How Hacksheild Detects your Speed Hacks.

[User1]

Here is how HS detects are your crapping speed hacks. It sets a bunch of constants for maximum and minimum speed. Lets look at de source code. (2004):

#define		DETECT_WINDOW_SIZE		10
#define		DETECT_TIME_INTERVAL	200
#define		DEPOSIT_COUNT			25

#define		DETECT_SPEEDHACK_THRESHOLD		10
#define		DETECT_APIHOOKED_THRESHOLD		3

#define		DETECT_DEVICETICK_THRESHOLD				(100)
#define		DETECT_APPLICATIONTICK_THRESHOLD		(200)

#define		SENSING_RATIO_POSITIVE_CHECK_API_HOOK		(3.0)
#define		SENSING_RATIO_NEGATIVE_CHECK_API_HOOK		(-3.0)

#define		SENSING_RATIO_POSITIVE_HIGHEST		(17.5)	// A Speeder ±âÁØ 0.8409 X
// [BugTrack num: 12117][¼öÁ¤ÀÚ: ¹Ú±Ù¿µ][¼öÁ¤ÀÏÀÚ: 2006.09.13] lxSpeeder ·Î ÀÎÇÑ ÀÓ°èÄ¡ º¸Á¤
// SENSING_RATIO_NEGATIVE_HIGHEST ¼öÄ¡ º¸Á¤(-6.5 -> -4.5)
// [¼öÁ¤ÀÚ: ±èÅÂÈÆ][¼öÁ¤ÀÏÀÚ:2006.09.20] -4.5·Î ¼öÁ¤Çϸé lxSpeeder ±âÁØÀ¸·Î 16925Á¤µµºÎÅÍ °¨ÁöÇÔ
// JCE¿¡¼* ¿ä±¸ÇÑ °¨Áö ±âÁØÀÌ 16900 À̹ǷΠÀÌ¿¡ ¸ÂÃç¼* ´Ù½Ã -4.5 -> -3.0 ·Î ¼öÁ¤ÇÔ
// ÀÌ ¼öÄ¡´Â A Speeder±âÁØÀ¸·Î 1.0353 ¼öÁØÀÓ
#define		SENSING_RATIO_NEGATIVE_HIGHEST		(-3.0)	// A Speeder ±âÁØ 1.0353 X
#define		SENSING_RATIO_POSITIVE_HIGH			(22.5)	// A Speeder ±âÁØ 0.8123 X
#define		SENSING_RATIO_NEGATIVE_HIGH			(-9.5)	// A Speeder ±âÁØ 1.1096 X
#define		SENSING_RATIO_POSITIVE_NORMAL		(26.0)	// A Speeder ±âÁØ 0.7846 X
#define		SENSING_RATIO_NEGATIVE_NORMAL		(-12.5)	// A Speeder ±âÁØ 1.1487 X
#define		SENSING_RATIO_POSITIVE_LOW			(30.5)	// A Speeder ±âÁØ 0.7579 X
#define		SENSING_RATIO_NEGATIVE_LOW			(-15.5)	// A Speeder ±âÁØ 1.1892 X
#define		SENSING_RATIO_POSITIVE_LOWEST		(36.5)	// A Speeder ±âÁØ 0.7320 X
#define		SENSING_RATIO_NEGATIVE_LOWEST		(-18.5)	// A Speeder ±âÁØ 1.2311 X
// [BugTrack num: 12117][¼öÁ¤ÀÚ: ¹Ú±Ù¿µ][¼öÁ¤ÀÏÀÚ: 2006.09.13] lxSpeeder ·Î ÀÎÇÑ 
// DEVICE_TICK_POSITIVE_HIGHEST ¼öÄ¡ º¸Á¤(8 -> 4)
#define		DEVICE_TICK_POSITIVE_HIGHEST		(0)		// A Speeder ±âÁØ 1.0353 X
#define		DEVICE_TICK_NEGATIVE_HIGHEST		(-16)	// A Speeder ±âÁØ 0.8409 X
#define		DEVICE_TICK_POSITIVE_HIGH			(8)		// A Speeder ±âÁØ 1.1096 X
#define		DEVICE_TICK_NEGATIVE_HIGH			(-16)	// A Speeder ±âÁØ 0.8123 X
#define		DEVICE_TICK_POSITIVE_NORMAL			(12)	// A Speeder ±âÁØ 1.1487 X
#define		DEVICE_TICK_NEGATIVE_NORMAL			(-20)	// A Speeder ±âÁØ 0.7846 X
#define		DEVICE_TICK_POSITIVE_LOW			(16)	// A Speeder ±âÁØ 1.1892 X
#define		DEVICE_TICK_NEGATIVE_LOW			(-24)	// A Speeder ±âÁØ 0.7579 X
#define		DEVICE_TICK_POSITIVE_LOWEST			(20)	// A Speeder ±âÁØ 1.2311 X
#define		DEVICE_TICK_NEGATIVE_LOWEST			(-28)	// A Speeder ±âÁØ 0.7320 X

I didn't install the Korean language pack so its all screwed up. But you get the point.

If this helped thank me. If it didn't flame in the rage section. If you would lik to c more just PM me? Sorry if this is already posted.

[HAPPYxHACKING]

very ummm interesting?

[ShadowTheHedgehog]

yeah i knew this already a loooong time ago
but nice find..

[cyanmage]

Source codes hurt my puny brain. And for the last time..it's HackshIEld.

[Corndog]

HS = HackShield...he used the correct term.

[cyanmage]

HS = HackShield...he used the correct term.

I know, he spelled it wrong though.

[User1]

HackSheild HackShit Hacksheild HSheild HS whats the difference? They all refer to the fail protection system ,we, Nexon hired.

[cyanmage]

Hey can you pitch this awesome idea to the developers: Get rid of hackshield, and instead have CA run this .exe I made that does nothing.

[Bombsaway707]

HS=Hack Shit!

[asdf12341234asdf]

hmmm, edit it, change the highest values to 100+ and try a speed hack, maybe it will work

[-Geforce-]

OLD NEWS!!!!!!!!!!!!!

[unkowen133]

So does this tell us anything about how we can avoid getting caught? For example, if it scans every 2 minutes, could someone make it turn off for 5 seconds every 2 minutes, then go back to your old speed?