PDA

View Full Version : So Is Drewpaul Detected Now ?


Cardiel
28th May 2005, 22:27
My mate was kicked from a server due to a multihack,

and ive been hearing that drewpauls retlock is now detected.


Is this true or what ?

sorry if its already been posted.

DotProduct
28th May 2005, 23:55
everything public i beleive is currently detected

C-X
29th May 2005, 00:06
lion's ret. is still undetected i think drew's is too but if you put it
in your rvs folder you will get kicked/banned

edit:
i know its off topic but its not worth starting a new thread
and this one is kinda useless so
i just got little question...
-Can you bind a key to a console command???
Thx in advance
:rambo:

frikos
29th May 2005, 00:35
to your offtopic question, ingame for example you can type

set input {key} {command}

for example:
set input f1 autoaim

if you want to do it through uscript i would admit the keyevent

C-X
29th May 2005, 00:38
ok thx thats all i wanted to know
now i can bind my speedhack to a key lol

us-dexter
29th May 2005, 01:33
Yes DrewPaul is DETECTED now! Lion is NOT!

C-X
29th May 2005, 12:47
Problem solved...finnaly lol
this topic is useless now C-L-O-S-E I-T
LOl ;)

GLoGG
29th May 2005, 13:16
Problem solved...finnaly lol
this topic is useless now C-L-O-S-E I-T
LOl ;)

Im ****ing confused now first u guy's say drew's is undetected and lions is now its lions is undetected and drews is detected..... dude just try the things in pb and see if u get kicked -.-

C-X
29th May 2005, 13:38
drew's is detected lions isnrt
the ones who got kicked with lions must have placed em in there system folder :cheeky:

Cardiel
31st May 2005, 17:52
Yerh ok thanks,


need a new bloody CDKEY yet again now :@ grrrg !


where can i get hold of lions ?

tif.XGotchaX
31st May 2005, 19:40
Hey thinkfire you can us stance down bind in pb servers someone server are not updated so you can not us it in that server this is the bind for stance down (Console)!!!
set input rightmouse (or other key) lowerposture | onrelease raiseposture

allydom
31st May 2005, 23:05
yes lions is detected i know from experiance

us-dexter
1st June 2005, 18:25
lions isn't detected...remove it from your system folder. lol

RuffianSoldier
2nd June 2005, 20:31
^^
I dont play ravenshield without it!

Im thinking of writing a simple program that auto starts RvS than injects it then it closes - so I never have to alt-tab again! :D

Cardiel
6th June 2005, 23:15
Lions is DETECTED !

it isnt in my system folder.

so i dunno why your still sayin its undected when its clearly not.

SiLvErTaR
6th June 2005, 23:27
um then you need to get smarter about how you do it then cause i use lions stealth ret lock every damn time i open ravenshield ive play in several servers a day even with the 1.6a configuration and i have no problems what so ever.

RuffianSoldier
7th June 2005, 00:20
Im using it right now...............

Your prolly not using lion's retlock - your using that lionfluid.dll or whatever its called.....

I just tried drewpaul retlock in three different servers - its still undetected

Armagedon13
7th June 2005, 10:02
i'm sorry but retlock drewpaul is DETECTED , from many server , i have been kicken many time for "multi hack" ! ! ! ! ! !


STEALTH retlock stay undetected in all server !!!!!!!!!!!!!!!

SiLvErTaR
7th June 2005, 10:13
dude dont blow a gasket

DyslexicCheater
7th June 2005, 11:05
It's possible that the .DLL version of the hack is detected and the .dat form that was released before it is not, or vice-versa. This is because the game could be looking to see if there are more libraries loaded than there should be, or it could be checking certain memory spaces that may or may not exist with the different variations of the hack.

SiLvErTaR
7th June 2005, 12:42
But why would one work and not the other seeing how they are both injectable DLL files?

RuffianSoldier
7th June 2005, 19:12
Drewpaul isnt detected for me..........

DyslexicCheater
8th June 2005, 10:11
But why would one work and not the other seeing how they are both injectable DLL files?


Are you referring to Lion's Hack and Drew's? Or the two different versions of Drew's?

In reference to the two .DLL based hacks, it's possible they get a different range of memory space allocated to it at each run-time. For example, Drew's might get addresses 700000-800000 each time it's injected into the game but Lion's gets 500000-600000. This is due to the random way in which memory is allocated to new processes and threads of processes. You can get a clue to what happens, callup the Windows NT task manager before injection and check to see how many running threads Ravenshield's process is using. Then after injecting, check again. If it has a new process that means there was a radical change in where it's active memory is running. Also the STL containers that run by default in the OS that all programs have access to (The Heap and Stack, primarily) may contribute to this.

As for the two variations of Drew's hack, injecting a new library with LoadLibrary() will result in radical differences of memory locations than simply over-writing the Game's code.

So, keeping these facts in mind, it is completely possible that the hack could be detected the first time you run it or the tenth time you run it, taking a chance in either case and all those inbetween without PB being updated.

Crazy stuff. A good way to code around this is to use Window's Memory Allocation to one's advantage.

RuffianSoldier
10th June 2005, 03:16
Are you guys leaving teh injector open? PB Scans for it in your memory - if you leave it open PB will find it..............

DyslexicCheater
10th June 2005, 03:59
That can be easily worked around. Hook the injector and change some of it's identifiable attributes, like window caption.

Edit: To change the caption of a window, use a call to SendMessage and use the WM_SETTEXT message.char *NewCaption = "New Window Caption";

SendMessage(FindWindow(NULL, "Window Name"), WM_SETTEXT, 0, (DWORD) &NewCaption);Reference: MSDN Information on "SendMessage()" (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/winui/winui/windowsuserinterface/windowing/messagesandmessagequeues/messagesandmessagequeuesreference/messagesandmessagequeuesfunctions/sendmessage.asp)