[Problem] Opening WT Process with latest MHS version 17

[Lobbie]

Hi Mr Spiro,

I encountered some problems when trying to open WT with MHS version 17.

1. In a couple of occasions, I get "Unable to open process" error messages.

2. In other occasions when there were no error messages, MHS Form Title says "MHS waiting for <unknown>" The addys' current values of the loaded Lssave file are "unobtainable" and WT did not crash.

I tried closing down MHS & WT & restart and even reboot but with no success. However, I am able to open Pinball with no issues at all.

I am running this on a AMD 64 box with WinXP Pro SP2.

Many thanks in advance for your assistance.

Regards,
Lobbie

[L. Spiro]

X-Trap hooks the IOCTRL bridge connecting MHS to its driver, preventing it from communicating with the driver. This lasts only as long as X-Trap is running, after which MHS can function normally again.

I have the bypass for this on my computer but it is not for release, neither privately nor publicly.

But the reason this version fails to open processes the previous versions could is because the anti-anti-cheat levels are now adjustable and they default to Off.

Tools/Options/AAC.
Enable the Anti-Anti-Cheat.
Set the first 2 knobs to 4 (after turning them on).
Set the 3rd and 4th knobs to 2.
Set the last knob to whatever you want.

The higher the numbers the greater the risk of blue screen (but on some computers there is no risk no matter the number). So it will be up to you to determine which levels are best for you.
If you get a blue screen or lock, MHS will automatically disable the Anti-Anti-Cheat and you will need to enable it again next time you load MHS.
This is for your own good and means that if you find bad settings you will still be able to run MHS again safely the next time.

Also, the higher the numbers and the more knobs enabled, the longer MHS takes to start. And you must restart MHS before these settings will take effect.


L. Spiro

[JB Gzn]

i found this out, but even if i set all knobs to 41. (highest possible number)
]i restart MHS, and then i still can't attach -,-

[L. Spiro]

Actually if you set them all that high it will cause problems that result in silently disabling some of the knobs.

You really need to keep them between 1 and 5.


L. Spiro

[jkfoong]

I still getting the same problem
Help me

[colintso]

i couldn't set the knobs. it says Invalid UDD path

[L. Spiro]

Set a valid UDD path in the Disassembler options.


L. Spiro

[Uytk]

http://memoryhacking.com/forums/viewtopic.php?t=1772

This is the solution for WolfTeam itself. However, I have no AAC levels which may help you, since opening 2 processes isn't too difficult.

[Lobbie]

Hi Mr Spiro,

Firstly, many thanks for your prompt advice and additional information about how xtrap foil MHS functionalities.

I have tried your AAC technique with various knob settings with no success ie I still get the "MHS waiting for <unknown>" and cannot attached WT. In addition, as you mentioned earlier that v17 is NOT a bypass for Xtrap hence even if I can attach WT, MHS would still be detected by Xtrap. Am I correct?

Cheers,
Lobbie

[L. Spiro]

X-Trap does not detect MHS. It just blocks a range of IOCTRL values in an attempt to block out MHS (because it uses this range to communicate with its driver), but does not look for MHS specifically. It blocks all programs that use the same range.


L. Spiro

[shinnsohai]

zzz is not blocked but i t will patch soon... since we don`t have the bypass.....

Me(I Will My Self A Leecher ...)(I`m Noob Enuf...) XD



I`m Noob.......Noob Will Always Be Noob...

[liqmysaq]

here is your solution. modify self, change everything. turn on AAC and set the first knob to 1, leave the rest off. restart your MHS and there u go. undetected.

EDIT: do not open MHS first. log into WT first THEN open MHS and attach. otherwise u get that "cannot open process" error.

[noobhacker]

wat do u mean a valid udd wats the path?

[Lobbie]

liqmysaq - thanks for your info. Will try your technique over the weekend.


Mr Spiro - Apologies, more questions -

Regarding those knobs, could we have some intuitive names or descriptions for them eg
Knob 1 = Invisibility
Knob 2 = Performance
etc etc? Given recommended maximum of 5 for each knob, we are looking at around 3900+ permutations. It will be great to have an idea what we are adjusting. If they are your secrets and not to be revealed, then don't. You're the BOSS.

I notice in the Open Process menu, you have added a new check box "to improve undetectability". Should I check this box or leave it alone? What is the relation of this setting with the No AAC knobs?

Cheers,
Lobbie

[liqmysaq]

nah, ignore what i said. it worked a couple times but now its more work to keep it working than the bypass thats here already.