Are these lines in script.log hack?

[Ben-X 3]

Hello there,

I am co-admin of the server DE714 (Rootserver GMT+3) and my mates told me, there was/were a hacker/hackers on the server yesterday. They wanted me to scan the logfiles and I found the following entries with the Cheatfinder:

TODAY:

09.08.2012 12:04:18: AQSU (80.221.189.180:2304) f6e3b51a3d0a129de8b967481c39defa - #55 his] spawn BIS_Effects_AirDestruction";
processInitCommands;
};
if (_v iskindof "tank")
then
{
_int

09.08.2012 12:04:18: AQSU (80.221.189.180:2304) f6e3b51a3d0a129de8b967481c39defa - #36 icopter" || _v iskindof "plane")
then
{
_v setVehicleInit "[this] spawn BIS_Effects_AirDestruction";

09.08.2012 01:13:01: Green Ops (108.15.117.126:2304) 991d7f407d668686b4b67a70da78bbb0 - #140 dummy"]; _dummy = [_this,"players"] execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";

YESTERDAY:
08.08.2012 20:11:20: Fabregi12 (79.255.61.211:2704) 4a1143cf988086704092e176591b51ec - #36 icopter" || _v iskindof "plane")
then
{
_v setVehicleInit "[this] spawn BIS_Effects_AirDestruction";
08.08.2012 20:11:20: Fabregi12 (79.255.61.211:2704) 4a1143cf988086704092e176591b51ec - #55 his] spawn BIS_Effects_AirDestruction";
processInitCommands;
};
if (_v iskindof "tank")
then
{
_int

08.08.2012 18:24:25: Fabregi12 (79.255.61.211:2404) 4a1143cf988086704092e176591b51ec - #36 icopter" || _v iskindof "plane")
then
{
_v setVehicleInit "[this] spawn BIS_Effects_AirDestruction";

08.08.2012 18:24:25: Fabregi12 (79.255.61.211:2404) 4a1143cf988086704092e176591b51ec - #55 his] spawn BIS_Effects_AirDestruction";
processInitCommands;
};
if (_v iskindof "tank")
then
{
_int

08.08.2012 17:02:19: Sich (46.73.188.92:2324) 5df801f0b6c922f94b8334aea7a21b83 - #36 icopter" || _v iskindof "plane")
then
{
_v setVehicleInit "[this] spawn BIS_Effects_AirDestruction";
08.08.2012 17:02:19: Sich (46.73.188.92:2324) 5df801f0b6c922f94b8334aea7a21b83 - #55 his] spawn BIS_Effects_AirDestruction";
processInitCommands;
};
if (_v iskindof "tank")
then
{
_int

08.08.2012 15:34:12: That Dale (91.153.177.45:2304) d51e054dcf07aa60a82a00809173e13c - #140 dummy"]; _dummy = [_this,"players"] execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";

08.08.2012 07:47:01: Jay (90.157.20.158:2304) 58bd63ad1c76180d2d3c89e2ad9bde03 - #27
{
_zombie = _zombies select _i;
_zombie setDamage 1;
};
};
titleText ["Zombie Shield deact

08.08.2012 07:47:02: Jay (90.157.20.158:2304) 58bd63ad1c76180d2d3c89e2ad9bde03 - #27 _text,"PLAIN DOWN"]; titleFadeOut 4;
_player setDamage 1;
};
};
};
};
};
titleText ["Player Shield

08.08.2012 07:47:10: Jay (90.157.20.158:2304) 58bd63ad1c76180d2d3c89e2ad9bde03 - #36 {objMYPlayer hideObject true;};';
player setVehicleInit _strExecCode;
processInitCommands;
clearVe

08.08.2012 07:47:10: Jay (90.157.20.158:2304) 58bd63ad1c76180d2d3c89e2ad9bde03 - #43 leInit _strExecCode;
processInitCommands;
clearVehicleInit player;
bInvisibleOn = true;
hint "Your

08.08.2012 07:47:10: Jay (90.157.20.158:2304) 58bd63ad1c76180d2d3c89e2ad9bde03 - #55 ';
player setVehicleInit _strExecCode;
processInitCommands;
clearVehicleInit player;
bInvisibleOn

08.08.2012 07:46:15: Kane (109.212.90.30:2304) a7798b4fafcc72377176e561fba2f73a - #11 andom (_variation * 2)) - _variation)];
_bolt attachTo [_hitObject,_val,_hitMemoryPt];
_dir = ([_hit

08.08.2012 07:46:15: Kane (109.212.90.30:2304) a7798b4fafcc72377176e561fba2f73a - #35 eelF", _endPos, [], 0, "CAN_COLLIDE"];
_bolt setPosATL _endPos;
_bolt setDir (getDir _unit);
_bolt s

08.08.2012 07:46:15: Kane (109.212.90.30:2304) a7798b4fafcc72377176e561fba2f73a - #11 andom (_variation * 2)) - _variation)];
_bolt attachTo [_hitObject,_val,_hitMemoryPt];
_dir = ([_hit

08.08.2012 07:46:15: Kane (109.212.90.30:2304) a7798b4fafcc72377176e561fba2f73a - #35 eelF", _endPos, [], 0, "CAN_COLLIDE"];
_bolt setPosATL _endPos;
_bolt setDir (getDir _unit);
_bolt s

They said he did teleport over the whole map and killed everyone. And at least he blew up a nuke. But these lines kinda doesn't match with what they are describing. Anyway, could they give any hints for a hack?

Thanks mates!

Ben-X

Edited August 9, 2012 by Ben-X

[Gogster (DayZ) 626]

The reason they've come up in CheatFinder is because of 'setVehicleInit' - you have to use in conjunction with your judgement against the line that the command is set against.

People are saying "BIS_Effects_AirDestruction" comes from when a vehicle blows up, without further information I would leave it.

[eden.eustice@gmail.com 46]

The first part is someone crashing a vehicle.

spawn BIS_Effects_AirDestruction";

if (_v iskindof "tank")

#36 icopter" || _v iskindof "plane")

_v setVehicleInit "[this] spawn BIS_Effects_AirDestruction";

I have seen it "called" on players by kill'emall scripts (it basically damaged all players as if they were in an exploding car) so you see all players running that script even though it was forced on them

JAY however is cheating rather blatantly and will be banned from our server also :)

KANE is either teleporting or using a Crossbow Lol,I will check but I wouldn't ban based on that log alone.

Edited August 9, 2012 by Cannon

[Ben-X 3]

Okay, thank you guys.

So far... and now I have to contact the dayz-dev-team to get their OK for at least Jay's ban and maybe Kane as well?

But till then, temporary ban for Jay is ok, isn't it?

[schmotto 32]

If your sure he's cheating of course you can ban him. If that's not disruptive behavior I don't know what is.

Just keep learning the scripts till you know better I guess.

[Ben-X 3]

Is there any list in the depths of the internet, that describes the entries in script log?

Otherwise... how should I know if he was cheating? I was not there... actually I am @holidays and can't play atm.

I can only rely on the statements from my mates.

Edited August 9, 2012 by Ben-X

[eden.eustice@gmail.com 46]

BIS Forums are your best bet for that stuff but i'm still tryign to learn enough to put together a list myself.

Jay I would 100% ban NOW

Kayne I wouldn't personally, that script suggests getting an item trajectory and then moving the item to an end target location based on that trajectory with collision enabled and damage assigned accordingly.

Sounds to me like firing a Crossbow bolt (which aren't like the guns as the bolts can be retrieved)

I'll test this tonight myself and see if it shows up in scripts.

I know setting bear traps show as scripts on the player setting them.

LIkewise "Dragging bodies" shows up as "attach" scripts with POS variables.

I find a mix of searching around forums and experimenting with actions myself to see what shows up in logs a good way to learn.

I'm trying to get a parser that can filter out common stuff like Alert_zombie and what have you.

Edited August 9, 2012 by Cannon

[mt roger 13]

PM sent.

[Ben-X 3]

Jay is banned already.

I want a tool, where I can search files for tags wich are stored in a file. I mean, we are rotating our logs and its annoying to scan every file seperate. I want to scan all scripts.log stored in the subfolders of the log-rotate + scripts.txt as input.

Actually the command findstr from Windows can do this, but input tags are way to long for this command.

I think a simple batch could deal with this problem.

Kind Regards,

Ben-X

[shadowbw 0]

@Ben-X, I'd love to see something like that as well. I also have the coding experience to make that happen. Contact me, I'd like to talk to you about this.