[Release] AnthChecker v1.38 [Archive] - The Unreal Admins Page

AnthraX

29th December, 2006, 06:50 PM

Post Updated !!! (*)

v1.38 (Public):
* [Added] Malformed string servercrasher fix
* [Added] OS Checking bypass kick (kicktype 10)
* [Changed] Rewrote a part of the HTTP client for better stability

A few extra notes:
* This is not a huge update, I've made very little changes to the clientside of AnthChecker.
* The serverside of this version includes native code. It has been tested on all post-436 versions of UT but the linux version might still be unstable.
* Lots of thanks goes out to Shambler for this one. Couldn't have finished the native code without him.

(*) I've updated the serverside package to fix some security issues. The zip file is attached to this post.
Here's a list of changes for build 4-7:

* [Added] Extra routine to kick players with a bytehacked AnthChecker
* [Added] Optional debugmessages from the auto-updater
* [Fixed] AnthChecker will now correctly identify the base directory when using more than one system folder.
* [Fixed] Some Accessed none errors caused by the NetDriver fix
* [Fixed] Server getting stuck in a reboot cycle due to some mods that change the map before AC is fully loaded (eg: ASC)
* [Fixed] Server crash due to the auto-updater
* [Changed] OS Checking bypass kick will now also kick clients who claim to be running linux but aren't
(previously only kicked fake MacOS clients)

Changes for build 8:

* [Fixed] HTTP Updates not working correctly
* [Added] New hashes (UTGLR d3d 1.3, UTDC20b, ...)
* [Changed] HTTP Updater class replaced by the v1.39 build

You can just overwrite the old AnthCheckerS_v138.u file. Clients won't have to download any new files.

kawaii

29th December, 2006, 07:09 PM

Nice new years present :)

Rush

29th December, 2006, 07:15 PM

* [Added] OS Checking bypass kick (kicktype 10)

That's the sort of thing I've been waiting fot! THX. Good job on making a native linux part.

[BSC]MasterJohnny

29th December, 2006, 07:56 PM

This happens on my Linux box:

Spawning: AnthCheckerS_v138.ACActor
appError called:
Can't bind to native class AnthCheckerS_v138.ACHook
Executing UObject::StaticShutdownAfterError
Signal: SIGIOT [iot trap]
Aborting.
Exiting.

I copied all files to the System folder. Did I miss something?

EDIT: My Windows machine just stops, without warnings:

ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### AnthChecker v1.38 (Build 1) initializing...
ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### * NetDriver fix enabled : True
ScriptLog: ### --> NetDriver hooked : True
ScriptLog: ### --> DLO hooked : True
ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### * PackageChecker enabled : True
ScriptLog: ### --> Magic Key: -1445602304
ScriptLog: ### --> ../System/AnthCheckerC_v138.u : 1768647923
ScriptLog: ### --> ../System/UTPureRC7G.u : 1299979783
ScriptLog: ### --> ../System/EUT_1G.u : 1087164347
ScriptLog: ### --> Multichecksum file : Female1Skins.utx
ScriptLog: ### --> Multichecksum file : Female2Skins.utx
ScriptLog: ### --> Multichecksum file : Female2Voice.uax
ScriptLog: ### -------------------------------------------------------------
ScriptLog: DM-Deck16][.AccuGib0 False
ScriptLog: ("UTDCV18","UTDCV18DLL","SOLDIERSKINS","COMMANDOSKINS","FCOMMANDOSKINS","SGIRLSKINS","BOSSSKINS","BOTPACK","MAPVOTELA13","UTPURERC7G","ZPPURE7G","SGIRLSKINS_TEST21","ANTHCHECKERC_V138","EUT_1G","EUTIV","EUT3","IPTOCOUNTRY_AOL","ASC758","ASC7CC")
ScriptLog: +----
ScriptLog: | IpToCountry 1.2 by [es]Rush - Enabled!
ScriptLog: | PrimaryQueryServer : utgl.unrealadmin.org/iptocountry12.php
ScriptLog: | SecondaryQueryServer: smrtnici.eccms.net/sphx/iptocountry12.php
ScriptLog: | Extension for AOL : True
ScriptLog: +----
Init: Game engine initialized
Log: Success - 0 error(s), 0 warnings
Exit: Preparing to exit.

AnthraX

29th December, 2006, 08:01 PM

MasterJohnny;106861']This happens on my Linux box:

Spawning: AnthCheckerS_v138.ACActor
appError called:
Can't bind to native class AnthCheckerS_v138.ACHook
Executing UObject::StaticShutdownAfterError
Signal: SIGIOT [iot trap]
Aborting.
Exiting.

which UT version/linux distribution are you running?
Also keep in mind that UT will look for the AnthCheckerS_v138.so file in the folder where ucc-bin is located. If this is not your System folder then you'll have to move the file.

ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### AnthChecker v1.38 (Build 1) initializing...
ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### * NetDriver fix enabled : True
ScriptLog: ### --> NetDriver hooked : True
ScriptLog: ### --> DLO hooked : True
ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### * PackageChecker enabled : True
ScriptLog: ### --> Magic Key: -1445602304
ScriptLog: ### --> ../System/AnthCheckerC_v138.u : 1768647923
ScriptLog: ### --> ../System/UTPureRC7G.u : 1299979783
ScriptLog: ### --> ../System/EUT_1G.u : 1087164347
ScriptLog: ### --> Multichecksum file : Female1Skins.utx
ScriptLog: ### --> Multichecksum file : Female2Skins.utx
ScriptLog: ### --> Multichecksum file : Female2Voice.uax
ScriptLog: ### -------------------------------------------------------------
ScriptLog: DM-Deck16][.AccuGib0 False
ScriptLog: ("UTDCV18","UTDCV18DLL","SOLDIERSKINS","COMMANDOSKINS","FCOMMANDOSKINS","SGIRLSKINS","BOSSSKINS","BOTPACK","MAPVOTELA13","UTPURERC7G","ZPPURE7G","SGIRLSKINS_TEST21","ANTHCHECKERC_V138","EUT_1G","EUTIV","EUT3","IPTOCOUNTRY_AOL","ASC758","ASC7CC")
ScriptLog: +----
ScriptLog: | IpToCountry 1.2 by [es]Rush - Enabled!
ScriptLog: | PrimaryQueryServer : utgl.unrealadmin.org/iptocountry12.php
ScriptLog: | SecondaryQueryServer: smrtnici.eccms.net/sphx/iptocountry12.php
ScriptLog: | Extension for AOL : True
ScriptLog: +----
Init: Game engine initialized
Log: Success - 0 error(s), 0 warnings
Exit: Preparing to exit.

This one is quite odd... Are you sure that this is because of AnthChecker?

[BSC]MasterJohnny

29th December, 2006, 08:09 PM

On linux I use the 436 patch with ASU. On windows I have the 440 patch. The only thing I changed on them was the replacement of the AC files. And yes, the files are located in the System directory, where ucc-bin can be found, too. I'll take a deeper look later.

Baiter

29th December, 2006, 10:37 PM

Thank you very much for this Anthrax. We needed this!

And thanks to you too Shambler!

[BSC]MasterJohnny

30th December, 2006, 09:22 AM

The Windows sever seems to work only when bEnableNetFix=false. But this has no effect on the Linux server. That writes the same.

-graVe-

30th December, 2006, 02:16 PM

Hi I have the same probleme with my Linux server, also UT 436.

Spawning: AnthCheckerS_v138.ACActor
appError called:
Can't bind to native class AnthCheckerS_v138.ACHook
Executing UObject::StaticShutdownAfterError

Rush

30th December, 2006, 02:30 PM

It works good for me so far. Linux, UT 436. I also tried 451 and it started.

Baiter

30th December, 2006, 05:20 PM

The server wont start unless I disable the crash fix.

I'm running Windows Server 2003 Enterprise Edition.

SunMan

31st December, 2006, 09:23 AM

Thank you Anthrax! A very nice (after) Christmas gift for us! :thumbup:

Running here on Windows 2003 Server / UT 4.36 without problems and bEnableNetFix=true

SesioN

11th January, 2007, 12:49 PM

There is a trigger bot non dedectable on:

UTPureRC7G
AnthCheckerC_v138
UTDCv18
AntiFA46_C
AntiTweakV34

Petition/Question to: AnthraX,Troublesome, Robus, Rush

Anyone interessed to setup an addeon anti this shit? We will of course provide the trigger bot. (I assume that alot of "top" insta players etc. use it)

Azura

11th January, 2007, 03:16 PM

What form does it come under ? U file ? DLL ? Exe ? If it's an exe, better address Troublesome as it's native stuff.

SixtSense

12th January, 2007, 01:01 PM

People are stupid using things from H***s He always builds in a trojan ;)

DirtyDan

17th January, 2007, 08:46 PM

what is the MD5 for the AnthChecker v1.38 so ppl can add it to UTDC package check .. or is there no need for it like there was with the AnthChecker v1.37 ?

Baiter

17th January, 2007, 08:51 PM

what is the MD5 for the AnthChecker v1.38 so ppl can add it to UTDC package check .. or is there no need for it like there was with the AnthChecker v1.37 ?

Use the program that came with UTDC to find the true MD5 of the package.

And yes, you gotta have it.

DirtyDan

18th January, 2007, 10:43 PM

thanks!!

AnthraX

22nd January, 2007, 09:52 AM

original post updated

SunMan

22nd January, 2007, 10:24 AM

original post updated

Thanks AnthraX! :thumbup: is all ready installed here :P
Hope i was the first one :cool:

SixtSense

22nd January, 2007, 12:08 PM

thank you m8 appriciate ;)

GTi

22nd January, 2007, 10:49 PM

can't get this AC to work on XPX servers... they are Linux

it's too bad... :\ hope a new version is more stable soon

Obsidian

24th January, 2007, 04:25 PM

Can't bind to native class AnthCheckerS_v138.ACHook
Executing UObject::StaticShutdownAfterError
Signal: SIGIOT [iot trap]
Aborting.
Exiting.

UT 436 Goty - Linux vs1 2.6.16.28-xen #5 SMP Sat Oct 28 23:36:13 CEST 2006 x86_64 Intel(R) Pentium(R) D CPU 2.80GHz GNU/Linux

Tried both as root and non-privileged user, adding linux32 to run it "natively" in 32 bit mode doesn't help.

sphx

24th January, 2007, 07:05 PM

same thing happened to me...

Spawning: AnthCheckerS_v138.ACActor
appError called:
Can't bind to native class AnthCheckerS_v138.ACHook
Executing UObject::StaticShutdownAfterError
Signal: SIGIOT [iot trap]
Aborting.
Exiting.
Name subsystem shut down

Baiter

24th January, 2007, 07:27 PM

It apparently wont work on certain versions of Linux.

Rush

24th January, 2007, 08:22 PM

It apparently wont work if your server is Linux.
It works on my Linux server so far ... i686, Gentoo, 2.6.16, glibc-2.5.

Obsidian

24th January, 2007, 11:29 PM

Weird combo, old kernel and unstable new glibc. :P

Rush

24th January, 2007, 11:52 PM

Ok, now prepare for a shock... there's also another weird part in it. Reiser4! ! And it's working very very good for a very long time now. The reason why I haven't upgraded the kernel yet is that the reiser4 patch didn't want to apply along with the newest grsecurity.

Baiter

25th January, 2007, 12:34 AM

It apparently wont work on certain versions of Linux.

^^

Sry, misspoke :P

AnthraX

25th January, 2007, 12:43 AM

I've got it running on my own ubuntu virtual machine (kernel 2.6.something, libc 2.5.something) and our gs.net server

Obsidian

25th January, 2007, 10:32 PM

Well then explain what magic steps it took. :D

gates

27th January, 2007, 01:27 PM

Here, error beguile such
Server Package: AnthCheckerC_v138

Log: Spawning: MODOSUtilsV30.TeamBalanceActor
Log: Spawning: MODOSUtilsV30.MODOSSBServerActor
Log: Spawning: SmartCTF_4D.SmartCTFServerActor
Log: Spawning: UTDCv18.SMain
Log: Spawning: UTPureRC7G.UTPureSA
Log: Spawning: AnthCheckerS_v138.ACActor
Critical: appError called:
Critical: Can't bind to native class AnthCheckerS_v138.ACHook
Exit: Executing UObject::StaticShutdownAfterError
Exit: Exiting.
Uninitialized: Name subsystem shut down
Uninitialized: Log file closed, Sat Jan 27 08:10:43 2007

AnthraX

28th January, 2007, 01:09 AM

here's a new binary for the linux people:

http://utgl.unrealadmin.org/AnthChecker/v138/Linux-Recompile-3/AnthCheckerS_v138.so

[BSC]MasterJohnny

28th January, 2007, 09:14 AM

:cry:
Spawning: AnthCheckerS_v138.ACActor
appError called:
Can't bind to native class AnthCheckerS_v138.ACHook
Executing UObject::StaticShutdownAfterError
Signal: SIGIOT [iot trap]
Aborting.
Exiting.
Name subsystem shut down

utserver1@<hidden>:~$ uname -a
Linux www 2.4.32-smp-xfs #1 SMP 2006. jan. 8., vasárnap, 22.44.28 CET i686 GNU/Linux

utserver1@<hidden>:~$ cat /proc/version
Linux version 2.4.32-smp-xfs (root@<hidden>) (gcc version 3.3.5 (Debian 1:3.3.5-13)) #1 SMP 2006. jan. 8., vasárnap, 22.44.28 CET

sphx

28th January, 2007, 10:48 AM

here's a new binary for the linux people:

http://utgl.unrealadmin.org/AnthChecker/v138/Linux-Recompile-3/AnthCheckerS_v138.so

still no help

iDeFiX

28th January, 2007, 11:39 AM

Is this an adviced update, because the 'original' v138 is running fine atm?

AnthraX

28th January, 2007, 06:53 PM

it's just a recompiled binary so if it runs fine right now, there's no need to upgrade

Obsidian

29th January, 2007, 07:39 AM

Won't change here either. :P

matek

29th January, 2007, 01:38 PM

still doesnt work

Spawning: AnthCheckerS_v138.ACActor
appError called:
Can't bind to native class AnthCheckerS_v138.ACHook
Executing UObject::StaticShutdownAfterError
Signal: SIGIOT [iot trap]
Aborting.
Exiting.
Name subsystem shut down
Bad system call (core dumped)

G0dLik3

4th February, 2007, 01:09 AM

[UTDCv18] +---------------------------------------------------+
[UTDCv18] Client have failed integrity check
[UTDCv18] Player Name......: removed
[UTDCv18] Player IP........: removed
[UTDCv18] Client UT Version: v.4.36
[UTDCv18] Client OS........: WindowsXP
[UTDCv18] Altered File.....: AnthCheckerS_v138.u
[UTDCv18] Server Received..: FILE NOT FOUND-2
[UTDCv18] Date/Time........: 03-02-2007 / 18:01:00
[UTDCv18] +---------------------------------------------------+

what is that?

iDeFiX

4th February, 2007, 08:17 AM

Don't add AnthCheckerS_v138 to the ServerPackages and the verify list of UTDC. It's a serverside package.

G0dLik3

4th February, 2007, 04:13 PM

ye, its true... thanks for help :)

AnthraX

10th February, 2007, 01:52 PM

Updated again

Baiter

10th February, 2007, 06:42 PM

Thanks anthrax!

[BSC]MasterJohnny

11th February, 2007, 05:07 PM

Build 6 solves the restart problem when NetDriver fix is enabled, but it says:
ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### AnthChecker v1.38 (Build 6) initializing...
ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### * NetDriver fix enabled : True
ScriptLog: ### ---> Map is restarting, aborting ...
ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### * PackageChecker enabled : True
ScriptLog: ### --> Magic Key: -338324640
ScriptLog: ### --> ../System/AnthCheckerC_v138.u : -1841187248
ScriptLog: ### --> ../System/UTPureRC7G.u : -1772862959
ScriptLog: ### --> ../System/EUT_1G.u : -544399803
ScriptLog: ### --> Multichecksum file : SGirlSkins.utx
ScriptLog: ### --> Multichecksum file : Female2Skins.utx
ScriptLog: ### --> Multichecksum file : Female2Voice.uax
ScriptLog: ### -------------------------------------------------------------
Does this mean that it's actually doesn't active, then?

Piter

12th February, 2007, 09:40 AM

sphx

12th February, 2007, 11:57 AM

oik this made me think.... so I updated my server to v451 and anth 1.38 works on it just fine, so the problem isn't in kernel, it's in v436...

AnthraX

12th February, 2007, 12:08 PM

hmm. AC v1.38 was compiled using the v4.51 libraries but it works fine on my v4.36 and v4.40. Maybe it's because I installed my v4.36 using the loki installer and my GOTY cd

sphx

12th February, 2007, 03:19 PM

hmm. AC v1.38 was compiled using the v4.51 libraries but it works fine on my v4.36 and v4.40. Maybe it's because I installed my v4.36 using the loki installer and my GOTY cd

:) give the source to someone (you can trust) who has normal linux version to compile it...

Ooops

13th February, 2007, 07:04 PM

thnx for all your work!
Running fine so far on our linux
Question: Are we going to get the build 4&6 goodies anytime soon in an .so version? ^^

AnthraX

13th February, 2007, 10:02 PM

thnx for all your work!
Running fine so far on our linux
Question: Are we going to get the build 4&6 goodies anytime soon in an .so version? ^^

the newer builds only have changes in the AnthCheckerS_v138.u file. The .so file is identical

SesioN

14th February, 2007, 02:11 AM

Something was/is creating an issue, of silent "Impact Hammer". It might be anthchecker or UTDC, was this maybe fixed in 1.38 version?

AnthraX

14th February, 2007, 03:11 AM

I'm not 100% sure about UTDC but I can tell you that AnthChecker does not affect gameplay in any way

[JAG]Britnik

20th February, 2007, 10:09 AM

Hi today I entered a server using this protect and was kicked for having a hacked package. Last night I updated my d3d drivers to d3d8(which was the package in question). I wonder if you can update your protect so that others with this driver dont have the same issue. Here are the drivers in question so that you can check them out.
http://www.mediafire.com/?7omattt3gze

byteful

21st February, 2007, 02:14 AM

### --- A new version of AnthChecker is now available (version: v1.38 - build: 5
- released: 28/01/2007)
### --- Get it at: http://utgl.unrealadmin.org/AnthChecker/
AnthCheckerS_v138_Build5.zip

This is what it says after booting up my server. I went and got the file(s), however, it only has the "AnthCheckerS_v138" file in the download and all the other AnthChecker* files are v.137.
How do a I install the new version so I can have the most up-to-date, files on my server?

Thanks for your continued support of us NON-Coders. I don't know what I would do without yall.

~Ganesh~

21st February, 2007, 07:15 AM

Ooops

26th February, 2007, 01:09 PM

the newer builds only have changes in the AnthCheckerS_v138.u file. The .so file is identical

Forgive my complete ignorance when it comes to Linux ^^
I assumed the .so file was a linux specific file. In the release notes it says:
* The serverside of this version includes native code. It has been tested on all post-436 versions of UT but the linux version might still be unstable.
"Native code" led me to believe you needed something "more linux like" for getting your code run on the server, hence the .so file (since it's not been there in previous releases afaik)

Now why am I writing this? I uploaded the build 6 .u-file and in the initial check that shows up in your console it still says BUILD 1... I then deleted the .so file to check which file it was using on my server, and the server wouldn't start. I don't know if a Windows server is dependent on this .so file since I didn't test it on a local (windows) server. And I don't know if a Windows server also displays the "Build 1" in the console, or whether it correctly writes "Build 6" there when you install the build 6.

Does this mean, even though it displays Build 1, that I actually am running Build 6 successfully on my linux server?

Thnx for clearing this up for me
cheers

~Ganesh~

26th February, 2007, 06:48 PM

i guess its because the changes were made only in
the server-side parts and the client-file wasnt
changed in any way...
take a look at the logfile of your server, if you
installed it correctly it should show build 6.
your client will still show build 1 tho...

Ooops

27th February, 2007, 08:52 PM

Ganesh, thnx for your input

Unfortunately I can't find anything in my server logs regarding Anthchecker and the Anthchecker logs themselves don't show neither version nor build info...

And I have another question at this point:

I am reluctant to turn on the bReceiveUpdates option and would like to know if there is an alternative way to update anthchecker with new renderer-info and whatever else gets updated via this masterserver. Is this possible?

thnx in advance

[BSC]MasterJohnny

27th February, 2007, 09:15 PM

Copy paste the [AnthCheckerS_v137.ACHTTP] part from a server's ini, which allows updates?
(I don't see what harm you can suffer by allowing the autoupdate anyway.)

Ooops

27th February, 2007, 09:35 PM

MasterJohnny;113253']Copy paste the [AnthCheckerS_v137.ACHTTP] part from a server's ini, which allows updates?
(I don't see what harm you can suffer by allowing the autoupdate anyway.)

Can't find that section, I guess because I have never enabled bReceiveUpdates yet?

@<hidden>: Our server is in use for a lot of league games and I like to read about eventual problems BEFORE I update the server with anything new. AutoUpdates don't really leave me with this option.

What does the update do anyway? Feed the server's ini with package info or does it actually update/modify/overwrite files of the ac-package itself?

thnx and sry for my persistence =)

~Ganesh~

28th February, 2007, 04:51 AM

Unfortunately I can't find anything in my server logs regarding Anthchecker and the Anthchecker logs themselves don't show neither version nor build info...

the file might be in the system-folder and is called server.log...
not in the logs-folder...
that depends on how your servers is configured...
and you should find something like

ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### AnthChecker v1.38 (Build 6) initializing...
ScriptLog: ### -------------------------------------------------------------
...

in it...

What does the update do anyway? Feed the server's ini with package info or does it actually update/modify/overwrite files of the ac-package itself?

my idea of it is, that it checks a database for md5-checksums of new
renderers or packages...
at least the files that you installed on the server wont change...

AnthraX

28th February, 2007, 12:50 PM

Can't find that section, I guess because I have never enabled bReceiveUpdates yet?

@<hidden>: Our server is in use for a lot of league games and I like to read about eventual problems BEFORE I update the server with anything new. AutoUpdates don't really leave me with this option.

What does the update do anyway? Feed the server's ini with package info or does it actually update/modify/overwrite files of the ac-package itself?

thnx and sry for my persistence =)

The auto-update function will just update the list of hashes for Rendererfiles and .dll/.so files. That way, I don't have to update the AC serverfile every time a new native mod or renderdevice is released

Ooops

1st March, 2007, 02:13 AM

the file might be in the system-folder and is called server.log...
not in the logs-folder...
that depends on how your servers is configured...
and you should find something like

ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### AnthChecker v1.38 (Build 6) initializing...
ScriptLog: ### -------------------------------------------------------------
...

in it...

thnx, I finally found them, they were not called server.log (even though there is an entry with that name in the ini) and they were not in the System folder either.

Says Build 6 like you posted!!
THNX

Ooops

1st March, 2007, 02:15 AM

The auto-update function will just update the list of hashes for Rendererfiles and .dll/.so files. That way, I don't have to update the AC serverfile every time a new native mod or renderdevice is released

I will give it a try by running a different profile with its own server.ini. Thnx

Switzz

2nd March, 2007, 08:46 AM

I assume that this is a new feature in 1.38 but how reliable is it when someone is logged a'la this one?

### Server Crash Attempt from : 86.87.x.x ( LOGIN RESPONSE=-641595135 URL=:8000/Index.unr?Name=!@<hidden>#xxxxxxx?Class=BotPack.TFemale2?team=1?skin=
SGirlSkins.fbth?Face=SGirlSkins.Annaka?Voice=BotPack.VoiceFemaleTwo?OverrideClass= )

Ooops

2nd March, 2007, 02:37 PM

as a matter of fact i got 19 similar attempts 2 days ago. never had them before. Only the LOGIN RESPONSE differed in those attempts, rest was identical. Obviously whatever somebody tried, it didn't work. ^^

### Server Crash Attempt from : x.x.x.x ( LOGIN RESPONSE=76994387 URL=:6300/Index.unr?Name=******?Class=BotPack.TFemale1?team=1?skin=FCommandoSkins.daco?Face=FCommandoSkins.jayce?Voice=BotPack.VoiceFemaleOne?OverrideClass= )

GTi

3rd March, 2007, 02:21 PM

so is the problem with linux servers solved?my servers have UT v 440 and 436

[ZSZ]Evil_Dragon

4th March, 2007, 12:48 PM

Just upgraded to v138 and this time set the voice check to true.
But again I seem to get a lot of kicks like this

### - AnthChecker : v1.38 (Build 6)
### - Reason : Illegal checksum received (possible bytehack)!
### - File : Female2Voice

Obviously mainly players using a Spanish version or so.

So I guess I still need to have that turned off, yes?

On that note: BIG thanks to all the people working here coding mods, muts and Anticheats, hosting all the stuff here and helping with whatever question we have.

:) :thumbup:

karonte

18th March, 2007, 10:37 AM

A new release of UTGLR is available here:

http://cwdohnal.home.mindspring.com/utglr/

this is the ver. 3.4.
Is possible to have this renderer added to the allow renderers list of ANTHCHECKER?
Atm AnthChecker kicks...

Thanks in advance

LOLING

18th March, 2007, 11:03 AM

A new release of UTGLR is available here:

http://cwdohnal.home.mindspring.com/utglr/

this is the ver. 3.4.
It is possible to have this renderer added to the allow renderers list of ANTHCHECKER?
Atm AnthChecker kicks...

Thanks in advance

Yeh, add it. :thumbup:

AnthraX

18th March, 2007, 12:12 PM

done

chicken-

6th April, 2007, 07:28 PM

Uhhh in my ini it has a line saying it added the UTGLR 3.4 renderer, but it still kicks everybody that uses it.

AnthraX

29th April, 2007, 12:55 PM

Added a new build to the top post today. It contains all new definitions, several fixes in the auto-updater and some extra options that might be used later on. You can just overwrite your AnthCheckerS_v138.u file with the one in the zip.

Haven't had the time to test it a lot since I'm very busy this weekend. Let me know if it works well for you.

A|ice

29th April, 2007, 06:27 PM

Mine has been running for at least a couple of hours now and this is what it looks like:

[AnthCheckerS_v137.ACHTTP]
LastReply=576332588:::117112073062065060060072110126074120130073061072110126074122116073061072110126074116109127116113127073079060068079079061078062080064079061063063061067081062079079061078066080080061068080061080078069070070070072110126074127117134113127073061061060065069062070070070072110126074122109121113127073097096083088094044130061058062044080063080068044094113122112113126113126044057044080063080068080126130058112120120070070070072110126074122120116073061072110126074120117110116109127116113127073114112066109111112060063113060113109110064114110064067114114112060114065066065110068111111067060070070070072110126074120117110114117120113127073097096080079130061068058112120120070070070072110126074120117110122109121113127073097096044080109121109115113044079123122128126123120044130061058068044057044097096080079130061068058112120120070070070072110126074
OldLibs=1
OldRenderers=1
OldRenderers=1
bRunningLatestVersion=True
LatestVersion=
LatestBuild=
LatestDate=
bDebug=true
LatestURL=
NewHashes=
NewSizes=
NewNames=
NewLibNames=
NewLibFiles=
NewLibHashes=
DbgLevel=0
WebIP=utgl.unrealadmin.org
WebPath=/AnthChecker/

=\

A|ice

sephir69

29th April, 2007, 07:27 PM

for some reason my 1.38 has updated on one of my servers but is still kicking...

ini and kick log

NewHashes=CDF43CA3CFBF579C435469DCFF474856:::5A25819FC2B53E3556A3961F4E6F04FB:::5F5CF6A9F8EA324E507205A77FEAB8E3:::B2E4CA687310577F9DCE90E3767807C6:::
NewSizes=131072:::258048:::114216:::180902:::
NewNames=UTGLR v3.3 OpenGL Renderer:::UTGLR v3.4 OpenGL Renderer:::UT v436 OpenGL Renderer - Multilangual GOTY - Linux:::UT v436 OpenGL Renderer - Multilangual - Linux:::
NewLibNames=UT Damage Control v2.0 - UTDCv20.dll:::
NewLibFiles=UTDCv20.dll:::
NewLibHashes=faa888620a555ab2f4b17dbe28515ef5:::

### - Player name : F I S H [1h]
### - Player IP :
### - Player OS : Windows
### - EngineVer : 451
### - RenderDev : OpenGL OpenGLDrv.dll
### - RenderVer : Unknown Renderer
### - RenderChksm : 5A25819FC2B53E3556A3961F4E6F04FB
### - RenderSize : 258048 bytes
### - TimeStamp : 25-04-2007 16:35:55
### ----------------- Additional information -----------------
### - GUID : _0
### - guid Valid : False
### - KickType : 4
### - AnthChecker : v1.38 (Build 6)
### - Reason : Possible hack in renderdevice
### -------------------------------------------------------------

thought maybe it was related to the client using 451... but it's not

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : [Sa]Chadwixx
### - Player IP :
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : OpenGL OpenGLDrv.dll
### - RenderVer : Unknown Renderer
### - RenderChksm : 5A25819FC2B53E3556A3961F4E6F04FB
### - RenderSize : 258048 bytes
### - TimeStamp : 29-04-2007 01:10:31
### ----------------- Additional information -----------------
### - GUID : _0
### - guid Valid : False
### - KickType : 4
### - AnthChecker : v1.38 (Build 6)
### - Reason : Possible hack in renderdevice
### -------------------------------------------------------------

Seems to follow problems in this thread http://www.unrealadmin.org/forums/showthread.php?t=21587... I noticed my server is on the same box as one of the ones chicken mentioned... everything seems to be updating fine though

SesioN

1st August, 2007, 04:28 PM

Please whitelist UTDC 2.0B

[WJF]FireFox

15th September, 2007, 09:20 AM

Hi there..

Can anyone tell me what this means?

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : XXXXXXXXXXXXXX
### - Player IP : x.x.x.x
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : UT v436 D3D Renderer - Std/No Delta
### - RenderChksm : FE0656E088236E2F1F1D2195D0AF7040
### - RenderSize : 217088 bytes
### - TimeStamp : 15-09-2007 02:32:33
### ----------------- Additional information -----------------
### - GUID : ih[`sIFGEsssD0527_-812587828
### - guid Valid : True
### - KickType : 7
### - AnthChecker : v1.38 (Build 8)
### - Reason : Illegal checksum received (bytehack)!
### - File : Female2Skins
### - Checksum : -700554042
### - StdChecksum : 1912577116
### - FileSize : 709362
### - Ident : HACKED - Female2Skins - Ref 1/Warez
### - Status : T / T / F / F / F
### -------------------------------------------------------------

Is this a false positive? If so, how can i get rid of it?
I know I could get rid of the skincheck and set that to false, but then I guess that ppl with hacked skins would be able to play on the server (which isn't the idea...)

Here is the setting we have on the server where this happens:

[AnthCheckerS_v138.ACActor]
bEnablePackageChecker=true
bEnableNetFix=true
bKickUnknownRenderer=false
bKickUnknownLibrary=false
bKickUnknownSound=false
bKickUnknownSkin=false
bBroadCastJoin=true
bBroadCastIPs=false
bExternalNotify=false
bSelfCheck=true
bPureCheck=true
bEUTCheck=false
bSkinCheck=true
bSoundCheck=true
bShowConsoleMessages=true
TimeOut=30
CheckDelay=3.0
bReportCheats=True
bReceiveUpdates=True
Packages[0]=
Packages[1]=
Packages[2]=
Packages[3]=
Packages[4]=
Packages[5]=
Packages[6]=
Packages[7]=
Packages[8]=
Packages[9]=
bExternalLogs=true
LogPrefix=AnthLog-
LogPath=../Logs/
ACLinkMode=2
ACDelay=5

Any help is welcome

Kind regards,

[WJF]FireFox

17th September, 2007, 09:38 PM

No one has an answer to my problem?

sphx

17th September, 2007, 11:15 PM

firefox your problem is warez version of ut with stupid skins, to fix it try downloading normal 436 version or buy it ;)

[WJF]FireFox

18th September, 2007, 04:11 PM

hehehe, unfortunately that is not my version of UT...

But i'll pass on the news.

Thanks

SoNY_scarface

18th September, 2007, 04:27 PM

FireFox;130127']Hi there..

Can anyone tell me what this means?

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : XXXXXXXXXXXXXX
### - Player IP : x.x.x.x
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : UT v436 D3D Renderer - Std/No Delta
### - RenderChksm : FE0656E088236E2F1F1D2195D0AF7040
### - RenderSize : 217088 bytes
### - TimeStamp : 15-09-2007 02:32:33
### ----------------- Additional information -----------------
### - GUID : ih[`sIFGEsssD0527_-812587828
### - guid Valid : True
### - KickType : 7
### - AnthChecker : v1.38 (Build 8)
### - Reason : Illegal checksum received (bytehack)!
### - File : Female2Skins
### - Checksum : -700554042
### - StdChecksum : 1912577116
### - FileSize : 709362
### - Ident : HACKED - Female2Skins - Ref 1/Warez
### - Status : T / T / F / F / F
### -------------------------------------------------------------

Is this a false positive? If so, how can i get rid of it?
I know I could get rid of the skincheck and set that to false, but then I guess that ppl with hacked skins would be able to play on the server (which isn't the idea...)

Here is the setting we have on the server where this happens:

[AnthCheckerS_v138.ACActor]
bEnablePackageChecker=true
bEnableNetFix=true
bKickUnknownRenderer=false
bKickUnknownLibrary=false
bKickUnknownSound=false
bKickUnknownSkin=false
bBroadCastJoin=true
bBroadCastIPs=false
bExternalNotify=false
bSelfCheck=true
bPureCheck=true
bEUTCheck=false
bSkinCheck=true
bSoundCheck=true
bShowConsoleMessages=true
TimeOut=30
CheckDelay=3.0
bReportCheats=True
bReceiveUpdates=True
Packages[0]=
Packages[1]=
Packages[2]=
Packages[3]=
Packages[4]=
Packages[5]=
Packages[6]=
Packages[7]=
Packages[8]=
Packages[9]=
bExternalLogs=true
LogPrefix=AnthLog-
LogPath=../Logs/
ACLinkMode=2
ACDelay=5

Any help is welcome

Kind regards,

warez skin....ppl use it dont no they have it (sometimes)....usually comes with a torrent download..i have a safe link u can dload from ...

http://ukclan.forumarena.com/ukclan-thread162.html

dNdz0r

5th October, 2007, 08:27 PM

Spawning: AnthCheckerS_v138.ACActor
appError called:
Can't bind to native class AnthCheckerS_v138.ACHook
Executing UObject::StaticShutdownAfterError
Signal: SIGIOT [iot trap]
Aborting.
Exiting.
Name subsystem shut down

[ut@<hidden> ut-server]$ uname -a
Linux mercury.dotsi.pt 2.6.9-42.0.8.ELsmp #1 SMP Tue Jan 30 12:33:47 EST 2007 i686 i686 i386 GNU/Linux

[ut@<hidden> ut-server]$ cat /proc/version
Linux version 2.6.9-42.0.8.ELsmp (mockbuild@<hidden>) (gcc version 3.4.6 20060404 (Red Hat 3.4.6-3)) #1 SMP Tue Jan 30 12:33:47 EST 2007

Here u got my system info and as u can see im still with that error ;< Any idea?

[DANISH]TheDane

8th January, 2008, 05:32 AM

any chance of getting the warez versions of Female2Skins/Female2Voice whitelisted?

The log folder is full of these logs that obviously is false catches?

LOLING

8th January, 2008, 05:04 PM

Is warez, what I think is illegal too.

[DANISH]TheDane

8th January, 2008, 08:24 PM

yes illegal to use, but if they are no cheats they shouldn't be treated as cheats?

A lot of people use pirated version without them beeing warez versions, but we don't kick them? So if it isn't a cheat it should be whitelisted.

also, is this a false catch? d3d should be fixed? :

# # # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

# # # A N T H C H E C K E R - P L A Y E R K I C K

# # # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

# # # - P l a y e r n a m e : Player

# # # - P l a y e r I P : 1.2.3.4

# # # - P l a y e r O S : W i n d o w s

# # # - E n g i n e V e r : 4 3 6

# # # - R e n d e r D e v : S o f t w a r e R e n d e r i n g S o f t D r v . d l l

# # # - R e n d e r V e r : U T v 4 3 6 S o f t R e n d e r e r

# # # - R e n d e r C h k s m : C 3 6 B A 2 C 3 4 8 3 5 B D B 7 1 A D 7 8 0 6 D 2 E A 1 D D 8 C

# # # - R e n d e r S i z e : 3 8 9 1 2 0 b y t e s

# # # - T i m e S t a m p : 0 8 - 0 1 - 2 0 0 8 1 7 : 0 1 : 5 5

# # # - - - - - - - - - - - - - - - - - A d d i t i o n a l i n f o r m a t i o n - - - - - - - - - - - - - - - - -

# # # - G U I D : g f Y ^ q G G J B q q q C 8 1 9 5 _ - 2 0 1 7 0 3 6 6 2 6

# # # - g u i d V a l i d : T r u e

# # # - K i c k T y p e : 8

# # # - A n t h C h e c k e r : v 1 . 3 8 ( B u i l d 8 )

# # # - R e a s o n : C l i e n t l o a d e d a n i l l e g a l l i b r a r y ! ( p o s s i b l y h a c k e d )

# # # - F i l e : D 3 D D r v . d l l

# # # - C h e c k s u m : 5 6 1 7 e 9 d d 3 6 3 c 9 4 b a 1 e 3 1 f e e 0 7 b 3 2 b f 3 6

# # # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

LOLING

9th January, 2008, 02:02 PM

I think that people that use warez version shouldn't be able to play online.

Genecom

19th January, 2008, 04:55 PM

The warez skins should stay banned due to they have been altered. They are hacked skins that give a player an advantage over other by being less visable.

LeeBe

19th January, 2008, 05:49 PM

The warez skins should stay banned due to they have been altered. They are hacked skins that give a player an advantage over other by being less visable.

they arent less visable, and other players would see the skins they have installed locally

iirc these textures kinda flash (like corrupt textures)

Protos

19th January, 2008, 06:38 PM

The warez skins should stay banned due to they have been altered.

Agreed.

The game costs less than 10 dollars and can often be found for 5 dollars or less in used bins.

We should all be playing with the same files. Certainly no ones textures should 'flash' to give them an edge.

[DANISH]TheDane

20th January, 2008, 08:03 PM

man, we cannot ban just because they were altered?

We need to know if they are altered towards CHEATS, ot just altered with some new face or something?

come on, give them the benefit of the doubt? If i were to ban all players with pirate version my server would be empty!!!!!

[ZSZ]Evil_Dragon

20th January, 2008, 09:19 PM

If they are altered with something that simple like a new face then they would have to be installed on the server under a different name than the original one, otherwise you'd get version mismatch. Or you need to run the Valhalla avatar so those that have the matching .utx can see the new face, but again the file would need to have another name to avoid mismatch.
In both cases everyone would know they are altered and server admins would be able to allow them or not.

A file that to the player that uses it makes something look different then to those that don't have that file in my eyes has something fishy even more if that file has the same name and is not causing mismatch.

[DANISH]TheDane

20th January, 2008, 09:36 PM

well, I have valavatar running on my servers, so diferent skins are standard issues everyday. Some people see players with their custom skins, others just see them as default skins .... so ..... no big deal for me if it's just a face that is changed, I REALY WOULD LIKE TO KNOW WHAT THE CHANGES ARE!!!! plz help anyone ... send me the files .. or any info you have on it?

PizzaMan

20th January, 2008, 09:45 PM

http://utgl.unrealadmin.org/CB/ref1.jpg

[ZSZ]Evil_Dragon

20th January, 2008, 09:50 PM

I guess for a sniper server that clears it.

PizzaMan

20th January, 2008, 09:53 PM

Evil_Dragon;136853']I guess for a sniper server that clears it.

The user is the one who sees it like this. You would see your local skins.

Protos

20th January, 2008, 10:54 PM

This discussion is moot.

Anticheat doesn't work if we 'whitelist' everything.

STOCK is they way to go

and if that keeps your server empty then remove the anticheat ..... because asking for everything to be whitelisted will render anticheat sytems useless.

Sorry to be abrupt but your asking for something that is wrong.

plutosek

6th February, 2008, 06:00 AM

Sorry for my english.

If somone have problem to run AntiChecker v138 bulid 8 on ut server v436

Log Error:

Can't bind to native class AnthCheckerS_v138.ACHook
Executing UObject::StaticShutdownAfterError
Signal: SIGIOT [iot trap]
Aborting.
Exiting.

Download this file

Anti checker Core 436 (http://kawa.servegame.org/forum/pafiledb/uploads/AnthChecker_Core436.zip)

[DANISH]TheDane

6th February, 2008, 06:46 AM

Evil_Dragon;136853']I guess for a sniper server that clears it.

Well, asuming it's only visible to the client it would be an advantage in bright maps but big disadvantage in dark maps. The majority of my sniper maps are dominated by dark spots, so on my server i wouldn't ban for this.

with using valavatar i have totaly dark players online at daily basis, i don't hear any complaints about it from my visitors? So a female skin like on the picture is nada compared to what valavatar open the door for.

May i suggest a : bKickForWarez=True/False should there be a new version of AnthChecker?

Still it should generate a log file, so every warez could be examined for a later possibility of banning.

Raynor

4th March, 2008, 08:47 PM

LeeBe

4th March, 2008, 09:10 PM

heres a link to d3d9 if you need it

http://cwdohnal.home.mindspring.com/utglr/utd3d9r10.zip

Raynor

4th March, 2008, 09:17 PM

I'm already using it. I just informed people about that issue :)

LeeBe

4th March, 2008, 09:46 PM

I'm already using it. I just informed people about that issue :)

not you lol Anth :)

Raynor

4th March, 2008, 10:04 PM

:tongue:

mandelbug

3rd April, 2008, 05:33 PM

Sorry for asking a really stupid question but does this work with UT3? I am looking at it and thinking that it would be ideal for our servers but would like to make sure it is suitable for UT3. Thank you

PizzaMan

3rd April, 2008, 06:32 PM

does this work with UT3?

no.

ZE_NICE

3rd May, 2008, 10:48 PM

Can anyone put UTDC2d in whitelist?? :)

GTi

6th May, 2008, 07:57 PM

agree, someone do that ;D

jamaica

6th May, 2008, 08:23 PM

"someone" already posted in anthrax's forum asking that, so stop spamming plz :X

SixtSense

7th May, 2008, 10:39 AM

edit: he is back online

qwerty

7th May, 2008, 06:12 PM

Can someone please help me with this? Is it false?

ScriptLog: [ASC] Login: |uK|****** - ID: EAA31DFC105AEAF7306E5B361F017F6C - IP: *.*.*.*
ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### ANTHCHECKER - PLAYER KICK
ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### - Player name : |uK|********
ScriptLog: ### - Player IP : *.*.*.*
ScriptLog: ### - Player OS : Windows
ScriptLog: ### - EngineVer : 436
ScriptLog: ### - RenderDev : Direct3D D3DDrv.dll
ScriptLog: ### - RenderVer : UT v436 D3D Renderer - Std/No Delta
ScriptLog: ### - RenderChksm : FE0656E088236E2F1F1D2195D0AF7040
ScriptLog: ### - RenderSize : 217088 bytes
ScriptLog: ### - TimeStamp : 07-05-2008 00:22:19
ScriptLog: ### ----------------- Additional information -----------------
ScriptLog: ### - GUID : hgZ_rEGHIrEK@<hidden>@<hidden>
ScriptLog: ### - guid Valid : True
ScriptLog: ### - KickType : 9
ScriptLog: ### - AnthChecker : v1.38 (Build 8)
ScriptLog: ### - Reason : Client loaded an illegal library! (hacked)
ScriptLog: ### - File : RiSC5dll.dll
ScriptLog: ### - Checksum : 984a47f747711c0a891f0729b7ebab10
ScriptLog: ### - Ident : HACKED - Unknown Package
ScriptLog: ### -------------------------------------------------------------

Spank

12th May, 2008, 03:25 AM

AC keeps kicking me for a hacked glide renderer :(
Im using utgdr09 from http://cwdohnal.home.mindspring.com/utglr/

wyatt`

18th May, 2008, 12:21 AM

"someone" already posted in anthrax's forum asking that, so stop spamming plz :X

UTDC 2.1 is needed now

Acid Rayne

19th May, 2008, 04:28 AM

AnthChecker 1.38 build 1 causes players with UT Direct3D9 renderer get kicked.

- KickType: 4
- AnthChecker v1.38 (Build 1)
- Illegal file: D3D9Drv.dll (possibly bytehacked)
- Contact ...blah blah ...

:(

I had the same problem with opengl3.4 . So i disabled unknown rendering checking to further test and i keep getting a kick type 8 illegal file : utdcv21.dll (i also tried build 8)

i deleted my utdc files client side and reinstalled with no avail .
I also tried moving the anth chkr lines in my engine.gameengine server packages to the bottom and above utdc packages neither worked .

suggestions please ?

admin

30th June, 2008, 12:02 AM

Some players whant to play with Glide u can have it here

http://dege.freeweb.hu/
http://www.freeweb.hu/dege/dgVoodoo1.50Beta2.zip

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : ***
### - Player IP : ***
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Software Rendering SoftDrv.dll
### - RenderVer : UT v436 Soft Renderer
### - RenderChksm : C36BA2C34835BDB71AD7806D2EA1DD8C
### - RenderSize : 389120 bytes
### - TimeStamp : 29-06-2008 13:14:40
### ----------------- Additional information -----------------
### - GUID : [ZMRe=8:>eee=8718_1825676870
### - guid Valid : True
### - KickType : 8
### - AnthChecker : v1.38 (Build 8)
### - Reason : Client loaded an illegal library! (possibly hacked)
### - File : GlideDrv.dll
### - Checksum : b1f4fa3f5fcdd3b74912011b4059b717
### -------------------------------------------------------------

can you add it? glide is the first Renderer for UT :happy:

admin

10th July, 2008, 01:19 PM

Some players whant to play with Glide u can have it here
http://dege.freeweb.hu/
http://www.freeweb.hu/dege/dgVoodoo1.50Beta2.zip

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : ***
### - Player IP : ***
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Software Rendering SoftDrv.dll
### - RenderVer : UT v436 Soft Renderer
### - RenderChksm : C36BA2C34835BDB71AD7806D2EA1DD8C
### - RenderSize : 389120 bytes
### - TimeStamp : 29-06-2008 13:14:40
### ----------------- Additional information -----------------
### - GUID : [ZMRe=8:>eee=8718_1825676870
### - guid Valid : True
### - KickType : 8
### - AnthChecker : v1.38 (Build 8)
### - Reason : Client loaded an illegal library! (possibly hacked)
### - File : GlideDrv.dll
### - Checksum : b1f4fa3f5fcdd3b74912011b4059b717
### -------------------------------------------------------------

can you add it? glide is the first Renderer for UT :happy:

remember can you add it? :P

XxDangerxX

11th July, 2008, 08:45 AM

Rebellion Servers use a program call RiSC (Rebellion integrated Server Controller) - It's sort of a custom version of ASC build from the ground up. It includes a dll file, RiSC5dll.dll (for the most recent version 5). The purpose of the dll is to perform bans of not the IP, not the ASC ID, but your MAC address! :-) Which is cool. The dll is necessary to communicate to windows in order to obtain the MAC address.

AnthChecker catches the dll and kicks me. Please account for RiSC dlls in your next update.

Thank you :)

SoNY_scarface

11th July, 2008, 01:06 PM

{DnF}3d`

14th September, 2008, 01:32 PM

Sorry for my english.

If somone have problem to run AntiChecker v138 bulid 8 on ut server v436

Log Error:

Download this file

Anti checker Core 436 (http://kawa.servegame.org/forum/pafiledb/uploads/AnthChecker_Core436.zip)

Mate, thanks so much. I couldn't get anthchecker v138 to work at all and this solved the problem. I'm setting up an INX game server and they must run v436.

Your link was down but I found an updated one here: AnthChecker_Core436.zip (http://www.uksnipers.com/utserverstuff/Protection/AnthChecker/AnthChecker_Core436.zip)

kr0m

28th November, 2008, 12:57 PM

WTF ?

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : *******
### - Player IP : 192.168.1.10
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3D8Drv.dll
### - RenderVer : UTGLR v1.2 D3D8 Renderer
### - RenderChksm : C08CC1B2D4C13317E2CC1B6DD18D1DB9
### - RenderSize : 110592 bytes
### - TimeStamp : 28-11-2008 13:21:35
### ----------------- Additional information -----------------
### - GUID : ]\OTg@<hidden>>=ggg9;9483_2141871464
### - guid Valid : True
### - KickType : 9
### - AnthChecker : v1.38 (Build 1)
### - Reason : Client loaded an illegal library! (hacked)
### - File : D3DTNSeDrv.dll
### - Checksum : b4edf7618eb9b9322b3077bd16900e3e
### - Ident : HACKED - Unknown Package
### -------------------------------------------------------------

even this option is on bKickUnknownRenderer=false, still not working :F

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : *******
### - Player IP : 192.168.1.10
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3D8Drv.dll
### - RenderVer : UTGLR v1.2 D3D8 Renderer
### - RenderChksm : C08CC1B2D4C13317E2CC1B6DD18D1DB9
### - RenderSize : 110592 bytes
### - TimeStamp : 28-11-2008 13:22:04
### ----------------- Additional information -----------------
### - GUID : ]\OTg@<hidden>>=ggg9;9483_2141871464
### - guid Valid : True
### - KickType : 8
### - AnthChecker : v1.38 (Build 1)
### - Reason : Client loaded an illegal library! (possibly hacked)
### - File : UTDCv21.dll
### - Checksum : 7e0a41191bdf01b02342e074ef99d6a2
### -------------------------------------------------------------
great :X

its working only with bEnablePackageChecker=false

hmmm

PizzaMan

28th November, 2008, 01:44 PM

Less bitching, more log reading.

kr0m

28th November, 2008, 01:47 PM

http://www.unrealadmin.org/forums/showthread.php?p=144345#post144345

ok no problem with utdc :P

but tnsedriver still not working :X
http://www.unrealadmin.org/forums/archive/index.php/t-24308.html

SO ?

z..

8th December, 2008, 11:45 AM

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : ****
### - Player IP : 91.*.*.*
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : UT v436 D3D Renderer - Std/No Delta
### - RenderChksm : FE0656E088236E2F1F1D2195D0AF7040
### - RenderSize : 217088 bytes
### - TimeStamp : 06-12-2008 17:41:20
### ----------------- Additional information -----------------
### - GUID : YXKPc5<;=c651551644<c58>65>86c<9480_1905178820
### - guid Valid : True
### - KickType : 8
### - AnthChecker : v1.38 (Build 8)
### - Reason : Client loaded an illegal library! (possibly hacked)
### - File : OpenGLDrv.dll
### - Checksum : 37fd0457cd7a79fda141187a5df7ddcf
### -------------------------------------------------------------

I searched on google for the checksum 37fd0457cd7a79fda141187a5df7ddcf and it matched a player caught (legit or not ? ) there : http://www.zszclan.com/phpBB2/viewtopic.php?t=1391

So , i ask for confirmation , it's hax or no ?
THX for answers

GTi

30th January, 2009, 10:45 PM

Is there a problem with the AC "server" ?

keep getting this message...

### --- AnthChecker HTTP Error : Timeout while checking for updates (Code -3)

I updated from 137 to 138 B8 so the ports and etc are still open and True in the update part...

help, ty

ps: this makes all the new stuff beeing kicked from the server. d3d9, UTDC2.1, etc

AnthraX

30th January, 2009, 10:48 PM

Is there a problem with the AC "server" ?

keep getting this message...

### --- AnthChecker HTTP Error : Timeout while checking for updates (Code -3)

I updated from 137 to 138 B8 so he prots and etc are still open and True in the update part...

help, ty

ps: this makes all the new stuff beeing kicked from the server. d3d9, UTDC2.1, etc

The unrealadmin SQL server was down yesterday. I guess this bugged most v1.37 servers. It should be fine now though

GTi

30th January, 2009, 10:53 PM

But now i am using the v138Build8 and it gives that error. So maybe i did something wrong? Or the server changed host? is still down?

btw, tkz for the fast answer

edit: guess it will be your last one lol

SLiDeR

24th February, 2009, 12:10 AM

UTGLR 3.5 Released, please add it to the allowed list http://cwdohnal.home.mindspring.com/utglr/utglr35.zip

back4more

24th March, 2009, 01:44 AM

Hi there, have downloaded the lattest build.8, but after logging in it stays as version 138 (build 1) any help would be appreciated

great team here @<hidden> unrealadmins, keep up the great work!!

:D

the server is below if you would like to check :)

Cheers

2399Skillz

24th March, 2009, 01:50 AM

You need to upload AnthCheckerS_v138.u and over write the one that's already there. Then restart the server.

back4more

24th March, 2009, 02:31 AM

You need to upload AnthCheckerS_v138.u and over write the one that's already there. Then restart the server.

hi Skillz, yeah I done that, hmm interesting... any other ideas?

because I remotely administer this server some 1000k's away this is the proceedure that I follow;

1. ;comment out anthchecker actor/Server package -> upload ini
2. log into server as admin, then Admin quit to restart server (dissabling current anthchecker)
3. uploaded new (build 8) .u file to server overwriting old one , done
4. ;uncomment anthchecker actor/package -> upload ini
5. log into server as admin, then admin quit again to restart server (enabling newer version of anthchecker)
6. ~ console , reveals Anthchecker (build 1) , :S *puzzled

cheers.

2399Skillz

24th March, 2009, 02:33 AM

hi Skillz, yeah I done that, hmm interesting... any other ideas?

cheers.

Yea. Your FTP program probably isn't overwriting it properly.

Try stopping the server completely. Deleting the file off the server. Then upload the Build8 version; http://ut-files.com/index.php?dir=Anticheat/AnthChecker/&file=AnthCheckerS_v138_Build8.zip Then restart the server.

If it still shows up as Build 1, then I honestly haven't a clue. Some FTP programs are weird like that.

back4more

24th March, 2009, 02:39 AM

Yea. Your FTP program probably isn't overwriting it properly.

Try stopping the server completely. Deleting the file off the server. Then upload the Build8 version; http://ut-files.com/index.php?dir=Anticheat/AnthChecker/&file=AnthCheckerS_v138_Build8.zip Then restart the server.

If it still shows up as Build 1, then I honestly haven't a clue. Some FTP programs are weird like that.

thanx man , Legend will try now.

[BSC]MasterJohnny

24th March, 2009, 04:40 AM

Client-side it still logs as build 1, that doesn't matter.

2399Skillz

24th March, 2009, 04:52 AM

MasterJohnny;148132']Client-side it still logs as build 1, that doesn't matter.

That's right. Only way to know if it's truly build 8 is by looking in the log on the server, it'll say it's running Build 8. Clients wont know the difference.

back4more

24th March, 2009, 06:55 AM

That's right. Only way to know if it's truly build 8 is by looking in the log on the server, it'll say it's running Build 8. Clients wont know the difference.

ahh ok then that explains away with my reply , would be good to have this information in the ehem, readme , Cheers.

http://i43.tinypic.com/1692794.jpg

2399Skillz

24th March, 2009, 06:58 AM

I think in the readme it says the clients wont know the difference.

50BMG

20th April, 2009, 06:46 AM

I have the peculiar habbit of recording client side logs on some of my testing machines and noticed something that might be of interest to AnthraX.

AnthChecker: AnthChecker v1.38 (Build 1)
AnthChecker: -----------------------------------------
AnthChecker: Checking Operating System
AnthChecker: Checking Paths
AnthChecker: Renderdevice Check - Stage 1
AnthChecker: Renderdevice Check - Stage 2
AnthChecker: Self Integrity Check - Stage 1
AnthChecker: Self Integrity Check - Stage 2
Log: WebServer: Unable to open include file ../Cache\26B5B6A145D36FAF342FFD997B6DE785.b
Log: WebServer: Unable to open include file ../Cache\F50F337545D6B5FC4D797FB3D8B28E67.b
AnthChecker: Self Integrity Check - Stage 3
AnthChecker: File Check - Stage 1
AnthChecker: * Checking AnthCheckerC_v138.u
AnthChecker: * Checking UTPureRC7G.u
AnthChecker: * Checking commandoskins.utx
AnthChecker: * Checking Female1Skins.utx
AnthChecker: * Checking Female2Voice.uax
AnthChecker: File Check - Stage 2
Log: WebServer: Unable to open include file ../System\OpenGL32.dll
AnthChecker: Verifying AnthChecker guid
AnthChecker: -----------------------------------------

I checked the cache folder and files 26B5B6A145D36FAF342FFD997B6DE785.uxx and F50F337545D6B5FC4D797FB3D8B28E67.uxx do exist. There is an OpenGlDrv.dll in the system folder but no OpenGL32.dll.

Perhaps this has been talked about before, but I don't recall seeing it. Very few client side logs are ever posted and thought it might have been missed.

Anyway, not knowing if it was significant, I decided to report it and let you decide.

The server from this instance is running build 8 and is a windows machine too.

Cheers and thanks for AnthChecker!

AnthraX

21st April, 2009, 04:04 PM

This is the way it's supposed to look. These checks check for the presence of illegal files.

admin

5th August, 2009, 06:53 AM

Please for add http://kentie.net/article/d3d10drv/ :thumbup:

[UT](G)ott

13th September, 2009, 09:20 AM

Any idea what that mean?

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : a Name
### - Player IP : a IP
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : UT v436 D3D Renderer - Alternate/GOTY
### - RenderChksm : 1BA51598B5D506026A479FA92B94A278
### - RenderSize : 217088 bytes
### - TimeStamp : 13-09-2009 02:57:40
### ----------------- Additional information -----------------
### - GUID : edW\oGIBBoooAB0771_1709686304
### - guid Valid : True
### - KickType : 9
### - AnthChecker : v1.38 (Build 8)
### - Reason : Client loaded an illegal library! (hacked)
### - File : UTDCPlusv13d_C.dll
### - Checksum : 1f3d843c317f251aa0ee567d79e17172
### - Ident : HACKED - Unknown Package
### -------------------------------------------------------------

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : a Name
### - Player IP : a IP
### - Player OS : Windows
### - EngineVer : 451
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : UT v451 D3D Renderer
### - RenderChksm : 94B120205D2BFB855B4B5B0400A75F62
### - RenderSize : 221184 bytes
### - TimeStamp : 13-09-2009 01:32:49
### ----------------- Additional information -----------------
### - GUID : srej}RPOU}}}O8457_-527975070
### - guid Valid : True
### - KickType : 9
### - AnthChecker : v1.38 (Build 8)
### - Reason : Client loaded an illegal library! (hacked)
### - File : NPLoaderLL_v12.dll
### - Checksum : d57482c9b7e04622b7164bb64de06a35
### - Ident : HACKED - Unknown Package
### -------------------------------------------------------------

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : a Name
### - Player IP : a IP
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : UT v436 D3D Renderer - Alternate/GOTY
### - RenderChksm : 1BA51598B5D506026A479FA92B94A278
### - RenderSize : 217088 bytes
### - TimeStamp : 11-09-2009 20:24:18
### ----------------- Additional information -----------------
### - GUID : `_RWjC<BCjjj<C1285_1719084555
### - guid Valid : True
### - KickType : 9
### - AnthChecker : v1.38 (Build 8)
### - Reason : Client loaded an illegal library! (hacked)
### - File : NPLoaderLL_v13.dll
### - Checksum : 8d21a0dd778a32dc3a8b8f1de7ff4b23
### - Ident : HACKED - Unknown Package
### -------------------------------------------------------------

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : a Name
### - Player IP : a IP
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : UT v436 D3D Renderer - Std/No Delta
### - RenderChksm : FE0656E088236E2F1F1D2195D0AF7040
### - RenderSize : 217088 bytes
### - TimeStamp : 12-09-2009 20:29:20
### ----------------- Additional information -----------------
### - GUID : qpch{OUUQ{{{U9737_-1550426524
### - guid Valid : True
### - KickType : 9
### - AnthChecker : v1.38 (Build 8)
### - Reason : Client loaded an illegal library! (hacked)
### - File : NPLoaderLL_v13c.dll
### - Checksum : 965809be1d9bbd54fe5f979bae0fda95
### - Ident : HACKED - Unknown Package
### -------------------------------------------------------------

I dont run UTDC on this Server so this files not from me.

SoNY_scarface

13th September, 2009, 11:50 AM

I don't think thats a hack, I think Anth needs to Whitelist NPLoader?

[ZSZ]Evil_Dragon

13th September, 2009, 01:07 PM

Is there an NPloader_v_13?

The latest I have is version 12 with UTDCPlusV12s. I think that's outdated, isn't it? So where can I get the latest versions?

(UT-files.com ends with NPloader11 and UTDCPlus10)

Thx

AnthraX

13th September, 2009, 01:19 PM

Nploader is whitelisted. Enable the auto-updates. Latest public version can be downloaded here: http://utgl.unrealadmin.org/NPLoader/v13/NPLoader_v13_Release.zip

[ZSZ]Evil_Dragon

13th September, 2009, 02:31 PM

Thank you very much!

One question though, I have Autoupdate activated and there I see a UTDCPlusv13d_C.dll is in the list.

Your download only contains version 12 so is the 13 not public yet?

SoNY_scarface

13th September, 2009, 08:47 PM

Evil_Dragon;150636']Your download only contains version 12 so is the 13 not public yet?

I was wondering the same thing, I have seen a select few servers using this i.e. B$C, Tammy's and a few others. I was also wondering is this a non public version?

Genecom

14th September, 2009, 03:14 PM

I was wondering the same thing, I have seen a select few servers using this i.e. B$C, Tammy's and a few others. I was also wondering is this a non public version?

Version 1.3d is a private beta that is a work in progress at the moment.
There was talk to make 1.3d public but it seems to be on hold due to a compatibility issues.

SoNY_scarface

14th September, 2009, 09:13 PM

Version 1.3d is a private beta that is a work in progress at the moment.
There was talk to make 1.3d public but it seems to be on hold due to a compatibility issues.

Thank you. Are there any forecated dates for release? More importantly, have any crash issues relating to Windows 7 been solved? I heard that 1.3d was being developed to help some of these issues. I for one am being inundated with huge number of crash related posts. Is there anything we can do to help? Like provide Logs, Screenshots or anything else related to crashes?

Genecom

16th September, 2009, 11:21 AM

Thank you. Are there any forecated dates for release? More importantly, have any crash issues relating to Windows 7 been solved? I heard that 1.3d was being developed to help some of these issues. I for one am being inundated with huge number of crash related posts. Is there anything we can do to help? Like provide Logs, Screenshots or anything else related to crashes?

One of the reasons why 1.3d is not made public is that the fact being UTDC2.1 ain't compatible with Windows 7. UTDC+ resolves 'some' issues which enables most 32bit users with Windows 7 to play. However there is still NO compatibility at all with the 64bit version.

As explained before, this can't be fixed due to Troublesome never released his source, so the issues can't be adressed.

And also as explained before, for 100% compatibility a completely new anticheat for UT has to be written. I know it's looked into, but considering the amount of job behind it ( as UTDC really is a very nice written AC ) will take time, so no ETA to my knowledge.

I don't think logs will help as the problems are known why they happen, but isn't fixable due to UTDC source wasn't made public.

SoNY_scarface

16th September, 2009, 04:56 PM

Thanks for clearing that up Genecom. Is there a release date for 1.3d? Will it ever be made public? I am hoping there will be something (if possible) released on the 22nd October as it is release date for Windows 7. It would be nice to have support for something rather than nothing and obviously, the least disruption for players, who decide to upgade.

P.S. I couldn't quite extract whether or not a new anti cheat is in the making or not?

AnthraX

16th September, 2009, 05:59 PM

UTDCPlus v1.3d won't go public due to some bugs/compatibility problems. v1.3e will hopefully be the next public version. No ETA yet since I'm busy adding a new check to v1.3e

R9naldo

27th September, 2009, 02:02 PM

I'm not sure im in the right place but whatever:

I have got some kind of weird problem with every demo with Anthchecker running. the demo suddenly becomes so laggy after the player's spawns ( when he's dieing for example or before the game starts it works fine ) and i'm guessing that it's because of the anthchecks.

I have tried to google a solution but coulden't find anyone else with this problem, weird.

Perhaps adding anthchecker to the IllegalActors= lines in udemo.ini would help, just like with UTDC? Anyway i got no idea what to write after the = to disable the checks. :P

talking about these lines:

[udemo.DemoInterface]
bAnthDebug=false
IllegalActors[0]=UTDCNCheck
IllegalActors[1]=ACReplicationInfo
IllegalActors[2]=i4G_PlayerInfo
IllegalActors[3]=UTDCCheck

I have already tried to enable anthdebug, dunno what it intended to but it didn't help also.

maybe anthrax can help? I actually haven't watched any CB ut99 demo in the last year because of this.. :(

Diskette

1st November, 2009, 06:02 PM

Hey Guys I have a problem with the AnthChecker. When I join a UT Server, the AnthChecker kicks me from the Server after 5 seconds :mad:.
I have take a screenshot!

http://www.bilderkiste.org/show/original/d9fbf46bc33620101915f5b3e473075c/errorkick.jpg

--------------------------------------------------------
You have been removed from this server for the following reason:
- Kicktype: 3
- AnthChecker v1.37 (Build 1)
- Your client failed to generate a checksum for: Renderdevice
- Contact the server admin for additional information
- If this problem keeps happening, please visit our forum at:
*http://www.unrealadmin.org/forums/forumdisplay.php?f=176
--------------------------------------------------------

I hope you can help me with the problem...

xD://`NaNo

1st November, 2009, 11:12 PM

Is the problem on any server with AnthChecker or just this particular one? (Which is an old version anyway...)

admin

1st November, 2009, 11:21 PM

the server whase not days.
It must be updated.
AnthChecker_v138
http://unrealtournament.99.free.fr/utfiles/Anticheat/AnthChecker/AnthChecker_v138.zip
whith
http://unrealtournament.99.free.fr/utfiles/Anticheat/AnthChecker/AnthCheckerS_v138_Build8.zip

Diskette

3rd November, 2009, 11:23 AM

hey, yes this problem is on any server with AnthChecker, with the same problem!

Hmm I will contact the server admin...

admin

3rd November, 2009, 01:49 PM

hey, yes this problem is on any server with AnthChecker, with the same problem!

Hmm I will contact the server admin...

so it's you download a new Renderdevice for replace yours http://unrealtournament.99.free.fr/utfiles/Video_Renders/

nixen

20th March, 2010, 06:17 PM

Hiya boys and girls.

I've got some problem that i think is about AnthChecker.
I just installed AnthChecker on my server, and done what the readme file says.
When i restart the server and joining it, after a few sec i get kicked.

This is what it says:
http://nixen.se/failanticheck.jpg

And sometimes i get kicked with reson: UTDC.dll or something.

I've got
NPloader v13
UTDC+ v12S
UTDC v12

Don't know what much else to say, since i don't know that much about server :P i just do what the readme file says ^^

Anyone maybe know whats wrong?

:EDIT: The picture is wrong, it should say v1.3 there, i've forgotten to take a new picture only :EDIT:

AnthraX

20th March, 2010, 06:18 PM

I might have taken NPLoader v1.2 off the whitelist

nixen

20th March, 2010, 06:26 PM

The picture is the old one, it should be NPLoaderLL_v13.dll i haven't taken a new only.

admin

26th March, 2010, 11:09 PM

### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : ghjgh
### - Player IP : 4563456345
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3D9Drv.dll
### - RenderVer : UTGLR v1.1 D3D9 Renderer
### - RenderChksm : F5E41B4832BA11B9481D59A5F34F3CEC
### - RenderSize : 232448 bytes
### - TimeStamp : 16-03-2010 01:24:53
### ----------------- Additional information -----------------
### - GUID : ZYLQd=<8:ddd680517_1757844867
### - guid Valid : True
### - KickType : 9
### - AnthChecker : v1.38 (Build 10)
### - Reason : Client loaded an illegal library! (hacked)
### - File : ACEv06k_C.dll
### - Checksum : b3557cb76e85a6fbd75e529857a66ca8
### - Ident : HACKED - Unknown Package
### -------------------------------------------------------------

SoNY_scarface

27th March, 2010, 12:35 AM

v6k did exist but was very broken. Not sure if this is the correct file or not though.

LeeBe

27th March, 2010, 04:26 PM

madrixis

11th April, 2010, 07:58 PM

seems the NPLoaderLL_v15e.so isnt whitlisted for the linux guys.

ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### ANTHCHECKER - PLAYER KICK
ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### - Player name : linuxplayer
ScriptLog: ### - Player IP : 188.x.x.x
ScriptLog: ### - Player OS : Linux
ScriptLog: ### - EngineVer : 436
ScriptLog: ### - RenderDev : OpenGL OpenGLDrv.so
ScriptLog: ### - RenderVer : UT v436 OpenGL Renderer - Multilangual - Linux
ScriptLog: ### - RenderChksm : B2E4CA687310577F9DCE90E3767807C6
ScriptLog: ### - RenderSize : 180902 bytes
ScriptLog: ### - TimeStamp : 11-04-2010 18:01:36
ScriptLog: ### ----------------- Additional information -----------------
ScriptLog: ### - GUID : removed
ScriptLog: ### - guid Valid : True
ScriptLog: ### - KickType : 9
ScriptLog: ### - AnthChecker : v1.38 (Build 10)
ScriptLog: ### - Reason : Client loaded an illegal library! (hacked)
ScriptLog: ### - File : NPLoaderLL_v15e.so
ScriptLog: ### - Checksum : 0e37bac9514d3fac24d7793856382fe0
ScriptLog: ### - Ident : HACKED - Unknown Package

AnthraX

11th April, 2010, 10:17 PM

fixed sorry

madrixis

21st April, 2010, 10:04 AM

### - AnthChecker : v1.38 (Build 10)
### - Reason : Client loaded an illegal library! (possibly hacked)
### - File : D3DDrv.dll
### - Checksum : 5617e9dd363c94ba1e31fee07b32bf36

### - AnthChecker : v1.38 (Build 10)
### - Reason : Client loaded an illegal library! (possibly hacked)
### - File : D3DDrv.dll
### - Checksum : 7904e03b3c1487e43f14716fd2ee3bf2
### -------------------------------------------------------------

illegal or not whitelisted?

SoNY_scarface

21st April, 2010, 11:09 AM

Assuming since Anth fixed it, the file was not on whitelist.

[ZSZ]Evil_Dragon

21st April, 2010, 11:06 PM

illegal or not whitelisted?

I thought these are oooooooooooooooold bugs...

madrixis

22nd April, 2010, 09:25 AM

Evil_Dragon;154259']I thought these are oooooooooooooooold bugs...

did it become a feature already in the meantime? :P

LeeBe

22nd April, 2010, 10:05 AM

illegal or not whitelisted?

you need to paste the full log, its all relevant

madrixis

26th April, 2010, 10:23 AM

you need to paste the full log, its all relevant

strange, client loaded software renderer + d3d.... his problem :)

a minor one:

### - AnthChecker : v1.38 (Build 10)
### - Reason : Client loaded an illegal library! (hacked)
### - File : ACEv07c_C.dll
### - Checksum : 2ed5830e45678bdf42fbd543d3b0a47c
### - Ident : HACKED - Unknown Package

LeeBe

26th April, 2010, 10:54 AM

a minor one:

the client was on a server running ACEv07c then went to your server without restarting UT

madrixis

26th April, 2010, 11:37 AM

the client was on a server running ACEv07c then went to your server without restarting UT

i know. i guess 07c will may be the next public version, if so, i hope anyone can add it to the whitelist of ac.
dunno, what sux more, restart ut after a serverswitch or reading ppls logs who didnt do it. (who usually DONT reconnect to the server they got kicked from!)

Letylove49

26th April, 2010, 01:25 PM

Anthrax Why do you don't put the new files on the withelist before to put in on tammy's server ? have you a reason to do that on this way?

madrixis

10th May, 2010, 10:36 AM

Anthrax Why do you don't put the new files on the withelist before to put in on tammy's server ? have you a reason to do that on this way?

aye. yet another whitelist request:
ACEv07f_C.dll
3a9c42cb6973d66c0046c3b8dd409e76

chicken-

11th June, 2010, 10:21 PM

Is there any added benefit of using anthchecker along with ACE? If so, any chance of getting the new D3d10 drivers supported from http://www.kentie.net/article/d3d10drv/index.htm ?

madrixis

24th June, 2010, 06:30 PM

whitelist ...

### - Reason : Client loaded an illegal library! (hacked)
### - File : NPLoaderLL_v16.dll
### - Checksum : fa6efe3803b2ed80cedd9bc1a26a4700

thanks in advance.

back4more

4th August, 2010, 09:50 AM

a quick question about using anthchecker to check certain .dll files.

regarding render.dll is it a good idea or are there several variations of this file out there in legitimate UT versions that it would boot?

cheers

also got an interesting error today during a player check;

RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed
RPC bunch overflowed

because all servers pings are now quite high in my ut favourites list I suspect some kind of hack attack or DDOS... could I be correct in assuming this?.

XaN<{VDS}>

5th August, 2010, 05:25 PM

Is there any added benefit of using anthchecker along with ACE? [/url] ?

I was going to ask this same question. It it good to run both, or is it unnecessary?

Switzz

5th August, 2010, 06:01 PM

a quick question about using anthchecker to

also got an interesting error today during a player check;

because all servers pings are now quite high in my ut favourites list I suspect some kind of hack attack or DDOS... could I be correct in assuming this?.

Remote procedure call - seems someone would like access to your servers - if its consistend and high pings its probably done by portscan.

back4more

5th August, 2010, 11:44 PM

Excellent I'll let them in right away.

is it normal for the server to portscan itself as it seems to be trying to do quite often.

admin

16th August, 2010, 06:33 PM

True or False ?

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : ************
### - Player IP : ************
### - Player OS : Windows
### - EngineVer : 451
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : UT v451 D3D Renderer
### - RenderChksm : 94B120205D2BFB855B4B5B0400A75F62
### - RenderSize : 221184 bytes
### - TimeStamp : 05-08-2010 04:57:25
### ----------------- Additional information -----------------
### - GUID : ^]PUh:A@<hidden><:69:6;99Bh:BC:=C=<h91286_-1347042656
### - guid Valid : True
### - KickType : 8
### - AnthChecker : v1.38 (Build 10)
### - Reason : Client loaded an illegal library! (possibly hacked)
### - File : OpenGLDrv.dll
### - Checksum : f11a9d89da7e0ba70da82865bbb6219f
### -------------------------------------------------------------

Genecom

16th August, 2010, 08:32 PM

False, 05-08-2010 it wasn't on Anthchecker whitelist.

back4more

16th August, 2010, 09:56 PM

is it necessary to run anthchecker alongside [ace] or can this one be put to rest?

Cheers.

minime

28th August, 2010, 10:35 AM

is this a cheat?

ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### ANTHCHECKER - PLAYER KICK
ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### - Player name :
ScriptLog: ### - Player IP :
ScriptLog: ### - Player OS : Windows
ScriptLog: ### - EngineVer : 451
ScriptLog: ### - RenderDev : Software Rendering SoftDrv.dll
ScriptLog: ### - RenderVer : Unknown Renderer
ScriptLog: ### - RenderChksm : 1F58EF3F80AC1E697CBD399338E5BF91
ScriptLog: ### - RenderSize : 385024 bytes
ScriptLog: ### - TimeStamp : 28-08-2010 04:16:43
ScriptLog: ### ----------------- Additional information -----------------
ScriptLog: ### - GUID : hgZ_rGCCGrrrL9730_929756531
ScriptLog: ### - guid Valid : True
ScriptLog: ### - KickType : 4
ScriptLog: ### - AnthChecker : v1.38 (Build 10)
ScriptLog: ### - Reason : Possible hack in renderdevice
ScriptLog: ### -------------------------------------------------------------

sxxxe83

29th August, 2010, 02:30 PM

Is it possible to whitelist this linux port of the enhanced OpenGL Renderer?
http://stephan.kochen.nl/proj/OpenGLDrv.so

Its ported from the 3.1 version:
http://www.cwdohnal.com/utglr/utglr31.zip

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER JOIN
### -------------------------------------------------------------
### - Player name : xxxxx
### - Player IP : xx.xxx.xx.xx
### - Player OS : Linux
### - EngineVer : 436
### - RenderDev : OpenGL OpenGLDrv.so
### - RenderVer : Unknown Renderer
### - RenderChksm : 419A7C2F0FEBBFA5B17D649CD74DE092
### - RenderSize : 206652 bytes
### - TimeStamp : 29-08-2010 15:05:31
### -------------------------------------------------------------

back4more

3rd September, 2010, 03:19 PM

any ideas why this one is so big?

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name :
### - Player IP :
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3D8Drv.dll
### - RenderVer : UTGLR v1.2 D3D8 Renderer
### - RenderChksm : C08CC1B2D4C13317E2CC1B6DD18D1DB9
### - RenderSize : 110592 bytes
### - TimeStamp : 03-09-2010 23:48:01
### ----------------- Additional information -----------------
### - GUID : \[NSf8?=>fff889738_1732409191
### - guid Valid : True
### - KickType : 6
### - AnthChecker : v1.38 (Build 10)
### - Reason : Illegal checksum received (possible bytehack)!
### - File : AntiTweakV42
### - Checksum : 1827106122
### - StdChecksum : 123600543
### - FileSize : 40138
### - Status : T / T / T / F / F / F / F / F / F / F
### -------------------------------------------------------------
### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------

Protos

6th June, 2011, 11:17 PM

Just fyi Anth, the links are broken.
Not sure if it is a forum issue but attachments are not working.

Protos

11th June, 2011, 06:53 AM

Can we get the new Old Unreal Media Patch

http://www.oldunreal.com/patch/OMP0.99-UT436-UT451.7z (Oldunreal.com/patch/OMP0.99-UT436-UT451.7z)

whitelisted please.

Anthchecker is kicking on the Open AL.

BLTicklemonster

21st June, 2011, 11:25 AM

Our anthchecker setting:

bKickUnknownRenderer=false
bKickUnknownLibrary=fasle
bKickUnknownSound=false
bKickUnknownSkin=false

yet we kick for this:

ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### ANTHCHECKER - PLAYER JOIN
ScriptLog: ### -------------------------------------------------------------
ScriptLog: ### - Player name : aaaaaaaa
ScriptLog: ### - Player IP : aaaaaaaaaa
ScriptLog: ### - Player OS : Windows
ScriptLog: ### - EngineVer : 436
ScriptLog: ### - RenderDev : Direct3D D3DDrv.dll
ScriptLog: ### - RenderVer : UT v436 D3D Renderer - Std/No Delta
ScriptLog: ### - RenderChksm : FE0656E088236E2F1F1D2195D0AF7040
ScriptLog: ### - RenderSize : 217088 bytes
ScriptLog: ### - TimeStamp : 14-06-2011 15:05:13
ScriptLog: ### -------------------------------------------------------------
UTPure: 2011-06-14 15:05.22 UTPureCheat: Judge (174.56.110.193) had an impurity (MT Failed Packagelog!)

why is that?

Found partial answer, if you run package and mod checks you get the MT (message timeout) on packagelog. How do I correct this? We're running anthchecker and utpurerc7g. And apparently it's not a kick, it just times him out.

[ZSZ]Evil_Dragon

21st June, 2011, 11:41 AM

If the settings you posted are copied from your .ini it might be because you have

bKickUnknownLibrary=fasle

instead of

bKickUnknownLibrary=false

so just a spelling mistake.

The kick looks like being done by UTPure though, not by AnthChecker.

birdie

22nd July, 2011, 05:01 AM

I just got booted by a server using 1.38 for the reason "OpenGLDrv.dll, possibly bytehacked", whatever that means. I'm not going to stop using OpenGL !

gopostal

24th July, 2011, 05:10 PM

Helen would you consider emailing me the dll so I can pull a hash on it? Depending on where you copied your dll from you could have mistakenly picked up a dirty one from someone else's old installation or some old file you had looked at previously. I've done this exact thing myself though I've been lucky to have caught it before going onto public servers.
Replace your existing one with one from here: http://www.cwdohnal.com/utglr/ and return to the server. I'll bet you sail through then.

birdie

24th July, 2011, 05:49 PM

I put it here: http://www.birdieman.com/downloads/OpenGLDrv20090222.rar

I don't know what version it is but it is dated Feb 22 2009.

gopostal

24th July, 2011, 08:33 PM

Your problem one is one that had come with UT but it does have some minor alterations. Looks like someone was playing with learning how to bytehack or maybe even "fix" it (the darkness issue maybe?). I'd just delete it and don't worry about it. The Dohnal one is far superior anyway.

birdie

25th July, 2011, 01:28 AM

Thanks for the link anyways, it always seems a chore when trying to find that dll for download.

rork

23rd September, 2011, 10:30 PM

Just got kicked by anthchecker for a "hacked" NPLoaderLL_v16b.so. However, the file is the official one downloaded from http://utgl.unrealadmin.org/NPLoader/

Screenshot: http://www.rork.nl/images/Shot0211.bmp
MD5Sum: 1a31043c009a027c986ebb76138d2b2d

Log:

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : Rork
### - Player IP :
### - Player OS : Linux
### - EngineVer : 436
### - RenderDev : OpenGL OpenGLDrv.so
### - RenderVer : UTGLR Linux v3.1 OpenGL Renderer
### - RenderChksm : D2A484BFA450CF94D2678D9531949CDF
### - RenderSize : 240784 bytes
### - TimeStamp : 24-09-2011 15:03:16
### ----------------- Additional information -----------------
### - GUID :
### - guid Valid : True
### - KickType : 9
### - AnthChecker : v1.38 (Build 1)
### - Reason : Client loaded an illegal library! (hacked)
### - File : NPLoaderLL_v16b.so
### - Checksum : fe0b0d3ac400b944a2e9f4ab94a3bbe0
### - Ident : HACKED - Unknown Package
### -------------------------------------------------------------

Shimano

8th January, 2012, 11:06 PM

Hi guys, just started a ut 99 server, could anybody post a working link with the latest anthchecker ? Thanks loads and happy new year to all !

nighttripper

10th January, 2012, 02:01 AM

Isn't it at the start of this thread?

Mark

admin

10th January, 2012, 07:12 AM

tuto and files http://unrealtournament.99.free.fr/forum/viewtopic.php?f=9&t=99

zavateandu

10th January, 2012, 06:40 PM

true or not!
### Error while reporting a cheating attempt (Code 1 - K.Colic7979)
### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : K.Colic7979
### - Player IP :
### - Player OS : Windows
### - EngineVer : 451
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : Unknown Renderer
### - RenderChksm : 2DC6ADA9B0F800A8F26EF2E3DB5EDC9A
### - RenderSize : 84480 bytes
### - TimeStamp : 10-01-2012 12:09:33
### ----------------- Additional information -----------------
### - GUID : _0
### - guid Valid : False
### - KickType : 4
### - AnthChecker : v1.38 (Build 8)
### - Reason : Possible hack in renderdevice
### -------------------------------------------------------------

## Error while reporting a cheating attempt (Code 1 - goatselover)
### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : goatselover
### - Player IP :
### - Player OS : Windows
### - EngineVer : 451
### - RenderDev : OpenGL OpenGLDrv.dll
### - RenderVer : UTGLR v3.5 OpenGL Renderer
### - RenderChksm : B542C2734C89EFFDF31BA2E7B016D1FC
### - RenderSize : 243712 bytes
### - TimeStamp : 10-01-2012 12:13:28
### ----------------- Additional information -----------------
### - GUID : _0
### - guid Valid : False
### - KickType : 9
### - AnthChecker : v1.38 (Build 8)
### - Reason : Client loaded an illegal library! (hacked)
### - File : D3D9Drv.dll
### - Checksum : 14a8e8bc8788ca7f26207b9d49f75255
### - Ident : HACKED - Unknown Package
### -------------------------------------------------------------

qwerty

7th February, 2012, 02:49 PM

uggh players keep getting kicked from my server even after i allow the package :( heeeelp pls

Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : UT v436 D3D Renderer - Std/No Delta
### - RenderChksm : FE0656E088236E2F1F1D2195D0AF7040
### - RenderSize : 217088 bytes
### - TimeStamp : 02-02-2012 19:01:10
### ----------------- Additional information -----------------
### - GUID : [ZMRe77>69eee7:8458_1877800454
### - guid Valid : True
### - KickType : 9
### - AnthChecker : v1.38 (Build 10)
### - Reason : Client loaded an illegal library! (hacked)
### - File : NPLoaderLL_v16c.dll
### - Checksum : ca7d1cf158def42d7171cc21f3c05947
### - Ident : HACKED - Unknown Package