local loadedModule = require(moduleId) -- flagged

Placed around 75+ viruses to test my anti-virus plugin and got these results:


More Flagged Viruses


Plugin Buttons:

Basic Scan

Scans Workspace for common old viruses and suspicious classes.

Advanced Scan

Scans the whole game with script source checks, common old viruses, and suspicious classes.

Custom Scan

Similar to the advanced scan but only looks for the objects the user has selected.

Real-Time Protection

Scans for any new objects placed at editing mode.

Restore

Restore quarantined objects to their previous parent.

Whitelist

Whitelist the user’s selected objects

Suspicious code Sniper's Anti-Virus looks for:

  • numeric requires
  • getfenv
  • setfenv
  • loadstring
  • suspicious HttpService usage
  • skybox changing
  • lag viruses
  • obfuscation
  • and more

FAQ

Why is there an object value inside my quarantined objects?

That is there for the restore button to function, it is used to store the old parent of the quarantined object.

SnipersAntiVirusOldParent

Will this anti-virus have false positives?

Sometimes, if you do find a false positive that the anti-virus flagged, please either reply in this post or leave a review on this product at the creator store.
Sometimes, if you do find a false positive please either reply to this post or post a review on this product that is at the creator store.

Why is there a Real-Time Protection button if plugins can't actively protect servers?

The Real-Time Protection button is used in case a suspicious plugin inserts scripts during editing mode.

Example:

Anti-Virus Script V1.0 - Dued1

--[[This will get rid of a the anoying anti-lag scripts and infection scripts before they start messing up your game. 
Just keep this in your game and you will always be safe from the viruses.
created by dued1]]


function checkspace()
local g = game.Workspace:GetChildren()
for i = 1,#g do
local f = g[i]:FindFirstChild("Anti-Lag")
if f ~= nil then
f:remove()
print("VIRUS FOUND AND REMOVED")
end
if g[i].Name == "Anti-Lag" or g[i].Name == "Infected" then
g[i]:remove()
print("VIRUS FOUND AND REMOVED")

end
end
end

function check2(g)
local h = g:GetChildren()
for i = 1,#h do
if h[i].Name == "Anti-Lag" or h[i].Name == "Infected" then
h[i]:remove()
print("VIRUS FOUND AND REMOVED")
end
end
end

function check(model)
local y = model:GetChildren()
for i = 1,#y do
check2(y[i])
if y[i].Name == "Anti-Lag" or y[i].Name == "Infected" then
y[i]:remove()
end
end
end

function start(model)
if model.className == "Model" then
check(model)
checkspace()
end
end
game.Workspace.ChildAdded:connect(start)

local g = game.Workspace:GetChildren()
for i = 1,#g do
if g[i].className == "Model" then
start(g[i])
end
end 

This anti-virus script behaves differently than Sniper’s Anti-Virus.

Limits

  • Most security systems including this one will eventually get outdated unless it is occasionally updated if an undetected virus was found.

  • This anti-virus does NOT actively protect servers; this plugin can only scan scripts at editing mode. However, this anti-virus can behave similar to a server defender, it can’t just actively protect servers.

[PLEASE ENABLE AUTO UPDATE FOR THIS PLUGIN OR CHECK FOR UPDATES OCCASIONALLY FOR THIS ANTI-VIRUS]

v7.5

  • Made lag detection more broad
  • Bug fixes

If you have any questions or feedback to give, please reply to this post or post a review on this product that is at the creator store.

4 Likes

[NEW UPDATE] Sniper's Anti-Virus v8.5 | Script Source Scanner

Sniper's Anti-Virus v8.5 includes a scoring system along with bug fixes

What's new?

  • New scoring system based off how many reviews were warned in the output from a potentially malicious script.

  • Bug fixes

Example:

1 Like

For next update, should I increase the amount of entries on the table of obsolete Roblox viruses on the anti-virus for the next update?

  • Yes
  • No
  • Maybe
0 voters

What are you hoping to achieve by “detecting hookfunction”

I was going to remove the hook function detecting, I mixed up some malicious keywords that only exist from executors.

1 Like

getgenv and getsenv too btw

The project sounds great at the start, but “obfuscation” how? Does it detect minified lines of code per line or something similar? (Asking because I am not available to check it right now)

Does this see the owner, or is there a database for trusted module IDs (asking incase if real time scanning also detects if a developer owns the moduleand flags it)

Tiny suggestion, I believe it would be even greater if you were to use InsertService to see if the module thats required any malicious, rather than directly flagging it (once again, not available to check it so sorry if this is already a feature)

Though that being said, very cool project, keep the great work up!

Thanks for the feedback! Yes, it does detect minified code, it looks for very long lines of code, escaped hexadecimal, and unicode characters. I will hopefully implement a system using InsertService to detect if the script is requiring a dangerous script. I’m just wondering if using InsertService to load any unpurchased script will throw an error.

I will fix that too, thanks for reminding, though I might have already done that.

I see, that’s very good

Iirc InsertService throws errors only with right permissions the publisher picks, but you can just use pcall, for example

local ok,out = pcall(game.InsertService.LoadAsset, game.InsertService, 100000)
if ok and typeof(out) == "Instance" then
-- do stuff here
end

Though I’d recommend to disable every scripts there the moment it gets inserted

[NEW UPDATE] Sniper’s Anti-Virus v9.0 | Script Source Scanner

What’s new?

  • Improved lag detection
  • Resolved false positives and fixed bugs

What bugs were fixed?

The lag detection had an issue when if you ran a scan, scripts with a require and later had the word “.Value” even not being inside a require(), would false flag it because of not iterating through every line in every script, causing false positives.

This plugin seems cool, but it false flagged a lot of my scripts for “while true loop without yield”. I’ve attached an image of one of the false flagged scripts

I will fix that issue, thanks for reporting the bug.

1 Like

[NEW UPDATE] Sniper’s Anti-Virus v9.5 | Script Source Scanner

What’s new?

  • Resolved false positives and fixed bugs
2 Likes

[NEW UPDATE] Sniper’s Anti-Virus v10.0 | Script Source Scanner

What’s new?

  • More detections to ensure that more backdoors get removed

The following backdoors that are now flagged:

  • LightConfig
  • Type
  • Pose
  • EasyConfiguration

[NEW UPDATE] Sniper’s Anti-Virus v11.0 | Script Source Scanner

What’s new?

  • Sniper’s Anti-Virus v11.0 now effectively detects for malicious message instances that pretend to cause errors.

  • Now detects for attributes that have obfuscated code

[NEW UPDATE] Sniper’s Anti-Virus v12.0 | Script Source Scanner

What’s new?

  • Now detects for Roblox Corporation impersonation in scripts
  • Detects for fake errors
  • Suspicious object parenting
  • Added “corevalidation” to the blocklist