PHack help needed

[ClickBouyow]

Hey guys,

I had someone on my server last night that generated the following in CI:
6:40:07 PM ** PHack Detected on Dumby/65.XX.XXX.XXX/mby-CP

I took out the IP to protect the innocent. Anybody know what this means? What is mby-CP?

Thanks

[ClickBouyow]

Anybody? Bueller? Bueller? Bueller?

[DCFA-Anex]

CP simply means a Challenge & Protocol problem. This can happen for several reasons, 1) user is running a non retail version of the game, 2) User is behind a firewall and or Router, 3) A problem occured during the scan, or 4) they're using a some custom pk3 file that alters a weapon in some way (i.e. sniper scopes can cause this...especially the cheating super zoom one), or might be using these chameleon skins (I've tested using them and have received a CP on myself when I had those skins installed)

This is a very common occurance and in the majority of cases is quite innocent and harmless. Most of us have learned to ignore it, and only pay attention to players that happen to be doing extremely well while sniping.

Now, as I said, it could be an indication they have a highly altered scope so if the person is sniping and is doing amazingly well, just spectate the guy and watch how he plays. As well, I have received a CP myself when I tested using the chameleon skins, so if you notice someone that seems to know where everyone is all the time, spectate on him and see if he's looking/watching the wall a lot.

Anyway, more often then not it's nothing but it's always good to take a look at the person's kill/death ratio just to see if they're doing exceptionally well. Just remember, however, there's lots of people who are very good at this game so just because someone is doing well, doesn't mean they are cheating.

Hope that helps...

[ClickBouyow]

Thanks for the help. I suspected as much. I am also aware that there are people that are really good at the game. When I play I try to keep my ratio up. I don't much care about numbers as much as kill ratio. That, to me, tells me how I am really doing. I'll keep an eye out for the superzoom and chamelion skins.

[kindofabuzz]

taken from MOHAA Counter Intelligence.doc:

If player has 3 or less non kickable phacks, it will trim the end of his name by either 4 or 3 letters based on the length of their name. It will then put up the display for -^IW^- Blackbart - console: bart YPC. It the hits are over 3, it will put their full name and the set of codes. This is being done this way to not draw attention to the innocent players who may get a C and P but allow you to see who they are and to spectator or check them out further if they are doing some outrageous things.

You will now have the option to auto kick people that have hits that are unquestionably cheats Here are the codes for the phacks and which phacks, if option selected will automatically kick the player. Full summary will be in then event log.

A = r_light_nolight - Kick
B = r_fullbright - Kick
C = Challenge missing - Kick
D = cg_te_dietouch - Kick
E = cg_lagometer
F = r_farplane - Kick
G = r_farplane_nofog - Kick
H = r_novis - Kick
L = r_lockpvs
M = r_showSmp
N = r_farplane_nocull - Kick
P = Protocol missing
R = r_lightmap - Kick
S = cg_3rd_person - Kick
T = cg_acidtrip
V = ui_voodoo
W = Cheat Enabled - Kick
Y = r_gamma
Z = cg_forceModel
a = r_useglfog
b = r_nocull
c = r_vertexlight - Kick
d = ShowBulletTrace – Kick