AntiTCC Spying on my system?

  • Two Factor Authentication is now available on BeyondUnreal Forums. To configure it, visit your Profile and look for the "Two Step Verification" option on the left side. We can send codes via email (may be slower) or you can set up any TOTP Authenticator app on your phone (Authy, Google Authenticator, etc) to deliver codes. It is highly recommended that you configure this to keep your account safe.

Stigmata

Codepunk
Jan 31, 2004
1,024
0
36
The Sprawl
for the first time that I've ever noticed, while attempting to join a server, a "popup" came across the screen saying something about AntiTCC needs to check files outside of my UT2004 directory, and that I had 20 seconds to allow or deny (and subsequntly click on a checkbox that would allow this to occur automatically in the future) AntiTCC to go ahead and snoop around. I call BS. So what I saw was either a sneaky hack of the original AntiTCC, ot it's a feature of a newer version.
The former being true, I have this to say to the author:
There is NO REASON to snoop around outside of the UT2004 folder, and I think people should boycott AntiTCC.
I didn't join that server, and I won't ever join a server that asks me to allow access to my system.
Fock that!
 

rhirud

Fast learning novice
Feb 20, 2004
706
0
0
There are some utilities that run outside UT that can give in game advantages e.g. the timing of powerups etc. I guess that it's looking for things like that. I clicked yes without giving it much thought - and I suppose that anti -tcc- could have implememnted that "outside ut2004" search without a popup informing you what it's doing so I wouldn't be too hard on them.
 

Stigmata

Codepunk
Jan 31, 2004
1,024
0
36
The Sprawl
yeah, if the AntiTCC author could explain to me what excatly his software is doing, and why, along with some vouchers by people saying that this guy is trustworthy, I could accept what AntiTCC is doing. Things being what they are today, with internet security and privacy issues, I get very defensive when I see thigs doing something blatantly unusual.
 

b4nd1t

bulletproof
Jan 5, 2004
58
0
0
true, they should not go beyond the UT folder

to bad this will proberly be standard in the future im afraid, cause the witch hunt for cheaters has gone to far IMO
 

Shambler[sixpack]

New Member
May 3, 2001
564
0
0
Ireland
Visit site
I'm not the author of AntiTCC (no $hit :lol: ) but I know a lot about these cheats and how they are made, it's VERY easy to create an aimbot (or any other variations of existing cheats/hacks) outside of the UT2004 considering you already know how to make them (and work with code very well) from past experience.

Searching outside of the UT2004 folder is totally neccessary and it is impossible to actually modify any existing files unless they are Unreal packages (.unr, utx etc.) because of the limitations of UScript..All you can do is check if a certain file exists.

Nothing to fret about :)
 

b4nd1t

bulletproof
Jan 5, 2004
58
0
0
im pretty sure it won't stop there, soon this won't be enough and then we will see anticheat coded in C++ or similar
 

Mychaeel

New Member
For what it's worth:
Stigmata said:
yeah, if the AntiTCC author could explain to me what excatly his software is doing, and why, along with some vouchers by people saying that this guy is trustworthy
I vouch for Wormbo's trustworthiness.

Besides, if he wanted to steal data from your computer, he'd certainly not have his program ask you first.
 
Last edited:

HuggyBear

manta claus
Feb 23, 2004
1,702
0
36
Stigmata said:
for the first time that I've ever noticed, while attempting to join a server, a "popup" came across the screen saying something about AntiTCC needs to check files outside of my UT2004 directory, and that I had 20 seconds to allow or deny (and subsequntly click on a checkbox that would allow this to occur automatically in the future) AntiTCC to go ahead and snoop around. I call BS. So what I saw was either a sneaky hack of the original AntiTCC, ot it's a feature of a newer version.
The former being true, I have this to say to the author:
There is NO REASON to snoop around outside of the UT2004 folder, and I think people should boycott AntiTCC.
I didn't join that server, and I won't ever join a server that asks me to allow access to my system.
Fock that!


I agree! I've only seen it on the shk server, but here's a screenshot:
 

Attachments

  • bs.jpg
    bs.jpg
    467.6 KB · Views: 138

HuggyBear

manta claus
Feb 23, 2004
1,702
0
36
To boot, I want to see WHAT files it's checking; I'm a paranoid sort, and I won't let any old thing go snooping around on my computer. I think it's probably better to try and circumvent the cheats elegantly and legitimately than scan my 12TB raid array looking for them.
 

haarg

PC blowticious
Apr 24, 2002
1,927
0
36
40
Over there
I'm not really worried about Wormbo's AntiTCC stealing any information, but it does make me wonder what mutators have access to on my computer.

Does anyone know how much access to a client computer you can get from UScript?
 

Shambler[sixpack]

New Member
May 3, 2001
564
0
0
Ireland
Visit site
Haarg said:
I'm not really worried about Wormbo's AntiTCC stealing any information, but it does make me wonder what mutators have access to on my computer.

Does anyone know how much access to a client computer you can get from UScript?

At best you should only be able to read filenames and if the filetype is an unreal-compatable file (utx, .ut2 etc.) then it can likely open that up and read it..
I'm 100% certain that is the limit of things.

Bandit:
You must have no idea how usefull a cheat protection coded in C++ would be, it would be the IDEAL next step and some C++ coded protections even exist in UT1.
 

Zur

surrealistic mad cow
Jul 8, 2002
11,708
8
38
49
If you have Windows XP, AntiTCC is actually scanning the prefetch folder. This is a special folder that is used by XP to accelerate the launching of apps. As such, this is the ideal location to check for any suspect applications that have been loaded.

I don't think it does anything else and I've had no problems despite I have a few hacks zipped away somewhere else for testing purposes (as an admin). I have Windows 2000, though.

P.S: Since hacks are going external now, the future of anticheating is system-specific modules that scan memory and the file system. It's regretable that things have come to this but it's necessary to be on equal standing with the people who write these hacks, the hacks in question becoming more and more evolved.
 

Radiosity

Minty Fresh!
Jan 3, 2003
2,217
0
0
46
UK
www.radiant-studios.net
It's quite sad really. Just imagine what we could achieve if all the asshat lamers who write hacks, aimbots, viruses, worms, spyware, adware and so on and so on actually tried being creative for once, instead of destructive. But alas, I think this rather depends on the human race managing to evolve to the stage where greed and vindictiveness no longer have any meaning. Anyone see that happening any time soon?

:rolleyes:
 

[HT]ÜberByte

New Member
Jul 31, 2004
142
0
0
You people are stupid, period. I run a server with the latest version of anti tcc, and ya it gives that message, but do you know why??? Ever heard of the [ELF] clan? They are the best known cheating clan that exists today. Their leader is [ELF]HelioS, and he designs a little toolkit called the HelioS Hook. It contains aimbots, server crashers, ping compensators, and all the worst stuff you can think of. the HelioS Hook resides OUTSIDE the ut2004 directory, and is invisable to older versions of anti tcc. The newer versions can detect it, but only by looking outside the ut2004 directory, because it IS outside the ut2004 directory. And what reason do you have to not trust wormbo??? If he wanted to steal your stuff he deffinatly would not ask first! I mean come on!
 

Parser

Hello
May 7, 2002
1,531
0
0
119
England baby!
fraghouse.beyondunreal.com
Honestly, you guys are going all :emo: over this scanning thing. If it keeps cheaters out, stop whining about it. You know now that it cannot potentially do any damage to your files that aren't Unreal-engine related.
I bet that the people who experienced problems with it - instead of whining incomprehensibly and talking about boycotting AntiTCC - actually bothered to give some proper bug reports, it might make life a bit easier for Wormbo, and help him improve AntiTCC.
 

Zur

surrealistic mad cow
Jul 8, 2002
11,708
8
38
49
The ELF clan has been around since the early days of UT :/ . Zellius used to be their front guy for hacking UTPure but Hellios seems to have the upper edge when it comes to overall programming. In fact, if he stopped making hacks, I doubt any of the other coders could come up with something equivalent.
 
Last edited:

Wormbo

Administrator
Staff member
Jun 4, 2001
5,913
36
48
Germany
www.koehler-homepage.de
Haarg said:
I'm not really worried about Wormbo's AntiTCC stealing any information, but it does make me wonder what mutators have access to on my computer.

Does anyone know how much access to a client computer you can get from UScript?
I think you can browse the client's harddisk(s) and read the computer's network name, but that should be about it. (At least so I hope.)
Be sure to keep your UT2004 up-to-date, as Epic constantly fixes potential security problems.

Fearless said:
If you have Windows XP, AntiTCC is actually scanning the prefetch folder. This is a special folder that is used by XP to accelerate the launching of apps. As such, this is the ideal location to check for any suspect applications that have been loaded.

I don't think it does anything else and I've had no problems despite I have a few hacks zipped away somewhere else for testing purposes (as an admin). I have Windows 2000, though.
That's exactly what it does, but it doesn't ask for permission for that. The message box the thread starter meant will only show up if the server admin wants to check for other files except those in Windows\Prefetch or the UT2004 directory.

BooGiTyBoY said:
<--- is apparently stupid cuz he's never heard of the [ELF] clan.
I can't remember what the acronym stands for, but [ELF] are a clan of cheaters and cheat coders.
 

Zur

surrealistic mad cow
Jul 8, 2002
11,708
8
38
49
Wormbo said:
I can't remember what the acronym stands for, but [ELF] are a clan of cheaters and cheat coders.

I used to know but I've forgotten. How about ... Elementary Laming Fools :D ?