http://www.crossfire.nu/?x=news&mode=item&id=2725UPDATE This now effects Call of Duty -
If you are a Call of Duty player who did not read this, make sure you do!As many of you have seen nC have today unleashed their latest weapon and this is how it works.
The source of their new found ability comes from "pnkbsra / b .exe" - basically they've isolated that what this does is scan the entire virtual memory for vm signatures and they find certain vm signatures that PB will kick for. That pnkbsra scans the entire virtual memory, so if you've MSN or iRC open at the time, and you get sent this message when you're connected to PB then it will show up in your VM and you will get kicked.The method they used to get to this conclusion was reverse engineering - their justification for claiming that is legal is because 3 different virus scanners pick PB up as a trojan and thus is a threat and its legal to reverse engineer a threat (apparently).
This has been explained further by Fried Fish Tail;
"Anyway, the way GAMEHACK bans done is the following: PB detects that specific file (aimbot1.menu) and its contents, so all they had to do is paste some lines from the file to and IRC channel you're idling on and when PB scans mIRC.exe's memory - it finds the pattern and you're getting kicked.
An example of a string PB is looking for: *removed by admin* (with quotes)
*removed by admin*"
And everyone who will play anytime whilst that mIRC session is running will get kicked.
What they posted all over the irc:
*removed by admin*"
This information was all forwarded to Clanbase earlier this week, aswell as punkbuster being kept in the loop of todays activities courtesy of SplashDamge.
Addition information
IRC or MSN Logs have nothing to do with the Gamehack kicks! People are already saying "delete logs and dont do this", but thats not necescary,
closing irc should terminate the string from memory, and this string on the memory is the only problem. (tnx2meez)
THIS INCLUDES READING ARTICLES, JOURNALS AND NEWS ON CROSSFIRE with the strings!
***UPDATE***
Another string has been circulated which results in people being kicked for '(MULTIHACK) #70476'. It's likely that there's an endless amount of strings which will result in people being banned for all kinds of reasons.
