Register for your free account! | Forgot your password?

Go Back   elitepvpers > Aion > Aion Main - Discussions / Questions
You last visited: Today at 01:45

  • Please register to post and access all features, it's quick, easy and FREE!

 

Aion Launcher detects Bots !

Reply
 
Old   #1
 
elite*gold: 0
Join Date: May 2004
Posts: 250
Received Thanks: 70
Exclamation Aion Launcher detects Bots !

The NCSoft launcher is detecting the bots not the Aion client itself (so why aren't you closing it after starting Aion?) this is a list of modules and what they are doing:

<ScanRemoteProcesses>

Check the memory area of the game using a CRC checksum to detect any writes to memory if a memory write is detected then the account is instantly flagged. The CRC checksum is stored in the NCSoft launcher so to successfully memory write Aion you would need to update the client "aion.bin" and the NCSoft launcher at the same time either way its to risky don't use memory writing!

Check for loaded modules into the "aion.bin" this is checking for anything that has been injected into the client it CRC checks all known modules and flags for any unknown modules.

<ScanCurrentProcess>

Checks the names of every running process on the system it then recursively checks all parent and child window names for known strings most are Chinese there are also a few references to AionSz and to the damncheaters client. If this manages to spot anything it spawns a small window with the title "Bot Detected" and the message of the prompt is collected from the server.

My testing with a packet editor I was able to filter out the message to the server using a combination of wpepro and wireshark this is what i learnt from my testing:

<ScanRemoteProcesses> runs about every half hour I made a small application in vb.net to inject my location into the game it basically made the character walk around in circles using eight coordinates, I did this in an area with know one around and after a few minuets the game sent the packet that was stoped by my filter and then logged me out and displayed this message:

We are sorry but this account does not currenly have access to Aion. Your account has been suspended because you breached the Aion game service agreement or the company's operation policy. For more information about the account suspension, contact us by visiting the cusomer center on the plaync website () or by calling the customer center [1 (512) 498-4099].

I closed this and tried to login and was able to so at this point I'm happy I know how to stop the flag packet the next test was injecting a module I had no idea how to do this so I had a friend make one for me that just changed the Aion window name to the time injection was successful and the account flag packet was sent again spawning the same message above.

The third test was testing the window name detection I made a vb.net application with the same process name as AionSz bot and left it open ... nothing happened so i tried some more playing around and after about an hour i discovered that the only way to spawn the process checker was to /AutoHuntReport myself after just one report the process started the flag packet was sent (and stopped) and a message box spawned from the client "Bot Detected" no message I had filtered that out.




I retried this test with a random process name and a window name it did not like and then again with a random process name and a child name it did not like and both times it was able to detect it, this means that the random naming system (where you choose what macro goblin is called at the start) is not a perfect way around the detection system.

I would suggest that any mod developers use randomly generated window names and put the title of there mod as a label below the window name as this is more secure for future updates!

Finally seen as my sister do sent play Aion any more I decided to see what the packet i had been blocking actually does to an account please note that I did none of my testing on this account its never had kinah or power levelling or botting and was a perfectly legit account. After sending the packet the account went from being logged in to logged out and this message is displayed.

My login screen: (Note name changed so you can see im not just downloading something from google images you can also see my Aion Goblin forum)

This was almost instant after sending the packet my friend helped me identify as the detection packet.

A side note to all the people who flamed the idea of NCSoft detecting paths, your arguments are the processing power needed the detect this and that the Aion bot leaves the path regularly. My counter argument is its really simple to detect your ignore mobs return routes and it would take very little processing to flag a user who hits 10 coordinates in succession plus the likelihood of this happening to a real player are so small its none existent. But then how do you gather these way points? simple you register an account on a forum like this and download them. Now I'm not saying don't share your way points but i am saying use them for an idea of where to bot and then make your own way points and return paths!

We are looking at one last module that uses an algorithm to check folders for files it does not actually work because the trigger requires an un used variable to be set to true (its un-used this will never happen) but looking into it encase this is something they fix in the future.

Basically and don't hold me to this yet as honestly the algorithm is huge and will take time to work out its looking in %WINDIR% and %ProgramFiles% (these are short paths windows replaces then with actual paths when used for example.

%WINDIR% = C:\Windows
%ProgramFiles% = C:\Program Files

For some files with Chinese names (reassuringly there are no English names in the list) then it starts a process that looks like it would flag the account and spawn a message box different to the "Bot Detected" one this is as far as I have got.

This is the english names checked by the <ScanCurrentProcess> module I haven't bothered with the Chinese ones because I don't believe they work with Aion EU/US:

autoCraft
AionKtz
AionSz
Aionmation
AionMono
MMOBro
Nyerkbot
AionGrind
Pete's AION Radar
NoFap
AngelBot
AionGather
AionBot
justBOTTinG
AutoAion
FarmBot
DamnCheaters
MMOGuider
MMO Guider

greetings Hank



hankchinaski is offline  
Thanks
2 Users
Old   #2
 
elite*gold: 0
Join Date: Oct 2009
Posts: 25
Received Thanks: 0
hmm r u sure? cuz i use my own "bots" on aion and i was not banned yet. but then again i never injected. i think that is the problem and i think most ppl know that injecting will cause ban. i also use "Pete's AION Radar" quite alot and i havent received any warnings yet.


Loraine is offline  
Old   #3
 
elite*gold: 0
Join Date: Oct 2004
Posts: 557
Received Thanks: 185
Has been identified as fake info. there is a scan routine in the aion client itself. Some parts of it are active, some parts aint. The botlist is not correct. Some of the bots listed aint detected - including ours.
Itburnz is offline  
Old   #4
 
elite*gold: 0
Join Date: Nov 2007
Posts: 64
Received Thanks: 4
LOL now this piece of **** is going to spread just as any internet hoax.


ricsiq is offline  
Old   #5
 
elite*gold: 0
Join Date: May 2004
Posts: 250
Received Thanks: 70
Quote:
Originally Posted by Itburnz View Post
Has been identified as fake info. there is a scan routine in the aion client itself. Some parts of it are active, some parts aint. The botlist is not correct. Some of the bots listed aint detected - including ours.

i'd say the same if i were you :-)
hankchinaski is offline  
Old   #6
 
elite*gold: 0
Join Date: Nov 2004
Posts: 1,160
Received Thanks: 38
Too bad this is BS! i never started Aion with the Launcher and got Banned
mx0 is offline  
Old   #7
♥ Yuuki Asuna ♥
 
elite*gold: 1684
The Black Market: 135/0/0
Join Date: Jun 2005
Posts: 49,159
Received Thanks: 7,417
#moved
DarkOPM is offline  
Old   #8
 
elite*gold: 0
Join Date: Nov 2009
Posts: 9
Received Thanks: 0
Quote:
Originally Posted by mx0 View Post
Too bad this is BS! i never started Aion with the Launcher and got Banned
not possible


Uterus402 is offline  
Reply



« Previous Thread | Next Thread »

Similar Threads
AION Launcher Problem
Hey Com. Mein Freund und ich wollten zusammen auf einem AION P-Server spielen, und haben uns dann alle Dateien runtergeladen. Alles installiert und...
7 Replies - Aion Main - Discussions / Questions
Aion Launcher?
Hi hab da eine frage und zwar: wie mache ich einen Launcher.exe für Aion? hab mir Visual Studio 2008 geladen weil es angeblich mit dem gehen...
40 Replies - Aion Main - Discussions / Questions
Aion Launcher
Huhu, Ich brauche mal einwenig hielfe! Ich habe mir mit mühe den Aion Clinet rutergeladen und Insterlliert, nun wollte ich es Starten um zu...
2 Replies - Aion Main - Discussions / Questions
Aion Shortcut launcher !!!!
ok people probably a lot of you have this problem ....i really dont wanna redownload the whole game again. this is chinese OBT. i copied aion to...
2 Replies - Aion Main - Discussions / Questions



All times are GMT +2. The time now is 01:45.


Powered by vBulletin®
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.

Support | Contact Us | FAQ | Advertising | Privacy Policy
Copyright ©2017 elitepvpers All Rights Reserved.