○ Once open, right click on the program on their taskbar. ○ Go to their desktop, Right-Click and press 'New', click on WinRar Archive. ○ Download UserAssistViewer on their computer. ○ Open the program and look through their recently opened files ban for anything suspicious found. ○ Download LastActivityViewer on their computer. ○ If it was edited before or near the screenshare, you may ban them. ○ Once in the accounts folder, check the date modified on the Macros folder. ○ Go to 'Razer', then 'Synapse', then 'Accounts', then click on their account folder. ○ Press Windows Key R, type in C:\ProgramData and press enter. ○ If you find something used recently, ban them. ○ Look through their recently opened items and search for anything suspicious. ○ Scroll down to Microsoft, then click Windows and then click Recent Items. ○ Press Windows Key R, type in %appdata% and press enter. ○ Open a new minecraft launcher (like you would do when you want to play Minecraft), and navigate to 'Launch Options', Click on their current ran version (that you looked at in Snooper Settings), and if they have '-noverify' in the JVM Arguments, you may ban them. If it was recent, you may ban them for Cringed Client. ○ Go in-game and /history all of the account names you found with the previous step and check if any of them are banned, if so ban them for Ban Evasion. (Those people bypass /alts), which is why you ALWAYS want to do this. People who cheat on alts with VPN and people who have a banned account or have a Dynamic IP will be caught this way. ○ IMPORTANT:Open launcher_profiles.json - CTRL F - Search for displayName ○ After checking the mods folder, go back to the. ○ If bspkrsCore is corrupted when you try to open it, you may ban them too. ○ If any mods are way different sizes, decompile the mod with 'Luyten' and go through all packages to look for suspicious code, unless you're 100% sure you can ban them. ReiMinimap without Entity/Player Radar (179kb)Īll of the mods have to be around this size. ○ Check the file size of all mods, and make sure they are correct.īatty's Coordinates PLUS Mod for Forge-1.7.10_1.6.0 (18kb) minecraft folder and open their mods folder (this is only if they're on Forge). ○ If they have modified their Recycle Bin before the screenshare or near the same time, you may ban them under any circumstances. ○ If nothing shows up, click on view at the top, click on Options at the right, go to the View tab, click on 'Show hidden files, folders and drives' and also uncheck 'Hide protected operating system files (Recommened)' ○ Press Win R on your keyboard to open RUN ○ If you find anything sketchy, contact me if you're curious as to what it is. ○ Look for 'ClickyGone', 'WinHide', 'HocusPocus' too. ○ Look for recording softwares that could still be opened. ○ When you've opened their task manager, check for anything suspicious. ○ If they have RADEON (which is for AMD), open it and click on the ''RELIVE'' button and make sure its off. Open it, click on the InGame Overlay at the top (or press Alt Z for ShadowPlay) and make sure the recording is off. Open Nvidia GeForce Experience (check if they have it, not only by hovering over everything, just go through their pc and search for it). ○ Hover over every application
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |