Hide AutoHotkey's process strings

Propose new features and changes
User avatar
joedf
Posts: 8951
Joined: 29 Sep 2013, 17:08
Location: Canada
Contact:

Re: Hide AutoHotkey's process strings

21 Apr 2017, 21:24

Yes, it is true. We have no set rule on this subject.
Image Image Image Image Image
Windows 10 x64 Professional, Intel i5-8500, NVIDIA GTX 1060 6GB, 2x16GB Kingston FURY Beast - DDR4 3200 MHz | [About Me] | [About the AHK Foundation] | [Courses on AutoHotkey]
[ASPDM - StdLib Distribution] | [Qonsole - Quake-like console emulator] | [LibCon - Autohotkey Console Library]
Noesis
Posts: 301
Joined: 26 Apr 2014, 07:57

Re: Hide AutoHotkey's process strings

22 Apr 2017, 08:10

Nextron wrote:
Noesis wrote:I'd like to know which vendors are doing this
Battlefield/Punkbuster used to, not sure about it now. Initially I wrote a scheduled task that would kill AHK when BF was active and re-execute it after, then I too realized AHK was detected through the 'Autohotkey' string, so a search&replace using a hex editor fixed that.

If game makers annoy a few users by boycotting AHK by thinking that will stop cheaters, it's not AHK's duty to circumvent that.
Yeah I was aware that Punkbuster did cause some problems at some stage. Truth is however, I think they changed it, as I used ahk uncompiled without issue in Punkbuster (Battlefield 3) sometime after seeing threads saying it wouldn't work. I can only assume they ultimately refined the detection system (based on what you said above about changing the process string).

I totally agree with your last sentence btw, and it is interesting because the knife cuts both ways, I mean at the end of the day, as far as cheat detection is concerned, it's actually kind of useless if it is just detecting based on a language used, it's going to cause false positives, and it's not going to stop cheating. Vendors doing it that way risk the backlash of boycotts themselves, just a shame the OP didn't say which vendors.

I'm assuming nothing cheaty like altering the process memory was going on with op's script(s), It could well be the cheat detection was actually working fine, and other ahk scripts wouldn't cause a problem.
User avatar
Exaskryz
Posts: 2882
Joined: 17 Oct 2015, 20:28

Re: Hide AutoHotkey's process strings

22 Apr 2017, 11:20

nnnik wrote:Exa I was thinking about closing and relaunching autmotically.
So the AHK script can use a Process, Wait or a WinWait to autoclose when it finds an incompatible program is trying to launch?

And for it to be restarted automatically, does Task Scheduler in windows let you launch a script (the one I mentioned launching manually, which is just a double click on my desktop) based on it seeing a program close?
Noesis wrote:
Nextron wrote:
Noesis wrote:I'd like to know which vendors are doing this
Battlefield/Punkbuster used to, not sure about it now. Initially I wrote a scheduled task that would kill AHK when BF was active and re-execute it after, then I too realized AHK was detected through the 'Autohotkey' string, so a search&replace using a hex editor fixed that.

If game makers annoy a few users by boycotting AHK by thinking that will stop cheaters, it's not AHK's duty to circumvent that.
Yeah I was aware that Punkbuster did cause some problems at some stage. Truth is however, I think they changed it, as I used ahk uncompiled without issue in Punkbuster (Battlefield 3) sometime after seeing threads saying it wouldn't work. I can only assume they ultimately refined the detection system (based on what you said above about changing the process string).

I totally agree with your last sentence btw, and it is interesting because the knife cuts both ways, I mean at the end of the day, as far as cheat detection is concerned, it's actually kind of useless if it is just detecting based on a language used, it's going to cause false positives, and it's not going to stop cheating. Vendors doing it that way risk the backlash of boycotts themselves, just a shame the OP didn't say which vendors.

I'm assuming nothing cheaty like altering the process memory was going on with op's script(s), It could well be the cheat detection was actually working fine, and other ahk scripts wouldn't cause a problem.
Another anti cheat system that I've had AHK detected by is XIGNCode. This software detected AHK running on another Windows User (simply logged out) and wouldn't let me play my game. However, I did find out that if I wanted to, I could use certain AHK scripts as long as there were no hotkeys. So it may simply be detecting a keyboard hook; PunkBuster might take the same approach.
Noesis
Posts: 301
Joined: 26 Apr 2014, 07:57

Re: Hide AutoHotkey's process strings

23 Apr 2017, 08:19

Exaskryz wrote:Another anti cheat system that I've had AHK detected by is XIGNCode. This software detected AHK running on another Windows User (simply logged out) and wouldn't let me play my game. However, I did find out that if I wanted to, I could use certain AHK scripts as long as there were no hotkeys. So it may simply be detecting a keyboard hook; PunkBuster might take the same approach.
Ok I hadn't heard of XIGNCode before, but to be honest after reading about it a bit this one seems to be an example of what not to do with regard to cheat detection. It also seems to be overly intrusive with it's scanning, and their own websites faq was a fairly long list of questions with the same answer of - contact support & send your log - for all but 2 of them, so it didn't inspire much faith or trust in the company that made it, ultimately, I'd be inclined to avoid it based on what I just read.

It is interesting you got ahk scripts to run at all though, as some of what I read was that it wouldn't even start a game if ahk was found installed (script didn't have to be running) - but this might have been an older version and was almost definitely for a different game. It might be detecting some hooks but C# programs using hooks apparently work with it so ?? I don't really know in this case.

Punkbuster on the other hand, actually tells you the methods it uses on its site (http://www.evenbalance.com/), i.e. 1. Game specific cheat research and detection, 2. Real-time, continuous memory scanning during gameplay & 3. Environment modification detection. So with Punkbuster, "these days" (because I don't doubt for a second that they used to do it the shoddy way) they won't necessarily stop you just because there is a hook on your system, but if there is other stuff also going on and it looks suspect you probably will be.
User avatar
nnnik
Posts: 4500
Joined: 30 Sep 2013, 01:01
Location: Germany

Re: Hide AutoHotkey's process strings

23 Apr 2017, 09:00

Exaskryz wrote:
nnnik wrote:Exa I was thinking about closing and relaunching autmotically.
So the AHK script can use a Process, Wait or a WinWait to autoclose when it finds an incompatible program is trying to launch?

And for it to be restarted automatically, does Task Scheduler in windows let you launch a script (the one I mentioned launching manually, which is just a double click on my desktop) based on it seeing a program close?
Maybe a program launcher built in AutoHotkey could detect and close all AutoHotkey processes when you launch certain programs, then closes itself and leave only a .exe that is written in another language that doesn't get detected that relaunches everything(?) once the program closes.
Recommends AHK Studio
guest3456
Posts: 3462
Joined: 09 Oct 2013, 10:31

Re: Hide AutoHotkey's process strings

23 Apr 2017, 17:22

i wonder if AHK_H.dll bypasses these "checks"

User avatar
evilC
Posts: 4823
Joined: 27 Feb 2014, 12:30

Re: VERY IMPORTANT: Protect Autohotkey! Hide its process strings

15 May 2017, 10:51

Azev wrote:Yeah right, I'll petition all of them as if they would agree.

I'm also won't play hide and seek no more. I can't install this or that because ahk will be running.

It is better to stop using ONE so I can use TEN rather than can't use ten because of one.

So long ahk!
You can do most of the things that you can do with AHK using Logitech LGS LUA code.
Do they ban that? No.

Vendors banning AHK because of what CAN be done with it is using a sledgehammer to crack a nut, and totally disproportionate to the "threat".
It basically sends the message "Only rich people who can afford programmable mice can cheat in our games".

So yeah, I totally back up Lexikos' opinion on this one - AHK should not change to try and work around a bone-headed decision by the game's developers.
User avatar
joedf
Posts: 8951
Joined: 29 Sep 2013, 17:08
Location: Canada
Contact:

Re: Hide AutoHotkey's process strings

17 May 2017, 17:48

+1
Also, it isn't that hard to make your own patch to autohotkey.
Image Image Image Image Image
Windows 10 x64 Professional, Intel i5-8500, NVIDIA GTX 1060 6GB, 2x16GB Kingston FURY Beast - DDR4 3200 MHz | [About Me] | [About the AHK Foundation] | [Courses on AutoHotkey]
[ASPDM - StdLib Distribution] | [Qonsole - Quake-like console emulator] | [LibCon - Autohotkey Console Library]

Return to “Wish List”

Who is online

Users browsing this forum: No registered users and 19 guests