Jump to content

Benway

Site Staff
  • Posts

    8,397
  • Joined

  • Days Won

    170

Posts posted by Benway

  1. Another step towards renaming PBBans to BFBans or BFCentral or ... bah BetaField. Escapism aside, though nothing is decided yet, most likely we will keep cod4 streaming as legacy game, like we do for cod1/1.5/2/5, with all the known procedures to ban PBSS and Demos. At least as long as there will be a PunkBuster GUiD. Without AUTH server no PB GUID's will be generated and subsequently streaming had to be discontinued entirely.

    • Upvote 3
  2. Well, to put my statement more precisely, we (PBBans) will not actively search for Realmware's Settings Editor and it's not likely we will look into its effects - game setting files - if so, there would be some discussion here first. It makes no sense to search this, otherwise we had to search for Notepad++, Notepad2 or UltraEdit .. nuff said

    Of course i can give no comment on EB's behalf; just two aspects to take into consideration: 1. the editor itself 2. the results, i.e. changed settings or setting files.
    In theory PB could pick on the editor itself, like on any running application and subsequently issue a restriction kick or a violation. Usual precautions: unload and reboot before entering a pb server and there is nothing to worry about. Might be EB support gives more conservative responses after the common sense among players more and more diminishes and stuff that already carries 'cheat' in its name really is considered 'non-cheat-application', that based on nothing but wishful thinking, the intention "not to cheat" would make any difference  ...

    For changed game settings: Only practical approach were Game-CVars, and our policy for the use of this method always was: Game cvars are restricted (by server administrators, we just provide suggestions), in case of violation, pb issues a KICK. Violating game cvar restrictions is never a bannable offense - see: game settings are part of the package. calling that 'cheat' is clueless, to say the least.

    For games without cvar support like the BF series, game settings will just end up in some setting files. Game setting files are not exactly the playing field for EB violations, there always will be more suitable options to detect cheats (aimbots, wallhacks etc.), 99.99% of them will work without game settings whatsoever anyway. So a scenario of EB / PB by itself / checking into game setting (files) is quite hypothetical, and doing so was opening a can of worms; obviously you will not open a can of worms for no particular reason ("changing game settings is cheating"-whiners just ... give me a break) and for little if any benefit.

    Using PB's admin tools (md5) to check into game setting files is usually not a feasible option. In most cases it will just cause "false positives" in the form of unreproducible kicks, and with very few exemptions we researched in the past, all these checks were just 'well meant' - not working reliably and always easy to circumvent. In result malicious players will circumvent all checks, and certain admins will just be happy - for no particular reason. A past example from BF series:


    experiment:

    pb_sv_md5tool a "1.1.2965-797.0" v "mods/bf2/Settings/Usersettings.con" SZ0 AT48 LEN256 1bcebda3b0d44b13a25fc04f9a1ddee6

    (as an example for further considerations, use is not recommended) the cursive part is scanned by AT48 LEN256
     

    rem
    rem Settingsfile automatically saved by 48 Bytes (AT48), 53 Bytes is unsupported >  bf2
    rem

    SettingsManager.boolSet GSClPunkBuster 1
    SettingsManager.floatSet GSDefaultLatencyCompensation 0.100000
    SettingsManager.boolSet GSExtrapolateFrame 0
    SettingsManager.U32Set GSExtrapolationTime 1200
    SettingsManager.U32Set GSInterpolationTime 100
      48 + 256 (LEN256) = 304 Bytes >
    SettingsManager.U32Set GSPerfLogAtPlayerCount 30
    SettingsManager.stringSet GSPlayerName "THIS IS A PLAYER NICK" 

    SettingsManager.boolSet GSShowNetGraph 0
    SettingsManager.boolSet GSUseObjectCache 1
    SettingsManager.floatSet GSDefaultLatencyCompensation 0.500000
    SettingsManager.boolSet GSExtrapolateFrame 2
    SettingsManager.U32Set GSExtrapolationTime 2200
    SettingsManager.U32Set GSInterpolationTime 500

    A file like this, set to read-only (forces the game to use the last set of settings and keeps the game from overwriting) would pass all checks.

     

     

    • Upvote 1
  3. PS: this topic was split off 'PB Drops COD:WaW Support' and should stay open for cod4-pb related issues;

     

    Reconsiderations:

    - if you are looking for somebody who cares about cracked servers (we don't) get a room (whatever warez forum of your choice)

    - cracked servers are neither supported by evenbalance, no matter how good, bad or Not the game may be supported

    - last time i checked cod4 was still pb supported,

    PB has a startup fee plus monthly operation fees.

    Conclusion:

    if you want a topic about real issues of legit cod4 servers with pb and/or streaming, open a new one. Note http://www.pbbans.com/forums/cracked-servers-t89615.html

     

     

     

    #3 This case is now for me finally closed ...

    true.dat
    • Upvote 2
  4. just a sidenote of possible future interest: You will be entirely ignored if you mention either specific cheats/hacks, or even better: their detection status - in a ticket.

     

    "you do not tell what is detected. if you do, you will tell what is not detected. telling what is not detected is just being unaware or lying"

    • Upvote 2
  5. As i do here as i please, my apologies repeating the same old basics and trivialities (for me) in reply to the same misconceptions over and over again is the opposite of what pleases me :P Like any staff member here the only benefit i took from this service / project was to stream a few servers (in my case years back) and PBBans technologies were that advanced, that we were able to convict cheaters unquestionably, even those who came with private hacks pb never got to know ... so i felt this project was well worth to contribute some greater effort. So much for history, as well i'm entirely unwilling to vent any cheat related information here, even less in public forum sections; so please note i will only be as clear as required and stay as diffuse and generalizing as possible in the following post - if you find i was wrong in certain aspects, we assume this is on purpose ;> or just tell your Barber.

    As predictably this Non-issue continues in restricted users forum areas now, some final summary for your information:

    First of all, punkbuster cheat violation Gamehack 81518 :
    1.) is raised by evenbalance's software punkbuster (not us);
    2.) Gamehack Violations in general are triggered by:
    a.) a certain pattern in system memory that belongs to a cheat or
    b.) manipulation methods, that will change certain game related areas of system memory. Practically this is just another 'pattern'

    if a described signature pattern is found, pb will raise a gamehack violation.

    conclusions:
    I.) Given 2.) & 1.), only Evenbalance knows what pattern in particular. There is just circumstantial evidence CE might be involved here -
    if we accept this assumption, then
    II.) As 2.) by itself already shows, there is a BF4 multiplayer cheat that creates a pattern related to CE code/methods - and it is well known (at least if you used to do cheat research for 8 years like me) that CE resp. parts of its code was/is used in various multiplayer cheats. These just never became very popular, as it is well known (in cheat coder circles) that CE methods and/or code are quite easy to detect for pb.
    CE related methods commonly have been used for no-recoil, no-spread, and sniper-breath -hacks in several multiplayer games and throughout the whole BF series enemy-nametags could be "unlocked" by just changing a single bit of code, this was done by classic injected cheats as well by patching this bit of code into a certain game runtime-library or even by hexedit - the objective was little more than to find this bit (among 50 million others); obviously cheat developers always tried to manipulate this single bit 'live' 'online' (or however you might call it) while loaded into system memory, without leaving any traces. The use of CE methods always played  more or less a role in this plot.
    III.) from II.) it is obvious to me, hack e.g. into nametags will always create a different signature (pattern) than e.g. to hack into recoil, so it is self evident pb picks the loaded CE code itself rather than the 'manipulated game related areas of system memory' for this particular hack-target. This is the only way to detect them all and regardless of game patches. This is a common practice of pb - where this is useful and recommendable. I will not continue at this point, as i will never give any hint to our friends from payhacksites watching this *waves*

    Punkbuster always detected cheats loaded into system memory.
    Here a certain game related memory area  manipulated by a cheat resp. (III.) the signature of the originating hack or put simple: a certain pattern in system memory.
    PB never detected (it can't to put it straight): a.) By What or Whom b.) How (using what methods or tools) c.) When, or even: d.) for What Purpose
    ... the manipulation was made / the detected pattern was created - flagged as cheat violation.

    You can use CE back and forth as you wish. If you join a punkbuster enabled server with traces of its use (unloading only may be sufficient to avoid a cheat violation, but a cold system restart is highly recommended) - that is your fault. Exclusively. Nobody cares for what purpose you used a cheat - that's what it is bottomline, it really makes no difference, from the technical PoV how PB works and what PB detects there effectively is no difference at all.
    If you file a TroubleTicket at EvenBalance and ask a clear-cut question (not the blowing hot and cold you can read in this topic), you might get the answer: "we are sorry, but the use of cheatengine is not / will not be allowed by punkbuster" - is, always was, and always will be. If you want to continue to use CE - that is possible, just unload and reboot and you are safe. The use while ingame is not possible at all; if you could use it scot-free so far, you just were lucky until luck ran out.

    Just the concept  misconception: PunkBuster (software) / EvenBalance inc. / PBBans / Anybody / would, should or even could discern the purpose, intention etc. of the use of CE, is nothing but wishful thinking for the reasons i gave - how punkbuster works.
    To make this feasible you had to answer the question, where 'User's intention' is stored in system memory. You see, this is plain nonsense.


    So bottomline: With a bannable gamehack violation (possiblly? CE related, might be, or not) your word will stand against a valid PunkBuster Cheat Violation backed by streamed Evidence.
    We might believe you or not - just that does not matter at all. Our bans are not based on beliefs just evidence and clear policies; read: http://www.pbbans.com/aboutus.php. Our bans always were based on streamed cheat violations (see spoiler below as well), banning for violations like Gamehack 81518 is exactly what we are here for. The use of our services is chosen by server administrators http://www.pbbans.com/tos.php, and the use of our Banlists is entirely optional.

    For all affected, for a remedy you might refer to the last line of my signature.
    We hear you saying EvenBalance did not ban you (yet, i may add); the last paragraph provides all information why your wish to even consider CE as non-cheat application false positive (that based on nothing but assumptions) is entirely arbitrary and in result is nothing less than asking us to close down our services (: We are sorry, but No.

     

    Any cheat related violation that is raised directly by PunkBuster™ software, as per this list;

    #50000s - Aimbot
    #60000s - Wallhack
    #70000s - Multihack
    #80000s - Gamehack
    #90000s - 'Cheat' Video Drivers
    #100000s - Speedhack
    #110000s - Autofire
    #120000s - Game Hook
    #130000s - Attempted PunkBuster Hack
    is added automatically to the PBBans MBI.
    It should be remembered that Even Balance normally apply a 2 minute kick for the above violations and its the proactive admin or 3rd party anti cheat service that apply the actual ban.
    Even Balance always have the last word when a cheat violation is raised directly by their own software, but as the actual ban is issued by PBBans.com its best practice to include us in the appeal procedure.
    The player can do this by clicking the "appeal this ban" tab on the ban link and following the simple instructions provided.
    This will include raising a troubleticket directly with Even Balance and that should include as much information as possible as to why the player thinks this is a "false positive".
    It's always a good idea to list all processes that were running at the time the violation was raised (antivirus / chat programmes etc )
    The key word with any troubleticket query is patience, Even Balance get a hell of a lot of queries and response time is dependent on how busy they are.
    Normal response time is 48 - 72 hours.

    If Even Balance staff say that the cheat violation was raised in error, the issued ban will be removed from our systems immediately.
    If Even Balance staff say the cheat violation was not raised in error, the issued ban will remain on our systems.
    It really is that simple.

     



    To hang on to a forlorn concept is a sign of immaturity i may add.

    • Upvote 10
  6. file a trouble ticket and ask.

    preferably you do this before receiving a violation and subsequent ban - you had it loaded in your system memory while you where ingame, not just lying around  somewhere on your hardisk.

    • Upvote 2
  7. you are so predictable.

     

    12/04/2013 18:12:42 - "Alex J"pblogo_small.gif

    Note #4: I'm sorry, but the prior explanation answered your question and we have nothing further to say on the subject.

    no, pb never made a difference for what purpose disallowed programs were used (just what is disallowed - globally)

    yes, this is a policy set by evenbalance, not us.

    yes, ce is used in mp gamehacks. old news. (on that Note: How about No? Just according to our policies you seem to know better than us)

    no, macros never caused violations but restriction kicks.

    ===> you considerations are irrelevant. we do not care.

     

    gamehack violations are raised when pb picks a pattern in system memory that belongs to a cheat. Mind to explain where 'User's intention' is stored in system memory? This concept is entirely based on wishful thinking, it makes no sense at all.

     

    I didn't know that it wasn't allowed to cheat on any game while running one that is protected by PB.

    THAT is your real problem. You do not read. You do not listen, hardly surprising you do not know anything.

    • Upvote 1
  8. We already know you are quick in not reading nothing. False. False. False and false. Read the whole topic.

     

    There's no indication about CE being used in the multiplayer.

    you provided enough proof you have no clue.
    • Upvote 1
  9. we will not waste a second of time to "investigate" a false positive due to CE, we are not silly you know, neither will we discuss evenbalances policies (file a trouble ticket yourself to find programs disallowed by punkbuster) here - it simply does not make any sense. if you wish to continue to avoid doing your homework (as i will not continue to repeat myself: read the whole topic for a start) and sequentially catch a cheat violation: that is your choice.

     

    gamehack violations are raised when pb picks a pattern in system memory that belongs to a cheat. Mind to explain where 'User's intention' is stored in system memory? This concept is entirely based on wishful thinking, it makes no sense at all.

     

    if you have to use cheats for anything different but a punkbuster enabled game you are still liable for it. Means, if you do not bother to clear your system's memory entirely - e.g. by a cold reboot - and still have the cheat left in sys memory when you join a pb server: your fault, your ban.

    • Upvote 1
  10. some minor evolution here, mainly IntelCorei7-975 3.33 SLBEQ eBay.png 
    Lian Li PC-A70 B, psu Zalman ZM850-HP
    DFI LANparty UT X58 T3eH8
    Intel i7-975 xe 3,6 GHz (12 to 27 x 133 MHz) default, Corsair Hydro Series H75 feat. Silent Arctic F12 Pwm
    3x4GB triple-chan Kit Mushkin 998991 Ridgeback CL9-9-9-24 CR1 DDR3-2000
    EVGA consumertrash GTX 660 / Eizo FS2333 23'' 
    Samsung 1 TB 850 EVO SSD @ Intel ICH10R AHCI [DOS/Boot / sysW7x64 / sysWxp / swap / game/Steam]
    WD VelociRaptor 1TB WD1000DHTZ @ Intel ICH10R AHCI [DOS/Boot / mirrored:sysWin* / data]
    HGST 3TB  HUS724030ALE640 - full GPT @ Intel ICH10R AHCI [data grave / game2]
    LaCie Blade Runner 4TB [ Backup & style ;P ]
    QPAD MK-80 MX-Blue, HP X9000 OMEN Mouse (a remake of Ideazon Reaper Edge)
    6.1 Sound: 2xMagnat (front) & 4xCreative GigaWorks2 T20 & Yamaha YSTmsw10 Sub @ Realtek ALC885 Bernstein HD-Audio
    Asus BW16d1HT, 4xPhobya NB-eLoop +1xRadial-Fan @ Scythe Kama SCKMPN-2000-BK, Wxp32_nlite, multi-boot w7_64 enterprise, FDD: yes

    • Upvote 1
  11. True, but we all know the capitalist system will lead to nothing, so better get used to it things are always gonna be worse, pretty obvious why violations like this increased and will continue to increase.

    • Upvote 2
  12. So how does Punkbuster discern between Gamehack and Malware of a similar [the same] pattern?

    Not at all. For the last time: #38 sums it all up in a nutshell.

    Is it true that malware on an unknowing victim might have triggered this ban?

    No. Virus/Antivirus/Trojan etc. caused my cheat violation is an old and invalid cheaters excuse. Dead end.

    What kind of spyware does Punkbuster get to use to "ban" legit players?

    Your links ... Do not show anything pertaining to helpful information regarding TOS for Punkbuster.

    you agreed to the PB EULA by installing pb (for the latest version run pbsetup). We are not pb, see there
    • Upvote 1
  13. So why PB doesn't give a perma ban for that violation but you do ?

     

    Read it here & here. That is what we are here for and always were.  Otherwise you had no forum but BetaFieldLog x)  to vent your ignorance - just evenbalance trouble tickets, and once again to put it straight: Only a EB TT  will resolve the situation you do not like; just mind to take this fact into consideration: calling CE  "a non cheat application" is entirely ridiculous (see post #38, sentence 2) so nobody will take you for serious anymore. File a EB TT to get the default reply like "the use of CE is not allowed by PunkBuster ... " etcpp. Not doing homework (what pb is and how it works, for a shortcut read again post #38) first and moan afterwards is not a good position to be in, we run a clear cut policy for years (bannable violations see here) and no annoyance will change it. As well rest assured EvenBalance will ignore all (more or less) well meant petitions (random ex. for another dead end) or similar annoyances and that for good reasons.

     

    FYi our banlist is a service for server administrators and its use is entirely optional.

    • Upvote 1
  14. i thought you care huh?

     

    not at all. [ IF keywords:'Youtube' OR 'rghost' DO move:TrashCan ]

      

    Apparently this is the hack for the Universe search identical DL link {lol, now they finally removed the user; Was: ~300 search Hits :P} , save my time to provide proof this is malware - as usual, rghost==Trojan-host - check it out yourself : https://malwr.com/analysis/ZjAyODYxMmJiZDQ1NDI4MGEwNGQ0MGJmYTJkZjE3OWY/#behavior 'Behavioral Analysis' and "abcww.exe" Tabs. http://www.google.com/search?q="abcww.exe" ,

    random hit  http://www.drwebhk.com/en/virus_techinfo/Trojan.DownLoader10.39556.html matching malwr.com 'Dropped Files' Tab:

    [ PE Disassembler: 'This is a compiled AutoIt script ]
    %Temp%aut3.tmp
    %Temp%aut6.tmp
    %Temp%abcww.exe 
    %Temp%aut4.tmp
    %Temp%e123_appcompat.txt
    %Temp%msupd.exe
    %Temp%aut5.tmp
    

    stupid

    what did you do here since 2011, play with your toes?
    • Upvote 1
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.