What is this hack?

[HornDog]

...

[PhoenixNewOne]

I think that this is caused by clients who as patched client and try to connect
to an unpatched server.

Warning, patched clients are booted out by AntiTTC because le last patch is not recognised by antittc.

If your server is unpatched, disable full md5 scan and extra antittc checks and
only log clients transgressions and dont auto kick them.
Or AntiTTC will try to kick all clients who as patched their client.

All this is off now on my server. I only log transgresions.

Phoenix.

"sorry for my bad english i'm not english"

[Wormbo]

This is UT2003, in case you didn't notice. ("v2225")

There seem to be several versions of the *_rc.u files whioch were shipped with different versions of the game. I suggest excluding them from the checks.

[Wormbo]

Not sure about the XEffects.u one, but in UT2004 XEffects.u never changed in any of the patches.
The *_rc.u logs are the same as in the first post.
The "Class Counter Mismatch" is a v2199 client. The latest anti TCC for UT2003 only supports v2225.

No idea if those can be exploited, but the *_rc.u packages only contain imported resources like meshes and textures. I also never heard of an XEffects.u hack.

[IveGonePostal]

Is there any page listing the various information acquired from antitcc logs and what they mean? I am such a noob when it comes to these things. I can recognize the most popular hacks, but some things I just don't know what it means.

[INSECURE CLIENT] {CPA}Smackdown [ 1a16dfdf3f042e0e721a92869a355a1d ] IP: 24.12.50.179:1290 Security ID: 0 using v3204
[14:19:27] - Opened unknown menu class Assultpack.MyInfo

[Brando67]

Have u removed Full md5 check's from Antitcc config postal??

Apperantly u can't do full md5 check's right now,
This much i've learned

[Wormbo]

Originally Posted by IveGonePostal

Is there any page listing the various information acquired from antitcc logs and what they mean? I am such a noob when it comes to these things. I can recognize the most popular hacks, but some things I just don't know what it means.

[INSECURE CLIENT] {CPA}Smackdown [ 1a16dfdf3f042e0e721a92869a355a1d ] IP: 24.12.50.179:1290 Security ID: 0 using v3204
[14:19:27] - Opened unknown menu class Assultpack.MyInfo

"MyInfo"? No UT2004 class is called MyInfo, so it has to be an aimbot.

Originally Posted by Brando67

Have u removed Full md5 check's from Antitcc config postal??

Apperantly u can't do full md5 check's right now,
This much i've learned

You actually can use FullMD5 with Anti TCC v1.15a and patch 3236, just not the hard-coded FullMD5 values.
Try this Anti TCC 2k4 configuration, it disables the built-in FullMD5 checks and replaces them with "oldskool" INI-configured FullMD5 checks:
Anti TCC FullMD5 config preset
(Just might take a little more time to check everything.)

[IveGonePostal]

Thanks Wormbo, I'll change that now. Glad to know no class is listed as MyInfo, I have a boatload of them coming up on my server. :s On second thought, I'll let someone else change it. I have no idea where it goes. OMG I am such a noob.

[Brando67]

Thank-You wormbo

I will give it a try,
AntiTcc here I come

Very Much appreciated!

Brando`

keep up your Great werk