NEW HACKSHILED THEORY!

[wilsonlam97]

Why don't we replace Hackshield with the one from Maplestory! Then it won't detect CA hacks!

[Corndog]

i tried a thing where i replaced the hackshield with an old version of it, from like 5 patches ago, and set it to read only.
and denied the system any access at all. but somehow it was still able to update hackshield to the newest version.

there are private servers for CA???

[moho401]

??????????????????? the private servers dont use a hack shield -,-

[wilsonlam97]

I got this idea when I saw the Hackshield logo at my friends place when he was playing MS.

[User1]

It will return a few thing:

Fail to update protection modules.
Error 202 files corrupted.
And some other Errors.


Here is some proof it checks itself:

[02:02:27.303][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:02:27.303][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:02:27.319][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:02:27.319][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(a4b44d36) ulReserved1(100000), ulReserved2(0)
[02:03:12.310][00001418] [HookFreeCode][RestoreCounterfeitPage] The Page was Restored Target :   0x6D114BC8 : 0x4519F3E9, 0x8B184D8B
[02:03:12.310][00001418] [HookFreeCode][RestoreCounterfeitPage] The Page was Restored Target :   0x6D114BCC : 0x8B5014F6, 0x8B501455
[02:03:24.946][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:03:24.946][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:03:24.961][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:03:24.961][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(d47abd5f) ulReserved1(100000), ulReserved2(0)
[02:03:43.198][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:03:43.198][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:03:43.213][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:03:43.213][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(26d55526) ulReserved1(100000), ulReserved2(0)
[02:04:02.105][00001418] [NanoScan][CmpSignature] Raise exception = Access Violation: read on memory 0x7688934A at 0x1001CADA[EHSvc.dll baseaddr:10000000]EAX=00000000 EBX=0876D6BD ECX=00000006 EDX=00000000 ESI=7688934AEDI=00000000 EBP=0A61F548 ESP=0A61F2CC EIP=1001CADA FLG=00010246CS=0023  DS=002B  SS=002B  ES=002B FS=0053  GS=002B
[02:04:04.944][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:04:04.944][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:04:04.960][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:04:04.960][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(fa90471e) ulReserved1(100000), ulReserved2(0)
[02:05:04.942][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 60

Notice it Hashes itself... Also the calls to execute and successful hacksheild update are different.

[moho401]

/close its resolved cant do it

[Grim]

It will return a few thing:

Fail to update protection modules.
Error 202 files corrupted.
And some other Errors.


Here is some proof it checks itself:

[02:02:27.303][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:02:27.303][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:02:27.319][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:02:27.319][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(a4b44d36) ulReserved1(100000), ulReserved2(0)
[02:03:12.310][00001418] [HookFreeCode][RestoreCounterfeitPage] The Page was Restored Target :   0x6D114BC8 : 0x4519F3E9, 0x8B184D8B
[02:03:12.310][00001418] [HookFreeCode][RestoreCounterfeitPage] The Page was Restored Target :   0x6D114BCC : 0x8B5014F6, 0x8B501455
[02:03:24.946][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:03:24.946][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:03:24.961][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:03:24.961][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(d47abd5f) ulReserved1(100000), ulReserved2(0)
[02:03:43.198][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:03:43.198][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:03:43.213][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:03:43.213][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(26d55526) ulReserved1(100000), ulReserved2(0)
[02:04:02.105][00001418] [NanoScan][CmpSignature] Raise exception = Access Violation: read on memory 0x7688934A at 0x1001CADA[EHSvc.dll baseaddr:10000000]EAX=00000000 EBX=0876D6BD ECX=00000006 EDX=00000000 ESI=7688934AEDI=00000000 EBP=0A61F548 ESP=0A61F2CC EIP=1001CADA FLG=00010246CS=0023  DS=002B  SS=002B  ES=002B FS=0053  GS=002B
[02:04:04.944][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:04:04.944][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:04:04.960][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:04:04.960][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(fa90471e) ulReserved1(100000), ulReserved2(0)
[02:05:04.942][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 60

Notice it Hashes itself... Also the calls to execute and successful hacksheild update are different.

put that one over top of the one from MS and see if that'll work

[Corndog]

thanks user1. thats what i was trying to say, but i didnt have the programs to look at that kindof stuff.

/Close

[[MPGH]Luke420]

fuck fuck there has to be a way fer fuck like come on we are mpgh ffs we own

[Bombsaway707]

It sux even if u get a working bypass hack shield just shuts down CA just for injecting a .dll