Make sure those are all the legitimate versions of those plugins and make sure they didn’t install any scripts in your workspace. Also make sure you haven’t installed any malicious modules.
It’s very possible one of these scripts is placing malicious scripts in your game without your knowledge, if you can’t pinpoint it, try uninstalling them and ensuring that you reinstall the legitimate versions of those plugins.
pcall(function()
for _, v in pairs(game:GetDescendants()) do
if v:IsA("BaseScript") or v:IsA("Script") or v:IsA("LocalScript") or v:IsA("ModuleScript") then
print(v:GetFullName())
end
end
end)
Execute this in command bar, and see in the output if there is any lua containers (aka scripts) that you don’t recognize.
Reverting to old versions won’t do anything. Plugins are installed to Studio, not to the specific game. Uninstall the plugins, reinstall legitimate versions, and then make sure malicious scripts from your old plugins aren’t hidden somewhere.
If it’s reverted, then there is 2 scenarios that I can think of, it’s a code that was hidden and it waited for a certain time/date to pass and make itself present, or it’s a plugin injecting the code. Could you dm me the place so I can investigate it myself?
Okay so, I don’t know. It’s probably hidden in one of the recognizable scripts. Are you comfortable with direct messaging me the place so I can do some investigation myself and tell you what I think that it’s the problem? It’s fine if you don’t.
Like I said, make sure it isn’t hiding it’s scripts in any of your Storages. Make sure the only scripts in places like ReplicatedStorage and the PlayerScripts/GUI are scripts you made.
I’ve cleaned up the place. It should be mostly virus-free. The main problem was free scripts (free model scripts).
Following infections were:
Spread
Vaccine
Welder
Hoverboard script (obfuscated require leading to infection)
After removal, none of the described issues were no longer present. To avoid future problems like this, don’t use free models or check them properly before using them.
There is endless possibilities, but those are common ones. You can use require() by the id, but make sure you require a trusted script from a trusted developer. Require isn’t evil, the code that is required might be.