Unexplained botnet kick message

Help and Feedback Scripting Support
,
1

Someone that I am working with on a new game recently purchased a roblox map. It was fully scripted and suited our needs.

We continued to customise the map and scripts, these were only very minor changes. Sometimes when we join the game to test it (both in studio and out) we are met with either a kick message saying “Neuroblastoma Winning; Botnet.” Or what looks to be an exploit GUI. This doesn’t happen all the time, which further adds to our confusion.

Since we both have no knowledge on scripting we have no idea on how to deal with this issue.

These are the images taken by the group owner.
GUI
KIck_Message

Any help and suggestions would be appriciated.

2

How much scripts are there in the map?

If there are les than 5, could you show them here

1 Like
3

We have way more than 5 scripts within the game, are there any key things we could search for within them?

4

Maybe it could be a hidden virus?

If you check the scripts, they could have extra lines

I mean like

You can scroll to the side or bottom and see some hidden lines of code

And look for a kick script

1 Like
5

We’ll certainly try that. Thank you for the suggestion.

6

Well, they had to set a message to the kick, so try searching (crtl+f) for “Neuroblastoma”. But it might be inside a StringValue, and if you have no scripting knowledge, it’s going to be difficult to find. Let’s just hope you can find it with “Neuroblastoma”.

If you still can’t find it, I could try to look for it myself, if you want

1 Like
7

We will start doing that now, thank you. I’ll get back to you on if we require any further help.

8

Try doing ctrl shift F and typing in :Kick, so you can try to find the source.

2 Likes
9

Update regarding this situation. I found two unnamed scripts in odd places within the map, one being in a bilboard that has zero use for a script of any kind.

Within the script there was a large amount of emoji like icons. It then had this require(5246683085). I searched the DevForum for what this could mean, I found it is a backdoor and have since removed it. In addition to this part of the script, there was a further peice of code that included something along the lines of getfenv(). This is also a sign of a backdoor.

Thank you for the help with this issue.

Will update if the issue occurs again.

1 Like