Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


Help w/ Hidden Processes

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine
View previous topic :: View next topic  
Author Message
makostream
How do I cheat?
Reputation: 0

Joined: 04 Aug 2010
Posts: 4

PostPosted: Wed Aug 04, 2010 8:33 am    Post subject: Help w/ Hidden Processes Reply with quote

Well, I've done a lot of searching around, and I've used the methods that I've found and they work. The game I'm playing was only protected by themida, and a recent update made this gameguard + themida. Now, this isn't much of an issue, I literally found a way around it within 10 minutes, but the problem is, since the GG update I've had to use kernelmoduleunloader to find the process -- but only in the window list.

Recently, I'm using process watch to find it perfectly everytime, but since it's still not in the process list, I don't know how to compile a trainer for it. Is there anyway I can get this game to show in the process list and not just process watcher / window list? I've tried for about 3 hours and I'm stumped. I figured I might as well sign up and ask on here, seems like the best course of action, right?
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 471

Joined: 09 May 2003
Posts: 25817
Location: The netherlands

PostPosted: Wed Aug 04, 2010 9:05 am    Post subject: Reply with quote

try the processlist (long) method
open every processid, and check the name of the main module of that process

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
makostream
How do I cheat?
Reputation: 0

Joined: 04 Aug 2010
Posts: 4

PostPosted: Wed Aug 04, 2010 9:16 am    Post subject: Reply with quote

Lol I mean... We can already attach to it. The problem is, when we try to make a trainer with all the shit we have, we can not find the .exe in the process list, therefor making the trainer useless. and it's pointless to type it in also, as the process is hidden, there is nothing for it to attach to, so...

How exactly can we make a trainer that attaches to a hidden process?
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 471

Joined: 09 May 2003
Posts: 25817
Location: The netherlands

PostPosted: Wed Aug 04, 2010 9:18 am    Post subject: Reply with quote

try to open every possible processid
0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11,......

if the process is opened, then try to find out what process it is by checking the base module, and if so, stop scanning, else continue

_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
justa_dude
Grandmaster Cheater
Reputation: 23

Joined: 29 Jun 2010
Posts: 893

PostPosted: Wed Aug 04, 2010 9:19 am    Post subject: Reply with quote

What game? The easiest solution is probably to just patch the gameguard stuff out with a hex editor. Have you looked into that? How do you plan to get around the rest of gameguard's anti-cheat stuff otherwise?

Cheers,
adude
Back to top
View user's profile Send private message
Ojji
Newbie cheater
Reputation: 0

Joined: 22 Jun 2010
Posts: 16

PostPosted: Wed Aug 04, 2010 9:22 am    Post subject: Reply with quote

Dark Byte wrote:
try to open every possible processid
0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11,......

if the process is opened, then try to find out what process it is by checking the base module, and if so, stop scanning, else continue


when we do this, what exactly do we look for?
Back to top
View user's profile Send private message
Dark Byte
Site Admin
Reputation: 471

Joined: 09 May 2003
Posts: 25817
Location: The netherlands

PostPosted: Wed Aug 04, 2010 9:35 am    Post subject: Reply with quote

you could check the pe header to confirm it's the game you want, or you could try querying the modulenames of the opened processid and check it there
_________________
Do not ask me about online cheats. I don't know any and wont help finding them.

Like my help? Join me on Patreon so i can keep helping
Back to top
View user's profile Send private message MSN Messenger
Ojji
Newbie cheater
Reputation: 0

Joined: 22 Jun 2010
Posts: 16

PostPosted: Wed Aug 04, 2010 9:42 am    Post subject: Reply with quote

whats this?


123.jpg
 Description:
 Filesize:  213.89 KB
 Viewed:  11938 Time(s)

123.jpg


Back to top
View user's profile Send private message
makostream
How do I cheat?
Reputation: 0

Joined: 04 Aug 2010
Posts: 4

PostPosted: Wed Aug 04, 2010 10:24 am    Post subject: Reply with quote

About npptnt2.sys:

User Comments
Rate
It is part of a rookit game hacking protection software, called GameGuard, which uses rootkit to detect and disable common game hacks.
Anonymous

What can we do about that?
Back to top
View user's profile Send private message
Ojji
Newbie cheater
Reputation: 0

Joined: 22 Jun 2010
Posts: 16

PostPosted: Wed Aug 04, 2010 8:26 pm    Post subject: Reply with quote

is there anymore information that could help us?
Back to top
View user's profile Send private message
makostream
How do I cheat?
Reputation: 0

Joined: 04 Aug 2010
Posts: 4

PostPosted: Thu Aug 05, 2010 3:19 pm    Post subject: Reply with quote

Lol, anyone that can give information on that? That is the rootkit, can't unload/disable it. Also tried to edit and lock it so it doesn't update, also didn't work.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> Cheat Engine All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites