TommyDOU
27th August, 2007, 09:28 PM
Here are 2 that are slightly different, but some observations after:
### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : xxxxxxxx
### - Player IP : xx.xx.xx.xxx
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : UT v436 D3D Renderer - Alternate/GOTY
### - RenderChksm : 1BA51598B5D506026A479FA92B94A278
### - RenderSize : 217088 bytes
### - TimeStamp : 13-08-2007 09:17:00
### ----------------- Additional information -----------------
### - GUID : edW\oDEHAoAB=@<hidden>=B@<hidden>@<hidden>@<hidden>@<hidden>
### - GUID Valid : True
### - KickType : 6
### - AnthChecker : v1.37 (Build 1)
### - Reason : Illegal checksum received (possible bytehack)!
### - File : Female2Voice
### - Checksum : -556950564
### - StdChecksum : 1376363031
### - FileSize : 712668
### - Status : T / T / T / F
### -------------------------------------------------------------
### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : xxxxxx
### - Player IP : xx.xx.xxx.xx
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Software Rendering SoftDrv.dll
### - RenderVer : UT v436 Soft Renderer
### - RenderChksm : C36BA2C34835BDB71AD7806D2EA1DD8C
### - RenderSize : 389120 bytes
### - TimeStamp : 22-08-2007 01:26:41
### ----------------- Additional information -----------------
### - GUID : qpch{PQTM{NMILTINLLS{NNVLLVOO{R9486_1728267868
### - GUID Valid : True
### - KickType : 7
### - AnthChecker : v1.37 (Build 1)
### - Reason : Illegal checksum received (bytehack)!
### - File : BossSkins
### - Checksum : 499453929
### - StdChecksum : -1129889519
### - FileSize : 1867811
### - Ident : HACKED - BossSkins - Ref 2
### - Status : T / F / F / F
### -------------------------------------------------------------
I am new to reading these logs, but my observation is that one says "possible byte hack" and the other "byte hack." But what I notice more is that one has very specific info in the "Ident" line where the other doesn't.
I am new to reading these logs but I am thinking that the first log is saying "This could be a hack but we just don't know" and the second is saying "We know something specific about this one." So I would think that the response will be that the first could be a cheat or it could be a false possitive, keep an eye on 'em. As for the second, I post to see what "ref 2" means.
Correct?
Thanks,
{DOU}Tommy
### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : xxxxxxxx
### - Player IP : xx.xx.xx.xxx
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Direct3D D3DDrv.dll
### - RenderVer : UT v436 D3D Renderer - Alternate/GOTY
### - RenderChksm : 1BA51598B5D506026A479FA92B94A278
### - RenderSize : 217088 bytes
### - TimeStamp : 13-08-2007 09:17:00
### ----------------- Additional information -----------------
### - GUID : edW\oDEHAoAB=@<hidden>=B@<hidden>@<hidden>@<hidden>@<hidden>
### - GUID Valid : True
### - KickType : 6
### - AnthChecker : v1.37 (Build 1)
### - Reason : Illegal checksum received (possible bytehack)!
### - File : Female2Voice
### - Checksum : -556950564
### - StdChecksum : 1376363031
### - FileSize : 712668
### - Status : T / T / T / F
### -------------------------------------------------------------
### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : xxxxxx
### - Player IP : xx.xx.xxx.xx
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Software Rendering SoftDrv.dll
### - RenderVer : UT v436 Soft Renderer
### - RenderChksm : C36BA2C34835BDB71AD7806D2EA1DD8C
### - RenderSize : 389120 bytes
### - TimeStamp : 22-08-2007 01:26:41
### ----------------- Additional information -----------------
### - GUID : qpch{PQTM{NMILTINLLS{NNVLLVOO{R9486_1728267868
### - GUID Valid : True
### - KickType : 7
### - AnthChecker : v1.37 (Build 1)
### - Reason : Illegal checksum received (bytehack)!
### - File : BossSkins
### - Checksum : 499453929
### - StdChecksum : -1129889519
### - FileSize : 1867811
### - Ident : HACKED - BossSkins - Ref 2
### - Status : T / F / F / F
### -------------------------------------------------------------
I am new to reading these logs, but my observation is that one says "possible byte hack" and the other "byte hack." But what I notice more is that one has very specific info in the "Ident" line where the other doesn't.
I am new to reading these logs but I am thinking that the first log is saying "This could be a hack but we just don't know" and the second is saying "We know something specific about this one." So I would think that the response will be that the first could be a cheat or it could be a false possitive, keep an eye on 'em. As for the second, I post to see what "ref 2" means.
Correct?
Thanks,
{DOU}Tommy