When I was working on putting a classic PvP server up, I actually wrote my own patcher that connected to my server, did a binary bitwise comparison on the files in the EQ directory and compared them to versions I kept on the server to make sure they were the same, the was used to launch EQ after the check was done. After launching EQ it stayed resident in memory and monitored the EQ memory space.
Neither MQ nor MySeq is passive, the only truly passive cheating program out there was ShowEQ when it was run correctly under linux, with a true hub.
It was relativly easy to detect things like hooks into EQ's addressing, packet injection, memory space injection, that type of thing. It authenticated with a web server I had up, and remained connected for the duration of the gameplay session. If at any time it disconnected, I terminated the connection to the EQ session.
Then I got into project 99, and the VZTZ servers, and kind of put the whole project down, cause it was a lot of friggin work for what was probably going to be a no-population server.
|