PDA

View Full Version : Generic cheat detection



REKORDER[Q]
12-06-2018, 03:58 AM
Hello i got a problem my scan is clear for many years and now !!!! i see today in mix i drop my scan and people start too tell me cheater etc.... finally kick me....

I was full 100% confident i said wtf look at my scan is 100% ;) :D clean and then i see this

<b>You have to register to ba able to see this link</b>

RED MARK im so mad cuz im proud to be legit guy i hate cheaters

I hope you gonna fix this
Cuz im loving playing this game
cheater are plague online.
that's why you create this app "'btw i love it'"
i never cheat in cs in my life i
i started played from 2003 in a cyber coffe
and im a daddy twice
Its my single one steam acc
I hope you gonna trust me and delete this red mark :pls:
explain me WTF IS THIS !!!!:-S

Tiger
12-06-2018, 08:11 AM
To prove you didn't play with cheats you need to dump the memory process of the game when wCD detects you with "Generic Cheat Detection". This detection can be triggered by many things, that's why is called "Generic", including cheats or malware.

PS: Here you have a tutorial on how to dump the memory process on your Windows 8.1: <b>You have to register to ba able to see this link</b>

Unfortunately, until you don't give me the memory process dump I can't help you.

REKORDER[Q]
12-06-2018, 04:29 PM
I post some replies but they dont appears

--------------- Added after 5 minutes ---------------

Hello thanks for answer so quick
SO i have too justify those ?


PassThruSvr.exe (MD5: 446462BBA744DA60379574926FD51EAB) (Size: 166912)
kbd.exe (MD5: DDB1C559E36063532ED1CBC101C17DA3) (Size: 94208)

passthru dump : <b>You have to register to ba able to see this link</b>
kbd.exe Keyboard driver DUmp : <b>You have to register to ba able to see this link</b>

I hope you can do something
Thnks to you and your anti cheat

REKORDER[Q]
12-06-2018, 08:24 PM
UCR.exe Universal Control Remaping is a program forsteam games non compatible with my arcade stick controller i can remap on my keyboard so like the application 'Joytokey' i uninstall it few days ago

<b>You have to register to ba able to see this link</b>

Tiger
12-06-2018, 09:35 PM
If you want to have your files (processes, modules and so on) whitelisted you need to run this script from here: <b>You have to register to ba able to see this link</b>(validare)-blacklist-fisiere?p=191380&viewfull=1#post191380

The memory dump for these processes are useless, they don't help me.

REKORDER[Q]
13-06-2018, 01:20 AM
Ok i got it i do some research i translate page

Im really derterminate too clean my scan

Here my dumb <b>You have to register to ba able to see this link</b>

REKORDER[Q]
13-06-2018, 03:05 AM
<------ Upper you have the wcd files : <b>You have to register to ba able to see this link</b>

How can i hel you here my dumb of Hl.exe : <b>You have to register to ba able to see this link</b>

REKORDER[Q]
13-06-2018, 04:42 AM
RAPORT:<b>You have to register to ba able to see this link</b>
ANTIVIRUS: Windows Defender
DESCRIERE ADITIONALA: Just the mapper for controller arcade stick
LINK DUMP MEMORIE CS: <b>You have to register to ba able to see this link</b>

Tiger
13-06-2018, 07:57 AM
STOP spamming or I will ban you. You can use Google Translate to translate the romanian page into english or another language.

Also, I said:

To prove you didn't play with cheats you need to dump the memory process of the game when wCD detects you with "Generic Cheat Detection".

Your memory dump are useless!

REKORDER[Q]
13-06-2018, 01:43 PM
But i dont know why you application decide too detect some application has cheat and we have to prove

Tell me the files your need or the infos clearly i try everything
i cant reproduce the GENERIC SCAN ERROR
I dont know maybe 5 years we use EAC and 4y scan wargods
all others scans from long time are all cleans
I will and always be legit 100% and proud of it
RIGHT!!! I need to dump the memory process of the game when wCD detects you with "Generic Cheat Detection".
I trust your application but this is an error false /positive from it
HOW?!! This detection never happend before
I DONT KNOW WHY he detect something its ramdom
I DONT KNOW HOW he can detect something has cheat generic btw

WCD files <b>You have to register to ba able to see this link</b>

You should translate this site better btw many ppl non romanians need your website at least in english

Tiger
13-06-2018, 09:46 PM
Firstly, you need to comply if you want your possible false-positive detection to be removed. That's the rules. I don't remove anything without a proof (a process memory dump in your case).

Secondly, it is a romanian website. Just because I offered you support in an international language that doesn't mean you can't use google translate to help yourself.

Thirdly, both processes has been whitelisted.

REKORDER[Q]
13-06-2018, 10:04 PM
Hello
thanks you for those process !!!!

OK
So how can i do this "compli"
i already do the compilation with the powershell cmd? wcd.rar?
and dumped hl.exe

Give me instructions i will following

I CANT REPRODUCE THE GENERIC CHEAT DETECTION :
Cuz its happend a "Single Time" ramdomly

SO i will i have too redownload the remmaper UCR.exe??
for the arcade stick cuz its the only process i got in the redscan
and i find this : <b>You have to register to ba able to see this link</b>




Can you tell me what your app detect?


Which memory process i have too dump? and drop it

REKORDER[Q]
14-06-2018, 02:45 PM
<b>You have to register to ba able to see this link</b> PROCESS
<b>You have to register to ba able to see this link</b> TROJAN MALWARE I GOT !!!!!
I have uninstall joytokey UCR in march 2018 so isnt that process "UCR.exe" i got in the scan : <b>You have to register to ba able to see this link</b>

ITS UCR.exe IS the problem of GENERIC DETECTION cuz on all the others scan im clean witout this particulary process
problem its a virus malware trojan from a crack game
<b>You have to register to ba able to see this link</b>


im available for any question

SS of my antivirus the date match on my defender : <b>You have to register to ba able to see this link</b>

I look at windows defender i see this BINGO
****ing virus how can he get detected has cheat in counter strike i dont get it
i know where this process launched come from

Thanks for your time
So how can i get my scan clean back

REKORDER[Q]
17-06-2018, 08:47 PM
;209876']<b>You have to register to ba able to see this link</b> PROCESS
<b>You have to register to ba able to see this link</b> TROJAN MALWARE I GOT !!!!!
I have uninstall joytokey UCR in march 2018 so isnt that process "UCR.exe" i got in the scan : <b>You have to register to ba able to see this link</b>

ITS UCR.exe IS the problem of GENERIC DETECTION cuz on all the others scan im clean witout this particulary process
problem its a virus malware trojan from a crack game
<b>You have to register to ba able to see this link</b>


im available for any question

SS of my antivirus the date match on my defender : <b>You have to register to ba able to see this link</b>

I look at windows defender i see this BINGO
****ing virus how can he get detected has cheat in counter strike i dont get it
i know where this process launched come from

Thanks for your time
So how can i get my scan clean back

<b>You have to register to ba able to see this link</b> PROCESS
<b>You have to register to ba able to see this link</b> TROJAN MALWARE I GOT !!!!!
I have uninstall joytokey UCR in march 2018 so isnt that process "UCR.exe" i got in the scan : <b>You have to register to ba able to see this link</b>

ITS UCR.exe IS the problem of GENERIC DETECTION cuz on all the others scan im clean witout this particulary process
problem its a virus malware trojan from a crack game
<b>You have to register to ba able to see this link</b>


im available for any question

SS of my antivirus the date match on my defender : <b>You have to register to ba able to see this link</b>

I look at windows defender i see this BINGO
****ing virus how can he get detected has cheat in counter strike i dont get it
i know where this process launched come from

Thanks for your time
So how can i get my scan clean back

Tiger
17-06-2018, 10:45 PM
Still, no proof. Right now we have some difficulties with the database so your detection will be restored soon.

REKORDER[Q]
23-06-2018, 04:58 AM
What can i do if the malware USR.exe get denied by Windows Defender?
How can i prove its all clean
I can't recreate this detection witout the malware
<b>You have to register to ba able to see this link</b>
All my scan are clean for 5 years
I use ESL aequitas and eac all my damn life in cs never a single detectiçon or shit im all legit my steam is from 2004 all the same
How prove can i prove you this
Its that process of a malware from this site gamecopyworld.com

<b>You have to register to ba able to see this link</b>

ITS THAT PROGRAM MALWARE WHO GOT DETECTED HAS "GENERIC CHEAT DETECTION"
<b>You have to register to ba able to see this link</b>


I already screen my WIndows defender

--------------- Added after 15 minutes ---------------

I REINSTALL THE PROGRAMS

<b>You have to register to ba able to see this link</b>

Isnt detected has cheat generic detection :'(
The process is just yellow

I m asking you why your program decide too detect keymapper UCR has cheat



How can i do? to proff this report showing nothing

What he detect for real?

--------------- Added after 10 minutes ---------------

VirTool.Win32.Obfuscator.hg!b (v) = UCR.exe
was a malware i prove too you on this screenshot of my WD : <b>You have to register to ba able to see this link</b>
I use a crack from : Gamecopyworld.com

I never cheat cs in my life this is so unfair he detect this malware
and i got redmarked for it
Of course i cant reload a virus malware detection :(
I try too reinstall the keymapper UCR.exe but nothing more happends
HOw can i prove nothing was use has Generic cheat on my computer

REKORDER[Q]
28-06-2018, 12:21 AM
Allo tiger

Tiger
28-06-2018, 12:30 AM
That "malware" has nothing to do with your wCD detection. That detection seems to be a false-positive given by Windows Defender.

REKORDER[Q]
30-06-2018, 02:33 AM
That "malware" has nothing to do with your wCD detection. That detection seems to be a false-positive given by Windows Defender.

Ok tell me what files do you want from the Windows defender

REKORDER[Q]
08-07-2018, 07:07 PM
Simple Question : What do you need for this false possitive detection

How can i prove you and get this red mark gone ?

Tiger
08-07-2018, 07:54 PM
Did you read #2 (<b>You have to register to ba able to see this link</b>)?!

REKORDER[Q]
13-07-2018, 04:07 PM
OFC did you read this when wCD detects you with "Generic Cheat Detection".

Cuz he never do twice
He do a single time randomly and he never does again

Tiger
15-07-2018, 05:38 PM
You are lucky. Someone else uploaded me a memory dump with a similar case. Your detection has been removed.

REKORDER[Q]
16-07-2018, 10:50 PM
Thanks for your research and your time i know is hard too handle the entire forum on your own

Keep the good work and **** cheaters !!!!!

Thanks a lot Tiger