AlliedModders - was banned for reusing old movement commands

AlliedModders (https://forums.alliedmods.net/index.php)

- SourceMod Anti-Cheat (https://forums.alliedmods.net/forumdisplay.php?f=133)

- - was banned for reusing old movement commands (https://forums.alliedmods.net/showthread.php?t=212386)

Re: was banned for reusing old movement commands

Quote:

Originally Posted by SystematicMania (Post 1929840)

Yes.

thanks for answer.
what is it for a hack what he use ?

Re: was banned for reusing old movement commands

If you're running the latest SMAC and no conflicting plugins, then any excuse which doesn't include "I loaded up a multihack/cheat" is almost certainly a lie. I'm leaving open the possibility of a false positive, but the circumstances leading to a false positive would have to be insanely unlikely. I cannot think of any situation that would lead to a false positive.

The cmdnums 189, 235, 1928, and 2087 produce the exact same seed. Cheats prefer this seed over the other ones because it's approximately dead center from the crosshair.

Cheats also abuse cmdnums in a manner more subtle, such as selecting seeds whose spread is in the general direction of the target, or by slightly reducing randomness and selecting seeds closer to the crosshair.

In many cases, this kind of tampering can be very subtle and hard to detect visually.

Re: was banned for reusing old movement commands

Quote:

Originally Posted by SystematicMania (Post 1931566)

Ok thanks for information

Re: was banned for reusing old movement commands

He mad. QQ elsewhere, and find a server to play on that doesn't use SMAC if you have such an issue with it.

Re: was banned for reusing old movement commands

Hi, can someone give me some help to indentify if this ban is valid or not?

Game: CSGO, only basic plugins.
Smac version: 0.8.4.0 (yes, i will update)

L 10/16/2013 - 11:09:23: [smac_eyetest.smx | 0.8.4.0] Mionzin7 (ID: STEAM_1:0:67813958 | IP: 200.163.70.69) was banned for tampering with an old movement command (buttons). CmdNum: 2087 | [0:65536]
Map: de_train | Origin: -1888 1328 -216 | Angles: 0 115 0 | Weapon: weapon_glock | Team: 2 | Latency: 109ms

If is valid, what type of cheat him was using?

-- EDIT --

Just a note, this player had played LESS THAN 1 minute before the ban, and none events in hlstatsx.

Some info from hlstatsx and smac.log

Code:

10/16/2013 - 11:02:08 - Map changed to de_train

10/16/2013 - 11:08:01 - Player Connect

10/16/2013 - 11:08:20 - Player Disconnect

10/16/2013 - 11:08:38 - Player Connect

10/16/2013 - 11:08:38 - Player Disconnect

10/16/2013 - 11:09:23: - Player Ban

10/16/2013 - 11:15:06 - Map changed to de_nuke

-- EDIT, again --

SMAC changelog: 0.8.5.0
...
- Clients in the process of timing-out or respawning are now ignored.
...
Thanks.

Re: was banned for reusing old movement commands

Hey guys,
i found this old thread and i hope someone can help me.

Yesterday i played on our CSGO server and everything was fine.
Today i played on our server the round started and (before i moved or did anything)
i got this message in chat (btw. i'm the admin of this server).

https://prnt.sc/il8s7y

Sorry for the german language..

I looked into our SMAC.log and found this 4x times

Code:

L 03/01/2018 - 07:59:12: [smac_eyetest.smx | 0.8.6.0] d-luX (ID: STEAM_1:0:removed | IP: removed) is suspected of tampering with an old movement command (tickcount). CmdNum: 265 | [3354:3362:3362]

I didn't changed anything in my config or in my options.

This is my autoexec.cfg

Code:



gameinstructor_enable                 "0"

closeonbuy                                         "0" //Stops the buy menu closing once you’ve purchased something

rate                                                 "128000"



cl_updaterate                                 "128"

cl_cmdrate                                 "128"

cl_lagcompensation                         "1"

cl_predict                                        "1"

cl_showhelp                                 "0"

cl_autohelp                                 "0"

cl_interp                                         "0"

cl_interp_ratio                         "1"

cl_predictweapons                        "1"

cl_forcepreload                         "1" // Preloads The Whole Map & Sounds.

cl_fixedcrosshairgap                 "-4.5"

cl_hud_playercount_showcount "0" //Whether to simply show the number of players or all of their avatars as well on the top of screen scoreboard. 



mat_monitorgamma                         "2.1" // Useful for picking enemies out of darker corners, like dust_2 tunnels.

mat_queue_mode                                 "2" // Forcing Your CPU To Use Multi-Threaded Mode.





viewmodel_offset_x                        "1"

viewmodel_offset_y                        "2"

viewmodel_offset_z                        "-2"

viewmodel_fov                                "68"



r_eyegloss                                         "0" // No Makeup.

r_eyemove                                         "0" // No Eye Movement.

r_eyeshift_x                                 "0" // No Eye Movement X-Angel.

r_eyeshift_y                                 "0" // No Eye Movement Y-Angel.

r_eyeshift_z                                 "0" // No Eye Movement Z-Angel.

r_eyesize                                         "0" // Smaller Eyes.

r_drawtracers_firstperson         "0" // Removes the light tracers from your weapons when firing

r_drawparticles                         "0" // Turns off engine particles.

r_dynamic                                        "0" // Turns off dynamic lighting, which some players find distracting.



snd_mixahead                                 "0.05"



alias "fps-man" "fps65"

alias "fps65" "fps_max 65;alias fps-man fps125"

alias "fps125" "fps_max 125;alias fps-man fps65"

bind "kp_5" "fps-man"



bind "-" "sm_admin"



fps_max "128"



host_writeconfig



//alias +xspeed "+speed; sensitivity 0.1"; alias -xspeed "-speed;sensitivity 0.2"; bind SPACE +xspeed

Is there any suspicious entry in my config and if yes which one i've to remove?

I know that i'm not cheating ,
i've no viruses or trojans on my pc and the only program what's running in the background is MSI-Afterburner.

Is it possible that an csgo update makes problems like this?
Because there was an update today with around 50mb.

I'm a little scared that I'll get a vac-ban for something I did not do.

Thanks in advance

Re: was banned for reusing old movement commands

Disable the eye test module entirely on CS:GO, it is triggering false positive detections after last night's update, even with compatibility enabled.

Re: was banned for reusing old movement commands

Got an eyetest warning for a player on my server today. Is this a valid detection or a false positive and what kind of cheat would this be?

Game: L4D2
SMAC Version: 0.8.6.0
smac_eyetest_compat = 0

Code:

L 09/12/2018 - 13:58:12: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of tampering with an old movement command (buttons). CmdNum: 1433524 | [0:8]

        Map: c1m3_mall | Origin: 6610 -1431 24 | Angles: 20 140 0 | Weapon: weapon_spitter_claw | Team: 3 | Latency: 62ms

L 09/12/2018 - 13:58:49: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of reusing old movement commands. CmdNum: 4504 PrevCmdNum: 1433524 | [5686:5687:5693]

        Map: c1m3_mall | Origin: 6782 -1401 24 | Angles: -0 -46 0 | Weapon: weapon_sniper_military | Team: 2 | Latency: 60ms

L 09/12/2018 - 13:59:19: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of tampering with an old movement command (buttons). CmdNum: 1433524 | [524800:524288]

        Map: c1m3_mall | Origin: 6876 -1429 24 | Angles: 1 -71 0 | Weapon: weapon_shotgun_spas | Team: 2 | Latency: 60ms

L 09/12/2018 - 13:59:50: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of tampering with an old movement command (buttons). CmdNum: 1433524 | [524808:524296]

        Map: c1m3_mall | Origin: 6705 -1392 24 | Angles: 2 -25 0 | Weapon: weapon_shotgun_spas | Team: 2 | Latency: 61ms

L 09/12/2018 - 14:00:34: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of reusing old movement commands. CmdNum: 15016 PrevCmdNum: 1433524 | [16198:16199:16206]

        Map: c1m3_mall | Origin: 6828 -1411 24 | Angles: 5 -55 0 | Weapon: weapon_sniper_military | Team: 2 | Latency: 62ms

L 09/12/2018 - 14:01:04: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of tampering with an old movement command (buttons). CmdNum: 1433524 | [0:1024]

        Map: c1m3_mall | Origin: 6979 -1462 24 | Angles: 1 -133 0 | Weapon: weapon_sniper_military | Team: 2 | Latency: 62ms

More Info:

The player has played on the server for a long time, but I only recently (about a week ago) installed the eye smac_eyetest.smx module on the server. I have seen the suspect play on the server a few times since the module was installed and it didn't give any warnings until today.

I changed the smac_eyetest_compat setting to 1 after the warnings came up as the server does run a fair number of plugins.

Should I wait to see if it catches it again after the compatibility was set or is this likely a legit detection?

Thanks in advance!

Re: was banned for reusing old movement commands

Hello. How do I understand SMAC is not being developed? Can there be at least some hope for its development?