New Major BattlEye Anti-Cheat Features

[Hampi90 0]

Generally, this file will not be created until someone does something to cause an action.

Unless, of course, you balls'd it up! :P

Well then we hope for the best that none has done anything yet! Guess we will see in a couple of days my server has just been up for little over 24 hours so. :P

[Bomjonok 0]

R198551582244

Спаси землю от покемонов!! Кинь деньги на этот кошелёк, для постройки звезды смерти!!

[SmithyD 0]

Is it just the bans.txt we need to update?

Looks like it.

Would be nice if someone in the UK/Europe was keeping a master list I would love it!!

[Hampi90 0]

I can now confirm that my remoteexec.log file has been created so I haven't made a mistake that feels good. But I'm very new to all these log files and would like to know what these entires in the remoteexec.log means.

16.08.2012 16:33:06: MazManDoo (77.101.6.110:2304) 2e548eb2614295ccc63b107586a84b61 - #0 "if (name vehicle player == TTT5NamePl) then {_xcompiled = compile TTT5derCode;call _xcompiled;};"

16.08.2012 16:33:06: MazManDoo (77.101.6.110:2304) 2e548eb2614295ccc63b107586a84b61 - #2 "if (name vehicle player == TTT5NamePl) then {_xcompiled = compile TTT5derCode;call _xcompiled;};"

16.08.2012 16:51:33: Blacky (80.213.211.25:15351) fa3c8587916fdc9d1533cc894210efbd - #0 "if (name vehicle player == TTT5NamePl) then {_xcompiled = compile TTT5derCode;call _xcompiled;};"

16.08.2012 16:51:33: Blacky (80.213.211.25:15351) fa3c8587916fdc9d1533cc894210efbd - #2 "if (name vehicle player == TTT5NamePl) then {_xcompiled = compile TTT5derCode;call _xcompiled;};"

And also this from the createvehicle.log file.

16.08.2012 16:52:37: KreeD (95.53.198.167:2304) 07e125881a02e92a6ba889564fd33d27 - #0 "z_doctor" 131:282 [6418,2764,6]

16.08.2012 16:52:37: KreeD (95.53.198.167:2304) 07e125881a02e92a6ba889564fd33d27 - #0 "z_doctor" 131:284 [6420,2745,5]

16.08.2012 16:52:38: KreeD (95.53.198.167:2304) 07e125881a02e92a6ba889564fd33d27 - #0 "z_doctor" 131:286 [6426,2754,6]

16.08.2012 16:52:38: KreeD (95.53.198.167:2304) 07e125881a02e92a6ba889564fd33d27 - #0 "z_doctor" 131:288 [6416,2762,6]

16.08.2012 16:52:38: KreeD (95.53.198.167:2304) 07e125881a02e92a6ba889564fd33d27 - #0 "z_doctor" 131:290 [6430,2740,6]

16.08.2012 16:52:38: KreeD (95.53.198.167:2304) 07e125881a02e92a6ba889564fd33d27 - #0 "z_doctor" 131:292 [6419,2772,6]

16.08.2012 16:53:06: KreeD (95.53.198.167:2304) 07e125881a02e92a6ba889564fd33d27 - #0 "SmallSecondary" 131:341 0:0 [6568,2873,7] [0,0,0]

16.08.2012 16:53:12: KreeD (95.53.198.167:2304) 07e125881a02e92a6ba889564fd33d27 - #0 "SmallSecondary" 131:350 0:0 [6568,2873,7] [0,0,0]

Edited August 16, 2012 by Hampi90

[{sas}stalker 108]

had a couple with this today, idiots.

14.08.2012 12:07:00: Saw (24.154.170.88:51112) 91ec2da69d51cd94361a5c2515cb808d - #0 "[] spawn{player addAction ['Teleport Baby', 'C:\Excel\Scripts\teleport.sqf'];};"
14.08.2012 13:24:44: LnX (92.113.222.85:1024) 122a866558a740ef5e8514bf0296dcd5 - #194 "[] spawn{player addAction ['God Mode', 'D:\Games\Cheat for arma 2OA\Scripts\godmode.sqf'];};"

and Zombie Sheild

15.08.2012 12:25:43: Gilly (78.81.32.234:2304) 22ff788623d8c3ad71773ad3ccf83937 - #186 "ddAction ['Zombie Shield', 'C:\AimJ\Scripts\zombieshield.sqf'];};"

Edited August 16, 2012 by {SAS}Stalker

[paniohitus 8]

Anyone have toughts about this entry in scripts.txt:

15.08.2012 09:27:24: FxxxHK (188.2xxx04) 1d822ef48f117bxxx5f737 - #121 "private ['_dummy']; _dummy = _this call compile preprocessFile 'pauseOnload.sqf'; private ['_dumm"

15.08.2012 09:27:24: FpxxxK (18xxx04) 1d822exxx7bade7915f737 - #64 "ene: Skipping scene";

BIS_scenesController setFSMVariable ["sceneToStop", BIS_scenesController getFS"

15.08.2012 09:27:27: xxK (18x4) 1d822ef48xxxxbade7915f737 - #121 "e ["_dummy"]; _dummy = ["Unload", _this] call compile preprocessFile "\ca\ui\scripts\pauseOnUnload.s"

15.08.2012 09:27:27: xxxxx (18xxxx04) 1dxxx6ab47bcxxxxx737 - #64 "ene: Skipping scene";

BIS_scenesController setFSMVariable ["sceneToStop", BIS_scenesController getFS"

[{sas}stalker 108]

I'm banning for xcompiled atm. The way I see it nobody should need to be running external scripts. If your in my remotexec.log its a short journey to my ban file.

[Gogster (DayZ) 626]

I can now confirm that my remoteexec.log file has been created so I haven't made a mistake that feels good. But I'm very new to all these log files and would like to know what these entires in the remoteexec.log means.

And also this from the createvehicle.log file.

Thunder dome script right there.

[Hampi90 0]

Oh... So that would be bannable then I assume. Is that log enough evidence for it?

The remoteexec.txt works also kicked another player right now I think he was trying to spawn him self a ATV.

16.08.2012 18:21:16: FAFTH5051 (95.54.127.2:2304) 7f0e32c7489fb84cec8a7c7b155e2aae - #0 "

if (isServer) then {

_object = createVehicle ['ATV_CZ_EP1', [10477.5, 2318.78, 0], [], 0, 'CAN_COLLIDE'];

_object setVariable ['ObjectID', 6883.69, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _object];

_uid = _object call dayz_ob"

16.08.2012 18:21:16: FAFTH5051 (95.54.127.2:2304) 7f0e32c7489fb84cec8a7c7b155e2aae - #1 "77.5, 2318.78, 0], [], 0, 'CAN_COLLIDE'];

_object setVariable ['ObjectID', 6883.69, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _object];

_uid = _object call dayz_objectUID;

_object setVariable ['ObjectUID', _uid, true];

_object s"

16.08.2012 18:31:47: FAFTH5051 (95.54.127.2:2304) 7f0e32c7489fb84cec8a7c7b155e2aae - #0 "

if (isServer) then {

_object = createVehicle ['ATV_CZ_EP1', [10341, 2028.84, 0], [], 0, 'CAN_COLLIDE'];

_object setVariable ['ObjectID', 5166.12, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _object];

_uid = _object call dayz_obje"

16.08.2012 18:31:47: FAFTH5051 (95.54.127.2:2304) 7f0e32c7489fb84cec8a7c7b155e2aae - #1 "0341, 2028.84, 0], [], 0, 'CAN_COLLIDE'];

_object setVariable ['ObjectID', 5166.12, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _object];

_uid = _object call dayz_objectUID;

_object setVariable ['ObjectUID', _uid, true];

_object s"

Much to learn for a new admin with a dayz server I must say. :)

[Gogster (DayZ) 626]

Yep both bannable, you'll get on top of it!

[paniohitus 8]

I saw also this one in my createvehicle.txt

14.08.2012 14:27:44: Crazyfunnybunny (188.1xx2314) 804b10d7f9xxxba1fffd10 - #0 "Sh_125_SABOT" 188:8 188:4 [13509,5153,3] [-1340,-783,806]

14.08.2012 14:27:51: Crazyfunnybunny (18xxxxx14) 804b1xxxba1fffd10 - #0 "Sh_125_SABOT" 188:9 188:4 [13507,5151,3] [-1617,109,659]

Does anyone knows what this player is spawning, what is a Sh_125_SABOT?

Edited August 16, 2012 by paniohitus

[falcon911 19]

These posts are all great but is anyone really adding them into an official script.txt ,remoteexec.txt or createvehicles.txt?

I suggest from now on we add what to line needs to be added into what file.

[Hampi90 0]

Yep both bannable, you'll get on top of it!

Thanks for all your help so far! Really appreciate it. It's hard to read the logs when you have never seen them before. :)

[SmithyD 0]

Is it just a simple case of editing the "bans.txt" to add whoever you think is banning, for example like this...

4a2386b96300aef49dd1b33a447c9cab -1 plenty of bans to pass around

6828742fe98cd5cd6ef30750349cfd34 -1 Nom nom ban

38e35d2ffc0ac15c761d70bfe4ecece5 -1 Smoke the ban bro

20b1f7b093d83de19e4f8a8140d07ed0 -1 Loosing count on how many bans this is

b9d74c46da442199a79e97953a1ccb26 -1 lol MrMedic

182a95c1fb82683f49165d45eee960c5 -1 uber ban bro

Is that how to do it?

Cheers

[simple69 3]

This has been asked 2 times now in the post and been ignored. I updated my files today with the new updates and my scripts.log file in the last 2 hours has grown almost 15mb. This line keeps spamming for everyone super fast and hard for me to monitor the file now.

14.08.2012 17:04:02: <Player name, IP, GUID> - #41 "de\compile\object_vehicleKilled.sqf";

How do i disable the logging of this event. Its driving me nuts.

[Torndeco (DayZ) 46]

@simple69

Grab the files @ http://code.google.com/p/dayz-community-banlist/source/browse/

And dont forget to check back to grab newer ones etc...

[Seattle 4]

will these files, block stuff like the dentist or seagulls? and there shouldnt be a skin texture file on my server files with the jason mask should there?

and a sound file with silent hill siren and chain saw and unter sounds lol, my servers screwed isnt it?

create the files that dont have a file in the server right? put the txt files into the server cfg right? im new to all this.

i am looking threu the lgos i have already seen so many of the same confirmed cheats.....sigh, today i saw seaguls, everywhere i went. and the zombies on our server see us from way too far away, like really really reallly far away. and they one hit knock out and break bones, what gives what file should i look for to tone the zombies down?

[Torndeco (DayZ) 46]

The custom player skins is a feature of arma2 u need to edit

arma2.cfg

and look for

MaxCustomFileSize

Just remove the option & restart the server

As for the files createvehicle.txt / remoteexec.txt / scripts.txt they go into cfgdayz\Battleye folder...

If u update above u either reboot or log into rcon &

loadbans

loadscripts

loadevents

[tickle_me_jesus 37]

Ok, so the entries in remoteexec.log are obvious. The thing I don't get is the createvehicle.txt and log. It just seems to log random stuff about bakcpacks and skins, while I thought these were supposed to be filtered if you adjusted it like this

1 "" !"WeaponHolder" !"TinCan" !"Rabbit" !"Goat" !"WildBoar" !"Sheep" !"Hen" !"Cow01" !"Cow02" !"Cow03" !"Cow04" !"zZombie_Base" !"z_hunter" !"z_teacher" !"z_doctor" !"z_suit1" !"z_suit2" !"z_worker1" !"z_worker2" !"z_worker3" !"z_villager1" !"z_villager2" !"z_villager3" !"z_soldier" !"z_soldier_heavy" !"z_soldier_pilot" !"z_policeman" !"z_priest" !"BoltSteelF" !"Land_Fire_DZ" !"SodaCan" !"JackDaniels" !"RoadFlare" !"ChemRed" !"ChemBlue" !"ChemGreen" !"Survivor1_DZ" !"Survivor2_DZ" !"Survivor3_DZ" !"SurvivorW2_DZ" !"Bandit1_DZ" !"CZ_VestPouch_EP1" !"DZ_Patrol_Pack_EP1" !"DZ_CivilBackpack_EP1" !"DZ_ALICE_Pack_EP1" !"SmokeShell" !"SmokeShell" !"SmokeShellRed" !"SmokeShellGreen" !"MedBox0" !"Camo1_DZ" !"Soldier1_DZ"
5 "SeaGull"
//!"DZ_Backpack_EP1"
//!"MedBox0" //filtered now
//!"Sniper1_DZ"
//!"Camo1_DZ" //filtered now
//!"Soldier1_DZ" //filtered now
//!"TentStorage"

Probably I don't understand it, but I would like the createvehicle.log to only contain 'suspicious' elements. Now it just seems logging every skin, backpack and tentstorage change / input.

Someone can help me with this and give me some insight please?

Edited August 16, 2012 by tickle_me_jesus

[Seattle 4]

The custom player skins is a feature of arma2 u need to edit

arma2.cfg

and look for

MaxCustomFileSize

Just remove the option & restart the server

As for the files createvehicle.txt / remoteexec.txt / scripts.txt they go into cfgdayz\Battleye folder...

If u update above u either reboot or log into rcon &

loadbans

loadscripts

loadevents

thank you! i think i knew that, but ive read so much today and so many forums and files and scripts my eyes and brain needed confirmation.

also i didnt get what you said about player skins...? surely this isnt supposed to be in dayz? yet?

and these are also in the same folder....

these cant be supposed to be in there right? the sounds come from that you tube video where the guys hiding then killing people he has scared with these sounds.

i can delete these? and will the new log files catch this type of stuff out?

Edited August 16, 2012 by Seattle

[Torndeco (DayZ) 46]

@ Scavenger

The sound effects & custom player skin != cheating, its a server option & is part of arma2.

Turn it off & delete the files & restart the server and u are good.

[simple69 3]

@simple69

Grab the files @ http://code.google.c.../source/browse/

And dont forget to check back to grab newer ones etc...

Those are the files I grabbed. Ever Since then it started logging those lines like crazy. Hope they take that one out as my file is now over 30mb in just a few hours.. Thats crazy.

[Seattle 4]

@ Scavenger

The sound effects & custom player skin != cheating, its a server option & is part of arma2.

Turn it off & delete the files & restart the server and u are good.

sadly i cannot, the server cp is not giving that option or any options at all, i will make a ticket asking them to remove it i guess. thanky ou for the info. everyone is fresh off the boat one time.

[Internet 5]

Remember to post the GUID and evidence logs of all banned players

Community Ban-List:

http://code.google.c...ist/issues/list

:thumbsup: This will justify your ban in case of an appeal as well as beef up the ban list

Edited August 16, 2012 by Internet

[byteslam (DayZ) 0]

Hi, the new BE features are working pretty well, cheater amount has dropped almost to zero for now...only two things are looking not normal to me in our my remotexec.log, can someone tell me if it is legal before I put a BAN on this guys?

UPDATE: I got the confirmation from Dwarden (Bohemia) that this is cheating

16.08.2012 19:52:00: Jason (95.32.5.143:19525) 4c2f7fda5c48452f71b3b1801c1d0ca8 - #0 "if (isnil ("trtrtrtrtr0n")) then {MYplayersobj hideObject true;};"

16.08.2012 19:52:00: Jason (95.32.5.143:19525) 4c2f7fda5c48452f71b3b1801c1d0ca8 - #6 "if (isnil ("trtrtrtrtr0n")) then {MYplayersobj hideObject true;};"

16.08.2012 21:00:42: Stein (195.1.208.26:41183) 94aabe93257849695fd07616391f4967 - #0 "

if (isServer) then {

_dsasadsa = createVehicle ['UH1H_DZ', [3273.27, 13862.2, 0], [], 0, 'CAN_COLLIDE'];

_dsasadsa setVariable ['ObjectID', 2044.89, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _dsasadsa];

_uid = _dsasadsa cal"

16.08.2012 21:00:42: Stein (195.1.208.26:41183) 94aabe93257849695fd07616391f4967 - #35 "ble ['ObjectID', 2044.89, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _dsasadsa];

_uid = _dsasadsa call dayz_objectUID;

_dsasadsa setVariable ['ObjectUID', _uid, true];

_dsasadsa setVariable ['OwnerID', 0, true];

}"

16.08.2012 21:45:00: thebos (86.0.231.244:2304) f902e278d93cb76774a94e6113b0ebba - #0 "

if (isServer) then {

_dsasadsa = createVehicle ['TT650_TK_CIV_EP1', [3043.74, 1972.36, 0], [], 0, 'CAN_COLLIDE'];

_dsasadsa setVariable ['ObjectID', 7879.53, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _dsasadsa];

_uid = _dsa"

16.08.2012 21:45:00: thebos (86.0.231.244:2304) f902e278d93cb76774a94e6113b0ebba - #35 "ble ['ObjectID', 7879.53, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _dsasadsa];

_uid = _dsasadsa call dayz_objectUID;

_dsasadsa setVariable ['ObjectUID', _uid, true];

_dsasadsa setVariable ['OwnerID', 0, true];

}"

17.08.2012 11:28:47: QtexIRL (88.134.25.68:2304) 878a7039c85d42f676c7cf372fc3ced1 - #0 "

if (isServer) then {

_object = createVehicle ['UH1H_DZ', [7904.3, 13221, 0], [], 0, 'CAN_COLLIDE'];

_object setVariable ['ObjectID', 8480.19, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _object];

_uid = _object call dayz_objectUI"

17.08.2012 11:28:47: QtexIRL (88.134.25.68:2304) 878a7039c85d42f676c7cf372fc3ced1 - #1 "7904.3, 13221, 0], [], 0, 'CAN_COLLIDE'];

_object setVariable ['ObjectID', 8480.19, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _object];

_uid = _object call dayz_objectUID;

_object setVariable ['ObjectUID', _uid, true];

_object s"

17.08.2012 13:57:11: Jase (92.17.64.127:63198) 70b307d6efe7363bf4fb0ab112030fc3 - #0 "

if (isServer) then {

_object = createVehicle ['UH1H_DZ', [3430.62, 4067.96, 0], [], 0, 'CAN_COLLIDE'];

_object setVariable ['ObjectID', 4131.42, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _object];

_uid = _object call dayz_objec"

17.08.2012 13:57:11: Jase (92.17.64.127:63198) 70b307d6efe7363bf4fb0ab112030fc3 - #1 "0.62, 4067.96, 0], [], 0, 'CAN_COLLIDE'];

_object setVariable ['ObjectID', 4131.42, true];

dayz_serverObjectMonitor set [count dayz_serverObjectMonitor, _object];

_uid = _object call dayz_objectUID;

_object setVariable ['ObjectUID', _uid, true];

_object s"

They traveld directly to the BAN list, but does somebody knows what I have to add into the remotexec.txt to fire the ban in an automated way and immidiatly?

Edited August 17, 2012 by byteslam