AlliedModders

AlliedModders (https://forums.alliedmods.net/index.php)
-   SourceMod Anti-Cheat (https://forums.alliedmods.net/forumdisplay.php?f=133)
-   -   was banned for reusing old movement commands (https://forums.alliedmods.net/showthread.php?t=212386)

Baster1985 04-01-2013 20:31
was banned for reusing old movement commands
 
Hello i use smac and i must say its a great programm thanks for your work

Since i use the plugin i have sometimes bans like this and the Player ask me why they are banned, i have the problem i cant say why they are banned. and so please tell me witch cheat is reusing old movement commands.

please help me ^^

L 03/21/2013 - 13:57:13: [smac_eyetest.smx] xxxxxxxxxx|) was banned for reusing old movement commands. CmdNum: 2087 PrevCmdNum: 5420 | [24361:24362:24366]

SystematicMania 04-01-2013 22:25
Re: was banned for reusing old movement commands
 
He was using NoSpread.

Baster1985 04-01-2013 22:44
Re: was banned for reusing old movement commands
 
thank you

Noitartsiger 04-05-2013 17:00
Re: was banned for reusing old movement commands
 
Hey guys, got a long time regular with the following log. I banned him, but he promise to be clean. I am sure this is valid but he want me to ask you about valid or not. Maybe u can tell me exactely which hack he was using. Thanks in advance!

Quote:
L 04/05/2013 - 21:25:00: [smac_eyetest.smx | 0.8.4.0] Slyve ᶫᵒᵛᵉᵧₒᵤ˛ (ID: STEAM_0:1:XXXXXXX | IP: 84.162.XX.XXX) is suspected of tampering with an old movement command (buttons). CmdNum: 1928 | [0:8]
Map: cs_italy | Origin: 640 1992 0 | Angles: 2 -70 0 | Weapon: weapon_deagle | Team: 2 | Latency: 45ms
L 04/05/2013 - 21:25:30: [smac_eyetest.smx | 0.8.4.0] Slyve ᶫᵒᵛᵉᵧₒᵤ˛ (ID: STEAM_0:1:XXXXXXX | IP: 84.162.XX.XXX) is suspected of tampering with an old movement command (tickcount). CmdNum: 1928 | [1633:3635:3638]
Map: cs_italy | Origin: 290 2494 0 | Angles: 1 -137 0 | Weapon: weapon_deagle | Team: 2 | Latency: 49ms
L 04/05/2013 - 21:26:00: [smac_eyetest.smx | 0.8.4.0] Slyve ᶫᵒᵛᵉᵧₒᵤ˛ (ID: STEAM_0:1:XXXXXXX | IP: 84.162.XX.XXX) is suspected of tampering with an old movement command (tickcount). CmdNum: 1928 | [1633:5636:5639]
Map: cs_italy | Origin: 193 2433 0 | Angles: 2 -112 0 | Weapon: weapon_ak47 | Team: 2 | Latency: 45ms
L 04/05/2013 - 21:26:30: [smac_eyetest.smx | 0.8.4.0] Slyve ᶫᵒᵛᵉᵧₒᵤ˛ (ID: STEAM_0:1:XXXXXXX | IP: 84.162.XX.XXX) is suspected of tampering with an old movement command (tickcount). CmdNum: 1928 | [1633:7637:7640]
Map: cs_italy | Origin: -885 1250 8 | Angles: 8 29 0 | Weapon: weapon_ak47 | Team: 2 | Latency: 45ms
L 04/05/2013 - 21:32:14: [smac_eyetest.smx | 0.8.4.0] Slyve ᶫᵒᵛᵉᵧₒᵤ˛ (ID: STEAM_0:1:XXXXXXX | IP: 84.162.XX.XXX) is suspected of reusing old movement commands. CmdNum: 1928 PrevCmdNum: 31492 | [26916:30586:30589]
Map: cs_italy | Origin: 944 2040 168 | Angles: 0 180 0 | Weapon: weapon_glock | Team: 2 | Latency: 47ms
L 04/05/2013 - 21:32:44: [smac_eyetest.smx | 0.8.4.0] Slyve ᶫᵒᵛᵉᵧₒᵤ˛ (ID: STEAM_0:1:XXXXXXX | IP: 84.162.XX.XXX) is suspected of reusing old movement commands. CmdNum: 1928 PrevCmdNum: 31492 | [26916:32585:32590]
Map: cs_italy | Origin: -904 1845 8 | Angles: 0 -84 0 | Weapon: weapon_ak47 | Team: 2 | Latency: 48ms
L 04/05/2013 - 21:33:14: [smac_eyetest.smx | 0.8.4.0] Slyve ᶫᵒᵛᵉᵧₒᵤ˛ (ID: STEAM_0:1:XXXXXXX | IP: 84.162.XX.XXX) is suspected of reusing old movement commands. CmdNum: 1928 PrevCmdNum: 31492 | [26916:34588:34591]
Map: cs_italy | Origin: -138 934 -159 | Angles: 0 -103 0 | Weapon: weapon_ak47 | Team: 2 | Latency: 45ms

eXplode82 04-05-2013 17:39
Re: was banned for reusing old movement commands
 
Valid ban. Cheater

Noitartsiger 04-05-2013 18:42
Re: was banned for reusing old movement commands
 
can the admins tell me which kind of hack?

SystematicMania 04-06-2013 00:49
Re: was banned for reusing old movement commands
 
No Shake Spread/ProSpread

Noitartsiger 04-06-2013 05:39
Re: was banned for reusing old movement commands
 
Thx! F*** Cheaters!

Shit on shoe 04-10-2013 00:10
Re: was banned for reusing old movement commands
 
Hi guys

the best anticheat make good job.
He ban this guy and all his friend crying me why he banned^^
They cant believe it.
The friends want know is this a real Cheater ?
Valid ban ?


Quote:
14:27:50: [smac_eyetest.smx | 0.8.4.0] RAZ0R. ;> __________ # (ID: STEAM_0:1:xxxxxxxx | IP: 62.117.25.228) was banned for tampering with an old movement command (buttons). CmdNum: 2087 | [0:8]
regards

shit on shoe

SystematicMania 04-10-2013 00:20
Re: was banned for reusing old movement commands
 
Quote:
Originally Posted by Shit on shoe (Post 1929833)
The friends want know is this a real Cheater ?
Valid ban ?
Yes.

Shit on shoe 04-10-2013 23:41
Re: was banned for reusing old movement commands
 
Quote:
Originally Posted by SystematicMania (Post 1929840)
Yes.
thanks for answer.
what is it for a hack what he use ?

SystematicMania 04-12-2013 20:36
Re: was banned for reusing old movement commands
 
If you're running the latest SMAC and no conflicting plugins, then any excuse which doesn't include "I loaded up a multihack/cheat" is almost certainly a lie. I'm leaving open the possibility of a false positive, but the circumstances leading to a false positive would have to be insanely unlikely. I cannot think of any situation that would lead to a false positive.

The cmdnums 189, 235, 1928, and 2087 produce the exact same seed. Cheats prefer this seed over the other ones because it's approximately dead center from the crosshair.

Cheats also abuse cmdnums in a manner more subtle, such as selecting seeds whose spread is in the general direction of the target, or by slightly reducing randomness and selecting seeds closer to the crosshair.

In many cases, this kind of tampering can be very subtle and hard to detect visually.

Shit on shoe 04-13-2013 23:02
Re: was banned for reusing old movement commands
 
Quote:
Originally Posted by SystematicMania (Post 1931566)
If you're running the latest SMAC and no conflicting plugins, then any excuse which doesn't include "I loaded up a multihack/cheat" is almost certainly a lie. I'm leaving open the possibility of a false positive, but the circumstances leading to a false positive would have to be insanely unlikely. I cannot think of any situation that would lead to a false positive.

The cmdnums 189, 235, 1928, and 2087 produce the exact same seed. Cheats prefer this seed over the other ones because it's approximately dead center from the crosshair.

Cheats also abuse cmdnums in a manner more subtle, such as selecting seeds whose spread is in the general direction of the target, or by slightly reducing randomness and selecting seeds closer to the crosshair.

In many cases, this kind of tampering can be very subtle and hard to detect visually.
Ok thanks for information

thetwistedpanda 05-23-2013 12:18
Re: was banned for reusing old movement commands
 
He mad. QQ elsewhere, and find a server to play on that doesn't use SMAC if you have such an issue with it.

killall 10-16-2013 13:35
Re: was banned for reusing old movement commands
 
Hi, can someone give me some help to indentify if this ban is valid or not?

Game: CSGO, only basic plugins.
Smac version: 0.8.4.0 (yes, i will update)

L 10/16/2013 - 11:09:23: [smac_eyetest.smx | 0.8.4.0] Mionzin7 (ID: STEAM_1:0:67813958 | IP: 200.163.70.69) was banned for tampering with an old movement command (buttons). CmdNum: 2087 | [0:65536]
Map: de_train | Origin: -1888 1328 -216 | Angles: 0 115 0 | Weapon: weapon_glock | Team: 2 | Latency: 109ms

If is valid, what type of cheat him was using?

-- EDIT --

Just a note, this player had played LESS THAN 1 minute before the ban, and none events in hlstatsx.

Some info from hlstatsx and smac.log


Code:
10/16/2013 - 11:02:08 - Map changed to de_train
10/16/2013 - 11:08:01 - Player Connect
10/16/2013 - 11:08:20 - Player Disconnect
10/16/2013 - 11:08:38 - Player Connect
10/16/2013 - 11:08:38 - Player Disconnect
10/16/2013 - 11:09:23: - Player Ban
10/16/2013 - 11:15:06 - Map changed to de_nuke
-- EDIT, again --

SMAC changelog: 0.8.5.0
...
- Clients in the process of timing-out or respawning are now ignored.
...
Thanks.

StoerFaktoR 03-01-2018 02:40
Re: was banned for reusing old movement commands
 
Hey guys,
i found this old thread and i hope someone can help me.

Yesterday i played on our CSGO server and everything was fine.
Today i played on our server the round started and (before i moved or did anything)
i got this message in chat (btw. i'm the admin of this server).

https://prnt.sc/il8s7y

Sorry for the german language..

I looked into our SMAC.log and found this 4x times

Code:
L 03/01/2018 - 07:59:12: [smac_eyetest.smx | 0.8.6.0] d-luX (ID: STEAM_1:0:removed | IP: removed) is suspected of tampering with an old movement command (tickcount). CmdNum: 265 | [3354:3362:3362]
I didn't changed anything in my config or in my options.

This is my autoexec.cfg

Code:

gameinstructor_enable                "0"
closeonbuy                                        "0" //Stops the buy menu closing once you’ve purchased something
rate                                                "128000"

cl_updaterate                                "128"
cl_cmdrate                                "128"
cl_lagcompensation                        "1"
cl_predict                                        "1"
cl_showhelp                                "0"
cl_autohelp                                "0"
cl_interp                                        "0"
cl_interp_ratio                        "1"
cl_predictweapons                        "1"
cl_forcepreload                        "1" // Preloads The Whole Map & Sounds.
cl_fixedcrosshairgap                "-4.5"
cl_hud_playercount_showcount "0" //Whether to simply show the number of players or all of their avatars as well on the top of screen scoreboard.

mat_monitorgamma                        "2.1" // Useful for picking enemies out of darker corners, like dust_2 tunnels.
mat_queue_mode                                "2" // Forcing Your CPU To Use Multi-Threaded Mode.


viewmodel_offset_x                        "1"
viewmodel_offset_y                        "2"
viewmodel_offset_z                        "-2"
viewmodel_fov                                "68"

r_eyegloss                                        "0" // No Makeup.
r_eyemove                                        "0" // No Eye Movement.
r_eyeshift_x                                "0" // No Eye Movement X-Angel.
r_eyeshift_y                                "0" // No Eye Movement Y-Angel.
r_eyeshift_z                                "0" // No Eye Movement Z-Angel.
r_eyesize                                        "0" // Smaller Eyes.
r_drawtracers_firstperson        "0" // Removes the light tracers from your weapons when firing
r_drawparticles                        "0" // Turns off engine particles.
r_dynamic                                        "0" // Turns off dynamic lighting, which some players find distracting.

snd_mixahead                                "0.05"

alias "fps-man" "fps65"
alias "fps65" "fps_max 65;alias fps-man fps125"
alias "fps125" "fps_max 125;alias fps-man fps65"
bind "kp_5" "fps-man"

bind "-" "sm_admin"

fps_max "128"

host_writeconfig

//alias +xspeed "+speed; sensitivity 0.1"; alias -xspeed "-speed;sensitivity 0.2"; bind SPACE +xspeed
Is there any suspicious entry in my config and if yes which one i've to remove?

I know that i'm not cheating ,
i've no viruses or trojans on my pc and the only program what's running in the background is MSI-Afterburner.

Is it possible that an csgo update makes problems like this?
Because there was an update today with around 50mb.

I'm a little scared that I'll get a vac-ban for something I did not do.

Thanks in advance

sneaK 03-01-2018 14:07
Re: was banned for reusing old movement commands
 
Disable the eye test module entirely on CS:GO, it is triggering false positive detections after last night's update, even with compatibility enabled.

larrybrains 09-13-2018 00:14
Re: was banned for reusing old movement commands
 
Got an eyetest warning for a player on my server today. Is this a valid detection or a false positive and what kind of cheat would this be?

Game: L4D2
SMAC Version: 0.8.6.0
smac_eyetest_compat = 0

Code:
L 09/12/2018 - 13:58:12: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of tampering with an old movement command (buttons). CmdNum: 1433524 | [0:8]
        Map: c1m3_mall | Origin: 6610 -1431 24 | Angles: 20 140 0 | Weapon: weapon_spitter_claw | Team: 3 | Latency: 62ms
L 09/12/2018 - 13:58:49: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of reusing old movement commands. CmdNum: 4504 PrevCmdNum: 1433524 | [5686:5687:5693]
        Map: c1m3_mall | Origin: 6782 -1401 24 | Angles: -0 -46 0 | Weapon: weapon_sniper_military | Team: 2 | Latency: 60ms
L 09/12/2018 - 13:59:19: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of tampering with an old movement command (buttons). CmdNum: 1433524 | [524800:524288]
        Map: c1m3_mall | Origin: 6876 -1429 24 | Angles: 1 -71 0 | Weapon: weapon_shotgun_spas | Team: 2 | Latency: 60ms
L 09/12/2018 - 13:59:50: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of tampering with an old movement command (buttons). CmdNum: 1433524 | [524808:524296]
        Map: c1m3_mall | Origin: 6705 -1392 24 | Angles: 2 -25 0 | Weapon: weapon_shotgun_spas | Team: 2 | Latency: 61ms
L 09/12/2018 - 14:00:34: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of reusing old movement commands. CmdNum: 15016 PrevCmdNum: 1433524 | [16198:16199:16206]
        Map: c1m3_mall | Origin: 6828 -1411 24 | Angles: 5 -55 0 | Weapon: weapon_sniper_military | Team: 2 | Latency: 62ms
L 09/12/2018 - 14:01:04: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of tampering with an old movement command (buttons). CmdNum: 1433524 | [0:1024]
        Map: c1m3_mall | Origin: 6979 -1462 24 | Angles: 1 -133 0 | Weapon: weapon_sniper_military | Team: 2 | Latency: 62ms
More Info:

The player has played on the server for a long time, but I only recently (about a week ago) installed the eye smac_eyetest.smx module on the server. I have seen the suspect play on the server a few times since the module was installed and it didn't give any warnings until today.

I changed the smac_eyetest_compat setting to 1 after the warnings came up as the server does run a fair number of plugins.

Should I wait to see if it catches it again after the compatibility was set or is this likely a legit detection?

Thanks in advance!

uJIb9 09-19-2018 21:15
Re: was banned for reusing old movement commands
 
Hello. How do I understand SMAC is not being developed? Can there be at least some hope for its development?


All times are GMT -4. The time now is 20:08.

Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.