search

ufrisk / pcileech

Direct Memory Access (DMA) Attack Software
GNU Affero General Public License v3.0
5.02k stars 735 forks source link

Issue with valorant game on my squirrel/r03/r04 #205

Closed echostationunderground closed 2 years ago

echostationunderground commented 2 years ago

I thought maybe here my card had died but I have a squirrel and a r03 and a r04......and i tried it on all of them. Starting today my cards seem to stop working....but only when the valorant game (vanguard anti-cheat doing IOMMU?) is open? Some things i have done..

-Disabled IOMMU in bios -Disabled preboot DMA prevention in bios -Disabled kernel DMA protection in Windows

If I try pci screamer dump command to confirm it... you can see in the screenshot.

screamer

ufrisk commented 2 years ago

I'm not doing cheats and the pcileech project is not aimed at cheats (even tho I know it's being used for it) so I'll close this issue.

Generally if the anti-cheat have started to use the IOMMU disregarding user bios settings it's not much you can do about it. You can try to enable VT-d in BIOS so that Windows will pick up on it (and hog it from the anti-cheat) often it works anyway if the computer is unlocked. Or find a white listed device and clone it instead. Once IOMMU fully enabled as it seems like it is in this case it's game over.

itsgamerdoc commented 2 years ago

giphy (11)

0xGabriella commented 2 years ago

im sure it wont be stable enough for a long-term implementation due to so many false-positive possibilities.

echostationunderground commented 2 years ago

@S1ckZer Hello thx for the reply. Can u give more context here I tried with engaging HVCI with core isolation feature on my dma computer. I still have this issue though. Am I missing something?

Edit----

Some additional infos. This computer is Windows 11 build 22000.856 --- Issue happens with HVCI feature on or off.

echostationunderground commented 2 years ago

@S1ckZer still happens with these settings too :| could it be Windows 11? what windows version u on?

S1ckZer commented 2 years ago

I'm on the latest Windows 10 version. Windows 11 is maybe different

echostationunderground commented 2 years ago

@AiMLOC

I downgrade to Win 10 today ver 19044. Have they started to use IOMMU again? I cannot r/w memory now when the game starts.It worked for a couple days earlier.

dcassets commented 2 years ago

Same thing here. Just gave it a test on Windows 10 21H2. Game closed, reading no problem. Game open, reading failed Game closed, reading no problem

Using Raptor with custom firmware from DamnCheaters.

dcassets commented 2 years ago

@echostationunderground i dont own a cheat for Valorant. But can you test to start Valorant, directly start cheat and read memory and keep the dma connection open.

It looks that when youre keep reading memory and start Valorant the dump is stil working fine. Only after you start dumping when the game is started for around 30 seconds the dump fails.

S1ckZer commented 2 years ago

@echostationunderground i dont own a cheat for Valorant. But can you test to start Valorant, directly start cheat and read memory and keep the dma connection open.

It looks that when youre keep reading memory and start Valorant the dump is stil working fine. Only after you start dumping when the game is started for around 30 seconds the dump fails.

Will not work they force loading IOMMU

dcassets commented 2 years ago

@echostationunderground i dont own a cheat for Valorant. But can you test to start Valorant, directly start cheat and read memory and keep the dma connection open. It looks that when youre keep reading memory and start Valorant the dump is stil working fine. Only after you start dumping when the game is started for around 30 seconds the dump fails.

Will not work they force loading IOMMU

Sure? I was dumping memory and could start and play without problems and dumping was stil working

S1ckZer commented 2 years ago

This is so easy to fix.

after I have found another possibility to use dma I will share my first fix with you and this rat's.

Is German but you will find out

unknown Step 2. gpupdate /force Step 3. Restart Pc

dcassets commented 2 years ago

This is so easy to fix.

after I have found another possibility to use dma I will share my first fix with you and this rat's.

Is German but you will find out

unknown Step 2. gpupdate /force Step 3. Restart Pc

Nice found. Can give it a try in a few hours. Wil post English for the rest.

echostationunderground commented 2 years ago

I jhave tried this on 10/11 and it does not work for me either case. Very annoying to escape from UEFI lock because you must delete variables to unlock annoying shit agian. If this works for you that is great and also very strange. Does not work for me on 2 computers,

S1ckZer commented 2 years ago

I jhave tried this on 10/11 and it does not work for me either case. Very annoying to escape from UEFI lock because you must delete variables to unlock annoying shit agian. If this works for you that is great and also very strange. Does not work for me on 2 computers,

All I can say is try it until it works. Works for 15 other people too.

Xyrem commented 2 years ago

valorant-cheater

dcassets commented 2 years ago

I jhave tried this on 10/11 and it does not work for me either case. Very annoying to escape from UEFI lock because you must delete variables to unlock annoying shit agian. If this works for you that is great and also very strange. Does not work for me on 2 computers,

Same here. No way to get it working.

waryas commented 2 years ago

That's what you get for buying devices for cheating that aren't intended for cheating instead of trying to get around it in a smarter way. Throwing more money for cheating doesn't make it foolproof. Some people don't learn.

FocuzJS commented 1 year ago

For sake of correctness, I'll just leave this here: https://www.unknowncheats.me/forum/anti-cheat-bypass/584445-vanguard-prevent-dma.html You are all far from correct.