Hello BabyVictor, If you want to show proof you can use this guide to prove yourself. If possible back up, Your computer to moments before you were banned. DO NOT EDIT ANY FILES or programs, if you do so, you will have no proof. If you have edited your VERSIONS, then do the full guide below. IF NOT, then show screenshots of all your folders etc... If you're still having problems doing it, simply make someone SS you. GUIDE: .MINECRAFT SEARCH • First, check their mods folder, if they are using a unallowed mod, ban them for that, but if they have a forge mod file over these sizes, it could be a ghost client ArmorStatusHUD 25-26 KB StatusEffectHUD 23-24 KB DirectionHUD 23-24 KB bspkrsCore 193-194 KB Batty’s Coordinates ToggleSneak 20-24 KB PlayerAPI 276 KB CPS Mod 9 KB Keystrokes Mod 11 KB ReiMinimap without Entity/Player Radar 179 KB ….etc • Have them go back and enter their versions, have them go to their latest version, can be found by looking in the date modified section of their folder. And have them open it and, if forge, have them open their natives, if vanilla, don't worry about it. • Now have them enter their screenshots and look at their screenshots and if anything recent is a client, then ban. (Most ineffective) • Now have them open their latest log (it will be a text file entitled latest). Now have them do Control+F and have them search: .bind .killaura .triggerbot etc. ROAMING SEARCH • Have them open TS3Client, have them open cache if a folder called Lemote pops up (either in regular cache or in the folder remote), ban them. (cracked spook) • Have them open up the folder called “Java”, if there is a filed called lib, ban them. • Tell them to open up the microsoft folder, then windows, then recent items. If you see anything such as an injectable client, or the folder or anything such as VAPE/VAPENATION, or if you see a vape injec folder, which will most likely look like Y1s8MW or just any mix of letters and numbers, ban them. Make sure it is a client though. File explorer search %TEMP% • Have them go into their %temp% (same thing as %appdata%) and make them type in the top right JNA, if anything such as JNativehook or anything like that, the day of you screensharing that person, ban them. Those will pop up with the hacked clients from McRefill • Have the player go into their file explorer, Make them open up this part https://gyazo.com/9a3a2d857c1e9c8d05ebf1c5bc7f0367 , and tell them to copy and paste this into it, C:\$Recycle.Bin . The date modified to the right of recycling bin, is the last time that they edited, or deleted/tampered with something in their recycling bin. (as shown here) If that date modified was when you froze that player, ban them. They edited their recycling bin while frozen. Winrar archive. • Make them go to their desktop, click new then make them open WinRAR archive. Make them open it, minimize it, then make them right click it on their taskbar, that will show you what they have recently opened, if you see any vape injector files, or any ghost client, (a vape injector folders will look like this, WYM91y3 It will just be a bunch of randomized letters and numbers.) Ban them. Bucky Roberts • Tell the player to open up the exe file that you made them download called Bucky Roberts 3.2.exe , and have them open it. If there are detected cheats it will say “Cheats found” That doesn't mean to ban them straight away, but if that pops up they are most likely cheating, continue with a thorough screenshare. If there are no cheats found, it will just say “No Cheats found” First things you should do. • First, run cheat smasher and cheat detector, if anything pops up, if you dont understand what it means, ask a higherup or me. If anything on the cheat detector says failed, ask me but from then on continue the ss. Prefetch. • Have them click on “prefetch” in the screenshare tool. Have them type in the top right where it says “Search Prefetch” Vape. Something like VAPELAUNCHER.EXE , if the date is the same day that you screenshared him, while he was on the server ban him. That is cracked vaped. Click the programs tab on the top of the screen Process Hacker 2. • On the ss tool, have them open up process hacker. Have them scroll down to the bottom and have them double click the file javaw.exe. Go to memory, then have them click strings, and change 10 to 4 and press okay. Now have them do filter -> CONTAINS (Case Insensitive). Have them type in these following words: Triggerbot Aimbot Smoothaim Autoclicker Vape Aimassist Killaura Radar (if more than one thing comes up, ask someone to help if you don't understand) If anything comes up, search it. It has to be clear enough to be a client. And if any of these are there ban them, ask questions if you don't know. Then, make them open their browser (google chrome or anything, if they have more than one do this with both of them) then find the browser in process hacker 2, right click it, Go to memory, then have them click strings, and change 10 to 4 and check off image and mapped, Now have them do filter -> CONTAINS (Case Insensitive). Then type in vape, and vape.gg This will show you all of the times that the player has looked up, or has been on the website vape.gg, even if they have cleared their history. If there are things such as vape.gg/download, or vape.gg/log-out they have a vape account and have downloaded the client. Search Everything • Have them click search everything in the ss tool, and have them install it without messing with it, just click Ok, next and finish. Once it has loaded and all of those files pop up, make them type this in Cracked Booter Vape Keybinds Spook Tomato Harambe Inject… etc. Also, if you see a suspicious folder or item earlier from the screenshare, you can make them type that in, to learn more about it. If any of those above pop up, ban them. Special Detector #02 • Have them run this, it will list all of the mods that the player is using, if one is tempered or messed with in anyway, it is a ghost client. Ban them, If everything is fine, it will say “Nothing is found” They are clean. Special detector #03 • Have them open this, and click scan. If it is a green thing waving they are clean. If it is a red thing waving, ban them. Amhanet Software • Make them open Procces hacker 2. • Find the process “javaw.exe” • Right click it and press properties • Click the memory tab and UnCheck Hide free regions, and press strings. • Remove 10 and write 4, check image and mapped and click Ok. • After loading, press Save and save it on the desktop. • Import the text file in Amhanet Software in blsquad, and click squad. If it says nothing found, they are clean. If it says “Injection client found” Ban them. I hope you figure this out, good luck. +1
Join our Discord