menu
-
Active Member
LSP's?
Before I do the work... This may or may not be the right forum for this (I searched for "LSP" and didn't find it anywhere), but does anyone know if WoW checks for/defends again Winsock layered service providers (LSP's)?
Incidentally, an LSP could be another example of a "plausibly deniable" way to inject a DLL into the process. Not sure if it would be as useful for a heartbeat (might actually be MORE useful than the DX EndScene hook, since it would only trigger when there was client/server activity, rather than every frame).
[Edit: scratch this. I just read Cypher's "governor" post where he lays out in gory detail all the things that are checked by Warden. No mention of LSP's. Just another case of me being overly paranoid.]
Last edited by amadmonk; 05-07-2009 at 07:30 PM.