| View previous topic :: View next topic |
| Author |
Message |
makostream How do I cheat?
Reputation: 0
Joined: 04 Aug 2010 Posts: 4
|
Posted: Wed Aug 04, 2010 8:33 am Post subject: Help w/ Hidden Processes |
|
|
Well, I've done a lot of searching around, and I've used the methods that I've found and they work. The game I'm playing was only protected by themida, and a recent update made this gameguard + themida. Now, this isn't much of an issue, I literally found a way around it within 10 minutes, but the problem is, since the GG update I've had to use kernelmoduleunloader to find the process -- but only in the window list.
Recently, I'm using process watch to find it perfectly everytime, but since it's still not in the process list, I don't know how to compile a trainer for it. Is there anyway I can get this game to show in the process list and not just process watcher / window list? I've tried for about 3 hours and I'm stumped. I figured I might as well sign up and ask on here, seems like the best course of action, right?
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25817 Location: The netherlands
|
Posted: Wed Aug 04, 2010 9:05 am Post subject: |
|
|
try the processlist (long) method
open every processid, and check the name of the main module of that process
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
makostream How do I cheat?
Reputation: 0
Joined: 04 Aug 2010 Posts: 4
|
Posted: Wed Aug 04, 2010 9:16 am Post subject: |
|
|
Lol I mean... We can already attach to it. The problem is, when we try to make a trainer with all the shit we have, we can not find the .exe in the process list, therefor making the trainer useless. and it's pointless to type it in also, as the process is hidden, there is nothing for it to attach to, so...
How exactly can we make a trainer that attaches to a hidden process?
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25817 Location: The netherlands
|
Posted: Wed Aug 04, 2010 9:18 am Post subject: |
|
|
try to open every possible processid
0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11,......
if the process is opened, then try to find out what process it is by checking the base module, and if so, stop scanning, else continue
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
justa_dude Grandmaster Cheater
Reputation: 23
Joined: 29 Jun 2010 Posts: 893
|
Posted: Wed Aug 04, 2010 9:19 am Post subject: |
|
|
What game? The easiest solution is probably to just patch the gameguard stuff out with a hex editor. Have you looked into that? How do you plan to get around the rest of gameguard's anti-cheat stuff otherwise?
Cheers,
adude
|
|
| Back to top |
|
 |
Ojji Newbie cheater
Reputation: 0
Joined: 22 Jun 2010 Posts: 16
|
Posted: Wed Aug 04, 2010 9:22 am Post subject: |
|
|
| Dark Byte wrote: | try to open every possible processid
0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11,......
if the process is opened, then try to find out what process it is by checking the base module, and if so, stop scanning, else continue |
when we do this, what exactly do we look for?
|
|
| Back to top |
|
 |
Dark Byte Site Admin
Reputation: 471
Joined: 09 May 2003 Posts: 25817 Location: The netherlands
|
Posted: Wed Aug 04, 2010 9:35 am Post subject: |
|
|
you could check the pe header to confirm it's the game you want, or you could try querying the modulenames of the opened processid and check it there
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
 |
Ojji Newbie cheater
Reputation: 0
Joined: 22 Jun 2010 Posts: 16
|
Posted: Wed Aug 04, 2010 9:42 am Post subject: |
|
|
whats this?
| Description: |
|
| Filesize: |
213.89 KB |
| Viewed: |
11938 Time(s) |

|
|
|
| Back to top |
|
 |
makostream How do I cheat?
Reputation: 0
Joined: 04 Aug 2010 Posts: 4
|
Posted: Wed Aug 04, 2010 10:24 am Post subject: |
|
|
About npptnt2.sys:
User Comments
Rate
It is part of a rookit game hacking protection software, called GameGuard, which uses rootkit to detect and disable common game hacks.
Anonymous
What can we do about that?
|
|
| Back to top |
|
 |
Ojji Newbie cheater
Reputation: 0
Joined: 22 Jun 2010 Posts: 16
|
Posted: Wed Aug 04, 2010 8:26 pm Post subject: |
|
|
| is there anymore information that could help us?
|
|
| Back to top |
|
 |
makostream How do I cheat?
Reputation: 0
Joined: 04 Aug 2010 Posts: 4
|
Posted: Thu Aug 05, 2010 3:19 pm Post subject: |
|
|
| Lol, anyone that can give information on that? That is the rootkit, can't unload/disable it. Also tried to edit and lock it so it doesn't update, also didn't work.
|
|
| Back to top |
|
 |
|