A.V.A. Suspicious Program Bypass?

I've been thinking about this. What if you put your hacks on a USB. And start them from there?

Won't work. Most Anticheats try and find changes in the game's code or hooks instead of looking for a suspicious file

Originally Posted by Horror

Won't work. Most Anticheats try and find changes in the game's code or hooks instead of looking for a suspicious file

Will work. If he puts a special permissions and doing something (shouldn't be known so ) -I don't know how USB works anyway-

Originally Posted by Frought

Will work. If he puts a special permissions and doing something (shouldn't be known so ) -I don't know how USB works anyway-

I tested it with an old detected macro by @wGRWGHWGRERGrgergergrg and XIGNCode found it. I think it checks the actual running process, not the file itself, so it doesn't matter how you separate the macro and AVA, XIGNCode will catch it.

Originally Posted by Horror

Won't work. Most Anticheats try and find changes in the game's code or hooks instead of looking for a suspicious file

XIGNCode checks for programs that affect keyboard and mouse input too because of macros.

Originally Posted by asqapro

This is how XINGCode operates:

Originally Posted by zZzeta/S

****** Open Handles can lead to a scan, random scans, strings, writing to read only pages, IAT(Import Address Table), Peb(linked modules), Splicing hooks also known as detours, and signatures

Static: Fileinfos in combination with size, strings(pdb path for ex), IAT.

Catch-on Scans: Xigncode stores some detections in temp under a random file with dll extension, mui cache.

Originally Posted by asqapro

I tested it with an old detected macro by @wGRWGHWGRERGrgergergrg and XIGNCode found it. I think it checks the actual running process, not the file itself, so it doesn't matter how you separate the macro and AVA, XIGNCode will catch it.

Well, I said there is another thing to do. Not only using it with the first one. I can run anything detected as I want without XC catching it even though I don't want to run anything detected. But as I said again I don't know anything about USBs so.

Originally Posted by asqapro

XIGNCode checks for programs that affect keyboard and mouse input too because of macros.

Even macros are possible. You can do one of these:
1-Spoofing the return address of GetAsyncKeyState.
2-Using an alt method of using keyboard like LLKBDHK or whatever that is undetected.

Originally Posted by Frought

Even macros are possible. You can do one of these:
1-Spoofing the return address of GetAsyncKeyState.
2-Using an alt method of using keyboard like LLKBDHK or whatever that is undetected.

I'm not that good yet. I'm getting there though.

I don't actually use GetAsyncKeyState, I use GetKeyState. Aeria has most of my source for my macros tho, they're just too lazy to add them to XIGNCode's detection list.

Originally Posted by Frought

Will work. If he puts a special permissions and doing something (shouldn't be known so ) -I don't know how USB works anyway-

Originally Posted by Riddick

Again breaking rules. Also I can report you for flaming me but I won't be a kid like you. By the way you don't even know what I am talking about. Why? Because you don't understand ABC program code. C&P works flawlessly for you.

Originally Posted by Frought

ABC program code

WTF is ABC Program Code???? Dude.. grow up and get a life for fucks sake and stop acting like a nine year old kid. Who gives a fuck anyway!!!

Originally Posted by Riddick

WTF is ABC Program Code???? Dude.. grow up and get a life for fucks sake and stop acting like a nine year old kid. Who gives a fuck anyway!!!

Who should grow up? I am saying that to you because you said Neox is a noob that's why I said you are a kid and cannot even code. At least he is more better than you in coding.

You're more like 30ish but you act like 5.

Originally Posted by Frought

Who should grow up? I am saying that to you because you said Neox is a noob that's why I said you are a kid and cannot even code. At least he is more better than you in coding.

You're more like 30ish but you act like 5.

Originally Posted by Frought

Again breaking rules. Also I can report you for flaming me but I won't be a kid like you.

And you going off-topic like this is reportworthy aswell.
Now could you please man up and focus on the topic at hand ?

A.V.A. Suspicious Program Bypass?

Post a Reply

Similar Threads

Tags for this Thread