Q-protect version 4

[Quget]

The first release of my anti hack project called Q-protect.
People who watches the development section knows some infromation already.
Development:http://forum.ragezone.com/f484/client-sided-anti-hack-c-776749/
Download:

To view the content, you need to sign in or register

Non Network versioneleted(Dead link)
Non Network version 5eleted(Dead link)
Non Network version Q-Protect v6eleted(Dead link)

The source code is the latest one.

Source code: http://forum.ragezone.com/f457/q-protect-anti-hack-source-804205/

I give up on networking version since its not my part to make sure people cant just put a fail dll in there. There are ways that clients can read if the dll is the dll you want people to load in their client.
Version 6 is a complete rewrite. I kinda made a mess.
It doesnt have a console/Networking things in it.
Also it havn't been tested out yet.


It contains some fixes.
Neuz start fixed.

How to add it in your Neuz.exe
open up NeuzMsgProc.cpp
Look for void SkipPatch() after the function
add this

#ifdef Q_PROTECT
#pragma comment(lib, "ANTIHACKDLL.lib")//Lib directory
using namespace std;
typedef void (*HackCheck)();
BOOL CallDLL()
{
   HackCheck _HackCheck;
   HINSTANCE hInstLibrary = LoadLibrary("ANTIHACKDLL.dll");

   if (hInstLibrary)
   {
	  _HackCheck = (HackCheck)GetProcAddress(hInstLibrary,"HackCheck");
      _HackCheck();
   }
   else
   {
	  ExitProcess( -1 );
   }
   return true;
}
#endif//Q_PROTECT

Then find

int APIENTRY WinMain( HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nCmdShow )
{

And add under {

#ifdef Q_PROTECT
	CallDLL();
#endif//Q_PROTECT

In versioncommon.h
add

#define Q_PROTECT

This will make it work on the Neuz.

Testing results.

CheatEngine Speed hack wont work at all. -> Cheatengine crash
rpe packet editor wont work at all. -> Neuz.exe -> exit
wpe packet editor wont work at all. -> Neuz.exe -> exit
Infiltration wont work at all. -> Neuz.exe -> exit
flyff-transformation wont work at all -> neuz.exe ->exit
Thread close -> Neuz.exe -> exit
Yannic Mama's Paket editor should not work -> neuz.exe -> exit
ServerSided check closed-> clients closes.
ServerSided not running?-> Client wont start.

Stress test Localhost ran up to 200 clients(Console test DLL) at the same time.

Bypasses
PM me those incase random user uses this tt1:
Backdoors
None I don't add backdoors in my projects.

ATTATION:There are way's to bypass.This thing Is able to block hack users who did not made their own hacks and doesn't know a thing about packets/programming


Special thanks:
phoen1x(For the basics)

 

[kingolo654]

I have this error that random player report me that the neuz are not starting and they have no hacking program running.

Edit:

Antivirus Issues

 

[Quget]

I have this error that random player report me that the neuz are not starting and they have no hacking program running.

Edit:

Antivirus Issues

What kind of antivirus?

 

[kingolo654]

I use Bitdefender, if you don't set Neuz.exe as exclusion on the active virus control it'll prevent Neuz from running.

 

[Quget]

Tested and Confrimed that flyff-transformation-v1-0-0-0 has been blocked aswell

 

[caja]

Tested and Confrimed that flyff-transformation-v1-0-0-0 has been blocked aswell

What is flyff transformation?

 

[Quget]

A hack.
I found it and directly tested lol

 

[cKenzy]

Misterkid can u do me a little favor? @read pm plox

 

[BlackGiant]

Nice, I will take a look at it.

 

[Johnny]

sweet wish i had time to learn enough to code somthing like this myself :/

 

[KrYpT0n]

hm,
find the string reference to ANTIHACKDLL.dll and nop the procedure? or better yet find references to the found procedure and nop the call xd

 

[Akerius]

ive seen this kind of AH in other pserver, and tried to bypass and inject this and it is a success... anyways not all know how to bypass it...

goodjob this would be help for others

 

[ShadowDragon]

ive seen this kind of AH in other pserver, and tried to bypass and inject this and it is a success... anyways not all know how to bypass it...

goodjob this would be help for others

well, in the development thread he even said that it can be bypassed lol but once again, only by somebody that that knows how
the main point of this, is to block script kiddies that just use whatever hack programs/methods they can find online.

 

[Quget]

hm,
find the string reference to ANTIHACKDLL.dll and nop the procedure? or better yet find references to the found procedure and nop the call xd

This is something they can fix in their Neuz.exe
Anyway the non network version.

To view the content, you need to sign in or register

 

[cKenzy]

Edit:

Nvm.

 

[Jomex]

im getting 3 errors compiling XD

c:\Documents and Settings\Administrator\Desktop\source2\Official Source\Neuz\NeuzMsgProc.cpp(462): error C2447: '{' : missing function header (old-style formal list?)
c:\Documents and Settings\Administrator\Desktop\source2\Official Source\Neuz\NeuzMsgProc.cpp(460): error C2146: syntax error : missing ';' before identifier 'CallDLL'
c:\Documents and Settings\Administrator\Desktop\source2\Official Source\Neuz\NeuzMsgProc.cpp(439): error C2601: 'CallDLL' : local function definitions are illegal

Wow I can't believe anyone got error xD

 

[cKenzy]

I know im adding it wrong. btw its not funny >.>

 

[Jomex]

Look for void SkipPatch() at the end of the function
add this

#ifdef Q_PROTECT
#pragma comment(lib, "ANTIHACKDLL.lib")//Lib directory
using namespace std;
typedef void (*HackCheck)();
BOOL CallDLL()
{
   HackCheck _HackCheck;
   HINSTANCE hInstLibrary = LoadLibrary("ANTIHACKDLL.dll");

   if (hInstLibrary)
   {
      _HackCheck = (HackCheck)GetProcAddress(hInstLibrary,"HackCheck");
      _HackCheck();
   }
   else
   {
      ExitProcess( -1 );
   }
   return true;
}
#endif//Q_PROTECT

Look for void SkipPatch() at the end of the function - he meant after the function not inside ^_^

@EDIT: MisterKid Pls change it to after end of function or something like this so ppl won't have problems for sure

 

[cKenzy]

I tought CheatEngine were Blocked. for me it works with cheat engine 5.5 in a windows server 2003 OS.

 

[Jomex]

it's still better to edit source code to block cheat engine than using blocking thingie


@EDIT: CE 6.1 works too