EAC Reborn v2 - 3.1.0 bypass (in-depth) [USE AT YOUR OWN RISK]

[SquidVard]

Before i start this i must make this clear: I am not the owner, the op didn't have good instructions so i'm making this text guide

ALSO DO NOT CREATE LOBBIES WITH THIS -- AND WHEN YOU ARE DONE WITH THE BYPASS RESTART YOUR PC

OP: https://www.mpgh.net/forum/member.php?u=799012
Youtuber: -- Refer to this video for a video guide however this text guide SHOULD explain everything.

Manual EAC Bypass - Reborn v2

Prerequisites:

PChunter - https://www.bleepingcomputer.com/download/pc-hunter/ (safe)
Process Hacker 2 - https://processhacker.sourceforge.io/downloads.php (safe)
Bypass: https://www.mpgh.net/forum/showthread.php?t=1402895

1. Rename PCHunter64.exe to something random like "bb.exe"
2. Open it once, then close it
3. Restart PC, yes this is important

Setup:

1. Once your PC has restarted open the renamed PChunter

2. click "kernal module"

Side note: if you scroll to the bottom you should see "[pchuntername]as.sys" then you've done it right.
so if you named your PCHunter64.exe to something like "bb.exe" then it should say "bbas.sys"

3. run "inject.exe" as admin, wait a few seconds then hit enter on the popup

4. right click anything in the "kernal module" section of PChunter then hit REFRESH

5. Scroll to the bottom you should see "WinD64" - right click it then hit "Unload driver"

6. Right click "[pchuntername]as.sys" and then click "Unload Driver"



7. close PChunter entirely

-- the initial steps are complete


Process Hacker:

1. open "Process Hacker 2" as ADMIN

2. a new box should pop up.. near the top it should say "System"

3. another new box should pop up. click "Threads"
side note: after you click threads if every thing is moving
around then just click "Start address"




Bypass steps:

1. Open Dead by Daylight -- good to have it on windowed mode.

2. Let it load entirely, until the point where it says
"press space to continue"
side note: you can and should skip the cutscene.
also if you accidentally go past the menu screen just restart dbd.

3. On the process hunter threads section, scroll down a bit until you see "EasyAntiCheat" things under the "start address" section

4. Highlight them all by clicking them all individually while holding "CTRL"

IMPORTANT NOTE: This is where it gets tricky as it is quite random, sometimes it takes ages for EAC to notice the bypass or it can be instant.


5. Right click the bypass.exe, run as admin...
side note: depending on your settings a box should appear
to ask "yes or no" -- for most people this should happen
as default

6. AS SOON as you click "Yes" on the popup.

right click the highlighted "EasyAntiCheat" threads and hit suspend



Important note: This highly relies on speed but still sometimes it will instantly crash DBD

Side notes:
-- this can take a lot of trial and error
-- but don't worry if you do mess up and it gives you errors
you won't get banned just restart from step "1." of "Bypass steps" section

Important note: If you ever crash and steam says it's still running (for a while) then simply right click the threads and hit "resume"

7. If all goes to plan the threads should be a navy blue and suspended and your game isn't crashed

8. now you can hit space to continue and connect Cheat Engine with no issues.

Have fun :)

Common Errors:

1. Access Denied when trying to suspend the EAC process.
Fix: Run Process hack as admin.. Or if your computer is slow, when you run the bypass.exe wait for the box to pop up.

2. Driver error when opening PCHunter
Fix: Try using the PCHunter32.exe version or fully restart your computer.

if neither of these work try re-download PCHunter from a different source.

-------------------------------------------------------------------------------------
Solution for those of you who experience "Load Driver Error" error.

You need to enable Kernel Va Shadowing. Two ways to achieve this:
1. Download the tool called "inSpectre" and enable both Meltdown and Spectre protection, restart PC after.



2. Open regedit, go to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management

and delete "FeatureSettingsOverride" and "FeatureSettingsOverrideMask" then restart your computer.
-------------------------------------------------------------------------------------

https://www.virustotal.com/gui/file/...a47d/detection

Credits to @eka01 for bypass.

[[MPGH]T-800]

Thanks for the awesome tutorial.
@SquidVard , i had to modifiy your PCHunter link because i can't trust it, but i found another one. All good?

//Update; i was wrong, there is 32 and 64bit, so only use 64bit i guess?

[SquidVard]

there is 32 and 64bit, so only use 64bit i guess?

yes, my one also came with both versions, I used the 64bit version, if you only have a 32bit Computer then use the 32bit one i assume.

and yes i don't mind you modifying the PChunter link - the one i used was the official one (i think) but unfortunately it was in Chinese

[FreizeitHacker]

The PCHunter website is down :/

[xXKing_AsgoreXx]

Process hacker gives me access violation error when I try to suspend easyanticheat. folder read only already removed

[[MPGH]T-800]

The PCHunter website is down :/

Added PCHunter as attachment as well.

[RealSkylow]

I dont get it to work, to show me the as.sys. I did all the steps you mentioned, tried to do it without unloading as.sys and eac gave me the error to close pchunter, even tho I renamed it.

[SquidVard]

I dont get it to work, to show me the as.sys. I did all the steps you mentioned, tried to do it without unloading as.sys and eac gave me the error to close pchunter, even tho I renamed it.

Edit: your supposed to unload as.sys sorry if i didn't make that clear will edit the post now

Process hacker gives me access violation error when I try to suspend easyanticheat. folder read only already removed

hmm.. i fixed that by removing read only.. i guess remove read only from the Dead By Daylight folder?
or it could be you didn't run Process hacker as admin

Did you even run the bypass.exe first before trying to suspend EAC?

[FreizeitHacker]

I dont get the pop up where it says yes or no it just crashes my game instant

[SquidVard]

I dont get the pop up where it says yes or no it just crashes my game instant

Most likely your security settings were manually set down. just run bypass.exe as admin then instantly suspend the easyanticheat threads.

[FreizeitHacker]

not possible i start the bypass and crash instant i cant even suspend it in this time

[RealSkylow]

Edit: your supposed to unload as.sys sorry if i didn't make that clear will edit the post now

yea ik. But as.sys does not show up in PcHunter.

[qw1pe]

Thanks, it's working. There were issues with stopping the anti-cheat, but I tried more and it worked.

[FreizeitHacker]

my was named how i renamed the file and the as.sys at the end: for example i namend PCHunter to kappa and then as.sys was kappaas.sys

- - - Updated - - -

yea ik. But as.sys does not show up in PcHunter.

my was named how i renamed the file and the as.sys at the end: for example i namend PCHunter to kappa and then as.sys was kappaas.sys

[RealSkylow]

my was named how i renamed the file and the as.sys at the end: for example i namend PCHunter to kappa and then as.sys was kappaas.sys

Ok. I'll try that.