[RELEASE] Anti hacker | anti cheat Dekaron.exe | Critical Games

[dezinho1]

Uploaded with

I'm sorry for my english using google translator a moderator please edit the post for better understanding.

Hello everybody Eliepvpers began attending this forum 2 weeks ago and saw that plays absolutely no stake in that category.
The area of Dekaron was kinda dead without a new release i decided to put this ..
Come in interece ..

Programs used in Visual Studio 2010, OllyDbg, LordPE.

Used programming {# source code c + +}

hacker sample programs that are protecting dekaron.exe.

# MultiHacks.exe
# Gm_hack.exe
# + + ¡¼ ÔÇöÔÇØ |-|+¼-|-| OC 3 OC +½-|-|+¼ +¼-|+ ô × - ¡. exe
# Xelerator
# SpeederXP V2.63
# Auto keybord
# DekaronTrainer
# GM Mode By CEE202
# Hide Toolz 2.1
# HideToolz
# Trade Runner
# Cheat Engine 5.0
# Cheat Engine 5.1.1
# Cheat Engine 5.1
# Cheat Engine 5.1
# Cheat Engine 5.2
# Cheat Engine 5.2
# Cheat Engine 5.2.2
# Cheat Engine 5.3
# Cheat Engine 5.3
# Cheat Engine 5.4
# Chear Engine 5.4
# Cheat Engine 5.4
# Cheat Engine 5.5
# Cheat Engine 5.5
# Cheat Engine 5.5
# Cheat Engine 5.6
# Cheat Engine 6.0

Cheats and 1000 in Add \ database for anti hacker games online.

Details.

Adicinais anti hidden process

CRC 32 added in the / CLGAMES

antibypass.clgames

CheckSum_.clgames

sistemhacker.clgames

splash.bmp (Warning do not change may not change imgem crete
any change in the splash.bmp dekaron.exe not seen will be executed)

Dekaron.exe was encrypted so can not make or change a file

well I'll update this post who has always hacker programs that do not want your jogodores your server ultilize post a link to down load it here that I'll update the post with the hacker locked

Credits: Dèéh Or dezinho01 or André .. kk I

[911Hacker]

I don't have a use for it, but its nice to see releases. Organized post as well.

Thanked

[҉ THT ҉]

Can I see the source code?
I want to know; is your AC watching the ps list?

[Decima]

couldnt they just replace the dekaron.exe?

[badboyfuck]

File name:
Bin.rar
Submission date:
2011-03-18 20:33:54 (UTC)
Current status:
queued queued analysing finished



Antivirus Version Last Update Result
AhnLab-V3 2011.03.19.00 2011.03.18 -
AntiVir 7.11.5.1 2011.03.18 PCK/Repacked
Antiy-AVL 2.0.3.7 2011.03.18 -
Avast 4.8.1351.0 2011.03.18 -
Avast5 5.0.677.0 2011.03.18 -
AVG 10.0.0.1190 2011.03.18 -
BitDefender 7.2 2011.03.18 -
CAT-QuickHeal 11.00 2011.03.18 -
ClamAV 0.96.4.0 2011.03.18 PUA.Packed.MoleBox.2X
Commtouch 5.2.11.5 2011.03.18 W32/Themida_Packed!********
Comodo 8027 2011.03.18 -
DrWeb 5.0.2.03300 2011.03.18 -
Emsisoft 5.1.0.2 2011.03.18 -
eSafe 7.0.17.0 2011.03.17 Suspicious File
eTrust-Vet 36.1.8223 2011.03.18 -
F-Prot 4.6.2.117 2011.03.18 W32/Themida_Packed!********
F-Secure 9.0.16440.0 2011.03.18 -
Fortinet 4.2.254.0 2011.03.18 -
GData 21 2011.03.18 -
Ikarus T3.1.1.97.0 2011.03.18 -
Jiangmin 13.0.900 2011.03.18 -
K7AntiVirus 9.94.4145 2011.03.18 -
Kaspersky 7.0.0.125 2011.03.18 -
McAfee 5.400.0.1158 2011.03.18 Artemis!35D3D36FC1C5
McAfee-GW-Edition 2010.1C 2011.03.18 Artemis!35D3D36FC1C5
Microsoft 1.6603 2011.03.18 -
NOD32 5967 2011.03.18 -
Norman 6.07.03 2011.03.18 SDBot.gen9
nProtect 2011-02-10.01 2011.02.15 -
Panda 10.0.3.5 2011.03.18 Trj/Thed.A
PCTools 7.0.3.5 2011.03.17 -
Prevx 3.0 2011.03.18 -
Rising 23.49.04.05 2011.03.18 -
Sophos 4.63.0 2011.03.18 -
SUPERAntiSpyware 4.40.0.1006 2011.03.18 -
Symantec 20101.3.0.103 2011.03.18 WS.Reputation.1
TheHacker 6.7.0.1.151 2011.03.18 -
TrendMicro 9.200.0.1012 2011.03.18 PAK_Molebox
TrendMicro-HouseCall 9.200.0.1012 2011.03.18 PAK_Molebox
VBA32 3.12.14.3 2011.03.18 -
VIPRE 8745 2011.03.18 -
ViRobot 2011.3.18.4364 2011.03.18 -
VirusBuster 13.6.256.1 2011.03.18 -

[blowup2]

I dont wanna be rude, but... i can use ce 6.0 in your server... it detect the cheat but not close the client, just alert about the hack...^^ also.. its really easy to bypass....

[Zektor]

Lol, he probably made a messagebox come in before he tried to exit the process, and because of that it doesn't close the client (since it's being run on one thread).

[dezinho1]

҉ THT ҉

Yes you can see by TeamViewer?

Mada mp with your skype or msn ..

------------------------------------------------------

blowup2
Yes yes .. in my server for I forgot to put the class
TerminateProcess (hProcess, 0); to complete the process of hacking
and:: ExitProcess (0); process to finalize the game ..
more if you test this and I posted more simple jah is fixed
this week I'll be updating my server even without much understanding of Dekaron. and cast a hacker server Dekaron
I can banish it ip, serial, hd, mac network card
tb server by the hacker will send packets to the filtered WepPro chaet engine and sends it to server and Dekaron who try dekaron.exe Connect with no client side will disconnect
is missing so I set it on windows 64 bits that are not Connect server side with client side.

[҉ THT ҉]

But why shouldnt hacker replace your dekaron.exe?
you should inject a .dll in your exe that send packets to your server before player can login...

EDIT: I know that is easy to bypass too, but it makes a lil harder/.

[Decima]

OMG,

for real, all they have to do is use a different dekaron.exe and its bypassed!!

[Zektor]

Easiest way patching hacks (which by all means bypassable) is to add a simple CRC check over memory where people usually tend to modify, and then make it send a special packet, or input data onto a private webpage... :P

Edit:
You can use the boost lib to generate a CRC over the game's specified memory region

[Pyro1223]

Completely failed anti-hack... For a start its infested with viruses so i've reported this thread. Secondly its so easily bypassed its unbelievable, all you need to do is replace the dekaron.exe with any other dekaron.exe you like! I seriously couldnt believe that i saw someone try to stop hackers with a protected exe, possibly the most uberfail i've seen in a long time.

My best tip to anyone out there trying to stop hackers would be;
1: Pack your client,
2: Do NOT setup an updater (people can log the incomming packets to unpak your data.pak). Yes this means a new client when you want to release updates but just store them up and release bulk updates...
3. Protect the data.pak so that if opened or edited the file deletes itself. I've seen this done using the data.hd.

[4the]

Thx for sharing.
It seems be useful.

[Pyro1223]

Originally Posted by 4the

Thx for sharing.
It seems be useful.

Its not usefull at all. Download it if you'd like the easiest anti-hack to bypass i've ever seen and the virus thats imbeded into the file...

[Zektor]

Originally Posted by Pyro1223

Completely failed anti-hack... For a start its infested with viruses so i've reported this thread. Secondly its so easily bypassed its unbelievable, all you need to do is replace the dekaron.exe with any other dekaron.exe you like! I seriously couldnt believe that i saw someone try to stop hackers with a protected exe, possibly the most uberfail i've seen in a long time.

My best tip to anyone out there trying to stop hackers would be;
1: Pack your client,
2: Do NOT setup an updater (people can log the incomming packets to unpak your data.pak). Yes this means a new client when you want to release updates but just store them up and release bulk updates...
3. Protect the data.pak so that if opened or edited the file deletes itself. I've seen this done using the data.hd.

Packing your client isn't really security. Any client can be unpacked the only security I've seen is people renaming their pak'd files into something else so they can't unpack it. You can still accomplish memory based cheats easily.

In order to protect against that you would need to check the integrity of memory (via CRC on specific memory regions). Of course this wouldn't apply to dynamic pointer memory (e.g. buffers)