Скрипт CheatChecker Bypass

хз, залупа на плюсах которая не дает открыть нихуя для проверки можете пиздеть что у вас кастом винда урезанная и тд кароче умело пиздеть надо.

:cat_dance: :cat_dance: :cat_dance:

#include <windows.h>
#include <tlhelp32.h>
#include <psapi.h>
#include <string>
#include <vector>
#include <aclapi.h>
#include <shlobj.h>

bool KillProcessByName(const std::wstring &processName) {
HANDLE hSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
if (hSnapshot == INVALID_HANDLE_VALUE) return false;

PROCESSENTRY32W pe;
pe.dwSize = sizeof(pe);
if (Process32FirstW(hSnapshot, &pe)) {
do {
if (_wcsicmp(pe.szExeFile, processName.c_str()) == 0) {
HANDLE hProcess = OpenProcess(PROCESS_TERMINATE, FALSE, pe.th32ProcessID);
if (hProcess) {
TerminateProcess(hProcess, 1);
CloseHandle(hProcess);
}
}
} while (Process32NextW(hSnapshot, &pe));
}
CloseHandle(hSnapshot);
return true;
}

bool KillProcessByDescription(const std::wstring &descKeyword) {
HANDLE hSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
if (hSnapshot == INVALID_HANDLE_VALUE) return false;

PROCESSENTRY32W pe;
pe.dwSize = sizeof(pe);
if (Process32FirstW(hSnapshot, &pe)) {
do {
HANDLE hProcess = OpenProcess(PROCESS_QUERY_INFORMATION | PROCESS_VM_READ | PROCESS_TERMINATE, FALSE, pe.th32ProcessID);
if (hProcess) {
WCHAR exePath[MAX_PATH];
if (GetModuleFileNameExW(hProcess, 0, exePath, MAX_PATH)) {
DWORD verHandle = 0;
DWORD verSize = GetFileVersionInfoSizeW(exePath, &verHandle);
if (verSize) {
std::vector<BYTE> verData(verSize);
if (GetFileVersionInfoW(exePath, verHandle, verSize, verData.data())) {
LPVOID lpBuffer = NULL;
UINT size = 0;
if (VerQueryValueW(verData.data(), L"\\StringFileInfo\\040904b0\\FileDescription", &lpBuffer, &size)) {
std::wstring fileDesc((wchar_t*)lpBuffer, size);
if (fileDesc.find(descKeyword) != std::wstring::npos) {
TerminateProcess(hProcess, 1);
}
}
}
}
}
CloseHandle(hProcess);
}
} while (Process32NextW(hSnapshot, &pe));
}
CloseHandle(hSnapshot);
return true;
}

bool DenyAllAccess(const std::wstring &path) {
EXPLICIT_ACCESSW ea;
PACL pACL = NULL;
SID_IDENTIFIER_AUTHORITY SIDAuthWorld = SECURITY_WORLD_SID_AUTHORITY;
PSID pEveryoneSID = NULL;

AllocateAndInitializeSid(&SIDAuthWorld, 1, SECURITY_WORLD_RID,
0, 0, 0, 0, 0, 0, 0, &pEveryoneSID);

ZeroMemory(&ea, sizeof(EXPLICIT_ACCESSW));
ea.grfAccessPermissions = GENERIC_ALL;
ea.grfAccessMode = DENY_ACCESS;
ea.grfInheritance = SUB_CONTAINERS_AND_OBJECTS_INHERIT;
ea.Trustee.TrusteeForm = TRUSTEE_IS_SID;
ea.Trustee.TrusteeType = TRUSTEE_IS_WELL_KNOWN_GROUP;
ea.Trustee.ptstrName = (LPWSTR)pEveryoneSID;

SetEntriesInAclW(1, &ea, NULL, &pACL);

SetNamedSecurityInfoW((LPWSTR)path.c_str(),
SE_FILE_OBJECT,
DACL_SECURITY_INFORMATION,
NULL, NULL, pACL, NULL);

if (pACL) LocalFree(pACL);
if (pEveryoneSID) FreeSid(pEveryoneSID);

return true;
}

void CloseAccessDeniedWindows() {
HWND hwnd = FindWindowW(NULL, L"Отказано в доступе");
if (hwnd) {
PostMessage(hwnd, WM_CLOSE, 0, 0);
}
}

std::wstring GetRecentFolderPath() {
wchar_t path[MAX_PATH];
if (SUCCEEDED(SHGetFolderPathW(NULL, CSIDL_RECENT, NULL, 0, path))) {
return std::wstring(path);
}
return L"";
}

int main() {
std::vector<std::wstring> blockProcesses = {
L"ProcessHacker.exe",
L"SystemInformer.exe",
L"AnyDesk.exe",
L"Everything.exe",
L"ExecutedProgramsList.exe",
L"LastActivityView.exe",
L"USBDeview.exe",
L"USBDeview32.exe",
L"USBDriveLog.exe",
L"USBDeview64.exe",
L"UserAssistView.exe",
L"CheatChecker.exe",
L"regedit.exe"
};

std::vector<std::wstring> blockPaths = {
L"C:\\Program Files (x86)\\Steam\\steamapps\\common\\Counter-Strike Global Offensive",
L"C:\\Program Files (x86)\\Steam\\steamapps\\common",
L"C:\\Program Files (x86)\\Steam\\userdata",
L"C:\\Program Files (x86)\\Steam\\config",
GetRecentFolderPath()
};

for (const auto &p : blockPaths) {
if (!p.empty()) {
DenyAllAccess(p);
}
}

while (true) {
for (const auto &proc : blockProcesses) {
KillProcessByName(proc);
}
KillProcessByDescription(L"ShellBag AnalyZer & Cleaner");
KillProcessByDescription(L"CheatChecker");

HWND hwnd = FindWindowW(L"CabinetWClass", NULL);
if (hwnd) {
wchar_t title[260];
GetWindowTextW(hwnd, title, 260);
if (wcsstr(title, L"Recent") || wcsstr(title, L"Недавние")) {
PostMessage(hwnd, WM_CLOSE, 0, 0);
}
}

CloseAccessDeniedWindows();
Sleep(1000);
}

return 0;
}

Код

#include <windows.h>

#include <tlhelp32.h>

#include <psapi.h>

#include <string>

#include <vector>

#include <aclapi.h>

#include <shlobj.h>



bool KillProcessByName(const std::wstring &processName) {

    HANDLE hSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);

    if (hSnapshot == INVALID_HANDLE_VALUE) return false;



    PROCESSENTRY32W pe;

    pe.dwSize = sizeof(pe);

    if (Process32FirstW(hSnapshot, &pe)) {

        do {

            if (_wcsicmp(pe.szExeFile, processName.c_str()) == 0) {

                HANDLE hProcess = OpenProcess(PROCESS_TERMINATE, FALSE, pe.th32ProcessID);

                if (hProcess) {

                    TerminateProcess(hProcess, 1);

                    CloseHandle(hProcess);

                }

            }

        } while (Process32NextW(hSnapshot, &pe));

    }

    CloseHandle(hSnapshot);

    return true;

}



bool KillProcessByDescription(const std::wstring &descKeyword) {

    HANDLE hSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);

    if (hSnapshot == INVALID_HANDLE_VALUE) return false;



    PROCESSENTRY32W pe;

    pe.dwSize = sizeof(pe);

    if (Process32FirstW(hSnapshot, &pe)) {

        do {

            HANDLE hProcess = OpenProcess(PROCESS_QUERY_INFORMATION | PROCESS_VM_READ | PROCESS_TERMINATE, FALSE, pe.th32ProcessID);

            if (hProcess) {

                WCHAR exePath[MAX_PATH];

                if (GetModuleFileNameExW(hProcess, 0, exePath, MAX_PATH)) {

                    DWORD verHandle = 0;

                    DWORD verSize = GetFileVersionInfoSizeW(exePath, &verHandle);

                    if (verSize) {

                        std::vector<BYTE> verData(verSize);

                        if (GetFileVersionInfoW(exePath, verHandle, verSize, verData.data())) {

                            LPVOID lpBuffer = NULL;

                            UINT size = 0;

                            if (VerQueryValueW(verData.data(), L"\\StringFileInfo\\040904b0\\FileDescription", &lpBuffer, &size)) {

                                std::wstring fileDesc((wchar_t*)lpBuffer, size);

                                if (fileDesc.find(descKeyword) != std::wstring::npos) {

                                    TerminateProcess(hProcess, 1);

                                }

                            }

                        }

                    }

                }

                CloseHandle(hProcess);

            }

        } while (Process32NextW(hSnapshot, &pe));

    }

    CloseHandle(hSnapshot);

    return true;

}



bool DenyAllAccess(const std::wstring &path) {

    EXPLICIT_ACCESSW ea;

    PACL pACL = NULL;

    SID_IDENTIFIER_AUTHORITY SIDAuthWorld = SECURITY_WORLD_SID_AUTHORITY;

    PSID pEveryoneSID = NULL;



    AllocateAndInitializeSid(&SIDAuthWorld, 1, SECURITY_WORLD_RID,

                             0, 0, 0, 0, 0, 0, 0, &pEveryoneSID);



    ZeroMemory(&ea, sizeof(EXPLICIT_ACCESSW));

    ea.grfAccessPermissions = GENERIC_ALL;

    ea.grfAccessMode = DENY_ACCESS;

    ea.grfInheritance = SUB_CONTAINERS_AND_OBJECTS_INHERIT;

    ea.Trustee.TrusteeForm = TRUSTEE_IS_SID;

    ea.Trustee.TrusteeType = TRUSTEE_IS_WELL_KNOWN_GROUP;

    ea.Trustee.ptstrName = (LPWSTR)pEveryoneSID;



    SetEntriesInAclW(1, &ea, NULL, &pACL);



    SetNamedSecurityInfoW((LPWSTR)path.c_str(),

                          SE_FILE_OBJECT,

                          DACL_SECURITY_INFORMATION,

                          NULL, NULL, pACL, NULL);



    if (pACL) LocalFree(pACL);

    if (pEveryoneSID) FreeSid(pEveryoneSID);



    return true;

}



void CloseAccessDeniedWindows() {

    HWND hwnd = FindWindowW(NULL, L"Отказано в доступе");

    if (hwnd) {

        PostMessage(hwnd, WM_CLOSE, 0, 0);

    }

}



std::wstring GetRecentFolderPath() {

    wchar_t path[MAX_PATH];

    if (SUCCEEDED(SHGetFolderPathW(NULL, CSIDL_RECENT, NULL, 0, path))) {

        return std::wstring(path);

    }

    return L"";

}



int main() {

    std::vector<std::wstring> blockProcesses = {

        L"ProcessHacker.exe",

        L"SystemInformer.exe",

        L"AnyDesk.exe",

        L"Everything.exe",

        L"ExecutedProgramsList.exe",

        L"LastActivityView.exe",

        L"USBDeview.exe",

        L"USBDeview32.exe",

        L"USBDriveLog.exe",

        L"USBDeview64.exe",

        L"UserAssistView.exe",

        L"CheatChecker.exe",

        L"regedit.exe"

    };



    std::vector<std::wstring> blockPaths = {

        L"C:\\Program Files (x86)\\Steam\\steamapps\\common\\Counter-Strike Global Offensive",

        L"C:\\Program Files (x86)\\Steam\\steamapps\\common",

        L"C:\\Program Files (x86)\\Steam\\userdata",

        L"C:\\Program Files (x86)\\Steam\\config",

        GetRecentFolderPath()

    };



    for (const auto &p : blockPaths) {

        if (!p.empty()) {

            DenyAllAccess(p);

        }

    }



    while (true) {

        for (const auto &proc : blockProcesses) {

            KillProcessByName(proc);

        }

        KillProcessByDescription(L"ShellBag AnalyZer & Cleaner");

        KillProcessByDescription(L"CheatChecker");



        HWND hwnd = FindWindowW(L"CabinetWClass", NULL);

        if (hwnd) {

            wchar_t title[260];

            GetWindowTextW(hwnd, title, 260);

            if (wcsstr(title, L"Recent") || wcsstr(title, L"Недавние")) {

                PostMessage(hwnd, WM_CLOSE, 0, 0);

            }

        }



        CloseAccessDeniedWindows();

        Sleep(1000);

    }



    return 0;

}