Advertisement
StrafeLounge

Untitled

Sep 9th, 2017
3,334
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 35.00 KB | None | 0 0
  1. StrafeLounge Staff Guide [Staff]
  2.  
  3. First and foremost congratulations on becoming a trainee on Strafe any concerns you have about becoming a moderator on the Valux network should be put at ease by the time you have read through this Staff Guide put together for you by Ribs (Sam) and Mired (Max). Any enquiries you may have regarding this staff guide should be forwarded to a staff manager.
  4.  
  5. Quick note: Every 2 weeks I complete a “staff evaluation” on each staff member with us. You will receive at least one positive, one negative and possibly a tip on how to improve. Ribs (Sam) will collect information about each staff member over the space of two weeks so taking a leave of absence for a week we may not have a lengthy evaluation for you. I will try my best to give you a fair and balanced report on your work, you may disagree with my evaluation but that will be discussed.
  6.  
  7. Your Role:
  8. Here are your responsibilities put in a simple way:
  9. Ensuring that the rules are followed by the players
  10. Helping players in teamspeak (ComingSoon)
  11. Informing other staff members of problem players
  12. Managing your time wisely without spending more time playing other servers
  13. Enforcing rules by punishing offenders with the punishment required
  14. Informing Administrators of issues with the servers (bugs and similar problems) so they can forward to a developer
  15.  
  16. And here is a more developed version of that:
  17.  
  18. There are several things you must do as a Trainee in order to get promoted on Strafe, firstly you must remain active, this means actually doing work and moderating not just sitting in teamspeak messing around with friends/staff. Another part of your role is to moderate chat and make sure people are receiving the appropriate punishments if they are breaking rules.Also, you should be moderating looking for the more blatant cheaters, allowing mods to be dealing with screenshares until you can screenshare alone by passing the screenshare test, speaking of which... your primary focus is to get yourself “ss approved” and this is some information on how screen sharing on Strafe works:
  19.  
  20. Screenshare Approved
  21. What is it?: Screen-share approved is a system, a rank and an approval from head of SS (this meaning that the head of ss approves/gives them permission to screen-share without consent from other staff members). Why do we need it? Some of it has already been explained above but the main reason why we need it is also that the members of the community being screen-shared are aware that the skills of the staff member in the screen-sharing area is up to standard. This meaning that if they are cheating and they notice that the staff member is SS (screen-share) approved, they are more likely to admit, knowing their skills. The general reasoning behind the existence of screen-share approved is to ensure that the staff members can be trusted in finding clients (efficiently) without the higher staff members haven’t to worry.
  22. If you want more information about this contact xExperience.
  23.  
  24.  
  25.  
  26. NOTE: You’re not allowed to use methods that are not on the staff guide.
  27. Results in using your own methods will result in a strike
  28.  
  29. NOTE: ALWAYS put in #screenshared if they are clean or not clean
  30.  
  31. Results of not putting in if he is clean or not clean will result in a punishment
  32.  
  33. NOTE: Don’t freeze people before asking a SS Approved if they could ss for you.
  34.  
  35.  
  36. Strike Policy:
  37.  
  38. You are expected to follow ALL of the following guidelines, breaking these rules will result in a punishment, here on Valux we have a 3 strike policy, each time you do something which breaks the rules laid out in the staff guide you will most likely receive 1 or more strikes as a punishment. Depending on the severity of what you have done will decide the amount of strike(s) you receive. Accumulating 3 strikes will result in an instant demotion.
  39.  
  40. Teamspeak:
  41. Teamspeak is our source of communicating with players if they need help. You should frequently check support waiting rooms seeing if people need help and if they do, do your best to help them and remember to stay professional. If people have specific issues such as they have a payment issue move them into the donation support waiting room. You do not need to pm an admin to let them know someone needs them, they should be active in teamspeak and will aid them when they are able to. Also, do not have more than 2 staff members in an ss/support room if possible if necessary you can have a translator but 2 staff members is all that should be needed.
  42.  
  43. We use this to help players but we also use this so us staff can talk and get a long. There are certain rules with teamspeak which are as following:
  44. Don't be toxic towards players and staff. You might think it's a joke but the person you are doing it to may not think its a joke.
  45. Don't kick people from your channel for no reason. This is just straight up immature.
  46. If you're not helping someone always make sure you're in a staff room. We don't want anyone afking in support rooms.
  47. Ask for permission before you join a screenshare/support room with another staff member.
  48. Don't say anything you wouldn't want a higher up staff member to hear.
  49. If you have an issue with a staff member please move away. Don't cause unneeded drama.
  50. Be professional towards the players/staff
  51. Never go AFK whilst supporting or screensharing someone
  52. Make sure someone is ss approved in your screenshare room
  53.  
  54. General guidelines:
  55. Being staff on Valux means you are essentially the front face of our server meaning you have a massive impact on people’s views of the server therefore performing any actions that would make Valux look bad.
  56. Do not talk back to admins and respect other members of the staff team, if you do not like another staff then there is no need to cause drama simply be civil with them.
  57. Be polite, if someone is screensharing and you want to join make sure you ask them first especially if there are multiple already in the support/screenshare room.
  58. Don't talk too much in public chat, keep it professional and mature.
  59. When you want to record on the server you MUST use /tr it will hide everything that needs to be hidden during a recording, if recording a screenshare do not leak methods or any personal information for obvious reasons.
  60. Try and be independent, we will answer any questions if you do have any.
  61.  
  62. Rank Descriptions
  63. US-Staff-Manager:  Manages US staff, if you have an issue with a US staff member contact the person in this role or the EU staff manager if it is more convenient for you.They will also deal with promotions/demotions and strikes.
  64.  
  65. EU-Staff-Manager: Manages EU staff, if you have an issue with a EU staff member contact the person in this role or the US staff manager if it is more convenient for you. They will also deal with promotions/demotions and strikes. (BabyFlaqh
  66.  
  67. Admin: Will be tasked individual roles, contact an admin for specific questions which other ranks cannot help with.
  68.  
  69. Senior Mod: To moderate and set a good example for the trainees and moderators - Help lower staff but do not point blank instruct them on what to do!
  70.  
  71. Moderator: To be active on the server, Accumulate punishments and keep the server clean.
  72.  
  73. T-Mod: Moderate the server whilst remaining active, Learning from other staff members.
  74.  
  75. Punishment Times
  76. These are subject to change
  77. ANY CLIENT/PROGRAM WHICH IS 3RD PARTY TO THE GAME ITSELF WHICH GIVES AN ADVANTAGE IS CONSIDERED UNFAIR AND CAN BE BANNED FOR. Regedit and DNS will be allowed, programmes which increase the “Lag” you receive are disallowed and will result in a permanent ban.
  78.  
  79. You are expected to only ban cheaters if you are 100% sure they are cheating. If you are only 95%, don't take the risk and ask another staff member to watch him first.
  80.  
  81.  
  82. Spam / Chat Flood:
  83. 1st Offence: 30m mute
  84. 2nd Offence: 2h mute
  85. 3rd Offence: 1d mute
  86. 4th Offence: pm an admin
  87.  
  88. Toxic (Including racism):
  89. 1st Offence: Warn
  90. 2nd Offence: 3 Day Ban
  91. 3rd Offence: Staff Discretion
  92.  
  93. Death Threats:
  94. 1st Offence: 24 hour mute
  95. 2nd Offence: 3 Day Ban
  96. 3rd Offence: 1 Month Ban
  97. 4th Offence: Staff Discretion
  98.  
  99. Selling Items:
  100. 1st Offence: 24hr mute
  101. 2nd Offence: 3d mute
  102. 3rd Offence: 14d mute
  103. 4th Offence: Staff Discretion
  104.  
  105. Inappropiate Links =  1st offence: 24h mute
  106.  
  107. Harassment = Report to an admin if it’s constant.
  108.  
  109. Advertising server ip = Blacklist (Screenshot and send to an admin or above)
  110.  
  111. DDoS threats = Blacklist (Screenshot and send to an admin or above)
  112.  
  113. Running/Camping = Warn then kick, if they have a history allow a higher staff member to deal with the player.
  114.  
  115. Phishing links = Blacklist (Screenshot and send to an admin or above)
  116.  
  117. Inappropriate Name = Perm ban, before banning them tell them to come into ts once they have changed their name.
  118.  
  119. Bypassing chat filter = 1d ban each time, if persistent in their history contact an admin.
  120.  
  121. Hackusations = Warn the player, if they persist mute them for 1 hour.
  122.  
  123. Hacked client/ghost client (examples are kill aura reach etc):
  124. 1st Offence = Permanent
  125.  
  126. Sharing the join.me/anydesk with others = Perm ban
  127.  
  128. Illegal Launcher = 30d ban
  129. Illegal Version = 30 days ban
  130.  
  131.  
  132.  
  133. Illegal Modifications
  134. 1st Offence = 30 days
  135. 2nd Offence = 3 months
  136. You can find the list of illegal modifications here:
  137.  
  138. Autoclicker/Macros:
  139. 1st Offence = Perm ban
  140. 2nd Offence = Perm ban
  141.  
  142.  
  143. Admitting Cheating: 4 Months
  144. Admitting Auto Clicker: 4 months
  145. Xray fly: perm ban
  146.  
  147. Staff disrespect:
  148. 1st Offence = 1d Mute
  149. 2nd Offence = 3d Ban
  150. 3rd Offence = Perm Mute
  151.  
  152. You must not at any point in time ban for “cheating” you must put specific reasons such as “Kill-aura” or what you found in a screenshare, You must always keep your proof for over 2 weeks in case you are asked for it.
  153.  
  154. Discord
  155.  
  156. We use Discord massively in order to remain in contact as a staff team and relay information, The management team and owners often announce updates on the server and other types of news regarding Valux so it’s always good to be up to date!
  157. Once you are accepted into the staff team you should be swiftly invited to join the Staff Discord and may be spoken through the purposes of each channel however it’s pretty self explanatory. You must should have discord on your PC and running all of the time you are on Valux it is also one of the easiest ways of remaining active so make use of it.
  158. Be careful what you say in the discord even if you think what you’re saying is funny or a joke and in good humour other people may find it offensive and this will create issues.
  159.  
  160.  
  161.  
  162.  
  163. # urgent
  164. [This channel is not for messing around, any misconduct will lead to consequences.]()
  165.  
  166. # announcements
  167. [Where annoucements about the server are given out (not rocket science).]()
  168.  
  169. # general
  170. [Topics to do with the server and not others. (no irl stuff in here).]()
  171.  
  172. # off-topic
  173. [Topics to either do with other servers or irl stuff. Can be anything.]()
  174.  
  175. # screenshared
  176. [Where you input infomation about a ss after you have compeleted it. Has to have name, (clean or not) and what you banned for in the msg.]()
  177. [NOTE]: Not putting information about a screenshare will result in a punishment.
  178.  
  179. # anydesk-address
  180. [Here after ss'ing a player you must put the name and the anydesk address. This makes it easier to check if a player is ban evading when pulling them into a screenshare.]()
  181. [NOTE]: Not putting in an anydesk address after a screenshare will result in a punishment.
  182. [NOTE]: Before banning a player off an anydesk link you MUST /checkban the original holder of the link, this is to double check that the player has not bought an unban. If the original holder is still banned; ban the player. If the original holder is unbanned; carry on the screenshare as normal.
  183.  
  184. # proof-chat
  185. [After carrying out a punishment to a player you must put the name, time banned, reason and proof to show a valid reason to the player being banned.]()
  186. [NOTE]: Not putting in a punishment towards a player with valid proff will result in a punishment on yourself.
  187. # suggestions
  188. [Here you may suggest improvements about the server. (might be an idea to read up to see if the one you're about to suggest is already there)]()
  189.  
  190. # questions
  191. [Here you can ask questions, however all may not be answered.]()
  192.  
  193. # issues
  194. [This is where you post issues outside of the server. (ts3 or discord)]()
  195.  
  196. # server-issues
  197. [This is where you post issues concerning the server. (Major breaking stuff needs to go in #urgent)]()
  198.  
  199. # name-change
  200. [Post your name changes in here so we know that you have changed your name!]()
  201.  
  202. # askadmins
  203. [Where you can ask admins to do stuff that either is above your power or deal with situations that you can't. (Some may need evidence to be carried out)]()
  204.  
  205. # absence
  206. [Post in here if your going to be away from the server.]()
  207. [NOTE]: Only post in here if its 2 or more days absence.
  208.  
  209. Forums
  210.  
  211. Although the forums are mostly a platform for SeniorMods and above, it is yet another way we provide for staff members and players to connect and for staff to answer any questions they may have.
  212. -You must not post farm (Commenting on old posts which are now irrelevant)
  213. -Lock threads that are resolved/finished
  214. -Delete any spam posts
  215. -Do not “sticky” any random posts
  216. -Remain professional
  217.  
  218.  
  219. Admin Roles
  220. Heald: Head of TS - Will iron out any bugs in the Teamspeak or add ranks etc.
  221.  
  222. Heald: Head of Build team - Deals with the build team and the builds we use such as practice maps etc.
  223.  
  224. BabyFlaqh: Head Of Screenshare - PM him if you would like a screenshare test or you need help with screen-sharing.
  225.  
  226. BabyFlaqh: EU Staff Mentor - PM him if you have any issues about anything
  227. ? - US Staff Mentor - PM him if you have any issue about anything
  228.  
  229. SS Guide
  230.  
  231. You need clear evidence that they are using the client at the time. You can't ban someone for having a vape file if you cannot prove that they were using it at the time.
  232.  
  233.  
  234. Recording:
  235.  
  236.  
  237. Before starting a screenshare you should always check if they are recording! This is because we do not want our methods leaked to everyone. You need to do this by going into there task manager and clicking the arrow at the bottom right corner of their screen going up. If you see a recording software open please get them to close it. Also close Nvidia.
  238. NOTE
  239. NOTE: Alright follow this guide to make sure the player is not using shadowplay.
  240.  
  241. 1. Find their up arrow on the bottom right and find the Nivdea logo. (If the logo is not there press windows key and s at the same time and search for Geforce or Shadowplay. If nothing pops up they don't use Geforce Experience. This is how the Nvidea logo should look like http://prntscr.com/fuv05h
  242.  
  243.  
  244. 2) Once you found the logo right click the logo and click the first option here https://prnt.sc/fuuh8w
  245.  
  246. 3) Once you clicked the first option this screen should pop up: https://prnt.sc/fuf0dh
  247. NOTE if he is NOT logged in this screen should pop up: https://prnt.sc/fuf0iy
  248.  
  249. If he is not logged in tell him to login with one of the options listed on the screen. If he is logged in go to step 4
  250.  
  251. 4) Alright if he is logged in and everything this screen would come up: https://prnt.sc/fuf0dh
  252. Now click on the second icon at the top: this one https://prnt.sc/fuf0dh
  253. Once you did that this screen should pop up: https://prnt.sc/fueyii
  254. Now you can see if he is recording or not. BUT DON'T STOP READING YET YOU NEED TO MAKE SURE HE CAN NOT TOGGLE A KEY SO HE STARTS THE RECORDING, CHECK STEP 5 FOR MORE INFO
  255.  
  256. 5. Alright this is the last and final step to make sure he can not record the screenshare. Go to this screen by clicking on the third icon at the top: https://prnt.sc/fuv90k
  257. once you did that you should be brought to this screen: https://prnt.sc/fuez1l
  258. NOTE: Make sure you're on the first tab called general (the first one) http://prntscr.com/fuvagt
  259. Now if you're there you should be fine. Now all you have to do is scroll down and find 'Share' This is what it should look like https://prnt.sc/fuez6x
  260. You can see it's turned on NOTE: YOU NEED TO TURN THIS ON BY CLICKING ON THIS http://prntscr.com/fuvb8e
  261. Once you clicked on that the circle should be at the left side and if it's at the left side he can no longer record. NOTE: Now close his Nvidea and go to the up arrow (at the bottom right of his screen) and right click Nvidea and click on Exit (last option) http://prntscr.com/fuvbxz
  262.  
  263.  
  264. Now you have successfully made sure the player is not be able to record the screenshare.
  265.  
  266. DON'T LET ME DOWN I BELIEVE IN YOU.
  267. -Experience
  268.  
  269.  
  270.  
  271.  
  272. TaskManager
  273.  
  274. Go to the taskbar and right-click on an empty space, then click on ‘Task-Manager’.
  275. Then scroll through the programs and look for recording softwares and applications such as:
  276. ClickyGone
  277. Hocus Pocus
  278. WinHide
  279. In the case they have these running, make them close it.
  280.  
  281.  
  282.  
  283.  
  284.  
  285. Ingame:
  286.  
  287. Tell them to press F3 And look for the version they are on. Then you should go to options, controls and bind their attack/destroy to the following buttons
  288. F5
  289. G
  290. Right Shift
  291. Grave
  292.  
  293.  
  294. Mods:
  295.  
  296. Go to their mods folder VIA Resource pack folder. In mods you need to check file sizes of each mod to see if they are the correct size (See bottom of screenshare guide for the sizes.) You also need to check if the mod is an approved mod. You can do this by doing !mods in discord and looking to see if the mods are on there. You also need to go to view at the top left corner of the screen and tick the box “Hidden items”
  297.  
  298.  
  299.  
  300. Checking if they have edited their recycle bin:
  301.  
  302. For this you need to view at the top left and make sure hidden items is ticked. Then go back to view, click on options on the far right, click view again and then scroll down a little bit until you see “Hide protected operating system files (Recommended) You need to untick this box, press yes and then press apply. Then you need to go to the bottom left corner of their screen, right click it press run and type in this code C:\$Recycle.bin If this was edited when you froze them or after you can ban them!
  303.  
  304. Note: If they use a theme pack or a different windows version just right click their windows logo on the bottom left and click on search and type in: folder options Then: File Explorer Options should pop up and then click the tab “View” Now you can do the show hidden files/hide protected operating system files stuff. Like stated above.
  305.  
  306.  
  307. Checking if they have a banned account:
  308.  
  309. For this you need to go to their .minecraft folder. Then look for a text file named ‘launcher_profiles’ and open it up with a text editing program (i.e Notepad). Once the file is opened, look for “name”: or “displayName”: . Then look at the their IGN’s and check their history and alternate accounts VIA ingame.
  310.  
  311.  
  312. Checking if they have deleted razer macros:
  313.  
  314. For this you need to go to the windows icon at the bottom left corner of their screen. Click on run and type in C:\ProgramData
  315. After this you scroll down to razer, synapse, accounts, click on the account folder and then there is a macro tab. To the right you see “Date Modified” If the macro folder was edited before the SS you can ban perm for Deleting macros before an SS
  316.  
  317.  
  318.  
  319. Temp file:
  320.  
  321. Go to the bottom left corner of your screen right click it press run and type in %temp%. At the top right where it says search temp search up “LGT.” if something like LGT2320420542070 comes up look at the date modified. If the date modified is when you froze him you can ban.
  322.  
  323. Schematic reach method.
  324. This is just as easy as breathing. Basically all you have to do is open their Schematic Mod with winrar or 7-zip then once you opened it you click on the file META-INF and if their are 3 LUNATRIUS Files you can ban them for Schematica Reach found in SS
  325.  
  326.  
  327.  
  328.  
  329. WIN Prefetch View
  330. Win Prefetch View is like a advanced Last Activity Viewer. You can check a lot more things in Win Prefetch View since it shows .dll files aswell you can also find  modern autoclickers in it
  331.  
  332.  
  333.  
  334. Luyten
  335.  
  336. Luyten is basically JDGui but better. just look for tickevents, mousevents, eventmod, pw and if you come across something and don't know what it is PM Experience or put it in #askadmins
  337.  
  338.  
  339.  
  340. Recent winrar files:
  341.  
  342. For this you need to go to a blank desk on your desktop, right click it press new, winrar archive and then open it. Once it is open go to your taskbar and right click the winrar. This is not enough proof to ban off however it is nice to see if they have anything sketchy to explore as you need to check date modified. This also works for 7zip.
  343.  
  344.  
  345.  
  346. Bl Squad SS Tool:
  347.  
  348. http://www.mediafire.com/file/0h1g31clk6s34mo/BLSquad+1.6.7.rar
  349.  
  350.  
  351. This is our temporary screen-share tool software. Once you have ran the exe you click the arrow pointing to the right and then the bl squad ss tool is loaded.
  352.  
  353.  
  354.  
  355. Recent items:
  356.  
  357. This is 1 of the key things to do. Go into shortcuts and click on recent items. Then click on date modified. If you see anything fishy please make them open it up do not be afraid to ask them to open something. You can only ban if they have used the client at the time however if you see a vape folder EG Y23r2 in a winrar you have a good idea what to look for in the rest of the screenshare.
  358.  
  359.  
  360.  
  361. Prefetch:
  362.  
  363. Once opened at the top right corner it says “Search prefetch” type in vape, autoclick and clicker. If seen any of these check the date modified. If it was modified when frozen/when they went on valux you can ban.
  364.  
  365.  
  366.  
  367.  
  368.  
  369.  
  370.  
  371.  
  372. Logs:
  373.  
  374. Say if you look in their prefetch and you find a vape file used yesterday at 7:20PM that is not enough to ban straight away. You should look in their logs to see if they were on valux at the time they used the client. If they were you can ban!
  375.  
  376.  
  377.  
  378. Downloads:
  379.  
  380. In this file you need to slowly scroll down finding any sort of autoclickers/ghost clients. If found you cannot ban straight away you need solid proof they are using it.
  381.  
  382.  
  383.  
  384. Cheatsmasher:
  385.  
  386. Cheatsmasher is located in the “Programs” section of the screenshare tool. When run, if anything like ‘ net.minecraft - com.minecraft etc Pops up they are clean unless It says eg. com.minecraft.something.killaura
  387.  
  388. When cheatsmasher runs, if you see an L string do not ban for it! It is simply a message and it usually amounts to nothing when it comes to cheat smasher.
  389.  
  390.  
  391.  
  392. Everything:
  393.  
  394. In here you search for stuff like autoclick, clicker, vape, spook etc. If anything pops up look at the date modified of it. Things you can search for: aris, free, mathlesson, veneclicker, .jar,
  395.  
  396.  
  397.  
  398. USBDeview:
  399.  
  400. Once this is loaded click on the “Last plug/unplug date.” This will get it all in order for you. If a USB was removed when you froze them you can ban them
  401.  
  402.  
  403.  
  404. Luyten
  405.  
  406. Luyten is basically JDGui but better. just look for tickevents, mousevents, eventmod and if you come across something and don't know what it is PM me on discord or put it in #askadmins
  407.  
  408.  
  409. Ingame account switcher reach
  410.  
  411. If you think the user is using in game account switcher all you have to do is open it with winrar or 7zip and then go to com then github then mrebhan then ingameaccountswitcher. If there are 2 classes they are using reach. 1 is legit.
  412. Batty Coords Reach
  413.  
  414. If you think the player is using batty coords reach all you have to do is open it with winrar or 7zip and then click batty then click UI and then if you see a folder named ‘Server’ you can ban them for having batty coords reach.
  415.  
  416. Version checker reach
  417.  
  418. If you think he is using version checker reach open it up with winrar or 7zip and then go to com then go to dynious then go to versionchecker then asm. If there is more then 1 file class in there you can ban them for versionchecker reach
  419.  
  420.  
  421. Last Activity Viewer:
  422.  
  423. Tell the player open it - it shows all recently opened exe’s and other files.
  424. While vape itself isn’t shown, applications it uses are, which can let you know if was just recently closed or opened. For example, this appears when I open vape -
  425.  
  426. You should also search for things like Vape itself and see If they have been using cracked vape in the past and check their logs to make sure they weren’t on Valux at the time. On top of this, it can be used to find autoclickers. When on the program, doing ctrl + f and typing ‘clicker’ or the autoclickers listed below you will see them. Look at the date they were launched don't just ban them if they have 1.
  427. Things you can search for: mathlesson aris, .jar
  428. Process hacker - Vape method
  429.  
  430. Process Hacker - Explorer.exe
  431. Alright so this is something new and pretty simple. All you have to do is open up explorer.exe and then click on the ‘General’ tab. If the time at the part Started is when you froze them or after you can ban him for Restarting explorer.exe before SS Example: Mired gets frozen at 21:10 and you check his explorer.exe and it says 21:14  (after you froze him you can ban him same concept if they edited it before the ss (just like editing recycle bin before ss) Example: xExperience gets frozen at 21:09 and is in Teamspeak at 21:11 and sends anydesk code at 21:13 but you check his explorer.exe and it says 21:08 you can ban him [Same concept as editing recycle bin bin before SS)
  432.  
  433.  
  434.  
  435.  
  436.  
  437. Process Hacker - Vape
  438. ?
  439. Firstly you go into process hacker scroll down to javaw.exe. Double click it press memory, strings and set the strings to 4. Press ok and then wait for the strings to have loaded in. Once they have loaded in at the bottom left corner it says filter, click it and press contains case insensitive and then type in
  440. NOT YET ;)
  441. A normal minecraft will have none of these loaded so you can ban.
  442. ?
  443.  
  444.  
  445. Process hacker - Drek method
  446.  
  447. Firstly you go into process hacker scroll down to javaw.exe. Double click it press memory, strings and set the strings to 4. Press ok and then wait for the strings to have loaded in. Once they have loaded in at the bottom left corner it says filter, click it and press contains case insensitive and then type in
  448. NOT YET ;)
  449. (if anything related to drek_session pops up when you search drek, ban them)
  450. !!!Be sure to check all these 3 methods!!!
  451. A normal minecraft will have none of these loaded so you can ban.
  452.  
  453.  
  454.  
  455. Process hacker - Kurium method
  456.  
  457. Firstly you go into process hacker scroll down to javaw.exe. Double click it press memory, strings and set the strings to 4. Press ok and then wait for the strings to have loaded in. Once they have loaded in at the bottom left corner it says filter, click it and press contains case insensitive and then type in
  458. NOT YET ;)
  459. Clean = NOT YET ;)
  460. Cheating = NOT YET ;)
  461.  
  462.  
  463.  
  464. Process hacker - Incognito method
  465.  
  466. Firstly you go into process hacker scroll down to javaw.exe. Double click it press memory, strings and set the strings to 4. Press ok and then wait for the strings to have loaded in. Once they have loaded in at the bottom left corner it says filter, click it and press contains case insensitive and then type in:
  467. Remember Credentials
  468. A normal minecraft will have none of these loaded so you can ban.
  469.  
  470.  
  471.  
  472. Process hacker - Merge Method
  473.  
  474. Firstly you go into process hacker scroll down to javaw.exe. Double click it press memory, strings and set the strings to 4. Press ok and then wait for the strings to have loaded in. Once they have loaded in at the bottom left corner it says filter, click it and press contains case insensitive and then type in
  475. NOT YET ;)
  476. A normal minecraft will have none of these loaded so you can ban.
  477.  
  478. Spooker
  479. Firstly go to process hacker and scroll down to explorer.exe
  480. Right click it and click on properties
  481. Click on memory and untick this box on the far left called hide free regions
  482. Click on strings - Tick ALL the boxes and set it to 4 and make them search.
  483. Then click filter contains case insensitive
  484. Type in .jar This is what it looks like if they are using spooker https://gyazo.com/b93895497f79cf97b93fc05f608be025
  485. “oshi-core-1.1” If you see this ban then for using spooker.
  486.  
  487.  
  488. Special detectors:
  489.  
  490. This is quite self explanatory. Open all 3 of them and then if there is a cheat found in any of them you can ban them.
  491.  
  492.  
  493.  
  494. Search files:
  495.  
  496. For this all you need to do is click on all of the tabs and see if anything sketchy comes up. If anything comes up which you think is sketchy, look into it a bit more for example look at it in last activity viewer and see when it was last used. This checks your skype received files, your TS3 Cache and your java so there is no need to check this in roaming when this is done.
  497.  
  498.  
  499.  
  500. Search IGF
  501.  
  502. For this you need to press import mods and click on all of those mods 1 by 1. At the bottom right, it says hidden folder. If 1 of them says “Yes” You can ban them. Do the same for their versions.
  503.  
  504.  
  505.  
  506. Scanner:
  507.  
  508. This is a very important item to this tool. It is the same as the “search IGF” tab you scroll through the mods. If cheat detected comes up on any mod APART FROM FASTCRAFT you can ban them as they most likely have something called “eventmod.class which is a class in some mods that can lower KB. Fastcraft always comes up with cheat detected so do not ban for that. There are many edited mods EG Cps mod reach.The normal versions of all these mods should not have cheat detected so if it does you can ban.
  509.  
  510.  
  511.  
  512.  
  513.  
  514.  
  515. CPS MOD:
  516. ?
  517. CPSMod (Reach) How to find CPSMod reach fast and easy. 1. Open with Winrar or 7-zip, if they don’t have winrar tell him to download it. 2. Go to pw then go to cinque then go to cpsmod then  if you see CPSMod.class check what the KB is if it is 9.374 you you can ban him for cps reach.
  518.  
  519. 2nd Open their Cpsmod with winrar and go to pw>cinque>cpsmod then drag the CPSMod.class on the desktop then let them open BLSquad and go to the tab 'Scanner'. Then click on the three dots under 'Search Cheat' and import the CPSMod.class file and click search cheat.
  520.  
  521.  
  522.  
  523. Eventmod.class:
  524.  
  525. Event mod is a class in some mods which can lower KB. This is found by the BLSquad scanner where it says cheat detected. If you want to be extra sure you can right click on the mod open it up with winrar and look through all the classes until it says Eventmod.class which you can ban for.
  526.  
  527.  
  528.  
  529. Keystrokes v2 Reach:
  530.  
  531. Open keystrokesmod with winrar or 7-zip if they don't have any of these let them download it. Then once opened with winrar or 7-zip go to pw>cinque>keystrokes and then look for KeystrokesMod.class. If the kb is 6.845 you can ban him for keystrokes reach.
  532. ?
  533. 2nd method keystrokes reach.
  534.  
  535. Open their keystrokes mod with winrar or 7-zip and then go to pw>cinque>keystrokes and look for KeystrokesMod.class once you found it drag it on the user's desktop. Then open blsquad and go to scanner and click the 3 dots under 'Search Cheat' then import the keystrokesmod.class and click 'Search Cheat'
  536. ?
  537.  
  538.  
  539. Timechanger client:
  540.  
  541. Open his timechanger mod with winrar or 7-zip, If they don't have any of those let them download winrar or 7-zip. If they already have winrar or 7-zip tell him to go to pw>cinque>timechanger and then find TimeChangerNetHandler.class NOTE THERE ARE 2 TimeChangerNetHandler.classes make sure you don't get the one with the cash icon ($). If his TimeChangerNetHandler.class is 17.486 ban him for timechanger client.
  542.  
  543.  
  544.  
  545. Version checker client:
  546. ?
  547. To detect this client, open their Version Checker mod in Winrar or 7zip. Go to the directory “[1.7.10] VersionChecker.jar\com\dynious\versionchecker\asm” and if there is more than 1 class file then they are cheating.
  548.  
  549.  
  550.  
  551. TCPNoDelayMod 1.0 (MERGE):
  552.  
  553. What you need to do is right click  the TCP Mod and click on properties. If the TCP was editedbefore the SS where it says “Date Modified” you can ban them for merge.
  554. ?
  555.  
  556.  
  557.  
  558.  
  559.  
  560.  
  561.  
  562.  
  563.  
  564.  
  565.  
  566.  
  567.  
  568.  
  569.  
  570.  
  571. MACintosh SS Guide
  572. Recycle bin:
  573.  
  574. To see if they have edited their recycle bin on a mac, enter there recycle bin right click in a blank space and click on Get Info in here you will “date modified”. If they edited when frozen ban them
  575.  
  576.  
  577. Minecraft:
  578.  
  579. Make them log out and look at the home-screen. Don’t let them exit minecraft. It should say how many mods are used. Bare in mind forge uses 3 mods keep this in mind.
  580.  
  581.  
  582.  
  583. Mods:
  584.  
  585. Tell them to go to there .minecraft and get them to right click there mods folder without going in it and click on get info. If there mods was edited before the screenshare, ban them. Then go into there mods folder and check if they have event mod in there mods by searching all the mods. If they have event mod, ban them.  Also go into there mods folder and count the mods. If it is an uneven amount of mods you can ban for editing mods before ss. Look at the KB of ALL the mods. If the KB looks fishy please tell them to go to where they downloaded it and make them download a new 1 to see if it is the correct KB. Here is the mod sizes list
  586.  
  587. TimeChanger-1.0 : 15KB
  588. ArmorStatusHUD v1.26 : 25-27KB
  589. ArmorStatusHUD v1.27 : 25KB
  590. ArmorStatusHUD v1.28 : 26-27KB
  591. BspkrsCore v6.14-v6.16 : 193-195KB
  592. DirectionHUD v1.23-v1.24 : 24KB-23KB
  593. OptiFine_1.7.10_HD_U_C1 : 849KB
  594. OptiFine_1.7.10_HD_U_D3 : 1,166KB
  595. Optifine_1.7.10_HD_U_D4 : 1,167KB
  596. PlayerAPI v1.4 : 260-276KB
  597. Rei’s MiniMap 1.7.10 : 179KB
  598. VoxelMapNoRadar: 419kb
  599. StatusEffectHUD v1.26 : 23KB
  600. StatusEffectHUD v1.27 : 24KB
  601. ToggleSneak v3.0-v3.05 : 20-24KB
  602. TcpNoDelay v1.0-2.0 : 4-6KB
  603. Cps Mod: 9-10kb (11kb is the client)
  604. Keystrokesmod v1-2: 11KB
  605. Keystrokesmod v3: 13-14KB
  606. PingDisplay v1 : 8-9KB
  607.  
  608.  
  609.  
  610.  
  611.  
  612.  
  613.  
  614.  
  615. Discord:
  616.  
  617. Tell them to look in there discord. If they are in any discords eg merge make them look in it. If they then deny having the client when you confront them at the top right search there discord user name. See if you can get enough proof of them having merge if you can you may ban. However there are many other ways of you finding out if they have merge as listed down below.
  618.  
  619.  
  620.  
  621. Versions:
  622.  
  623. Click on the version folder and see if it has been edited.
  624.  
  625.  
  626. Merge:
  627.  
  628. If they have TCPNoDelayMod in there mods folder make them right click it. Click on ‘Get Info’ and then there is a tab called ‘More Info.’ Click that if it is linked to the merge website, ban them.
  629.  
  630. Drek:
  631.  
  632. If they have CPSMod in their mods folder make them right-click it. Then click on ‘Get Info’ and then there is a tab called ‘More Info.’ Click that if it is linked to the drek website, ban them.
  633.  
  634. Recent Items:
  635.  
  636. At the top left corner click the apple icon and click recent items. You cannot ban right off this you need to look into this more.
  637.  
  638.  
  639. Razer Synapse:
  640.  
  641. This is exactly the same as windows check if they have macros
  642.  
  643.  
  644. Google:
  645.  
  646. Check the history. As they cannot use vape on mac type in Merge and drek see if they have logged into the websites. Also type in “Google activity” at the search browser and click on the top 1. Make them sign into the gmail account and then go through everything.
  647.  
  648.  
  649. Finder:
  650.  
  651. Find the “Finder” icon at the far left of the applications they have open https://gyazo.com/66c2c84b7484fbcf2dd84afcebea7ed3 (the far left 1 at the bottom)
  652. This is basically like the “everything” tab on BlSquad SS Tool so you should search things like drek, autoclickers etc. You cannot get vape on a mac so do not search that and Merge is a TCPNoDelay1.0 in the mods folder as explained above how to detect it so only search all autoclickers and drek.
  653.  
  654.  
  655.  
  656.  
  657.  
  658.  
  659. Essential Commands:
  660. ./ban (IGN) (Reason) (Time)
  661. ./mute (IGN) (Reason) (Time)
  662. ./sctoggle (Toggle staff chat on/off)
  663. ./ss (IGN) Used to freeze someone
  664. ./hist (ign) Shows a player’s punishment history
  665. ./alts (IGN) shows a players linked accounts (alts)
  666. ./unfreeze if the player is clean use this.
  667. ./mutechat mutes global public chat
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement