• hex's "anticheat", lua virus of the year
    410 replies, posted
hey i dont know from where came this stupid idea to my mind but i decided to join hex's server with his miserable anti cheat. first to be clear. i dont use any hacks. i used vpn to join his server cuze my first acc got banned for "cheating". his anti cheat fucked my game up, i had to reinstall garrysmod in order to play again, my cloud backup is fucked for some reason. my computer almost got fucked when i tried to reboot him (i dont even know how its possible) [IMG]https://cdn.pbrd.co/images/144TLK7G.jpg[/IMG] i recorded his anti cheat in action [video=youtube;mOZ9bBRAWug]https://www.youtube.com/watch?v=mOZ9bBRAWug&feature=youtu.be[/video] he replaced all my data in my game with this [CODE]97 more pasted cheats on the drive, 97 more pasted cheats. Wipe one out and pass it around, 96 more pasted cheats on the drive,[/CODE] heres the cfg that his anti cheat generated and replaced inside everysingle cfg that i have [CODE]unbindall bind "1" "slot1" bind "2" "slot2" bind "3" "slot3" bind "4" "slot4" bind "5" "slot5" bind "6" "slot6" bind "a" "+moveright; host_writeconfig cfg/autoexec.cfg; play uhdm/hac/eight.wav; say I cheat ban me for" bind "b" "+BT" bind "c" "connect unitedhosts.org; play uhdm/hac/eight.wav; say I cheat ban me for" bind "d" "+moveleft; host_writeconfig cfg/autoexec.cfg; play uhdm/hac/eight.wav; say I cheat ban me for" bind "e" "+reload; volume 0.1; play uhdm/hac/eight.wav; say I cheat ban me for" bind "f" "noclip; connect unitedhosts.org; play uhdm/hac/eight.wav; say I cheat ban me for" bind "g" "kill; play uhdm/hac/really_cheat.mp3; say 76561198061161143 is a cheater!" bind "i" "kill; play uhdm/hac/really_cheat.mp3; say 76561198061161143 is a cheater!" bind "k" "+voicerecord" bind "m" "kill; play uhdm/hac/really_cheat.mp3; say 76561198061161143 is a cheater!" bind "n" "kill; play uhdm/hac/really_cheat.mp3; say 76561198061161143 is a cheater!" bind "p" "headtrack_reset_home_pos" bind "q" "connect unitedhosts.org; play uhdm/hac/highway_to_hell.mp3; say IM ON A HIGHWAY TO HELL!" bind "r" "+jump; volume 0.1; play uhdm/hac/eight.wav; say I cheat ban me for" bind "s" "+forward; host_writeconfig cfg/autoexec.cfg; play uhdm/hac/eight.wav; say I cheat ban me for" bind "t" "impulse 201" bind "u" "messagemode" bind "v" "impulse 100; kill; play uhdm/hac/eight.wav; say I cheat ban me for" bind "w" "+back; host_writeconfig cfg/autoexec.cfg; play uhdm/hac/eight.wav; say I cheat ban me for" bind "x" "+voicerecord; say DISAPPOINTED" bind "y" "messagemode" bind "z" "kill; play uhdm/hac/really_cheat.mp3; say 76561198061161143 is a cheater!" bind "KP_END" "act cheer" bind "KP_DOWNARROW" "act laugh" bind "KP_PGDN" "act muscle" bind "KP_5" "act robot" bind "KP_RIGHTARROW" "act dance" bind "KP_HOME" "act agree" bind "KP_UPARROW" "act becon" bind "KP_PGUP" "act disagree" bind "]" "xgui" bind "'" "say Djelmerit mother fucker" bind "`" "play uhdm/hac/still_not_working.mp3; connect unitedhosts.org; say I popped it!" bind "/" "say <:3 )~" bind "SPACE" "+menu; exec game.cfg; play uhdm/hac/eight.wav; say I cheat ban me for" bind "TAB" "+use; connect unitedhosts.org; play uhdm/hac/eight.wav; say I cheat ban me for" bind "CAPSLOCK" "+show" bind "ESCAPE" "cancelselect" bind "PAUSE" "pause" bind "SHIFT" "+walk; exec game.cfg; play uhdm/hac/eight.wav; say I cheat ban me for" bind "ALT" "+speed; exec skill_manifest.cfg; play uhdm/hac/eight.wav; say I cheat ban me for" bind "CTRL" "kill; exec userconfig.cfg; play uhdm/hac/eight.wav; say I cheat ban me for" bind "F1" "connect unitedhosts.org; play uhdm/hac/eight.wav; say I cheat ban me for" bind "F2" "connect unitedhosts.org; play uhdm/hac/eight.wav; say I cheat ban me for" bind "F3" "connect unitedhosts.org; play uhdm/hac/eight.wav; say I cheat ban me for" bind "F4" "connect unitedhosts.org; play uhdm/hac/eight.wav; say I cheat ban me for" bind "F5" "jpeg" bind "F6" "+ASS_Menu" bind "F7" "undo" bind "F8" "bind mouse1 +auto_looper; message1" bind "F10" "play uhdm/hac/really_cheat.mp3; gamemenucommand quitnoconfirm; say And it aint even gonna complain!" bind "F11" "afk" bind "MOUSE1" "+attack2; sensitivity 90; volume 0.1; say Ive lost my marbles!" bind "MOUSE2" "+attack; sensitivity 0.1; volume 1; play uhdm/hac/still_not_working.mp3; say Piece of shit!" bind "MOUSE3" "kill; sensitivity 90; volume 0.1; say I AM A DIRTY CHEATER, BAN MY ASS!" bind "MWHEELUP" "invnext; play uhdm/hac/eight.wav; say EIGHT!" bind "MWHEELDOWN" "invprev; play uhdm/hac/eight.wav; say BURST ME BAGPIPES"[/CODE] in conclusion DO NOT join his server and install that virus edit: he blocked the vac connection to my pc. i cant connect to any server [IMG]https://cdn.pbrd.co/images/14kVLka9.jpg[/IMG]
I'm impressed, in a sick sort of way.
HAC doesn't screw with your BIOS, but yes it does screw with your game. If you had UAC off, it would have spammed your gmod directory with random shit. No permanent damage, just annoying.
I take it that this is you then: [video=youtube;khgF8liMqRg]https://www.youtube.com/watch?v=khgF8liMqRg[/video] Apparently you were banned for C++ hacks, Ampris, Smeghack, cvar3 and being part of the MPGH group on steam. White I definitely do NOT condone the methods HeX uses, it doesn't sound like you were completely innocent either. Also, IIRC, HAC can only mess up your PC if you have some binary module or something installed that allows it to.
[QUOTE=Deathbypwnage;50357789]I take it that this is you then: [video=youtube;khgF8liMqRg]https://www.youtube.com/watch?v=khgF8liMqRg[/video] Apparently you were banned for C++ hacks, Ampris, Smeghack, cvar3 and being part of the MPGH group on steam. White I definitely do NOT condone the methods HeX uses, it doesn't sound like you were completely innocent either. Also, IIRC, HAC can only mess up your PC if you have some binary module or something installed that allows it to.[/QUOTE] does he honestly record every single time he sees a cheater get banned? how sad and full of yourself can you get.
Looks like he found a new set of exploits.
he has over[B] two hundred[/B] videos of people being banned... why... [I]thanks for breaking my automerge falco[/I]
[QUOTE=Deathbypwnage;50357789]I take it that this is you then: [video=youtube;khgF8liMqRg]https://www.youtube.com/watch?v=khgF8liMqRg[/video] Apparently you were banned for C++ hacks, Ampris, Smeghack, cvar3 and being part of the MPGH group on steam. White I definitely do NOT condone the methods HeX uses, it doesn't sound like you were completely innocent either. Also, IIRC, HAC can only mess up your PC if you have some binary module or something installed that allows it to.[/QUOTE] people get banned from hexs server for just having modules in their gmod directory when they havent even loaded them
[QUOTE=meharryp;50357882]people get banned from hexs server for just having modules in their gmod directory when they havent even loaded them[/QUOTE] And yet he complains that his server is almost always empty.
HAC (HeX's AntiCheat) is not the cause of your BIOS being corrupted, Lua is a scripting language and is not low level (Which means it's incapable of doing anything to your computer as far as I know.) HAC banned you for cheating and is doing its job (You shouldn't have cheated.)
[QUOTE=L33t Tr0jAn;50358129]HAC banned you for cheating and is doing its job (You shouldn't have cheated.)[/QUOTE] how in any way does that justify fucking up your game??
[QUOTE=L33t Tr0jAn;50358129]HAC (HeX's AntiCheat) is not the cause of your BIOS being corrupted, Lua is a scripting language and is not low level (Which means it's incapable of doing anything to your computer as far as I know.) HAC banned you for cheating and is doing its job (You shouldn't have cheated.)[/QUOTE] i didnt hack shit
[QUOTE=BillyOnWiiU;50358150]how in any way does that justify fucking up your game??[/QUOTE] It doesn't.
[QUOTE=PizzaDoxy;50358168]i didnt hack shit[/QUOTE] Oh really? [IMG]http://puu.sh/oYVvk/1138a449e9.jpg[/IMG] [SkidCheck] Lookup of (STEAM_0:1:50447707) using SteamID is <Redogg/redawg/Pizzadox/Thesavior/quintinos/Savior, C++ hacks, Ampris,Smeghack,cvar3, Member of hack/troll group: MPGH, Ban evasion (Alt of STEAM_0:1:38711856)> [editline]20th May 2016[/editline] Also the reason your keys got fucked up was because you had CVar3 installed. Also HeX sent me your banlog: [url]http://pastebin.com/a1QPRBNR[/url]
he blacklisted my group on steam for no reason, this group doesnt associated with gmod at all [url]https://github.com/MFSiNC/SkidCheck-2.0/blob/master/lua/SkidCheck/sv_SkidList_E.lua#L6776-L6778[/url] edit: almost a year ago my group and i was blacklisted and today was the first time i ever joined his server/played in a server with his anti cheat on [IMG]https://cdn.pbrd.co/images/14iU1STJ.png[/IMG]
[QUOTE=L33t Tr0jAn;50358192]Oh really? [url]http://puu.sh/oYVvk/1138a449e9.jpg[/url] Or if you don't want to look at the picture: [SkidCheck] Lookup of (STEAM_0:1:50447707) using SteamID is <Redogg/redawg/Pizzadox/Thesavior/quintinos/Savior, C++ hacks, Ampris,Smeghack,cvar3, Member of hack/troll group: MPGH, Ban evasion (Alt of STEAM_0:1:38711856)>[/QUOTE] Let's assume that all this is true, that his ban reason was legitimate, and lets assume the OP is bullshitting about the part about the BIOS being corrupted. HeX is still delusional. He thinks he's truely making the game better by deleting data, YOUR data on YOUR computer without YOUR consent. Sometimes even on suspicion, assuming what meharryp says is true, and I believe him, because from what i've seen, HeX doesn't seem like the type of person who wouldn't do so. I'm all for sticking it to cheating minges, those who aimbot in TDM gamemodes for instance, anything that would give them an unfair advantage. But this. THIS. Is fucking absurd. Data should not be deleted on suspicion. Even if the OP was cheating, he still shouldn't have his fucking files deleted. I've seen pictures of someone's VM after joining HeX's server with a cheat loaded. He not only altered GMod's files, but actually altered SYSTEM. FILES. Fucking system files that would brick the computer if altered, requiring a new OS and thus a reformat. I'm fairly certain the person who linked to Dynostopia's "closed alpha" that turned out to be malware had his account permanantly deleted, and I think that HeX should have the same thing done to him, not for his personality even though one could easily diagnose him as a psychotic, but for flat out running malware on clients. TL:DR: I don't think anyone should give a shit if OP was hacking or not. HeX should still have his STEAM privileges revoked, because he's a delusional man, bordering on psychotic behaviors who runs malware on people.
[QUOTE=PizzaDoxy;50358231]he blacklisted my group on steam for no reason, this group doesnt associated with gmod at all [url]https://github.com/MFSiNC/SkidCheck-2.0/blob/master/lua/SkidCheck/sv_SkidList_E.lua#L6776-L6778[/url][/QUOTE] HeX blacklists hacking and trolling groups (That's why it's blacklisted) [editline]20th May 2016[/editline] [QUOTE=JerryAnderson;50358242]Let's assume that all this is true, that his ban reason was legitimate, and lets assume the OP is bullshitting about the part about the BIOS being corrupted. HeX is still delusional. He thinks he's truely making the game better by deleting data, YOUR data on YOUR computer without YOUR consent. Sometimes even on suspicion, assuming what meharryp says is true, and I believe him, because from what i've seen, HeX doesn't seem like the type of person who wouldn't do so. I'm all for sticking it to cheating minges, those who aimbot in TDM gamemodes for instance, anything that would give them an unfair advantage. But this. THIS. Is fucking absurd. Data should not be deleted on suspicion. Even if the OP was cheating, he still shouldn't have his fucking files deleted. I've seen pictures of someone's VM after joining HeX's server with a cheat loaded. He not only altered GMod's files, but actually altered SYSTEM. FILES. Fucking system files that would brick the computer if altered, requiring a new OS and thus a reformat. I'm fairly certain the person who linked to Dynostopia's "closed alpha" that turned out to be malware had his account permanantly deleted, and I think that HeX should have the same thing done to him, not for his personality even though one could easily diagnose him as a psychotic, but for flat out running malware on clients. TL:DR: I don't think anyone should give a shit if OP was hacking or not. HeX should still have his STEAM privileges revoked, because he's a delusional man, bordering on psychotic behaviors who runs malware on people.[/QUOTE] HAC doesn't have any malware. The worst it can do is overwrite the /data text files if you cheat, or rebind keys using CVar3 if you have it. You could be thinking of the whole "package.loaders" exploit that was patched ages ago.
[QUOTE=L33t Tr0jAn;50358248]HeX blacklists hacking and trolling groups (That's why it's blacklisted) [editline]20th May 2016[/editline] HAC doesn't have any malware. The worst it can do is overwrite the /data text files if you cheat, or rebind keys using CVar3 if you have it. You could be thinking of the whole "package.loaders" exploit that was patched ages ago.[/QUOTE] I recall distinctly seeing pictures of system files being altered with LUA files, such as the ancient satanic rune known as the 'G-Man virus' that would download a multitude of files, one being 'jews.avi' which was gay porn, and a shitload of other malware. But lets assume again that HeX didn't use such things, which I personally doubt after seeing what kind of person HeX is, and seeing pictures, and words from people I believe are reputable in such a matter. Altering any data is still fucking bananas. Only a madman would believe it would be rational to alter ANY data over a SUSPICION of cheating. I say again, SUSPICION. If you look at the post you quoted, I mentioned meharryp who mentioned the autoban for data files not even being ran. If HeX was even remotely sane, his anticheat would just stop them from being ran, or ban on being ran. But no. He bans from tens of thousands of servers for the file simply being there. Plus there's the whole deleting data. It's a shame, too. HeX's server looks like fun. But i'm not joining even with a brand new computer until he removes his anticheat. I don't want to risk him detecting a file that came with the game and him wiping the BIOS, and I certainly don't want to join a server run under a dictator.
[QUOTE=JerryAnderson;50358307]I recall distinctly seeing pictures of system files being altered with LUA files, such as the ancient satanic rune known as the 'G-Man virus' that would download a multitude of files, one being 'jews.avi' which was gay porn, and a shitload of other malware. But lets assume again that HeX didn't use such things, which I personally doubt after seeing what kind of person HeX is, and seeing pictures, and words from people I believe are reputable in such a matter. Altering any data is still fucking bananas. Only a madman would believe it would be rational to alter ANY data over a SUSPICION of cheating. I say again, SUSPICION. If you look at the post you quoted, I mentioned meharryp who mentioned the autoban for data files not even being ran. If HeX was even remotely sane, his anticheat would just stop them from being ran, or ban on being ran. But no. He bans from tens of thousands of servers for the file simply being there. Plus there's the whole deleting data. It's a shame, too. HeX's server looks like fun. But i'm not joining even with a brand new computer until he removes his anticheat. I don't want to risk him detecting a file that came with the game and him wiping the BIOS, and I certainly don't want to join a server run under a dictator.[/QUOTE] Like I said, [B][U]LUA[/U][/B] scripts [B][U]CANNOT[/U][/B] modify system settings! Lua is not capable of doing such things, wiping a BIOS with Lua is absolutely [B][U]IMPOSSIBLE[/U][/B] Just saying the facts.
[QUOTE=L33t Tr0jAn;50358326]Like I said, [B][U]LUA[/U][/B] scripts [B][U]CANNOT[/U][/B] modify system settings! Lua is not capable of doing such things, wiping a BIOS with Lua is absolutely [B][U]IMPOSSIBLE[/U][/B] Just saying the facts.[/QUOTE] exploits ma nxgga
[QUOTE=L33t Tr0jAn;50358326]Like I said, [B][U]LUA[/U][/B] scripts [B][U]CANNOT[/U][/B] modify system settings! Lua is not capable of doing such things, wiping a BIOS with Lua is absolutely [B][U]IMPOSSIBLE[/U][/B] Just saying the facts.[/QUOTE] Sure, LUA scripts ON THEIR OWN might not be able to modify anything outside of GMod. But they can sure as hell make you download shit that will modify your system, or make you download a module that can allow LUA to operate freely. I believe FPtje in another thread mentioned you would have to download a module before joining. Said module would allow some rather unsavory things to happen.
So basically HeX's AC working normally then? [video=youtube;r1iZCgJSiMI]https://www.youtube.com/watch?v=r1iZCgJSiMI[/video] Have my video :)
[QUOTE=L33t Tr0jAn;50358326]Like I said, [B][U]LUA[/U][/B] scripts [B][U]CANNOT[/U][/B] modify system settings! Lua is not capable of doing such things, wiping a BIOS with Lua is absolutely [B][U]IMPOSSIBLE[/U][/B] Just saying the facts.[/QUOTE] You could be running a module that has an exploit. HeX's narcissistic personality has made him believe he is above others, and that he is doing the right thing. What he is doing is vigilantism. Banning people for hacking? Go for it. Fucking with their settings, and stooping to the same level (if not lower, considering this whole talk about him altering system files) To be fully honest, I am surprised he has been allowed to do so up to this point. He is worse than cheaters.
[QUOTE=JerryAnderson;50358344]Sure, LUA scripts ON THEIR OWN might not be able to modify anything outside of GMod. But they can sure as hell make you download shit that will modify your system, or make you download a module that can allow LUA to operate freely. I believe FPtje in another thread mentioned you would have to download a module before joining. Said module would allow some rather unsavory things to happen.[/QUOTE] The only way to overwrite the BIOS would be to use a kernel driver on Windows, BIOS's are stored in SPI Flash chips which in code would be VERY hard to modify. Kernel drivers need to be signed too, to make them work on 64bit OS's Also, clients would need to have installed the modules themselves and i'm 99.99% certain that using Lua to get modules and install them isn't possible. [editline]20th May 2016[/editline] HeX told me to say this: "I can only say HAC doesn't have or use any exploits, and that any server can do whatever they want to the /data files, not just mine, and he's a cheater for having those scripts installed."
It's funny to think he just sits at his home all day, in front of the screen, waiting for a player to join. And when finally, the player count goes from 1 to 2, all the excitement fires up in him as he patiently waits for the HAC to trigger, for the alert to come. Staring at the innocent players eyes, whom happened to be a part of a random group that has no correlation to gmod at all. HeX, standing ready with the camera and his spray bind, ready to record his glorious masterpiece, banning someone from his server for literally no reason. As the player is being shot in the air, desperately trying to move, unable to do so because of his newly created config. Tears start dripping down from the eyes of HeX as he justifies this glory moment of his, rushing to YouTube to show everyone his great achievement. That he just defeated evil, he just busted this cheater, whom is finally out of here for good. As the video is uploading, HeX thinks to himself. "what a wonderful life i have"
[IMG]https://cdn.pbrd.co/images/14kVLka9.jpg[/IMG] after fresh installing the game. i cant connect to any server! that mother fukker blocked the connection of vac for me can i get some help please?
[QUOTE=PizzaDoxy;50358440][IMG]https://cdn.pbrd.co/images/14kVLka9.jpg[/IMG] after fresh installing the game. i cant connect to any server! that mother fukker blocked the connection of vac for me can i get some help please?[/QUOTE] [url]http://steamcommunity.com/id/redawg/[/url] [url]http://steamcommunity.com/id/QuintinoS/[/url] Both of your accounts have NO VAC bans. Also the telltale sign that you are bullshitting is the %d %d at the top of that window.
[QUOTE=L33t Tr0jAn;50358460][url]http://steamcommunity.com/id/redawg/[/url] [url]http://steamcommunity.com/id/QuintinoS/[/url] Both of your accounts have NO VAC bans. Also the telltale sign that you are bullshitting is the %d %d at the top of that window.[/QUOTE] A blocking of the VAC system doesn't mean you are VAC banned, you fool. It means something on your computer is flat out stopping VAC from working, and the game is thus wagging its finger at you, telling you to fix it before you can join a VAC secure server.
[QUOTE=L33t Tr0jAn;50358460][url]http://steamcommunity.com/id/redawg/[/url] [url]http://steamcommunity.com/id/QuintinoS/[/url] Both of your accounts have NO VAC bans. Also the telltale sign that you are bullshitting is the %d %d at the top of that window.[/QUOTE] its not a vac ban. you dont know what the fuck are you talking about even wtf go to sleep btw the second acc isnt mine, friend of mine
[QUOTE=Author.;50358437]It's funny to think he just sits at his home all day, in front of the screen, waiting for a player to join. And when finally, the player count goes from 1 to 2, all the excitement fires up in him as he patiently waits for the HAC to trigger, for the alert to come. Staring at the innocent players eyes, whom happened to be a part of a random group that has no correlation to gmod at all. HeX, standing ready with the camera and his spray bind, ready to record his glorious masterpiece, banning someone from his server for literally no reason. As the player is being shot in the air, desperately trying to move, unable to do so because of his newly created config. Tears start dripping down from the eyes of HeX as he justifies this glory moment of his, rushing to YouTube to show everyone his great achievement. That he just defeated evil, he just busted this cheater, whom is finally out of here for good. As the video is uploading, HeX thinks to himself. "what a wonderful life i have"[/QUOTE] I've genuinely never laughed so much in the past week
Sorry, you need to Log In to post a reply to this thread.