Well guys, you dont get it, it Attaches it self to WoW, creating Memory space, I am not sure about this part thowe -> I think Blizzard Has a log of the accounts and what was running on there computer at that time, But you never know
Well guys, you dont get it, it Attaches it self to WoW, creating Memory space, I am not sure about this part thowe -> I think Blizzard Has a log of the accounts and what was running on there computer at that time, But you never know
WPE is VERY easy to detect. It injects a DLL and hooks the various winsock functions (send,sendto,recv,recvfrom) to log the packets.
On top of 3rd party program violations, the TOS prohibits you from snooping in on their packet stream. This is a one way ticket to banville.
The WPE process can be found from the process-list but the packet modification itself is done in ring 0 so take your bets.
I myself wouldn't use it on live, and I won't.The packets are changed at an operating system level, rather than a program level, so I doubt that warden would be able to detect this.
Do you even know wtf you're talking about? Ring0 requires a driver, not a dll. It is done from usermode(Ring3).
Last edited by kynox; 11-21-2008 at 03:20 AM.
Trojans do not download