MPGHThe Dark Arts
RegisterLog in

NEW HACKSHILED THEORY!

Posts 16–24 of 24 · Page 2 of 2
i tried a thing where i replaced the hackshield with an old version of it, from like 5 patches ago, and set it to read only.
and denied the system any access at all. but somehow it was still able to update hackshield to the newest version.

there are private servers for CA???
#16 ·
??????????????????? the private servers dont use a hack shield -,-
#17 ·
I got this idea when I saw the Hackshield logo at my friends place when he was playing MS.
#18 ·
It will return a few thing:

Fail to update protection modules.
Error 202 files corrupted.
And some other Errors.


Here is some proof it checks itself:

Code:
[02:02:27.303][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:02:27.303][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:02:27.319][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:02:27.319][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(a4b44d36) ulReserved1(100000), ulReserved2(0)
[02:03:12.310][00001418] [HookFreeCode][RestoreCounterfeitPage] The Page was Restored Target :   0x6D114BC8 : 0x4519F3E9, 0x8B184D8B
[02:03:12.310][00001418] [HookFreeCode][RestoreCounterfeitPage] The Page was Restored Target :   0x6D114BCC : 0x8B5014F6, 0x8B501455
[02:03:24.946][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:03:24.946][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:03:24.961][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:03:24.961][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(d47abd5f) ulReserved1(100000), ulReserved2(0)
[02:03:43.198][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:03:43.198][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:03:43.213][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:03:43.213][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(26d55526) ulReserved1(100000), ulReserved2(0)
[02:04:02.105][00001418] [NanoScan][CmpSignature] Raise exception = Access Violation: read on memory 0x7688934A at 0x1001CADA[EHSvc.dll baseaddr:10000000]EAX=00000000 EBX=0876D6BD ECX=00000006 EDX=00000000 ESI=7688934AEDI=00000000 EBP=0A61F548 ESP=0A61F2CC EIP=1001CADA FLG=00010246CS=0023  DS=002B  SS=002B  ES=002B FS=0053  GS=002B
[02:04:04.944][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:04:04.944][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:04:04.960][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:04:04.960][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(fa90471e) ulReserved1(100000), ulReserved2(0)
[02:05:04.942][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 60
Notice it Hashes itself... Also the calls to execute and successful hacksheild update are different.
#19 ·
Quote Originally Posted by User1 View Post
It will return a few thing:

Fail to update protection modules.
Error 202 files corrupted.
And some other Errors.


Here is some proof it checks itself:

Code:
[02:02:27.303][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:02:27.303][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:02:27.319][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:02:27.319][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(a4b44d36) ulReserved1(100000), ulReserved2(0)
[02:03:12.310][00001418] [HookFreeCode][RestoreCounterfeitPage] The Page was Restored Target :   0x6D114BC8 : 0x4519F3E9, 0x8B184D8B
[02:03:12.310][00001418] [HookFreeCode][RestoreCounterfeitPage] The Page was Restored Target :   0x6D114BCC : 0x8B5014F6, 0x8B501455
[02:03:24.946][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:03:24.946][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:03:24.961][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:03:24.961][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(d47abd5f) ulReserved1(100000), ulReserved2(0)
[02:03:43.198][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:03:43.198][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:03:43.213][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:03:43.213][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(26d55526) ulReserved1(100000), ulReserved2(0)
[02:04:02.105][00001418] [NanoScan][CmpSignature] Raise exception = Access Violation: read on memory 0x7688934A at 0x1001CADA[EHSvc.dll baseaddr:10000000]EAX=00000000 EBX=0876D6BD ECX=00000006 EDX=00000000 ESI=7688934AEDI=00000000 EBP=0A61F548 ESP=0A61F2CC EIP=1001CADA FLG=00010246CS=0023  DS=002B  SS=002B  ES=002B FS=0053  GS=002B
[02:04:04.944][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 40
[02:04:04.944][00001418] [AntiCpXCnt][MakeResponseWithType][MakeResponse_Guid]  GUID : 6D9505098129457b9FD35BCEA6CCBC22 
[02:04:04.960][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HShieldHash]  HASH : D92F146DC7CF3DA43CEAD0DD6E6F3595
[02:04:04.960][00001418] [AntiCpXCnt][MakeResponseWithOption][AttachResponse_HackShieldStatus]  HACKSHIELD STATUS : ulStatus(e), ulStatusWthFlag(fa90471e) ulReserved1(100000), ulReserved2(0)
[02:05:04.942][00001418] [AntiCpXCnt][_AntiCpXCnt_MakeResponse] dwRequestLength = 60
Notice it Hashes itself... Also the calls to execute and successful hacksheild update are different.
put that one over top of the one from MS and see if that'll work
#21 ·
/close its resolved cant do it
#20 ·
thanks user1. thats what i was trying to say, but i didnt have the programs to look at that kindof stuff.

/Close
#22 ·
fuck fuck there has to be a way fer fuck like come on we are mpgh ffs we own
#23 ·
It sux even if u get a working bypass hack shield just shuts down CA just for injecting a .dll
#24 ·
Posts 16–24 of 24 · Page 2 of 2
This thread is closed for replies.

Similar Threads

News & AnnouncementsHappy New Years err Dave BDay!Dave84311Dave84311 12 Art & Graphic DesignMy new signaturearunforcearunforce 5 GeneralNew Years!arunforcearunforce 8 GeneralHappy New Year.FlawlessFlawless 29 Spammers CornerMy New Years Gift.FlawlessFlawless 193

Tags for this Thread

#hackshiled#theory
Need help?