sicilian 0 Posted August 13, 2004 Damn I missunderstood, thought another way than you. Blackden, your so called "Last News" are old and don't bring any information which could be usefull... I'm completely right with benu. What they can do within the "supercheat" (<- what a shitty word) doesn't interest, how they do is it - not what! Share this post Link to post Share on other sites
Blackden 0 Posted August 13, 2004 Quote[/b] ]Blackden: do you only copy the news from the cheat sites to this forum and spread hysteria/paranoia or do you actually download the cheats, look into them, analyze how they work and try to do something against them? No i did when i was admin, but now i am tired by all of this, when u say that u can found every cheater with a good filechecker, i answer that its impossible with our tools. Do you know how its easy to have the cheat pack ? Just need create a account and go to the DL section. What we can do, nothing else to cry when we see our great game ruin by some assholes. So you see my words, not paranoiac, because cheater are everywhere, but just ironic cause i am totally disgust by this. We loose every days OFP players because cheats. Well if BIS is right with this, its their problems. Share this post Link to post Share on other sites
Waterman 0 Posted August 13, 2004 I detected three players using the socalled supercheat.Blackden: do you only copy the news from the cheat sites to this forum and spread hysteria/paranoia or do you actually download the cheats, look into them, analyze how they work and try to do something against them? How do you detect them then? I've seen the error: "Cannot load mission, missing addons: bis_resistance" or simular when some have used it. Maybe just a conincidence though. Share this post Link to post Share on other sites
benu 1 Posted August 13, 2004 Click the ALSR link in sicilians signature to get the latest info on cheat prevention. Share this post Link to post Share on other sites
sicilian 0 Posted August 13, 2004 first time try following checkfile array <table border="0" align="center" width="95%" cellpadding="0" cellspacing="0"><tr><td>Code Sample </td></tr><tr><td id="CODE"> "bin\config.cpp", "bin\resource.cpp", "res\addons\abox.pbo", "res\addons\apac.pbo", "res\addons\bmp2.pbo", "res\addons\brmd.pbo", "res\addons\ch47.pbo", "res\addons\humr.pbo", "res\addons\hunter.pbo", "res\addons\kozl.pbo", "res\addons\laserguided.pbo", "res\addons\m2a2.pbo", "res\addons\oh58.pbo", "res\addons\su25.pbo", "res\addons\trab.pbo", "res\addons\vulcan.pbo", "res\addons\xms.pbo", "res\addons\flags.pbo", "res\addons\6g30.pbo", "res\addons\bizon.pbo", "res\addons\g36a.pbo", "res\addons\mm-1.pbo", "res\addons\o_wp.pbo", "res\addons\steyr.pbo", "res\addons\xms.pbo", "res\dta\sound.pbo", "res\dta\hwtl\merged.pbo", "res\bin\config.bin", "res\bin\resource.bin", "res\bin\config.cpp", "res\bin\resource.cpp", "abox\config.cpp", "abox\config.bin", "g36a\config.cpp", "g36a\config.bin", "xms\config.cpp", "xms\config.bin", "6g30\config.cpp", "6g30\config.bin", "bizon\config.cpp", "bizon\config.bin", "mm-1\config.cpp", "mm-1\config.bin", "steyr\config.cpp", "steyr\config.bin", "o_wp\config.cpp", "o_wp\config.bin", "noe\noe.wrp", "res\cheats\cheatactivator.pbo", "res\cheats\cheats.pbo", "res\cheats\g36a.pbo", "xyz\hwtl\merged.pbo", "ch_wrp\abel.wrp", "ch_wrp\cain.wrp", "ch_wrp\eden.wrp", "ch_wrp\intro.wrp", "merged\00000.paa", "merged\00001&krovi4.paa", "merged\00002.paa", "merged\00003krovi2.paa", "merged\00004krovi2.paa", "merged\00005krovi3.paa", "merged\00006krovi3.paa", "merged\00007mc_vojakw2.paa", "merged\00008mc_vojake2.paa", "merged\00009mc_vojakw2.paa", "merged\00010mc_vojake2.paa", "merged\00011&str_fikovnik.paa", "cheats\init.sqs" And be sure you get some of them. But be careful with the merged messages cause they also come if you dont have HW T&L activated! Share this post Link to post Share on other sites
Waterman 0 Posted August 13, 2004 This is from our filechecker, which is one of the better ones around. It's caught many people now... Quote[/b] ] checkfiles[]= { "Worlds\abel.wrp", "Worlds\cain.wrp", "Worlds\eden.wrp", "Worlds\intro.wrp", "Ch_wrp\abel.wrp", "Ch_wrp\cain.wrp", "Ch_wrp\eden.wrp", "Ch_wrp\intro.wrp", "addons\CheatActivator.pbo", "addons\cheats.pbo", "addons\DynamicRange.pbo", "cheats\noe.pbo", "cheats\bizon.pbo", "cheats\g36a.pbo", "cheats\steyr.pbo", "cheats\flags.pbo", "cheats\CheatActivator.pbo", "cheats\cheats.pbo", "cheats\DynamicRange.pbo", "cheats\editorupdate102.pbo", "xyz\anims.pbo", "xyz\anim.pbo", "xyz\misc.pbo", "xyz\Merged.pbo", "xyz\Hwtl\Merged.pbo", "res\addons\noe.pbo", "res\addons\bizon.pbo", "res\addons\g36a.pbo", "res\addons\steyr.pbo", "res\addons\flags.pbo", "res\addons\CheatActivator.pbo", "res\addons\cheats.pbo", "res\addons\DynamicRange.pbo", "res\cheats\noe.pbo", "res\cheats\Bizon.pbo", "res\cheats\G36a.pbo", "res\cheats\steyr.pbo", "res\cheats\flags.pbo", "res\cheats\CheatActivator.pbo", "res\cheats\cheats.pbo", "res\cheats\DynamicRange.pbo", "res\cheats\editorupdate102.pbo", "res\tommys\noe.pbo", "res\tommys\Bizon.pbo", "res\tommys\G36a.pbo", "res\tommys\steyr.pbo", "res\tommys\flags.pbo", "res\tommys\CheatActivator.pbo", "res\tommys\cheats.pbo", "res\tommys\DynamicRange.pbo", "res\tommys\editorupdate102.pbo", "res\tomies\noe.pbo", "res\tomies\Bizon.pbo", "res\tomies\G36a.pbo", "res\tomies\steyr.pbo", "res\tomies\flags.pbo", "res\tomies\CheatActivator.pbo", "res\tomies\cheats.pbo", "res\tomies\DynamicRange.pbo", "res\tomies\editorupdate102.pbo", "res\bin\config.bin", "res\bin\resource.bin", "res\dta\anims.pbo", "res\dta\anim.pbo", "res\dta\misc.pbo", "res\dta\Merged.pbo", "res\dta\hwtl\merged.pbo", "res\xyz\anims.pbo", "res\xyz\anim.pbo", "res\xyz\misc.pbo", "res\xyz\Hwtl\Merged.pbo", "DYNAMICRANGE\ADDONS\DynamicRange.pbo", "r-opfrtr.exe", "NoObS Trainer +2.exe", "NoObS Trainer +1.exe", "NoObS Trainer.exe", "ofphook.dll", "hook.dll", "textures.dll", "ofpspamm.exe", "ofpspam.exe", "spee.dll", " .bat", ".bat", "ogcaimbot.exe", "3DAnalyze.exe", "patch.exe", }; Share this post Link to post Share on other sites
Blackden 0 Posted August 13, 2004 Thx waterman and sicilian to give us your filechecker, but u know like me that it is useless when cheater change the name of the file. So you caught the noob cheater, not all. Anyway, if someone from BIS read this topic, he can maybe do something better than us. Hey BIS, as the pope is in Lourdes can you do a miracle for us ? Share this post Link to post Share on other sites
sicilian 0 Posted August 13, 2004 As you can see in the part of our checkfile we use relativ paths to check loaded addons like suma discribed in this thread! This will detect more than only noob cheaters as you said and blackden I recommend using this method of checking reliv paths! Share this post Link to post Share on other sites
benu 1 Posted August 14, 2004 Thx waterman and sicilian to give us your filechecker, but u know like me that it is useless when cheater change the name of the file.So you caught the noob cheater, not all. Anyway, if someone from BIS read this topic, he can maybe do something better than us. Hey BIS, as the pope is in Lourdes can you do a miracle for us ? And that is WRONG. We don't check for filenames but for loaded configs. If you check for g36a\config.bin you will do a check on the g36a the player uses, regardless of path and filename. I really like people like that do not even care to inform themselves about what can be done but just go off telling everyone how "impossible" this is. And when presented the solution they don't even care look at it but just repeat their stupid denials. Read my post: i already detected those supercheater users. Even though they just randomly generated file pathes, hacked exes, etc. It IS possible. Although you can see that watermans checkfile lacks the essential checks and it will therefor not detect most cheats... Share this post Link to post Share on other sites
Blackden 0 Posted August 14, 2004 I see nothing in your filechecker about config_DX.ini or config_GL.ini (wireframe). Maybe it will be good to add it. We caught several players in HIS server with. Share this post Link to post Share on other sites
Waterman 0 Posted August 14, 2004 I think most of the ones you have suggested will be added, just that we don't have a server at the moment to use it on. Â Quote[/b] ]If you check for g36a\config.bin you will do a check on the g36a the player uses, regardless of path and filename. Thx for that, I didn't realise this. So how about this then: <table border="0" align="center" width="95%" cellpadding="0" cellspacing="0"><tr><td>Code Sample </td></tr><tr><td id="CODE">checkfiles[]= { "Worlds\abel.wrp", "Worlds\cain.wrp", "Worlds\eden.wrp", "Worlds\intro.wrp", "Ch_wrp\abel.wrp", "Ch_wrp\cain.wrp", "Ch_wrp\eden.wrp", "Ch_wrp\intro.wrp", "addons\CheatActivator.pbo", "addons\cheats.pbo", "addons\DynamicRange.pbo", "cheats\noe.pbo", "cheats\bizon.pbo", "cheats\g36a.pbo", "cheats\steyr.pbo", "cheats\flags.pbo", "cheats\CheatActivator.pbo", "cheats\cheats.pbo", "cheats\DynamicRange.pbo", "cheats\editorupdate102.pbo", "xyz\anims.pbo", "xyz\anim.pbo", "xyz\misc.pbo", "xyz\Merged.pbo", "xyz\Hwtl\Merged.pbo", "res\addons\noe.pbo", "res\addons\bizon.pbo", "res\addons\g36a.pbo", "res\addons\steyr.pbo", "res\addons\flags.pbo", "res\addons\CheatActivator.pbo", "res\addons\cheats.pbo", "res\addons\DynamicRange.pbo", "res\cheats\noe.pbo", "res\cheats\Bizon.pbo", "res\cheats\G36a.pbo", "res\cheats\steyr.pbo", "res\cheats\flags.pbo", "res\cheats\CheatActivator.pbo", "res\cheats\cheats.pbo", "res\cheats\DynamicRange.pbo", "res\cheats\editorupdate102.pbo", "res\tommys\noe.pbo", "res\tommys\Bizon.pbo", "res\tommys\G36a.pbo", "res\tommys\steyr.pbo", "res\tommys\flags.pbo", "res\tommys\CheatActivator.pbo", "res\tommys\cheats.pbo", "res\tommys\DynamicRange.pbo", "res\tommys\editorupdate102.pbo", "res\tomies\noe.pbo", "res\tomies\Bizon.pbo", "res\tomies\G36a.pbo", "res\tomies\steyr.pbo", "res\tomies\flags.pbo", "res\tomies\CheatActivator.pbo", "res\tomies\cheats.pbo", "res\tomies\DynamicRange.pbo", "res\tomies\editorupdate102.pbo", "res\bin\config.bin", "res\bin\resource.bin", "res\dta\anims.pbo", "res\dta\anim.pbo", "res\dta\misc.pbo", "res\dta\Merged.pbo", "res\dta\hwtl\merged.pbo", "res\xyz\anims.pbo", "res\xyz\anim.pbo", "res\xyz\misc.pbo", "res\xyz\Hwtl\Merged.pbo", "DYNAMICRANGE\ADDONS\DynamicRange.pbo", "r-opfrtr.exe", "NoObS Trainer +2.exe", "NoObS Trainer +1.exe", "NoObS Trainer.exe", "ofphook.dll", "hook.dll", "textures.dll", "ofpspamm.exe", "ofpspam.exe", "spee.dll", " .bat", ".bat", "ogcaimbot.exe", "3DAnalyze.exe", "patch.exe", "merged\00000.paa", "merged\00001&krovi4.paa", "merged\00002.paa", "merged\00003krovi2.paa", "merged\00004krovi2.paa", "merged\00005krovi3.paa", "merged\00006krovi3.paa", "merged\00007mc_vojakw2.paa", "merged\00008mc_vojake2.paa", "merged\00009mc_vojakw2.paa", "merged\00010mc_vojake2.paa", "merged\00011&str_fikovnik.paa", "cheats\init.sqs", "abox\config.cpp", "abox\config.bin", "g36a\config.cpp", "g36a\config.bin", "xms\config.cpp", "xms\config.bin", "6g30\config.cpp", "6g30\config.bin", "bizon\config.cpp", "bizon\config.bin", "mm-1\config.cpp", "mm-1\config.bin", "steyr\config.cpp", "steyr\config.bin", "o_wp\config.cpp", "o_wp\config.bin", "noe\noe.wrp" }; Share this post Link to post Share on other sites
RN Malboeuf 12 Posted August 14, 2004 i wouldn't even run half of those like "res\cheats\editorupdate102.pbo", like comon any use some common sense any file name you chack that is not OFP related will fail on all that do not have it, plus if the server does not have the file and clients dont have the file check wont show any thing so you are now wasting CPU cycles and ban width on figments of your server's imagination checkfiles[]= { "res\addons\noe.pbo", "res\addons\bizon.pbo", "res\addons\g36a.pbo", "res\addons\steyr.pbo", "res\bin\config.bin", "res\bin\resource.bin", "res\dta\anims.pbo", "res\dta\anim.pbo", "res\dta\misc.pbo", "res\dta\Merged.pbo", "res\dta\hwtl\merged.pbo", "abox\config.cpp", "abox\config.bin", "g36a\config.cpp", "g36a\config.bin", "xms\config.cpp", "xms\config.bin", "6g30\config.cpp", "6g30\config.bin", "bizon\config.cpp", "bizon\config.bin", "mm-1\config.cpp", "mm-1\config.bin", "steyr\config.cpp", "steyr\config.bin", "o_wp\config.cpp", "o_wp\config.bin", }; there would be allot of other files, but the ones i removed from the last list are useless Share this post Link to post Share on other sites
benu 1 Posted August 14, 2004 I actually like output like this in my logs: <table border="0" align="center" width="95%" cellpadding="0" cellspacing="0"><tr><td>Code Sample </td></tr><tr><td id="CODE">Gricoli uses modified data file - cheats\init.sqs ]DSE[Lee uses modified data file - cheats\init.sqs ]DSE[Lee uses modified data file - res/addons/cheats.pbo pingonete uses modified data file - cheats\init.sqs This has more info than just "modified g36a\config.bin". And what do you do if they do not even modify the config.bin but the config.cpp? Share this post Link to post Share on other sites
killswitch 19 Posted August 14, 2004 A tip to both admins and players - I have noticed some log entries containing four specific files being flagged as modified. This turns out to be due to the old Battlesounds 1.1 sound "mod". An example from the logs (actual player nick replaced by "<playername>"): <table border="0" align="center" width="95%" cellpadding="0" cellspacing="0"><tr><td>Code Sample </td></tr><tr><td id="CODE"> <playername> uses modified config file <playername> modified data file - res/addons/g36a.pbo <playername> uses modified data file - res/addons/kozl.pbo <playername> uses modified data file - res/addons/m2a2.pbo <playername> uses modified data file - res/addons/steyr.pbo So: if you see those those four, chances are that the unlucky player is "infected" with the Battlesounds 1.1 sound pack. The readme in that one specifically tells you to replace files inside Res/Addons and Res/dta (Big, big no-no). In defence of BS11 and its creator, it is from the days of yore when the knowledge of proper usage of mod folders were less widespread. In conclusion? Players: If you see those four addons being noted as you log onto a server, its time to clean out BattleSounds. Admins: see those four, tell the player to clear out Battlesounds. What not to do: start yelling Share this post Link to post Share on other sites
sicilian 0 Posted August 15, 2004 Malboeuf with your posted checkfile you will not be able to detect if someone has greened or reded you up! If you dont check the merged you cant get those players who always see you as green or red soldier! Its time for ya to realize some or to believe others not only your opinion is the right one. Think over again sometimes even if you're longer present here. You dont answer to my questions so you cant get the info you need to realize how it works. Nothing against you but its really annoying sometimes! Share this post Link to post Share on other sites
Blackden 0 Posted August 15, 2004 Add to your checkfile config_DX.ini and config_GL.ini. I found this screen in a french OFP website. and i saw 2 more guys yesterday with it on HIS server. Share this post Link to post Share on other sites
westy-SWAF- 0 Posted August 15, 2004 What does it mean when someone connects and it just says Player uses Modifed Config File Player uses Modifed Config File Player uses Modifed Config File Player uses Modifed Config File no specific file just that above.. exact with the players name in place of "player" Share this post Link to post Share on other sites
westy-SWAF- 0 Posted August 15, 2004 Thx waterman and sicilian to give us your filechecker, but u know like me that it is useless when cheater change the name of the file.So you caught the noob cheater, not all. Anyway, if someone from BIS read this topic, he can maybe do something better than us. Hey BIS, as the pope is in Lourdes can you do a miracle for us ? Â And that is WRONG. We don't check for filenames but for loaded configs. If you check for g36a\config.bin you will do a check on the g36a the player uses, regardless of path and filename. I really like people like that do not even care to inform themselves about what can be done but just go off telling everyone how "impossible" this is. And when presented the solution they don't even care look at it but just repeat their stupid denials. Read my post: i already detected those supercheater users. Even though they just randomly generated file pathes, hacked exes, etc. It IS possible. Although you can see that watermans checkfile lacks the essential checks and it will therefor not detect most cheats... So when are you going to put together a good filechecker Benu? Share this post Link to post Share on other sites
sicilian 0 Posted August 15, 2004 @ Aug. 15 2004,17:59)]What does it mean when someone connects and it just saysPlayer uses Modifed Config File Player uses Modifed Config File Player uses Modifed Config File Player uses Modifed Config File no specific file just that above.. exact with the players name in place of "player" This mean the server didn't get a answer from the client regarding its checkfile request. Usually there will be a time out and it will show up player uses modified config file - Time out (possible cheat is used). Share this post Link to post Share on other sites
westy-SWAF- 0 Posted August 15, 2004 Rgr so this means that a cheat is being used then? or not... Also it would be cool if we can get some English people on your site Share this post Link to post Share on other sites
RN Malboeuf 12 Posted August 15, 2004 Malboeuf with your posted checkfile you will not be able to detect if someone has greened or reded you up! i never pposted a complete file check i just edited his out, but i guess you didn't realize it that is not the file checks we run and the inner/expanded/unzipped/extracted merged file checks are 50% reliable making them 100% useless Share this post Link to post Share on other sites
RN Malboeuf 12 Posted August 15, 2004 Its time for ya to realize some or to believe others not only your opinion is the right one. Think over again sometimes even if you're longer present here.You dont answer to my questions so you cant get the info you need to realize how it works. Nothing against you but its really annoying sometimes! and your missing the fact i have run OFP servers for 3 years and have more experience online in OFP then you do and understand the fact that and folder can be renamed so scanning for a specific folder is pointless it's time you understand the fact that a cheater wont name his mod folders cheats lol show some common sense and stop crying wolf so if I corect you its from experience, and the fact i dont need you posting to the community to have them scan files that wont make one iota of a difference we use our own extensive one that BIS them selves went over for accuacy and for Language varients in OFP files mabey you miss the fact that our server has been around longer and has less problems with cheaters and we dont use your file checks explain that time to rethink your system Share this post Link to post Share on other sites
westy-SWAF- 0 Posted August 15, 2004 first time try following checkfile array<table border="0" align="center" width="95%" cellpadding="0" cellspacing="0"><tr><td>Code Sample </td></tr><tr><td id="CODE"> "bin\config.cpp", "bin\resource.cpp", "res\addons\abox.pbo", "res\addons\apac.pbo", "res\addons\bmp2.pbo", "res\addons\brmd.pbo", "res\addons\ch47.pbo", "res\addons\humr.pbo", "res\addons\hunter.pbo", "res\addons\kozl.pbo", "res\addons\laserguided.pbo", "res\addons\m2a2.pbo", "res\addons\oh58.pbo", "res\addons\su25.pbo", "res\addons\trab.pbo", "res\addons\vulcan.pbo", "res\addons\xms.pbo", "res\addons\flags.pbo", "res\addons\6g30.pbo", "res\addons\bizon.pbo", "res\addons\g36a.pbo", "res\addons\mm-1.pbo", "res\addons\o_wp.pbo", "res\addons\steyr.pbo", "res\addons\xms.pbo", "res\dta\sound.pbo", "res\dta\hwtl\merged.pbo", "res\bin\config.bin", "res\bin\resource.bin", "res\bin\config.cpp", "res\bin\resource.cpp", "abox\config.cpp", "abox\config.bin", "g36a\config.cpp", "g36a\config.bin", "xms\config.cpp", "xms\config.bin", "6g30\config.cpp", "6g30\config.bin", "bizon\config.cpp", "bizon\config.bin", "mm-1\config.cpp", "mm-1\config.bin", "steyr\config.cpp", "steyr\config.bin", "o_wp\config.cpp", "o_wp\config.bin", "noe\noe.wrp", "res\cheats\cheatactivator.pbo", "res\cheats\cheats.pbo", "res\cheats\g36a.pbo", "xyz\hwtl\merged.pbo", "ch_wrp\abel.wrp", "ch_wrp\cain.wrp", "ch_wrp\eden.wrp", "ch_wrp\intro.wrp", "merged\00000.paa", "merged\00001&krovi4.paa", "merged\00002.paa", "merged\00003krovi2.paa", "merged\00004krovi2.paa", "merged\00005krovi3.paa", "merged\00006krovi3.paa", "merged\00007mc_vojakw2.paa", "merged\00008mc_vojake2.paa", "merged\00009mc_vojakw2.paa", "merged\00010mc_vojake2.paa", "merged\00011&str_fikovnik.paa", "cheats\init.sqs" And be sure you get some of them. But be careful with the merged messages cause they also come if you dont have HW T&L activated! These Advanced files must be wrong.. becuase everyone who connects gets the error message or checkfile error Share this post Link to post Share on other sites
Waterman 0 Posted August 15, 2004 Quote[/b] ]These Advanced files must be wrong.. becuase everyone who connects gets the error message or checkfile error Quote[/b] ]But be careful with the merged messages cause they also come if you dont have HW T&L activated! Thats probably the reason. Â I read somewhere I think, that most new graphics cards will disable HW T&L by default. Â Could be wrong... Share this post Link to post Share on other sites
