Woke up to a "Purchase Prompt" bug in my game

[GamersInternational (RIPWiiU3DSOnline0904)]

This is probably a dumb idea but if it helps, search wait in all your scripts. As it comes up every few seconds then it could be on a loop.

[GamersInternational (RIPWiiU3DSOnline0904)]

They’ve already done that already.

@KvngAf

I have also tried doing (Command+Shift+F) to pull up the search bar. I have searched up about 20 different things including “require” and “PromptPurchase”

[CanadianCrepe]

Turn off third-party-sales. It will deny the sale from being prompted unless you use third-party shirts for you, it won’t work. Go look into your plugins and disable the ones you don’t trust, then look through your scripts and see if you see anything malicious.

This thing is a backdoor and it basically ruins the experience for players, I would suggest using RoDefender for this.

Here are some articles:

Backdooring Explained [MEGATHREAD]

Backdoors Explained This thread is a megathread which explains backdooring, the history behind it, and why it is so common now. Chapter 2 has been released here, which explains more of the scripting side of it! If you aren’t already aware, backdooring has become significantly more popular in the community of exploiters. It is on a rise like a brand new trend, and most developers are aware of it and taking action against it. But what is backdooring in terms of ROBLOX? Here’s the full details: …

Kronos - Scan your game for viruses, backdoors - Plugin

Kronos is a plugin that scans your game for backdoors or viruses. This plugin is outdated. False positives are possible - especially admin scripts. If you want to quarantine backdoors, make a folder in ServerStorage called Backdoors. Link for Kronos. This project has been discontinued and will no longer be worked on any soon.

[CanadianCrepe]

Also, if you can’t find it in your scripts, it’s probably a plugin issue. Disable some of your plugins, and if all else fails, disable all your plugins and uninstall the ones you don’t trust. You probably got a botted plugin, check the usernames of the plugin creator for more help.

[GamersInternational (RIPWiiU3DSOnline0904)]

Again, they have already uninstalled all of their plugins.

@KvngAf

I’ve already researched this topic today and a common issue is having a malicious plugin. I uninstalled all of my plugins and the problem is still present.

[lluckvy (aaron)]

Maybe this post and this topic can be of some use:

Removing Backdoors 101

Here’s a good search list made by another developer. 1] require , Require is in many scripts, not malicious all of the time. Follow the methods posted above to verify it being malicious. 2] xen 3] luraph 4] local a= 5] a= 6] b= 7] brew 8] anti.backdoor 9] backboor 10] synapse 11] exploit 12] loading 13] \114\101\113\117\105\114\101 [Bytecode for require] 14] Joint 15] loadstring 16] string 17] math 18] getfenv 19] getfenv()["\108\111\97\100\115\116\114\105\110\103 Source: A backdoor disguised…

Try searching for every term on this list

[CanadianCrepe]

@KvngAf

No one has access to my game, team create is turned off so there’s no way someone could have done anything to the game over night. I’m thinking possible a plugin inserted a script into a model or something. I have a pretty large game but I looked through pretty much all of the scripts and saw nothing.

Did they publish the changes though? If this is a problem and all plugins have been turned off, all scripts have been searched, there shouldn’t be a problem.

[KvngAf]

Okay update. I published the exact same map to a new game and the problem isn’t there??
Game: bugs - Roblox

So now I am even more confused. (ThirdPartySales are still turned on)

[McThor2]

This may be a result of you getting rid of your plugins since you made the first game.

[KvngAf]

Nevermind that, it still shows for other users just not me

[GamersInternational (RIPWiiU3DSOnline0904)]

Did you follow my advice to check any waits? I would also look for while true do as well.

[KvngAf]

Yes I don’t seem to see anything suspicious, I also used RoDefender and it said “0 Viruses Found”

[GamersInternational (RIPWiiU3DSOnline0904)]

Use Kronos as well. It might help you find something. I personally use no backdoor scanners as I’ve never installed a bad model.

[gamedude_8]

I’ve had the same problem. A few months ago, when I didn’t know how to make anything, I used a lot of free models. This same prompt came up for me. After a while, I realized that it wasn’t a model making the prompt, it was a tool that had been dragged in as part of the model. This tool wasn’t doing anything, so I deleted it and problem solved!

[KvngAf]

I also tried Kronos, So I just deleted the whole map and the problem is gone so I will probably just delete small parts at a time until I find the problem… I will keep you updated!

[ScripterHumanoid]

Hello KvngAf,

I suggest you use this plugin > GameGuard Anti Virus V2.5 [ALPHA] - Roblox

It basically scans all of your scripts, and it says if you should quarantine them, by giving you the precise script that makes your game “crazy”. There are many viruses, if you can’t turn off the sales, then you should use this plugin, an example of a virus that can be “destroyed” with this plugin is the Rosync, that uses getfenv for getting every environment of a script // function that you use. I had an issue with this virus yesterday, and I’m fixing it with the plugin that I linked above. For any other issue about this, you can reply to me if you want.

[Oficcer_F]

Yes, I agree with @RBX_Lua.

If the creator was somewhat «smart» he/she added a time wait, so it starts later - hence making it harder to find, like your situation at the moment.

[Oficcer_F]

Search up os.time(),tick() and time().

Not sure what the exact syntax is (look up how you write it) and see if you find something.

If the ‘exploiter’ added a wait or something of that sort you’ll find it.

[Oficcer_F]

Turn off third party sales (!!), unless you need it.

[KvngAf]

Alright good news, I have found the issue and eliminated it. Everyone who said to search “require” was correct. I was searching require but it was a script that I had been using for months so I didn’t think that was suspicious. The script was something called “Ragdoll FE” It was a script that changed the death animation when you reset your character. Of course it was using a require script… Thank you to everyone who gave great advice!

If any scripters would like to help me create a rag doll on death gamepass for the future please let me know! We can discuss a price. NO “REQUIRE” SCRIPTS PLEASE! I’ve learned my lesson