Share:
Notifications
Clear all

Banned

(@dylan)
Member Admin

I was on last night (2-17-09), just to find several players that have been playing on our server running cheats or altered files. I know this because they've been banned from other servers.

They are as follows:

1: Attila

2: Hellfull

3: Monah

4: Ringo

5: gringos

6: djhardbpm

Here are the logs I found:

MMCv120: -----------------------------------------------

MMCv120: [iMMC] : attila

MMCv120: -----------------------------------------------

MMCv120: [iMMC] ID: 18

MMCv120: [iMMC] IP: 24.201.114.158:1237

MMCv120: [iMMC] Netspeed: 10000

MMCv120: [iMMC] FOV: 90.000000

MMCv120: [iMMC] Voice type: BotPack.VoiceMaleTwo

MMCv120: [iMMC] Skin: SoldierSkins.hkil

MMCv120: [iMMC] Face: SoldierSkins.matrix

MMCv120: [iMMC] : attila (PMI) AFXTriggerBot.AFXMenu

MMCv120: KICK: attila (forbidden mod found - AFXTriggerBot.AFXMenu) - IP: 24.201.114.158:1237

MMCv120: [iMMC] : attila (PMI) AFXTriggerBot.AFXConfig

MMCv120: [iMMC] : attila (PMI) MultiMesh.MultiMeshMenu

ScriptLog: [ASC] Login: attila - ID: FB81C71A1ACD97F1356E6E4F6E0FC765 - IP: 24.201.114.158

ScriptLog: [ChatLog][2009-01-27 14][System]: [1] attila joined

ScriptLog: [ChatLog][2009-01-27 14][System]: attila left the game.

LastPlayed[1058]=24.201.114.158,FB81C71A1ACD97F1356E6E4F6E0FC765,2009-01-27 14:52:35,attila,paya,stonecold

LastPlayed[931]=24.201.87.191,FB81C71A1ACD97F1356E6E4F6E0FC765,2009-01-30 11:39:44,attila,hamburger

[UTDCv21] +---------------------------------------------------+

[UTDCv21] Client has corrupt memory

[UTDCv21] Player name......: djhardbpm

[UTDCv21] Player IP........: 79.116.202.80

[UTDCv21] Client UT version: v.4.36

[UTDCv21] Client OS........: Microsoft Windows XPx32 5.1 (Build: 2600)

[UTDCv21] D3DDrv.dll MD5...: DD6E3692F8EAD5E1DF88716024BC25D1

[UTDCv21] Core.dll MD5.....: CCF104341C7452B06295D421167DBA95 (v4.36)

[UTDCv21] Engine.dll MD5...: 30E34C2A9E0EAB908C5DA6F322F4E2D7 (v4.36)

[UTDCv21] Render.dll MD5...: 6F18D6BB2B3DC12D0D2E5AD5CC66586B (v4.36)

[UTDCv21] Galaxy.dll MD5...: CB246E9A387CC002E6EA13264AC0DC08 (v4.36)

[UTDCv21] UTDCx.dll MD5....: E9DE0EE5B80D2CEAD8AC9436D3D5B014

[UTDCv21] MAC hash.........: 2BCAA7D1504D18C678DCEE9482381BB4

[UTDCv21] Mem NTDLL image..: True

[UTDCv21] Corruption hash..: 55782ABB9102DA3BF6DBD53A1F792375

[UTDCv21] +---------------------------------------------------+

[UTDCv21] Client has failed integrity check

[UTDCv21] Player name......: malik

[UTDCv21] Player IP........: 77.254.34.67

[UTDCv21] Client UT version: v.4.36

[UTDCv21] Client OS........: Microsoft Windows 95 4.0 (Build: 950)

[UTDCv21] D3DDrv.dll MD5...: DD6E3692F8EAD5E1DF88716024BC25D1

[UTDCv21] Core.dll MD5.....: CCF104341C7452B06295D421167DBA95 (v4.36)

[UTDCv21] Engine.dll MD5...: 30E34C2A9E0EAB908C5DA6F322F4E2D7 (v4.36)

[UTDCv21] Render.dll MD5...: 6F18D6BB2B3DC12D0D2E5AD5CC66586B (v4.36)

[UTDCv21] Galaxy.dll MD5...: CB246E9A387CC002E6EA13264AC0DC08 (v4.36)

[UTDCv21] UTDCx.dll MD5....: E9DE0EE5B80D2CEAD8AC9436D3D5B014

[UTDCv21] MAC hash.........: F95E42BCB99505B81A8766821586D294

[UTDCv21] Mem NTDLL image..: True

[UTDCv21] Altered File.....: UTMenu.u

[UTDCv21] Server Received..: 5FCBE7C27E8C290E4F6B25D07E0E358C

[UTDCv21] Date/Time........: 24-01-2009 / 12:42:16

[UTDCv21] +---------------------------------------------------+

LastPlayed[1244]=77.254.34.67,AE7D44E332645A816113F48C77EDEE7C,2009-01-24 12:42:11,malik

And the list goes on and on. Please keep an eye out for these players. I'm sure they'll be back.

Also, the player that goes by "Ringo" is one of the canadian assholes. His ip came up as being from Ohio. Then he logged back on with the same name and his ip came up as being from Toronto. The reason I know this is he was kicked last night for suspected cheating and he decided to come on vent to plead his case. He asked why he was kicked twice. I asked him about the change in ip's and sure enough when I heard his voice it was that asshole "Teck" from canada.

Quote
Topic starter Posted : 18/02/2009 12:48 pm
.::/3IΒ§ON::.
(@3ion)
Member Admin

All I need is the go ahead to boot at first site 😈

ReplyQuote
Posted : 18/02/2009 12:57 pm
(@dylan)
Member Admin

Boot at will

ReplyQuote
Topic starter Posted : 18/02/2009 1:09 pm
{DOU}Cygnus
(@doucygnus)
Illustrious Member

O.K. Attila was obviously using a triggerbot but the other two you listed are not so obvious. (to me anyway)

djhardbpm was showing "currupt memory" and malik failed the integrity check.

What do those have to do with cheating and could those be in any way "false positives"?

ReplyQuote
Posted : 18/02/2009 1:43 pm
(@dylan)
Member Admin

Here is more on djhardbpm:

[UTDCv21] Altered addresses:

10B2A620-CC/CCCCCCCC,10B2A624-0/CCCCCCCC,10B2A628-0/CCCCCCCC,10B2A62C-0/CCCCCCCC,10B2A630-0/CCCCCCCC,10B2A634-0/CCCCCCCC,10B2A638-0/CCCCCCCC,10

B2A63C-0/CCCCCCCC,10B2A640-0/CCCCCCCC,10B2A644-0/CCCCCCCC,10B2A648-0/CCCCCCCC,10B2A64C-0/CCCCCCCC,10B2A650-0/CCCCCCCC,10B2A654-0/CCCCCCCC,10B2

A658-0/CCCCCCCC,10B2A65C-0/CCCCCCCC,10B2A660-0/CCCCCCCC,10B2A664-0/CCCCCCCC,10B2A668-0/CCCCCCCC,10B2A66C-0/CCCCCCCC,10B2A670-0/CCCCCCCC,10B2A67

4-0/CCCCCCCC,10B2A678-0/CCCCCCCC,10B2A67C-0/CCCCCCCC,10B2A680-0/CCCCCCCC,10B2A684-0/CCCCCCCC,10B2A688-0/CCCCCCCC,10B2A68C-0/CCCCCCCC,10B2A690-0/

CCCCCCCC,10B2A694-0/CCCCCCCC,10B2A698-0/CCCCCCCC,10B2A69C-0/CCCCCCCC,10B2A6A0-0/CCCCCCCC,10B2A6A4-0/CCCCCCCC,10B2A6A8-0/CCCCCCCC,10B2A6AC-0/C

CCCCCCC,10B2A6B0-0/CCCCCCCC,10B2A6B4-0/CCCCCCCC,10B2A6B8-0/CCCCCCCC,10B2A6BC-0/CCCCCCCC,10B2A6C0-0/CCCCCCCC,10B2A6C4-0/CCCCCCCC,10B2A6C8-0/CC

CCCCCC,10B2A6CC-0/CCCCCCCC,10B2A6D0-0/CCCCCCCC,10B2A6D4-0/CCCCCCCC,10B2A6D8-0/CCCCCCCC,10B2A6DC-0/CCCCCCCC,10B2A6E0-0/CCCCCCCC,10B2A6E4-0/CCC

CCCCC,10B2A6E8-0/CCCCCCCC

[UTDCv21] Date/Time........: 18-01-2009 / 11:01:59

[UTDCv21] +---------------------------------------------------+

LastPlayed[676]=79.116.202.175,E3FD176873DD4A8E252F35B8C63B6B64,2009-02-05 12:03:42,djhardbpm

I'm not sure what all these codes mean, but he is obviously trying to alter something. Never the less he was banned from other servers for this.

ReplyQuote
Topic starter Posted : 18/02/2009 1:57 pm
(@dylan)
Member Admin

They maybe false positives I'm not sure either. But we have been having problems with djhardbpm.

ReplyQuote
Topic starter Posted : 18/02/2009 2:01 pm
{DOU}Cygnus
(@doucygnus)
Illustrious Member

Dylan wrote: They maybe false positives I'm not sure either. But we have been having problems with djhardbpm.

I've kicked both djhardbpm and hellfull since they like to r&g, assault, revenge...ect.

ReplyQuote
Posted : 18/02/2009 2:40 pm
Otis_Firefly
(@otis_firefly)
Noble Member

Well - I was just playing with HellFull, Cyg was spectating and apparently left his computer. Hellfull was spawn killing and running all over, when I said something to him a kat named MadMax said that he loved it and to keep it up....

ReplyQuote
Posted : 18/02/2009 3:19 pm
{DOU}Cygnus
(@doucygnus)
Illustrious Member

Otis_Firefly wrote: Well - I was just playing with HellFull, Cyg was spectating and apparently left his computer. Hellfull was spawn killing and running all over, when I said something to him a kat named MadMax said that he loved it and to keep it up....

I hadn't left but the map was done when you typed that and by the time I got in a reply the switch was on and you had left.

Anyhow, I told madmax that he would recieve a boot too if I ended up kicking hellfull since he was encouraging him. Hellfull was doing more of the same stuff on the next map and got a kick after a couple of warnings. Madmax decided to leave on his own after warnings were issued but before hellfull was kicked. Niether one responded to any warning.

ReplyQuote
Posted : 18/02/2009 6:35 pm
 Evil
(@evil)
Noble Member

I've been suspicious of hellfull for a while after watching him sometimes.

___-SM-___

ReplyQuote
Posted : 19/02/2009 7:04 am
(@dylan)
Member Admin

Hellfull is one of the canadians. Kick him on sight.

ReplyQuote
Topic starter Posted : 22/02/2009 5:35 pm
 Evil
(@evil)
Noble Member

They were on again tonight, as jesus and dejavou. Came in seperate, but when I commented to jesus how he was headshotting everyone after staring at the ground the other one mouthed off saying "we aren't cheating." And of course called pyro a cheater right away.

___-SM-___

ReplyQuote
Posted : 23/02/2009 7:58 am
 Evil
(@evil)
Noble Member

And again tonight. They were also using names of people that aren't clan members but that we would know to talk to, trying to ruin their names. People that would normally be on vent. I got spawnchasedassaulted 3 times by one using gestapo's name and he just kept laughing. So I kicked him. Tried to come back using a few different names as they always do. Then 2 of them popped onto vent and started jabbering in french. We were quitting for the night anyway. Mimetic tried to talk to them, ask them why they were still doing this shit, but they just talked in french, insults I imagine. Maybe we need to get moon on vent sometime late at night here, dunno what time it is his time. One is still on vent here 10 minutes later with the name DOUs are pest. Idiots. They should go chase traffic.

___-SM-___

ReplyQuote
Posted : 25/02/2009 7:04 am
{DOU}Cygnus
(@doucygnus)
Illustrious Member

Dylan wrote: Hellfull is one of the canadians. Kick him on sight.

Came in this morning and while I was loggin in as admin he ran up behind me and assaulted. I issued the kick and he tried to get back in repeatedly.

He connected on the next map and I kicked him again.

And on the next. Didn't see him after that.

ReplyQuote
Posted : 25/02/2009 12:39 pm
(@dou-yo-mama)
Member Admin

This is getting out of hand. I've started a thread I believe holds a solution, check it out here. http://clandou.com/html/forum/viewtopic.php?f=20&t=5238

mAmA

ReplyQuote
Posted : 25/02/2009 5:38 pm
Share: