It's been stated like 6 times that it logs ANY injection, not just the ones listed in the enc. Renaming isn't going to do shit. Please reread the opening post of this thread.
About banwaves.
09/20/2012 08:12
Daiisama#106
09/20/2012 09:13
кev#107
GG has nothing to do with this, the reason why ESTsoft went with this crap approach is because GG itself doesn't cut it since it doesn't have any of the finer feats of the modern anticheats. It just basically relies on it's aggressive hooking and prevention of monkeypatching. It does a decent job protecting the executable while it's running but it's all in vain since there's a small window to do whatever you wish with the the game before the GG boots up.Quote:
It's been stated like 6 times that it logs ANY injection, not just the ones listed in the enc. Renaming isn't going to do shit. What's in the ENC is just a compilation of dlls, everyone who gets banned using w/e dll regardless of if it's one you made yourself, will likely get added to that file at a later date. Please reread the opening post of the thread. Someone is going to just have to break the send function or alternately, send false reports that all is well, which would mean breaking the injection detection. Likely, someone will first make one that doesn't send the report at all, then Cabal will make it so one has to be sent, at which point someone will make the second. The first one, you guys might have hacks again pretty soon, but eventually it'll get patched then the public hacking scene for cabal is going to be dead, aside from 5 minute bypasses. Eventually, someone will make a full bypass for GG, and enable the other method for getting around it. Thus solving the problem for the private hacking community. So at some point, the public hacking scene will be screwed.
CabalPocalypse 2013!
I could be wrong too. I'm pretty new to Cabal.
All in all, this is a really half-assed solution and it doesn't require much effort to get under the radar again. I won't go public with it though since the recent releases are the very reason why we are in this point in the first place but I'm pretty confident there's at least few other people on this forum who can think of multitude of ways to get past this.
09/20/2012 09:26
xHitmanReborn#108
well if you are using cheat don't expect that your account don't get banned there goes the saying "use it on youre own risk" :D
and i think the solution for you so you don't get banned is account transfer cause when they release before the list of the user of DP hack that get banned i transfer my account cause im on the list then im free as a bird :D
and i think the solution for you so you don't get banned is account transfer cause when they release before the list of the user of DP hack that get banned i transfer my account cause im on the list then im free as a bird :D
09/20/2012 11:58
PoiSonTouch#109
i already know this coz one of my account ban, one thing i know not to ban is when your game client autoclosed 2 times using with cheat , check your Gameguard folder if you see there's is zip/rar files of gameguard including date (ex. gameguard9-20-12.rar) DELETE it, or else you will ban within a certain days.... good luck..... hope it help....
09/20/2012 14:18
drax189#110
deleting that rar 100% helps?
09/20/2012 15:28
testtestOO1#111
i xtractd it b4 i delete d ncriptd folder & found .erl files, 1st time to do this... iv been using hacks for quite sometime & all accounts still kicking as of now...Quote:
(off topic?) could anyone teach how to decode *.erl files, i want to learn more about these GG files... tnx.
09/20/2012 19:32
feliz009#112
this could help.. its not easy to reverse something .... Reverse engineering - Wikipedia, the free encyclopediaQuote:
(off topic?) could anyone teach how to decode *.erl files, i want to learn more about these GG files... tnx.
09/20/2012 19:46
Daiisama#113
Ah. I didn't know about the small window.Quote:
All in all, this is a really half-assed solution and it doesn't require much effort to get under the radar again. I won't go public with it though since the recent releases are the very reason why we are in this point in the first place but I'm pretty confident there's at least few other people on this forum who can think of multitude of ways to get past this.
09/20/2012 21:23
кev#114
I don't think there's a public tool for decrypting the erls, at least not one that I know of. And reverse engineering GG is a pretty tedious task; Themida is a bitch to work with and the important parts of GG are neatly protected in one way or another (heavily obfuscated, virtualized, etc).Quote:
No offense but it's not a task for you unless you've got extensive RE background.
09/20/2012 21:51
feliz009#115
why dont i have any zip or rar file in mine? and still got banned :confused:Quote:
WinXP sp3 cabal EU
09/20/2012 22:35
inssider#116
From what I've read so far, I understand that renaming dll is not a solution.
This makes me think that,they can detect every injected dll and take a hash of it,comparing that hash with the blacklisted dlls hash.
if there is a match....
Even if it were so, I am sure it is a way to solve this.
Investigation in progress...:p
This makes me think that,they can detect every injected dll and take a hash of it,comparing that hash with the blacklisted dlls hash.
if there is a match....
Even if it were so, I am sure it is a way to solve this.
Investigation in progress...:p
09/21/2012 00:00
joxof#117
1. maybe cabalmain scans all injected .dll's (to take a hash of it) and sends log files to them ,comparing that hash with the blacklisted [below /B/;] dlls hash
2. maybe this solution works --> xxxxxxxxxxxxxxx
3. i really hope old Cabal closed and then Cabal 2 released :D
2. maybe this solution works --> xxxxxxxxxxxxxxx
3. i really hope old Cabal closed and then Cabal 2 released :D
09/21/2012 00:11
inssider#118
Or maybe change up some data within the .dll so that the hash of the file changes?
09/21/2012 00:56
кev#119
Wat? You are still speaking as if Gameguard has something to do with the newfound antihack measures of the cabalmain. Do people pay any attention on what's been previously discussed in this thread?Quote:
And dl.enc's still NOT a log file so what's the point of ro?
09/21/2012 02:27
pptJR#120
Is this banwave already affecting ph version? I have a lot of dlls under /B/ and still my accounts are active. Not that I want to be banned, just curious if there is still enough time to save those accounts from being banned.:D