[discussion] Dangers of memory-read(-only) tools

[KillerJohn]

This is a thread allowing people to discuss about the dangers of using memory reading (not writing!) tools:

- Loot Alert
- TurboHUD
- GPH & XP Tracker
- LootTracker
etc

I'll maintain a FAQ section in the next post.

Useful link about (WoW) Warden: http://www.ownedcore.com/forums/worl...-governor.html

[KillerJohn]

F.A.Q.

Q: Blizzard can detect memory reading tools?
A: They can detect any tools. AFAIK they can't detect the memory reading actions, but they can look for running processes: "LootAlert.exe", "TurboHUD.exe", "anything.exe"

Q: So if I rename my "memreadsomething.exe" to "notepad.exe", I'm safe?
A: No, but you are safer. Just not use notepad.exe because if I would be Blizzard I would check all notepad.exe process

Q: Why?
A: Blizzard can go through all processes and look into it's code and recognize it's true identity by checksums. Or they can check the processes' signature, blablabla.

[phantom325]

Who renames something to notepad.exe? Why on Earth would notepad be an executable file 0.0

On to the topic though. You can get in trouble for things such as these, but I doubt Blizzard really cares about such paltry things like these. If they were going to ban people for something, they would ban the botters first. Besides, it's Diablo. Blizzard usually likes to just let those games run themselves and collect income.

[g4b51l]

Hmm...i noticed serveral statements that they are not allowed to scan your computer (inc processes)...doesn't mean they care...

[skiss0rz]

Why on Earth would notepad be an executable file 0.0

??????????

[KillerJohn]

Who renames something to notepad.exe? Why on Earth would notepad be an executable file 0.0

On to the topic though. You can get in trouble for things such as these, but I doubt Blizzard really cares about such paltry things like these. If they were going to ban people for something, they would ban the botters first. Besides, it's Diablo. Blizzard usually likes to just let those games run themselves and collect income.

What do you mean I can get in trouble for what? Me, personally?

[efeyth]

thts interesting how they can just look into the code of my processes.....

Who renames something to notepad.exe? Why on Earth would notepad be an executable file 0.0

On to the topic though. You can get in trouble for things such as these, but I doubt Blizzard really cares about such paltry things like these. If they were going to ban people for something, they would ban the botters first. Besides, it's Diablo. Blizzard usually likes to just let those games run themselves and collect income.

and its not true cuz theres a lot of people tht have been perma banned for using lootalert and other things besides bots

[KillerJohn]

thts interesting how they can just look into the code of my processes.....



and its not true cuz theres a lot of people tht have been perma banned for using lootalert and other things besides bots

I never heard about anybody who got a ban for using LootAlert...

[xsx]

Who renames something to notepad.exe? Why on Earth would notepad be an executable file 0.0

On to the topic though. You can get in trouble for things such as these, but I doubt Blizzard really cares about such paltry things like these. If they were going to ban people for something, they would ban the botters first. Besides, it's Diablo. Blizzard usually likes to just let those games run themselves and collect income.

Actually the real notepad is in the windows folder under the name notepad.exe ... Just sayin`

[efeyth]

I never heard about anybody who got a ban for using LootAlert...

reli? cuz theres like quite a few o.o
a level 100 paragon wiz from eu got perma banned and so did his gf or smthing from wat i've read
and a couple of other people too i think

[mrslug]

reli? cuz theres like quite a few o.o
a level 100 paragon wiz from eu got perma banned and so did his gf or smthing from wat i've read
and a couple of other people too i think

Isn't true.

[nerfmeplease]

this thread is just going to become paranoia city with no real proof of anything. If you want to know how/what processes wow can/does look at, read here: http://www.ownedcore.com/forums/worl...-governor.html (Warden and 'The Governor') . D3 and WoW both use Warden.

[efeyth]

Isn't true.

no it is true go search theres a lot of people talking about it and even a petition.

[KillerJohn]

this thread is just going to become paranoia city with no real proof of anything. If you want to know how/what processes wow can/does look at, read here: http://www.ownedcore.com/forums/worl...-governor.html (Warden and 'The Governor') . D3 and WoW both use Warden.

Finally! Thank you!

no it is true go search theres a lot of people talking about it and even a petition.

Can I get a link? I can't find the "lot of people" nor the petition...

[LisaL]

Blizzard dosnt scan outside of dedicated memory anymore does it? so in theory they couldnt dettect, injector.exe, but they could see memory manipulation, i doubt they look that hard tho...