PDA

View Full Version : Hook cheat or no?


Liquidice
16th August, 2005, 02:46 AM
Hey I have some logs here I'm hoping someone can shed some light on...
I don't know whether this means they're cheating or not because it says Unknown all the time.

On the following UTDC log, the Altered address was exactly the same through each of the 3 times the player tried to join. A few people believe this player cheated.

[UTDCv17] +---------------------------------------------------+
[UTDCv17] Client have hooked functions
[UTDCv17] Player Name......: xxxxxx
[UTDCv17] Player IP........: xxxxxx
[UTDCv17] Client UT Version: v.4.36
[UTDCv17] Client OS........: WindowsXP
[UTDCv17] Server Received..: Initial check
[UTDCv17] Altered addresses: EXH?BC-758b0c5d?BD-5d1c8dfc?BR-0?
[UTDCv17] Hook Match.......: Unknown
[UTDCv17] Date/Time........: 12-8-2005 / 18:2:41
[UTDCv17] +---------------------------------------------------+

This next one, same thing, different player. Don't really know anything about them though. Same altered address through both join attempts.
[UTDCv17] +---------------------------------------------------+
[UTDCv17] Client have hooked functions
[UTDCv17] Player Name......: xxxx
[UTDCv17] Player IP........: xxxx
[UTDCv17] Client UT Version: v.4.36
[UTDCv17] Client OS........: WindowsXP
[UTDCv17] Server Received..: Initial check
[UTDCv17] Altered addresses: EXH?BA-650063?BB-74006e?BC-720065?BD-3e0022?BR-0?
[UTDCv17] Hook Match.......: Unknown
[UTDCv17] Date/Time........: 12-8-2005 / 21:33:48
[UTDCv17] +---------------------------------------------------+


This next one, different player, tried to join 6 times, same altered address each time.
[UTDCv17] +---------------------------------------------------+
[UTDCv17] Client have hooked functions
[UTDCv17] Player Name......: xxx
[UTDCv17] Player IP........: xxxx
[UTDCv17] Client UT Version: v.4.36
[UTDCv17] Client OS........: WindowsXP
[UTDCv17] Server Received..: Initial check
[UTDCv17] Altered addresses: EXH?BA-341bf9f3?BB-6240b3f3?BD-7443d0d0?BR-0?
[UTDCv17] Hook Match.......: Unknown
[UTDCv17] Date/Time........: 14-8-2005 / 10:24:20
[UTDCv17] +---------------------------------------------------+

Next one, diff player. Same altered addresses. 2 join attempts.
[UTDCv17] +---------------------------------------------------+
[UTDCv17] Client have hooked functions
[UTDCv17] Player Name......: xxxxx
[UTDCv17] Player IP........: xxxx
[UTDCv17] Client UT Version: v.4.36
[UTDCv17] Client OS........: WindowsXP
[UTDCv17] Server Received..: Initial check
[UTDCv17] Altered addresses: EXH?BA-6d6d6d?BB-6d6d6d?BC-ffffff?BD-252525?BR-0?
[UTDCv17] Hook Match.......: Unknown
[UTDCv17] Date/Time........: 14-8-2005 / 11:7:42
[UTDCv17] +---------------------------------------------------+

Thanks.. let me know :)

Baiter
16th August, 2005, 03:56 AM
ALL False Positives

Matthew
16th August, 2005, 04:49 AM
the first post in the 1.7 thread reads:

there is some false detection where logs look like:
[UTDCv17] Altered addresses: EXH?<something>?BR-0?
...ignore logs where BR is 0

Come on now - you're speaking in English, so I know you can read it too! :thumbup: