Game Engine Hook

[kykywka]

Hello! I wanted to ask a possibly stupid, but simple question. Sometimes a player writes a Game Engine Hook in the report after the scan. So I would like to know for what reasons this report is issued , that is , is it a 100 % cheat or are there any moments like for example with generic cheat detection ?

[Tiger]

It depends. Cheats can trigger various (generic) detections (game engine hook, generic cheat detection, etc.). Malwares or incompatible software (like Dr.Web, CryptoPro [this one should be fixed and whitelisted], etc.) that injects their code into the game can trigger Generic Cheat Detection, that's why it is important to report the issue so I can try to fix it.

Game Engine Hook is triggered by files (cheats, guards, etc.) that modifies the game in order to achieve various goals (e.g.: manipulating the weapon). For guards I added some additional checks so they shouldn't be a problem.

Sometimes, because it's an unknown or a new (cheat) file, the file is automatically blacklisted with the "best" detection name (which sometimes happens to be one of these detection names). A report can have multiple detections, but you will see only the "best" one.

Do you have a specific case you want to find more details?

[kykywka]

Yes, I have a specific case. I banned the player for this reason. As a result, he showed up on the server a month later and said that this reason came out on the binds for the training server.

[Tiger]

Do you have a wCD report?

[uCs # Alex]

Cum de aici raspunzi mereu si in privat sau pe steam nu ? Nu credeam c-o sa fiu nevoit sa scriu lucruri de genul intr-un topic, Pe steam te-ai dat offline ca sa nu te mai vad on, aici nu imi raspunzi in privat.. Pot ca macar sa stiu si eu de ce ?

[kykywka]

<b>You have to register to ba able to see this link</b> here is his report , but it is already old

[Tiger]

Detection caused by View Demo Helper. This "hack" shouldn't be used online!

He has a Crystal Hack data directory, maybe we played recently it with (but not in the current session).

[kykywka]

Here's what we found from one player on a computer that passed wargods, but the scan didn't find anything. Maybe it will help you in the future

0x5bedf82 (20): Anti-cheat
0x5bee944 (202): Your Steam account '%account%' has been banned from secure game servers due to a cheating infraction.
0x5beed10 (382): You cannot connect to the selected server, because it is running in VAC (Valve Anti-Cheat) secure mode.

This Steam account has been banned from secure servers due to a cheating infraction.
0x5bef00a (364): The server denied your connection because it is running in VAC (Valve Anti-Cheat) secure mode.

This Steam account has been banned from secure servers due to a cheating infraction.
0x5bef5b6 (130): Banned from some secure servers because of a cheating infraction.
0xb600b68 (152): d:\counter-strike 1.6 russian\cstrike\..\sswv7.3_[<b>You have to register to ba able to see this link</b>]_.dll
0xb6015e8 (156): \??\d:\counter-strike 1.6 russian\platform\sswv7.3_[<b>You have to register to ba able to see this link</b>]_.dll
0xb6017e0 (152): d:\counter-strike 1.6 russian\cstrike\..\sswv7.3_[<b>You have to register to ba able to see this link</b>]_.dll
0xbca2570 (38): ../sswv7.3_[<b>You have to register to ba able to see this link</b>]_.dll
0x25b0c11a (20): Anti-cheat
0x25b0cadc (202): Your Steam account '%account%' has been banned from secure game servers due to a cheating infraction.
0x25b0cea8 (382): You cannot connect to the selected server, because it is running in VAC (Valve Anti-Cheat) secure mode.

This Steam account has been banned from secure servers due to a cheating infraction.
0x25b0d1a2 (364): The server denied your connection because it is running in VAC (Valve Anti-Cheat) secure mode.

This Steam account has been banned from secure servers due to a cheating infraction.
0x25b0d74e (130): Banned from some secure servers because of a cheating infraction.
0x25b2a082 (20): Anti-cheat
0x25b2aa44 (202): Your Steam account '%account%' has been banned from secure game servers due to a cheating infraction.
0x25b2ae10 (382): You cannot connect to the selected server, because it is running in VAC (Valve Anti-Cheat) secure mode.

This Steam account has been banned from secure servers due to a cheating infraction.
0x25b2b10a (364): The server denied your connection because it is running in VAC (Valve Anti-Cheat) secure mode.

This Steam account has been banned from secure servers due to a cheating infraction.
0x25b2b6b6 (130): Banned from some secure servers because of a cheating infraction.
0x25b4809a (20): Anti-cheat
0x25b48a5c (202): Your Steam account '%account%' has been banned from secure game servers due to a cheating infraction.
0x25b48e28 (382): You cannot connect to the selected server, because it is running in VAC (Valve Anti-Cheat) secure mode.

This Steam account has been banned from secure servers due to a cheating infraction.
0x25b49122 (364): The server denied your connection because it is running in VAC (Valve Anti-Cheat) secure mode.

This Steam account has been banned from secure servers due to a cheating infraction.
0x25b496ce (130): Banned from some secure servers because of a cheating infraction.
0x3bb30828 (12): ../cheat.exe
0x3bf46a58 (12): ../cheat.dll

[Tiger]

Dude, those are just some strings found in the memory / files. Those strings are legit... you can find almost all strings in your CS's memory as well.

The cheat files paths are in memory because the server uses some server-side (precache) anticheat that checks if the file is present on the system.

[kykywka]

Yes , but he found a super simple wh 7.3 dll that was downloaded from the site <b>You have to register to ba able to see this link</b> /. That's what I wanted to convey to you. Maybe this site will be useful to you to make some adjustments to the scan

[Tiger]

Do you found it on the disk too? If no, then please listen to what I said.

[Svyatoi3004]

Здравствуйте. Вот как раз хотел узнать про данный случай. Это мой дэтэк. И до сих пор не могу понять где эту фигню убрать. Сам админ на сервере. Читы на Стим не ставил вообще. Вдх Лоулер для просмотра дэмо людей. А хук игрового движения как я понимаю это паутинка. А что касается Чита этого,то я их на нонстиме тэстил,что бы понять как они работают в реальном времени. Подскажите как снести нафиг это все. Я просто хз где это есть.

[Tiger]

Delete "View Demo Helper" and you will be fine.

[Svyatoi3004]

Из-за этой проги все? Если бы знал давно бы уже удалил. Спасибо.

--------------- Added after 41 minutes ---------------

Все равно выдает какую-то фигню. Как от этого избавиться?

[Tiger]

You played with Crystal Hack, and its data is saved in %appdata%. Delete "Crystal Hack" subdirectory and you won't be detected anymore.

[Svyatoi3004]

Спасибо. Играть не играл,тэстил только. Я не думал что на Стим повлечет эта фигня.

[Svyatoi3004]

Спасибо большое!! Все сделал по вашим рекомендациям и стало норм.Респект и уважуха тебе Бро!!!