The WoW Lawyer's Guide to Blizzard Policy

[Cypher]

Just wanted to point out that pretty much all of the information you have posted on warden is either wrong or misleading. If you want correct information feel free to PM me.

[Verye]

Just wanted to point out that pretty much all of the information you have posted on warden is either wrong or misleading. If you want correct information feel free to PM me.

Woah woah woah. What's this now?

While Warden isn't my strong point, I can't imagine how my information is wrong.

[Cypher]

Warden

Now for another big subject: Warden.

Everyone knows about it, everyone’s scared of it, but not many people know a lot about how it works. Warden is a tool created by Blizzard that scans open programs, processes, and your RAM for anything that is somehow using or editing World of Warcraft.

Strike 1! Warden does not scan your process list or arbitrary RAM locations. It ONLY scans within its own address space with a couple of exceptions where it is looking for Glider specifically.

Contrary to common belief, Warden cannot see what web pages you are on, and does not collect data on programs that are not specifically affecting World of Warcraft. It is unclear precisely what it scans, but its scan includes process name, file name, and part or all of its function.

As I said, it does NOT scan processes/files/etc, it scans for memory modifications, injected DLLs that belong to hacking software, etc.

Warden is NOT a direct spying tool: Blizzard employees don’t look through your computer. It acts completely on its own, and simply detects third-party software that is somehow attached or linked to WoW. If it detects this software, and if it matches its logs of what is considered banned, Warden will do one or more of these things:

-Exit/disconnect from the game and give a warning saying “you are using illegal third-party software.” (This is technically a process that is covered by the infamous Scan.dll, but it can be considered a part of Warden).
-Automatically suspend your account.
-Automatically ban your account.

Warden doesn't suspend/ban your account. The server sends regular request packets which dictate what it wants warden to scan for, warden scans the requested memory location/api/etc, hashes the data, then returns the result. The SERVER then checks this data and if it is deemed that you are a hacker you are banned/kicked. Warden technically only covers the 'client' part of the anti-cheat. (From memory, I may be wrong, but the terminology was from Blizzard vs. MDY in one of the depositions)

It is a completely automated tool. It does not look at your porn, it does not see you looking at WoW trading sites; it only scans your RAM and HDD for things that are attached to WoW. Warden could technically be considered spyware, but it really isn't.

It doesn't scan your HDD for hacks, only within its own address space (again, bar a few exceptions).

[Verye]

Strike 1! Warden does not scan your process list or arbitrary RAM locations. It ONLY scans within its own address space with a couple of exceptions where it is looking for Glider specifically.

Does not scan processes? Okay, fair enough. But I don't really need to be specific when I say it scans RAM. It scans RAM, right? So, that statement is correct.

As I said, it does NOT scan processes/files/etc, it scans for memory modifications, injected DLLs that belong to hacking software, etc.

Fair enough, but for the common person, it's all the same thing. Warden scans your computer for stuff.

Warden doesn't suspend/ban your account. The server sends regular request packets which dictate what it wants warden to scan for, warden scans the requested memory location/api/etc, hashes the data, then returns the result. The SERVER then checks this data and if it is deemed that you are a hacker you are banned/kicked. Warden technically only covers the 'client' part of the anti-cheat. (From memory, I may be wrong, but the terminology was from Blizzard vs. MDY in one of the depositions)

Well, obviously Warden doesn't specifically ban people itself, but it results in ban. I was simply speaking in a simplistic way.

It doesn't scan your HDD for hacks, only within its own address space (again, bar a few exceptions).

It can detect if certain programs are located on your computer before starting WoW, yes? Or Scan.dll does, anyway, right? If so, isn't that technically scanning your HDD?

[Cypher]

Does not scan processes? Okay, fair enough. But I don't really need to be specific when I say it scans RAM. It scans RAM, right? So, that statement is correct.


Fair enough, but for the common person, it's all the same thing. Warden scans your computer for stuff.


Well, obviously Warden doesn't specifically ban people itself, but it results in ban. I was simply speaking in a simplistic way.




It can detect if certain programs are located on your computer before starting WoW, yes? Or Scan.dll does, anyway, right? If so, isn't that technically scanning your HDD?

1. "Scanning RAM" is a very broad term and quite misleading. It seems to imply Warden scans all or arbitrary locations for hacks, rather than confining scans to WoW's address space.

2. No, scan.dll enumerating the process list is NOT the same as scanning your harddrive. Even so, Warden itself doesn't have the same scans as scan.dll and is a more careful about making sure the program is actually being used for hacking before raising flags (unlike scan.dll which is basically there to warn and scare you).

[Verye]

1. "Scanning RAM" is a very broad term and quite misleading. It seems to imply Warden scans all or arbitrary locations for hacks, rather than confining scans to WoW's address space.

2. No, scan.dll enumerating the process list is NOT the same as scanning your harddrive. Even so, Warden itself doesn't have the same scans as scan.dll and is a more careful about making sure the program is actually being used for hacking before raising flags (unlike scan.dll which is basically there to warn and scare you).

Then I admit defeat; it doesn't do exactly what I thought it did. You're right.

Post edited.

[Hardcorehacker]

This is the email I got the day my account(s) were banned.

***Notice of Account Closure*** Access to the World of Warcraft account, (MY MAIN), and any World of Warcraft account associated with the payment information you have provided, has been permanently disabled. The account has been identified as having used unauthorized game modifications and thus is in violation of the World of Warcraft Terms of Use. The recurring subscription on the account has been disabled to prevent further charges. Please review the World of Warcraft Terms of Use at WoW -> Legal -> Terms of Use, which you accepted when you installed World of Warcraft and established the account(s). Section 4, Paragraphs A and B detail the limitations of game play modifications and use of any third-party or packet sniffing software. Furthermore, any activities not intended by game design which affect the economy, the client, player characters or the world itself have a tremendous negative impact on the potential enjoyment for all players. The effects of these activities take many forms including a bloated game economy, server instability, and allowing unauthorized access to accounts, computers, and player data. As a result, the account(s) will no longer be accessible and will unfortunately not be reopened under any circumstances. Any disputes or questions concerning this account action can only be addressed by Account Administration. To learn more about how Account Administration is able to assist you, please visit us at Blizzard Support. Thank you for your understanding in this matter and respecting our position and all statutes within the World of Warcraft Terms of Use. Regards.

After I replied to them they said: This account was found to have used unauthorized third party software. But the funny thing was I wasn't botting on the account shown above, I made a new account that I botted on, the account above hasen't been botting in a while, the only reason my main account got ban was because the payment info was the same... the emails on them were different. The night my botting account was ban, I thought oh well I shouldn't have made a new account, then when I checked my main account I was like wtf, and this was the day of the glider ban wave >.< bad luck.

[Verye]

This is the email I got the day my account(s) were banned.

***Notice of Account Closure*** Access to the World of Warcraft account, (MY MAIN), and any World of Warcraft account associated with the payment information you have provided, has been permanently disabled. The account has been identified as having used unauthorized game modifications and thus is in violation of the World of Warcraft Terms of Use. The recurring subscription on the account has been disabled to prevent further charges. Please review the World of Warcraft Terms of Use at WoW -> Legal -> Terms of Use, which you accepted when you installed World of Warcraft and established the account(s). Section 4, Paragraphs A and B detail the limitations of game play modifications and use of any third-party or packet sniffing software. Furthermore, any activities not intended by game design which affect the economy, the client, player characters or the world itself have a tremendous negative impact on the potential enjoyment for all players. The effects of these activities take many forms including a bloated game economy, server instability, and allowing unauthorized access to accounts, computers, and player data. As a result, the account(s) will no longer be accessible and will unfortunately not be reopened under any circumstances. Any disputes or questions concerning this account action can only be addressed by Account Administration. To learn more about how Account Administration is able to assist you, please visit us at Blizzard Support. Thank you for your understanding in this matter and respecting our position and all statutes within the World of Warcraft Terms of Use. Regards.

After I replied to them they said: This account was found to have used unauthorized third party software. But the funny thing was I wasn't botting on the account shown above, I made a new account that I botted on, the account above hasen't been botting in a while, the only reason my main account got ban was because the payment info was the same... the emails on them were different. The night my botting account was ban, I thought oh well I shouldn't have made a new account, then when I checked my main account I was like wtf, and this was the day of the glider ban wave >.< bad luck.

You sent an email with a subject like "Help I was hacked", explained when and how you were hacked, and gave the name of a keylogger, saying you found it on your computer?

[Suy]

Nice guide! It helped me alot actully. Just great, thanks.

[Lester]

nice post !!!!!!

[Lester]

I got a banned acc for saying bad words like **** u etc to much, i wont get it back i think

[Jack22]

Nice guide! It helped me alot actully. Just great, thanks.

Yeah it helped me also! Just got unbanned WOOHOOO!

[Verye]

Yeah it helped me also! Just got unbanned WOOHOOO!

Customary follow-up:

A. What were you banned for?
B. Are you US or EU?
C. Could you please copy and paste the ban email you got, the email you sent, and then the response to that?

Thanks, and congratulations on getting unbanned.

[soapygrinda]

so i know this guy, he has an awesome T6 priest, i just happen to know the guys full name, account username, also i just so happen to know his secret question answer. so i kinda want to steal his character and im looking for advice or tips. The way im thinking is to make another account, with his same name, and just transfer the character over there then get his original account banned by using some speedhacking tool. i would love some peoples thoughts and input on this also if you have any tips or advice let me know.

[Verye]

so i know this guy, he has an awesome T6 priest, i just happen to know the guys full name, account username, also i just so happen to know his secret question answer. so i kinda want to steal his character and im looking for advice or tips. The way im thinking is to make another account, with his same name, and just transfer the character over there then get his original account banned by using some speedhacking tool. i would love some peoples thoughts and input on this also if you have any tips or advice let me know.

Uh, just read the section of the guide pertaining to that...