Need Confirmation (D3DDrv.dll)

[LeaderX]

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : Strous
### - Player IP : 81.***.***.55
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Software Rendering SoftDrv.dll
### - RenderVer : UT v436 Soft Renderer
### - RenderChksm : C36BA2C34835BDB71AD7806D2EA1DD8C
### - RenderSize : 389120 bytes
### - TimeStamp : 16-12-2006 17:29:34
### ----------------- Additional information -----------------
### - GUID : ^]PUh:9A;h9;69<6;99?h:=C<?C;:h:B0011_-1160309673
### - GUID Valid : True
### - KickType : 9
### - AnthChecker : v1.37 (Build 1)
### - Reason : Client loaded an illegal library! (hacked)
### - File : D3DDrv.dll
### - Checksum : 5617e9dd363c94ba1e31fee07b32bf36
### - Ident : HACKED - Unknown Package
### -------------------------------------------------------------

I've been banning people when I see this log but, some other members in my clan think I might be going ban crazy because we get like 3 of these logs every two days or so.

Is this really a cheat? Sorry I have to ask, but we've been getting a lot of these logs and some seem to think it's not logical to have these many D3DDrv.dll logs.

[Baiter]

holy shit, your banning everyone with this log? rofl....


This kind of log is false.


When the Driver used in "### - RenderDev :" differs from the one in "### - File : " and is a VIDEO Driver DLL, then its gonna be a false positive.

hope I worded that right.... :P

[LeaderX]

Ah shit! LOL... got a few people to unban... live and learn I guess! Thanks for the info

[LeaderX]

What if the driver used in file and renderer don't differ like so:
### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : help
### - Player IP : 72.***.***.89
### - Player OS : MacOS
### - EngineVer : 436
### - RenderDev : OpenGL OpenGlDrv
### - RenderVer : UT v436 OpenGL/Rave/Glide Renderer - MacOS
### - RenderChksm : 0643C3BA58BC21F6BB19A696D7FC8778
### - RenderSize : 126976 bytes
### - TimeStamp : 25-12-2006 22:34:46
### ----------------- Additional information -----------------
### - GUID :
rqdi|PMTM|MSJNOJOMMS|MUWPOWMS|Q1793_-2048727005
### - GUID Valid : True
### - KickType : 9
### - AnthChecker : v1.37 (Build 1)
### - Reason : Client loaded an illegal library! (hacked)
### - File : OpenGlDrv.DLL
### - Checksum : 30e2988b34e4c66fbf6320521aaa14b6
### - Ident : HACKED - Unknown Package
### -------------------------------------------------------------

Is that false, or a hacked opengl? Cause I don't know if it has to be a .u file for it to be a hack. Or, if they can hack .dll files also? Any thoughts?

[AnthraX]

What if the driver used in file and renderer don't differ like so:
### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : help
### - Player IP : 72.***.***.89
### - Player OS : MacOS
### - EngineVer : 436
### - RenderDev : OpenGL OpenGlDrv
### - RenderVer : UT v436 OpenGL/Rave/Glide Renderer - MacOS
### - RenderChksm : 0643C3BA58BC21F6BB19A696D7FC8778
### - RenderSize : 126976 bytes
### - TimeStamp : 25-12-2006 22:34:46
### ----------------- Additional information -----------------
### - GUID :
rqdi|PMTM|MSJNOJOMMS|MUWPOWMS|Q1793_-2048727005
### - GUID Valid : True
### - KickType : 9
### - AnthChecker : v1.37 (Build 1)
### - Reason : Client loaded an illegal library! (hacked)
### - File : OpenGlDrv.DLL
### - Checksum : 30e2988b34e4c66fbf6320521aaa14b6
### - Ident : HACKED - Unknown Package
### -------------------------------------------------------------

Is that false, or a hacked opengl? Cause I don't know if it has to be a .u file for it to be a hack. Or, if they can hack .dll files also? Any thoughts?

Seems like someone found a backdoor to bypass the OS check in AnthChecker. Certainly not clean!

[SunMan]

### - Player name : [T]Stoner
### - Player IP : 82.176.*
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : UT v436 D3D Renderer - Alternate/GOTY
### - RenderChksm : 1BA51598B5D506026A479FA92B94A278
### - RenderSize : 217088 bytes
### - TimeStamp : 09-01-2007 19:33:09
### ----------------- Additional information -----------------
### - GUID : edW\oBIBGoBG=AA=B@<hidden>@<hidden>@<hidden>@<hidden>
### - guid Valid : True
### - KickType : 8
### - AnthChecker : v1.38 (Build 1)
### - Reason : Client loaded an illegal library! (possibly hacked)
### - File : SoftDrv.dll
### - Checksum : dcfa5939b7bf80c3f2d395cc06dda65a

is this a false positiv or a hack? User has played before v1.38 without problems. Thanks.

[SixtSense]

Thats why i say OpenGL users are 97% cheaters buying a card for 500 € and then remove all textures for better frame rate :( and wallhack laming invisi laming ect

[Azura]

Happy to be part of the 3% :) . Do you cheat Anthrax lol ?

[Stoner]

think anyone can help me on this ? :O, sunman posted the main info when i try to connect to the server i get this log;

http://http://img49.imageshack.us/img49/9683/omfgwtfiswrongoo6.png

[Stoner]

http://img49.imageshack.us/img49/9683/omfgwtfiswrongoo6.png

this might be better :P

[SixtSense]

Happy to be part of the 3% :) . Do you cheat Anthrax lol ?

Whats the point running arround with no textures ?>> Lame
and with the opengl future you can see invisible players >>lame
all powerups textures fekked zone's fekked actors hanging arround must i go on ???

[[JAG]Britnik]

Looks like a lot of these kicks are due to new video drivers that are available. For instance I was kicked from a server today because I updated my d3d drivers to d3d8 :(

[PizzaMan]

Britnik;112376']Looks like a lot of these kicks are due to new video drivers that are available. For instance I was kicked from a server today because I updated my d3d drivers to d3d8 :(

There are several versions of d3d8. Try this: http://uksnipers.com/downloads/index.php?path=D3D/

The only way AnthraX can add the version you use, is to give him a link to the file.

[[JAG]Britnik]

I already posted it in the latest release thread.:D