I was on last night (2-17-09), just to find several players that have been playing on our server running cheats or altered files. I know this because they've been banned from other servers.
They are as follows:
1: Attila
2: Hellfull
3: Monah
4: Ringo
5: gringos
6: djhardbpm
Here are the logs I found:
MMCv120: -----------------------------------------------
MMCv120: [iMMC] : attila
MMCv120: -----------------------------------------------
MMCv120: [iMMC] ID: 18
MMCv120: [iMMC] IP: 24.201.114.158:1237
MMCv120: [iMMC] Netspeed: 10000
MMCv120: [iMMC] FOV: 90.000000
MMCv120: [iMMC] Voice type: BotPack.VoiceMaleTwo
MMCv120: [iMMC] Skin: SoldierSkins.hkil
MMCv120: [iMMC] Face: SoldierSkins.matrix
MMCv120: [iMMC] : attila (PMI) AFXTriggerBot.AFXMenu
MMCv120: KICK: attila (forbidden mod found - AFXTriggerBot.AFXMenu) - IP: 24.201.114.158:1237
MMCv120: [iMMC] : attila (PMI) AFXTriggerBot.AFXConfig
MMCv120: [iMMC] : attila (PMI) MultiMesh.MultiMeshMenu
ScriptLog: [ASC] Login: attila - ID: FB81C71A1ACD97F1356E6E4F6E0FC765 - IP: 24.201.114.158
ScriptLog: [ChatLog][2009-01-27 14][System]: [1] attila joined
ScriptLog: [ChatLog][2009-01-27 14][System]: attila left the game.
LastPlayed[1058]=24.201.114.158,FB81C71A1ACD97F1356E6E4F6E0FC765,2009-01-27 14:52:35,attila,paya,stonecold
LastPlayed[931]=24.201.87.191,FB81C71A1ACD97F1356E6E4F6E0FC765,2009-01-30 11:39:44,attila,hamburger
[UTDCv21] +---------------------------------------------------+
[UTDCv21] Client has corrupt memory
[UTDCv21] Player name......: djhardbpm
[UTDCv21] Player IP........: 79.116.202.80
[UTDCv21] Client UT version: v.4.36
[UTDCv21] Client OS........: Microsoft Windows XPx32 5.1 (Build: 2600)
[UTDCv21] D3DDrv.dll MD5...: DD6E3692F8EAD5E1DF88716024BC25D1
[UTDCv21] Core.dll MD5.....: CCF104341C7452B06295D421167DBA95 (v4.36)
[UTDCv21] Engine.dll MD5...: 30E34C2A9E0EAB908C5DA6F322F4E2D7 (v4.36)
[UTDCv21] Render.dll MD5...: 6F18D6BB2B3DC12D0D2E5AD5CC66586B (v4.36)
[UTDCv21] Galaxy.dll MD5...: CB246E9A387CC002E6EA13264AC0DC08 (v4.36)
[UTDCv21] UTDCx.dll MD5....: E9DE0EE5B80D2CEAD8AC9436D3D5B014
[UTDCv21] MAC hash.........: 2BCAA7D1504D18C678DCEE9482381BB4
[UTDCv21] Mem NTDLL image..: True
[UTDCv21] Corruption hash..: 55782ABB9102DA3BF6DBD53A1F792375
[UTDCv21] +---------------------------------------------------+
[UTDCv21] Client has failed integrity check
[UTDCv21] Player name......: malik
[UTDCv21] Player IP........: 77.254.34.67
[UTDCv21] Client UT version: v.4.36
[UTDCv21] Client OS........: Microsoft Windows 95 4.0 (Build: 950)
[UTDCv21] D3DDrv.dll MD5...: DD6E3692F8EAD5E1DF88716024BC25D1
[UTDCv21] Core.dll MD5.....: CCF104341C7452B06295D421167DBA95 (v4.36)
[UTDCv21] Engine.dll MD5...: 30E34C2A9E0EAB908C5DA6F322F4E2D7 (v4.36)
[UTDCv21] Render.dll MD5...: 6F18D6BB2B3DC12D0D2E5AD5CC66586B (v4.36)
[UTDCv21] Galaxy.dll MD5...: CB246E9A387CC002E6EA13264AC0DC08 (v4.36)
[UTDCv21] UTDCx.dll MD5....: E9DE0EE5B80D2CEAD8AC9436D3D5B014
[UTDCv21] MAC hash.........: F95E42BCB99505B81A8766821586D294
[UTDCv21] Mem NTDLL image..: True
[UTDCv21] Altered File.....: UTMenu.u
[UTDCv21] Server Received..: 5FCBE7C27E8C290E4F6B25D07E0E358C
[UTDCv21] Date/Time........: 24-01-2009 / 12:42:16
[UTDCv21] +---------------------------------------------------+
LastPlayed[1244]=77.254.34.67,AE7D44E332645A816113F48C77EDEE7C,2009-01-24 12:42:11,malik
And the list goes on and on. Please keep an eye out for these players. I'm sure they'll be back.
Also, the player that goes by "Ringo" is one of the canadian assholes. His ip came up as being from Ohio. Then he logged back on with the same name and his ip came up as being from Toronto. The reason I know this is he was kicked last night for suspected cheating and he decided to come on vent to plead his case. He asked why he was kicked twice. I asked him about the change in ip's and sure enough when I heard his voice it was that asshole "Teck" from canada.
All I need is the go ahead to boot at first site π
Boot at will
O.K. Attila was obviously using a triggerbot but the other two you listed are not so obvious. (to me anyway)
djhardbpm was showing "currupt memory" and malik failed the integrity check.
What do those have to do with cheating and could those be in any way "false positives"?
Here is more on djhardbpm:
[UTDCv21] Altered addresses:
10B2A620-CC/CCCCCCCC,10B2A624-0/CCCCCCCC,10B2A628-0/CCCCCCCC,10B2A62C-0/CCCCCCCC,10B2A630-0/CCCCCCCC,10B2A634-0/CCCCCCCC,10B2A638-0/CCCCCCCC,10
B2A63C-0/CCCCCCCC,10B2A640-0/CCCCCCCC,10B2A644-0/CCCCCCCC,10B2A648-0/CCCCCCCC,10B2A64C-0/CCCCCCCC,10B2A650-0/CCCCCCCC,10B2A654-0/CCCCCCCC,10B2
A658-0/CCCCCCCC,10B2A65C-0/CCCCCCCC,10B2A660-0/CCCCCCCC,10B2A664-0/CCCCCCCC,10B2A668-0/CCCCCCCC,10B2A66C-0/CCCCCCCC,10B2A670-0/CCCCCCCC,10B2A67
4-0/CCCCCCCC,10B2A678-0/CCCCCCCC,10B2A67C-0/CCCCCCCC,10B2A680-0/CCCCCCCC,10B2A684-0/CCCCCCCC,10B2A688-0/CCCCCCCC,10B2A68C-0/CCCCCCCC,10B2A690-0/
CCCCCCCC,10B2A694-0/CCCCCCCC,10B2A698-0/CCCCCCCC,10B2A69C-0/CCCCCCCC,10B2A6A0-0/CCCCCCCC,10B2A6A4-0/CCCCCCCC,10B2A6A8-0/CCCCCCCC,10B2A6AC-0/C
CCCCCCC,10B2A6B0-0/CCCCCCCC,10B2A6B4-0/CCCCCCCC,10B2A6B8-0/CCCCCCCC,10B2A6BC-0/CCCCCCCC,10B2A6C0-0/CCCCCCCC,10B2A6C4-0/CCCCCCCC,10B2A6C8-0/CC
CCCCCC,10B2A6CC-0/CCCCCCCC,10B2A6D0-0/CCCCCCCC,10B2A6D4-0/CCCCCCCC,10B2A6D8-0/CCCCCCCC,10B2A6DC-0/CCCCCCCC,10B2A6E0-0/CCCCCCCC,10B2A6E4-0/CCC
CCCCC,10B2A6E8-0/CCCCCCCC
[UTDCv21] Date/Time........: 18-01-2009 / 11:01:59
[UTDCv21] +---------------------------------------------------+
LastPlayed[676]=79.116.202.175,E3FD176873DD4A8E252F35B8C63B6B64,2009-02-05 12:03:42,djhardbpm
I'm not sure what all these codes mean, but he is obviously trying to alter something. Never the less he was banned from other servers for this.
They maybe false positives I'm not sure either. But we have been having problems with djhardbpm.
Well - I was just playing with HellFull, Cyg was spectating and apparently left his computer. Hellfull was spawn killing and running all over, when I said something to him a kat named MadMax said that he loved it and to keep it up....
Otis_Firefly wrote: Well - I was just playing with HellFull, Cyg was spectating and apparently left his computer. Hellfull was spawn killing and running all over, when I said something to him a kat named MadMax said that he loved it and to keep it up....
I hadn't left but the map was done when you typed that and by the time I got in a reply the switch was on and you had left.
Anyhow, I told madmax that he would recieve a boot too if I ended up kicking hellfull since he was encouraging him. Hellfull was doing more of the same stuff on the next map and got a kick after a couple of warnings. Madmax decided to leave on his own after warnings were issued but before hellfull was kicked. Niether one responded to any warning.
I've been suspicious of hellfull for a while after watching him sometimes.
___-SM-___
Hellfull is one of the canadians. Kick him on sight.
They were on again tonight, as jesus and dejavou. Came in seperate, but when I commented to jesus how he was headshotting everyone after staring at the ground the other one mouthed off saying "we aren't cheating." And of course called pyro a cheater right away.
___-SM-___
And again tonight. They were also using names of people that aren't clan members but that we would know to talk to, trying to ruin their names. People that would normally be on vent. I got spawnchasedassaulted 3 times by one using gestapo's name and he just kept laughing. So I kicked him. Tried to come back using a few different names as they always do. Then 2 of them popped onto vent and started jabbering in french. We were quitting for the night anyway. Mimetic tried to talk to them, ask them why they were still doing this shit, but they just talked in french, insults I imagine. Maybe we need to get moon on vent sometime late at night here, dunno what time it is his time. One is still on vent here 10 minutes later with the name DOUs are pest. Idiots. They should go chase traffic.
___-SM-___
Dylan wrote: Hellfull is one of the canadians. Kick him on sight.
Came in this morning and while I was loggin in as admin he ran up behind me and assaulted. I issued the kick and he tried to get back in repeatedly.
He connected on the next map and I kicked him again.
And on the next. Didn't see him after that.
This is getting out of hand. I've started a thread I believe holds a solution, check it out here. http://clandou.com/html/forum/viewtopic.php?f=20&t=5238
mAmA