So I just started Overwatch, dumped the strings, and voila:
Code:
Cheat Engine 5
Cheat Engine 6
x64_dbg
x32_dbg
ArtMoney
Scylla
Struct Builder
ReClass
IDA v
WinDbgFrameClass
Software\Blizzard Entertainment\Battle.net\Identity
Identity
GSSAPI
XOAUTH2
STARTTLS not supported.
STARTTLS denied. %c
Access denied. %c
Access denied: %d
md5-sess
imap
So on the first two lines it says "Cheat Engine 5" and "Cheat engine 6". This means they are searching for window titles?
Also to notice I've found that:
Code:
ClientOutCheats
JAMfeab6945ProtocolPool
This was in this whole thing:
Code:
ClientInCombat
JAMe9cfda8aProtocolPool
ZLO
ClientInInstance
JAM5a8949edProtocolPool
ClientInLobbyAchievement
JAM267fde9eProtocolPool
ClientInLobbyCelebration
JAM7a3d3343ProtocolPool
ClientInLobbyChat
JAMa9973b5eProtocolPool
ClientInLobbyConnect
JAM400c651dProtocolPool
ClientInLobbyCustomGame
JAM5373bd89ProtocolPool
ClientInLobbyData
JAM0dfeefefProtocolPool
ClientInLobbyFriends
JAM585b3816ProtocolPool
ClientInLobbyHeroProgression
JAM11fc8b5bProtocolPool
ClientInLobbyInstance
JAMd1929c50ProtocolPool
ClientInLobbyLeaderboard
JAM2ba52771ProtocolPool
ClientInLobbyMatchmaking
JAMc15cc0baProtocolPool
ClientInLobbyParty
JAM021609a7ProtocolPool
ClientInLobbyPing
JAM1c0f9f1eProtocolPool
ClientInLobbyPlayer
JAM73d1af99ProtocolPool
ClientInLobbyPlayerProgression
JAM88b7f96dProtocolPool
ClientInLobbyRanked
JAM3ae820d4ProtocolPool
ClientInLobbyRelationship
JAMf03bf8edProtocolPool
ClientInLobbyRuleset
JAM46cbc86dProtocolPool
ClientInLobbyStats
JAMb9dca497ProtocolPool
ClientInLobbyStatus
JAM4c4eefacProtocolPool
ClientInLobbyStore
JAM8a29bb5eProtocolPool
ClientInStats
JAM6fa20397ProtocolPool
ClientInVoice
JAMa7299a2dProtocolPool
ClientOutCheats
JAMfeab6945ProtocolPool
?OlrW4S
ClientOutInstance
JAM06c0c998ProtocolPool
ClientOutLobbyAchievement
JAM1ec25650ProtocolPool
ClientOutLobbyBI
JAMae55ee2cProtocolPool
ClientOutLobbyCelebration
JAMf1bc0dffProtocolPool
ClientOutLobbyChat
JAM28a2a1cdProtocolPool
ClientOutLobbyConnect
JAM2f1931afProtocolPool
ClientOutLobbyCustomGame
JAM87ab5d52ProtocolPool
ClientOutLobbyData
JAM0971cce1ProtocolPool
ClientOutLobbyFriends
JAM027adb37ProtocolPool
ClientOutLobbyLeaderboard
JAM1892ea87ProtocolPool
ClientOutLobbyRanked
JAMbb141e5eProtocolPool
ClientOutLobbyRuleset
JAM70065ef5ProtocolPool
ClientOutLobbyHeroProgression
JAMf13c9428ProtocolPool
ClientOutLobbyInstance
JAM6099bc5fProtocolPool
ClientOutLobbyMatchmaking
JAMfb82d929ProtocolPool
ClientOutLobbyParty
JAMb55ffaf3ProtocolPool
AXf
ClientOutLobbyPersistence
JAM4116e22cProtocolPool
ClientOutLobbyPing
JAM4eae6aa9ProtocolPool
ClientOutLobbyPlayer
JAM03aa3b80ProtocolPool
ClientOutLobbyPlayerProgression
JAM26b9e893ProtocolPool
ClientOutLobbyStats
JAM2baf715dProtocolPool
ClientOutLobbyStore
JAM85b044a1ProtocolPool
ClientOutPvP
JAM494a1c53ProtocolPool
Cdd
ClientOutStats
JAM43e27399ProtocolPool
Meaning that they flag people for cheating and the client even knows that? Because I think these are envoirmental variables.
You can export the strings using Process explorer: Overwatch.exe -> *le right click* Properties -> Strings -> Memory (this could take a while)
So I think you also need to change the window title of your cheat programs, that they stay undetected.