These files often contain cookie loggers designed to steal your Roblox login session and empty your inventory or Robux.
Compressed archives like .rar or .zip files from unofficial sources are the most common way hackers distribute viruses, keyloggers, and trojans.
In your Roblox account settings, click "Log Out of All Other Sessions" to force any hackers out of your account.
Turn on Two-Step Verification in your Roblox account settings to prevent unauthorized logins.