[Release] Simple MuGuard

LockMU

Active Member
Joined
Sep 9, 2013
Messages
249
Reaction score
182
As the title says, this is a simple mu anticheat that can do the following:

1. Scan cheat based in (32 bytes of memory) fingerprint (136 dumps).
2. Recursive scanning of window title, a target name of cheat engine will match all program with cheat engine word in it no matter what is the capitalization. You can add max of 10 names.
3. File CRC comparison technique, you can add a max of 2.
4. Client startup logo loading, you can freely modify the bitmap file inside MuGuard folder.

Howto:

DLL will read its data from list.dat file, this is encrypted file. This file contains the CRC and cheat names data. A tool is included ,inside tool folder in the package, to produce this list.dat from list.ini file. List.ini is a text file where you can add CRC and cheat names data.

Here is how list.ini looks like, where you can edit values. Its obvious that you have to increment count valu
DONT REMOVE THE LAST LINE "[eof]":

Code:
[CRCVALUE]
count = 2
0 = 77286090
1 = 297457b2
[CRCPATH]
0 = data\\local\\item.bmd
1 = data\\player\\player.bmd
[CHEATS]
count = 10
0 = speed gear
1 = cheat engine
2 = moonlight engine
3 = hithack
4 = gproxy
5 = speederxp
6 = hasty mu
7 = artmoney
8 = xspeed
9 = wpe pro
[eof]

When you run CreateDAT.exe (included in tool folder), it will create a file list.dat from list.ini which look like this. This is what you need to put inside MuGuard folder, muguard.dll will take data from this file.:

Code:
5FE37B40BC452190C0A0C88E0B4C7197F98AE6CF7C75573EB23861DFF64EA099F9DE89199A0CA896158E31D04CAF2A3410A8240ABD2B062503EB248F3FE955E9423005BF66CCBB98460FBAF167021E430C3BB9C2674CEACDAE9140C562A0D0A3F3FD60F76182148DB05C3B110A51640E1B8F38FBA067D3E9A25C678AEC4A931DF333C32C982DDE9ED26BD6BA97E9A63C27787B53F0BAA146ACAA82F710E89989A72470EBB65542AA29886877CD7F783B0B913E2BDB7B204F7665BB8C747F4D04EC56A1AD482E0A7366519BBE4681709AB0A35DBC1D1D52806B1104AF512375B7173BB5B41DDD1D04E3FE1FF26149AF86267EF914AD4C4E8B78959F723E20DA94F6931319A199052C74FB3B9E4DE5288C5E10BC39FBFBA6E0D5C14ACA156FEADB

Credits:
f1x - memory scan idea
leo123 - window title idea
MSDN ^^
me ofc :)

[03-01-2010 - ver 1.0.1.0]
* muguard.dll, createdat.exe and list.ini updated, now its using my full version encryption.

[05-01-2010 - ver 1.0.2.0 update]
* muguard.dll and list.ini updated. Added the following section in list.ini to bind dll and dat file, main = main.exe client crc value (small letter).

Code:
[COMMON]
main = main.exe_crc_value
 

Attachments

  • muguard 1.0.1.0.rar
    250.4 KB · Views: 36
  • muguard 1.0.2.0.rar
    19.7 KB · Views: 47
[03-01-2010 - ver 1.0.1.0]
* muguard.dll, createdat.exe and list.ini updated, now its using my full version encryption.

[05-01-2010 - ver 1.0.2.0 update]
* muguard.dll and list.ini updated. Added the following section in list.ini to bind dll and dat file, main = main.exe client crc value (small letter).

this is from 2010 ?
 
this dll/thread/anticheat can be suspended-killed easily with process editors..
 
True

this dll/thread/anticheat can be suspended-killed easily with process editors..

Thanks to this person sharing the anticheat... Respect but unfortunately that's
True... it can be easy suspended / killed
That's why if you are looking for the better free source code just use Codex v3 or something similar with more scanning methods and most important - process counter. Or you may find something with good server side and then once the client side has been killed the server side will drop the client connection.
 
Last edited: