SRL Archive - Banned from RS

Was accused of Macroing Major, so GoodBye to my Main Account.
For those who wondering: Why did that noob used the Main Account?
A: well, to get amounts of experience, and also do astrals.

I did the Appeal, but we all know it isn't worth it.
RIP 2014

Damn, horrible news :(
Private script i'm assuming and Simba?

Definitely a lot of bans lately, I'm assuming the worst for anything I do.

FWIW, I've been doing a lot of detectable/bannable things but no problems yet.

I'm not running for long times, generating goods or money, etc. But I am running the mouse around like a monkey and performing lots of bad clicks and whatnot.

Smart's been taking a long time to spawn, for rs to get moving along.

Don't feel bad, I also had my main account banned (macoring minor, 14-day ban) for running a private Abyssal Runecrafting script in OSRS. It was unreleased and utilized AeroLib with reflection. The next night my backup account was banned as "bot-busting" for a more serious ban; it was not utilizing reflection but was using a quick thieving script. Both accounts using SMART. This was my first ban since Aryan.

Something new, as far as macro-detection, has come out recently. Take a look at all the accounts banned in the past week or two weeks. Is Simba itself being detected? Or should we assume SMART is being detected? When my account gets un-banned I shall create some scripts to run normally in the browser and to see if we can conclude only SMART as being detectable or if the problem is larger than that.

From: bonsai
Definitely a lot of bans lately, I'm assuming the worst for anything I do.

FWIW, I've been doing a lot of detectable/bannable things but no problems yet.

I'm not running for long times, generating goods or money, etc. But I am running the mouse around like a monkey and performing lots of bad clicks and whatnot.

Smart's been taking a long time to spawn, for rs to get moving along.

I'm getting that same slowness too.

From: Flight
Don't feel bad, I also had my main account banned (macoring minor, 14-day ban) for running a private Abyssal Runecrafting script in OSRS. It was unreleased and utilized AeroLib with reflection. The next night my backup account was banned as "bot-busting" for a more serious ban; it was not utilizing reflection but was using a quick thieving script. Both accounts using SMART. This was my first ban since Aryan.

Something new, as far as macro-detection, has come out recently. Take a look at all the accounts banned in the past week or two weeks. Is Simba itself being detected? Or should we assume SMART is being detected? When my account gets un-banned I shall create some scripts to run normally in the browser and to see if we can conclude only SMART as being detectable or if the problem is larger than that.

That is some scary stuff. I was thinking that, but didn't want to say anything until someone with more experienced said it. I lost 3 accounts recently.

I've got 4 accounts in RS3, all using SMART, all using at least one public script and the rest private. I've been doing this for almost 30 days and haven't had a single problem. I also haven't noticed any slow or odd behavior with SMART, so I really don't know what to believe. Unless you're all just having problems with OSRS, because that would be why I'm not being banned.

I'd hypothesize that they are not detecting SMART immediately (else almost everyone here would be banned), but they are investigating flagged accounts for SMART.

I have many friends who have been running scripts for months on SMART, but took great care to implement as much human-like activity as possible. And I mean great care, not just breaking (simulated spam clicking, mistaken mouse clicks and corrections, behavior tendencies, and patterned randomness). Complete randomness is ultimately detectable, which is why I am shifting my antiban to patterned randomness (yes this is an oxymoron but hopefully people know what I mean).

If you run a pseudo-randomized script for 24/7 and debugged clicks with visual drawn dots, eventually all your clicks will create a box or circle or whatever you coded. In this day and age, that is obvious botting. Clicking a random point in a 10x10 box doesn't cut it anymore at all.

I'd also hypothesize that they are far more likely to look into and detect gold farming methods rather than private XP gains. My main was banned as soon as I started testing a private Simba moneymaking script (4m/hr), after almost seven years of botting skills undetected with powerbot, RSBuddy, etc.

Either way, I'm making the switch to browser botting until we figure this out.

From: Clarity
I'd hypothesize that they are not detecting SMART immediately (else almost everyone here would be banned), but they are investigating flagged accounts for SMART.

I had never been banned before and they banned 3 out of 3 running bots, at what seems to be, the same time. It might be they detected 1 and then went into IP check, idk.

From: Mr. Roboto
I had never been banned before and they banned 3 out of 3 running bots, at what seems to be, the same time. It might be they detected 1 and then went into IP check, idk.

From past discussions we've concluded that IP checks are useless to them, however, they may still utilize random.dat or some similar file in the cache to link accounts. They could've also just flagged all three individually.

From: Justin
Damn, horrible news :(
Private script i'm assuming and Simba?

Script from simba, did some tweaks on it. Been making satraps for about 3 momths, and they banned me yesterday.. Unfortunate.
Also, I see nothing on runescape for some time. That's why I use bots. No patience to do the same thing over and over /:

From: Flight
Don't feel bad, I also had my main account banned (macoring minor, 14-day ban) for running a private Abyssal Runecrafting script in OSRS. It was unreleased and utilized AeroLib with reflection. The next night my backup account was banned as "bot-busting" for a more serious ban; it was not utilizing reflection but was using a quick thieving script. Both accounts using SMART. This was my first ban since Aryan.

Something new, as far as macro-detection, has come out recently. Take a look at all the accounts banned in the past week or two weeks. Is Simba itself being detected? Or should we assume SMART is being detected? When my account gets un-banned I shall create some scripts to run normally in the browser and to see if we can conclude only SMART as being detectable or if the problem is larger than that.

I might have a private conversation with you bud, and discuss what I've watched with the use of simba/script/functions used, and perhaps we reach a conclusion or something like that. Because..why can't I bot for like 10 hours a day, doing astrals, when there are people that get 200m exp without getting banned? How is that humanly possible? I even feel sad for my computer being on all day/night for the use of the bot!
I always think for myself: "I feel sad putting you like this.. All day long turned on, no time to relax, always pushing hard the vans and all that *siht* I feel sad for you, this is not humanly, neither machine possible" hahaha

They seem to be banning a lot of Astral crafters atm- I have seen atleast three posts with perm bans and it happened to me too. I have been running another account cooking, firemaking etc at the same time but it was left alone. They must be focusing on accounts generating a lot of wealth

http://services.runescape.com/m=forum/c=JFPLoKApWO4/forums.ws?359,360,941,65473602

In this post one of the mods writes

Hello Crygen!

The reason botting is considered illegal and bannable is because it is a serious offence to the in game rules. Basically like you said in your previous post it gives unfair advantages to themselves over other players and can ruin the in game economy.

Let's do an example here.

Let's say person A was a bot and person B was a normal player, playing themselves.

Person A could use a computer program which will do the actions required to get what they are using for just as Person B is doing, but, Person B needs to sleep but at that point Person A is still getting their resources all around the clock, so let's say they were farming dragons for example Person A will get a major boost to their yields they get an hour overall compared to person B who needs to sleep.

This is seen as a way of cheating which is against the in game rules. The fact your friend got banned for botting is because Jagex's "Botwatch" system saw your friends patterns and saw he was logged in on a third-party client which is also against the rules.

Even if he didn't get anything at all from the bot itself the fact he logged in from a third-party client, Jagex's botwatch system flagged his account and did the automatic permanent Ban.

Kind Regards
Ashara Jeice

So it is very possible that they are doing both. Ofcourse the scarier part would be them detecting smart. If thats the case then there may be alot more bans soon to come.

From: o0Matthius0o
http://services.runescape.com/m=forum/c=JFPLoKApWO4/forums.ws?359,360,941,65473602

In this post one of the mods writes



So it is very possible that they are doing both. Ofcourse the scarier part would be them detecting smart. If thats the case then there may be alot more bans soon to come.

Good find. So the recent bans really could be due to client detection.

From: Flight
Good find. So the recent bans really could be due to client detection.

I believe so. Whats even more annoying is that they put the bans in a random order and will release the bans to players days or a week after the offence actually happened. They do this in order to keep us from finding out what we are doing wrong.

From: Flight
Good find. So the recent bans really could be due to client detection.

I don't see any mod post? What did it say?

From: Clarity
I don't see any mod post? What did it say?

Look at the post that Flight is replying to. ;)

From: BMWxi
Look at the post that Flight is replying to. ;)

Lol. I'm stupid.

But we knew that already.

OT: Haven't we concluded 100 times that SMART is detectable, they just don't do it?
Mod post could be referring to powerbot client which apparently causes bans even if you don't use scripts?

From: Clarity
OT: Haven't we concluded 100 times that SMART is detectable, they just don't do it?
Mod post could be referring to powerbot client which apparently causes bans even if you don't use scripts?

Exactly. If Jagex really wanted to crack down on us, they could just go after the client. Luckily we're still such a minority that I don't think we're worth their time, yet. I do believe they will eventually get so far ahead of powerbot, epicbot and the other injections that those bots will basically be useless, (they are useless now, but their fanboy's are too stubborn/stupid to give up) then they can focus their attention on us. That will be a bad day indeed. You don't use your mouse for anything besides RS do you…? LOL

And you're right, when I left powerbot you could be banned just for logging in with their client, having never even run a script…yet they still denied detectability.

From: o0Matthius0o
I believe so. Whats even more annoying is that they put the bans in a random order and will release the bans to players days or a week after the offence actually happened. They do this in order to keep us from finding out what we are doing wrong.

It's smart on their part, they'll never shed light on the details of their detection, otherwise we'll know exactly how to adjust and slip in around it. I can't blame them for doing this.

From: Clarity
Lol. I'm stupid.

But we knew that already.

OT: Haven't we concluded 100 times that SMART is detectable, they just don't do it?
Mod post could be referring to powerbot client which apparently causes bans even if you don't use scripts?

Yes you're certainly right, there's been no real reason to have concern about instant client detection, but within the past couple of weeks clearly something has changed in their detection system. Why not start with the obvious candidate of 3rd part clients becoming detectable and start reducing it from there? Quite a few bans have been happening recently for both OSRS and RS3, so we could probably rule out reflection as it's not used in RS3. So what do the bans have in common for both games? Simba and SMART. SMART is still possible to exclude from how we bot, we're one of three programs available to continue running scripts via the browser, but if it's Simba that's being detected, then we've a much bigger problem to deal with.

From: Flight
It's smart on their part, they'll never shed light on the details of their detection, otherwise we'll know exactly how to adjust and slip in around it. I can't blame them for doing this.

Yes you're certainly right, there's been no real reason to have concern about instant client detection, but within the past couple of weeks clearly something has changed in their detection system. Why not start with the obvious candidate of 3rd part clients becoming detectable and start reducing it from there? Quite a few bans have been happening recently for both OSRS and RS3, so we could probably rule out reflection as it's not used in RS3. So what do the bans have in common for both games? Simba and SMART. SMART is still possible to exclude from how we bot, we're one of three programs available to continue running scripts via the browser, but if it's Simba that's being detected, then we've a much bigger problem to deal with.

I think it's more intelligent to look at the number of people using SMART versus the number of people being banned for macroing while using it. The difference is huge, and to me that rules out SMART, at least for now. The more common factor could be scripts that are poorly made, not just the client that's being used. If they were detecting the client and using it as a reason to ban then 99% of this forum would have been banned already, or is going to be banned in the next 3 months.

EDIT: I think all discussion on this should be kept to this thread, because right now it appears that we've got the same conversation going on in two different threads. I won't be replying to this one now, and I suggest everyone else do the same.

Ok so I heard from Rsbuddy's Matt that Jacmod recently implemented new bot detection in osrs, possibly reflection based. This would make sense considering that randoms are being removed soon. Jagex must be pretty confident that they can detect bots. At this point, I pretty much assume that all clients are 100% detectable.

They may even have a way to detect simulated mouse strokes. And why not that should be easy enough to do. Either way I know osrs botting is probably over for main accounts.

As far as adding more human-like behavior, I just think that it's completely useless. For fuck's sake, I feel like a crazy person when people talk about human-like behavior and antibans. Runescape can easily detect if you are loading the game in a Jframe or a browser. At this point, I am pretty sure that Jagex is purposely not banning bots that are paying them or have low community impact. I mean if some dude trains NMZ or do it via botting, what's the difference to Jagex? What difference does it make to the rest of the community? I think Jagex tolerate bots to a certain extend, as long as they are low impact community wise.

as for me I am gonna bot it up to max cmb stats on NMZ. Fk it, i rather just go out blazing, rather than waste time grinding away my life.

From: Grunt
I am pretty sure that Jagex is purposely not banning bots that are paying them or have low community impact. I mean if some dude trains NMZ or do it via botting, what's the difference to Jagex? What difference does it make to the rest of the community? I think Jagex tolerate bots to a certain extend, as long as they are low impact community wise.

as for me I am gonna bot it up to max cmb stats on NMZ. Fk it, i rather just go out blazing, rather than waste time grinding away my life.

I like your theory, I've always had the same.

From: Grunt

As far as adding more human-like behavior, I just think that it's completely useless. For fuck's sake, I feel like a crazy person when people talk about human-like behavior and antibans. Runescape can easily detect if you are loading the game in a Jframe or a browser.

So what's wrong with human-like behavior botting in a browser with a spoofed hardware mouse input?
I'd also suppose that theory is somewhat true in that perhaps gold farming methods are more likely to flag accounts that personal leveling training.

No there is nothing wrong with comming up with better human like behavior. Things like the tolerance of mousekeys, and the tolerance of autoclickers for alching makes me thing that human like behavior is not all that important. I am sorry I don't have concrete proof of its importance. And perhaps I was harsh and exaggerated in its critique. I just think that anti ban efforts should be focused on preventing the client from detected, rather than coming with up with "human-like" behavior.

I been thinking, maybe use a virtual machine to run runescape while using a teamviewer type program to control its mouse movements. I know it's completely far fetched. And yeah i don't have the expertise to develop something like that. But isn't it worth more of a discussion, rather than coming up with weak excuses about "antibans".

If RS detected simulated input by SendInput() or mouse_event() or keybd_event(), then I believe Remote Desktop applications would be detected as false positives. I believe TeamViewer uses SendInput(), so the LLMHF_INJECTED or LLKHF_INJECTED flags would be set. I doubt they use this as a detection method, but it's still worth a test. Play like a bot through TeamViewer and see what happens.

They might test mouse movement against actual mouse coordinates by way of GetCursorPos(). Or they could just check to see if the actual mouse coordinates are changing at all. So simulated AWT events could be detectable. Just a thought. I haven't taken a look at the DLLs yet, so I'm not sure what they're doing.

Edit: Marneus901 has done more research on this and confirmed this type of detection. I switched to robot a few months ago and haven't had a ban ever since.

From: Mr. Roboto
I'm getting that same slowness too.

The last time this happened (SMART loading slow), SRL was loading rs wrong (SMART with wrong flags).. and currently it MIGHT be doing it wrong as well.. Looks like things changed..

SRL-6 uses: https://github.com/SRL/SRL-6/blob/master/lib/misc/smart.simba#L29

It then splits the parameters into two parts based off of that comma in the URL as shown here:

https://github.com/SRL/SRL-6/blob/master/lib/misc/smart.simba#L279 and then here, it passes only TWO parameters to SMART: https://github.com/SRL/SRL-6/blob/master/lib/misc/smart.simba#L365


aka param[0] and param[1].

This is no longer viable AS FAR AS I (me, myself and I) CAN TELL.. I don't know about anyone else here but I think that's actually wrong now.

Why you ask? If you load http://www.runescape.com/game.ws?j=1 in the browser, it shows the URL to be:


and none of your cached settings are loaded:


I noticed because it started playing music.. and I NEVER listened to RS music even when I used to play.



However, if you load RS from the home page (http://www.runescape.com/game), the URL turns out to be:


and the cache settings are loaded:



It also has that new java-script.. was never there before (at least, I never noticed it) to change "j0" to "j1". Which btw, they could have done without java-script and just make that the URL use j1 in the first place..

This URL has 3 parts (comma separated) to it and not 2.


For that reason, and that reason alone, I think SRL-6 is loading it wrong.. but what do I know.. You'll have to ask @BenLand100;

Again, I'm not 100% sure but that could actually be the reason why. Again, ask Ben I guess.

From: davis_junior


They might test mouse movement against actual mouse coordinates by way of GetCursorPos(). Or they could just check to see if the actual mouse coordinates are changing at all. So simulated AWT events could be detectable. Just a thought. I haven't taken a look at the DLLs yet, so I'm not sure what they're doing.

Damn that's really a clever and simple solution…why didn't i think of it.

From: Grunt
Damn that's really a clever and simple solution…why didn't i think of it.

I have some more ideas. I think I'll make a thread some time soon about them.

I have a private reflection client for RS3 and I've been getting banned. I've only made scripts that bot in known botting areas (like the Rimmington mine). But I'm just trying to see if I can get around their detection system and by botting in definite Botwatch areas, I get banned fairly quickly (3 hours to 1 week). It seems I only get banned when I start walking or banking, though, so I'm guessing this sets off some kind of flag. I've heard Botwatch is supposed to be more strict on goldfarmers, so that might be what they meant.

Recently I found out that RS is not detecting the client by window/JFrame or parameter loading (well, at least not solely). I injected into the official RS client (jagexappletviewer.jar), and got banned within the first day of botting a new account. I only had to inject to get the Rs2Applet object (about 3 bytecode instructions), but I'll think of something that doesn't require injecting (probably by getting the reference through JNI in an edited JagexLauncher.exe). Everything else is purely reflection (including models). And this most likely means SMART is not the reason for any of these bans (again, it's possible, but it's not the sole reason).

What I really hope is that they don't have an advanced behavioral/biometric system in place. It'll still be possible to get around it, but it might take a lot of work. I'm assuming their system is nothing outstanding; it's probably something simple like what I previously stated about mouse coordinates.

Ok I Now This Thers Is a bit 'Old xD
They Cant detect Simba as a Bot Client Cuz Its Like Any Program that Controls your mouse **
don't know about smart how it's interacting with rs client

Lack of native events being fired in conjunction with tons and tons of AWT events being sent shows that you are using a simple Java bot.
Using Robot/SMART/SendMessage sends injected flags along with the events. (yes Simba/Smart/SRL/RiD is all detected, along with RSBot, Epicbot, anyotherXYZbot)
Sending events does not ensure all proper flags are removed.
Hooking the methods can lock-up your system if not properly made, and if not properly hooked, the native events will not be processed by bot watch.

Yes, I have an initial bypass done, waiting on testing phase. I said many years ago, pretty sure directed at powerbot, that once Jagex starts going natively and adding real detection, it will leave the script-kiddies in the dust. There is no need for 'glass panes' and 'machine learning' - its a bunch of hoopla. but you can still use Java based clients.

Lack of native events being fired in conjunction with tons and tons of AWT events being sent shows that you are using a simple Java bot.

So less and clicking in general would make the script safer? What's ur opinion on antibans?

From: davis_junior


Edit: Marneus901 has done more research on this and confirmed this type of detection. I switched to robot a few months ago and haven't had a ban ever since.

So what can we do then to avoid getting banned?

Also what's robot?

As far as adding more human-like behavior, I just think that it's completely useless. For fuck's sake, I feel like a crazy person when people talk about human-like behavior and antibans. Runescape can easily detect if you are loading the game in a Jframe or a browser. At this point, I am pretty sure that Jagex is purposely not banning bots that are paying them or have low community impact. I mean if some dude trains NMZ or do it via botting, what's the difference to Jagex? What difference does it make to the rest of the community? I think Jagex tolerate bots to a certain extend, as long as they are low impact community wise.

And what i wanted to say i am leaning towards, and actually doing it. Taking antiban levels to extremely low like 250 random mouse moves, offscreen 0-1 skill lookup per 10 hours, script runs 222 sallys per hour stabily 444per 2 2220per10 and so on, unless worldhops i mean bots even run synchronicly in +-10 seconds deviation to bank, its funny to watch on both pc's all bots doing like synchronical banking, so beautifull :wow: . And quess what? 2k lines is less bans than 5k lines script with antiban and randomness. Illogical mainloop, is better than logical one which can distinquish crashers traps from his own, who takes good positions and plans moves to actually often crash human crasher. And its better because requires like twice less computer resources :). Was efford worth to make local positioning system to distinquish trap places from ant camera angle, to track if he layed those traps, to track catched sally in a spot while giving priority to lay more traps if there are empty trees, to increase proffit per hour and by making more human-like? No, test accounts banned within hours(because jagex doesnt want bots to crash legit players?). While modified ashmans mainloop lasts for weeks no bans(well, other guy runned them and kinda suicided got bans).

Suicide botting? Why not, gona retry it again to run bottish sallys 24/7, atleast it seems to work for other guys.

Jus leaving frustration about jagex again. Only they know why they ban/dont ban bots. What they can catch them i am sure in a month they should catch any bot with biometrics, but pretty sure they use other methods cause sometimes few hours isnt enough really. Probably they dont want population on worlds to be 5-10 people :D

It's a shame I have no knowledge of windows api. But have anyone tried to make a bot client in ubuntu or on the mac?


Does anyone know if JNI, JNA and JNR hold any promise in injecting native mouse events?

Also what are the differences between input by autohotkey and input by smart?