What's new
By:
  • Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • Visit Resources
  • Visit Downloads
  • Visit Portal

Concerns on bot detecting / scanning.

D

DJKid

New Member
Joined
Aug 17, 2011
Messages
171
Reaction score
5
So I've used 1 bot before HB, and it had a clever idea, at least imo. To change the name of the window that opened randomly each time I opened the program. I've suggested it a few times, but not reply or consideration.

I read a few stories and ban letters just because WoW scanned someone's CPU / RAM and saw Honorbuddy.

1) Does the scan look for the name of the program(s) or the actual process that its sending coding into WoW to control the toon? I know Pirox had an option to randomly change the name of the window so Pirox wouldn't show. Never looked in task manager to see if the real name showed.

2) I understand that its my choice to install WoW, but can't that fall under the Privacy Act? It's illegal for anyone to hack my PC and look at my files / info without permission, how can WoW do this without asking? Or maybe its hidden away in the 2x 1,000 words+ Terms of Agreements? Is there anything to block WoW from seeing my CPU / RAM like. Hell, Windows told me another app wanted to see my browser history file and I stopped it (It was actually an Email from Blizzard to an open ticket I had that tried to look at my web browser history, But I had been here and stopped it before they saw The Buddy Forums).
 
iv never heard of this issue. this is probably lies.

EDIT: You shouldn't even be thinking about this if you don't know programming well.
 
facedark said:
iv never heard of this issue. this is probably lies.

EDIT: You shouldn't even be thinking about this if you don't know programming well.
Click to expand...

1) I've already seen a few Emails from Blizz banning people for this posted in this section within the past few days, even a pasted chat from a GM stating the found the software on a scan. But seen this a few times, not just once or twice, that's what's raising my concern.

2) I am a programmer. Not the best, but I am in school for Digital Media and 2 of my required classes were programing and I passed with an A in both. I've also released a few of my own profiles on here as well. That's why I mentioned that I didn't look in my task manager to see if it actually changed the name of the application (back when using Pirox), don't even know if that's possible since its all started from the same exe file, that's why I renamed pirox to MP3Player.exe when I used it. Just wasn't sure what Blizz looks for.

3) Anything to help me bot safer is my concern and always has me thinking. Wasn't going to do the coding myself, was only expressing concern and making a possible suggestion if considered.
 
They wont take the time to tell you how the system works but all you need to know is that us getting banned is bad for business and they'll do there best too accomplish the task of protecting their users.
 
I understand that HB has our safety using HB as their #1 concern, that's why the new bot release is taking so long. But a few of the reports on bans I've read recently were from Blizzard scanning the CPU/RAM and finding HB running. If Blizzard can access my CPU/RAM then they can always see HB no matter how it connects or send data simply by seeing that HonorBuddy is running. They know what HB is, they tried to sue the company and lost.

I letter from the GM stating that WoW does scan your CPU/RAM was here Post #5.

If this is true, won't HB be detectable by a scan no matter what they do to the program? As long as the exe file is still named "HonorBuddy.exe" it will always show as running under HonorBuddy?
 
DJKid said:
I understand that HB has our safety using HB as their #1 concern, that's why the new bot release is taking so long. But a few of the reports on bans I've read recently were from Blizzard scanning the CPU/RAM and finding HB running. If Blizzard can access my CPU/RAM then they can always see HB no matter how it connects or send data simply by seeing that HonorBuddy is running. They know what HB is, they tried to sue the company and lost.

I letter from the GM stating that WoW does scan your CPU/RAM was here Post #5.

If this is true, won't HB be detectable by a scan no matter what they do to the program? As long as the exe file is still named "HonorBuddy.exe" it will always show as running under HonorBuddy?
Click to expand...

Lot of uninformed info you got there.
 
Hmmm... where? I'm asking for help, not to be pointed at and told I'm wrong. What part is wrong, what they can see scanning my CPU/RAM? I just read and linked the email from Blizzard stating that they scanned someone's CPU/RAM and saw HonorBuddy running. So unless they made it up, its clear they can scan your CPU/RAM and see HB. AND, that's not the 1st time I've heard of them scanning CPU/RAM.
 
Ahh Pirox.... Good times :D

I wonder if Pirox is working for HB under a different pseudonym.......
 
Warden does not scan out of its own process. Changing hb window name does not do anything and if it did I am sure that it would have been changed in 2009 when hb first released. When glider was around blizzard did scan outside of process but due to the legality had to stop. HB can be detected anytime with a warden update but that has nothing to do with the process name. Even so that is why a tripwire is in place to shut hb down in case of a warden update that detects hb.

Blizzard has seldomly used software detection in the last couple of years. If it was a banwave would cause this forum to crash from the amount of traffic that the 10s of thousands of bans caused.
 
jlindstedt said:
Warden does not scan out of its own process. Changing hb window name does not do anything and if it did I am sure that it would have been changed in 2009 when hb first released. When glider was around blizzard did scan outside of process but due to the legality had to stop. HB can be detected anytime with a warden update but that has nothing to do with the process name. Even so that is why a tripwire is in place to shut hb down in case of a warden update that detects hb.

Blizzard has seldomly used software detection in the last couple of years. If it was a banwave would cause this forum to crash from the amount of traffic that the 10s of thousands of bans caused.
Click to expand...

But I just read the email from blizzard that LAST MONTH someone got banned because Blizzard scanned their CPU/RAM and found HB, even tho the user claimed it wasn't even running when banned and never botted the account that got banned, but had run the bot recently on another account, same computer.

Did this user just make it all up? Cause I've seen his a few times, that's what raises my concern.

HERE: the link with the Email from Blizzard saying themselves that they scanned this US user's CPU/RAM and found HB. HERE
 
Scanning CPU/Ram information used by the WoW process... Just because the email uses general terms doesn't mean they are doing anything more then what they are legally able too.
 
A lot of this is just speculation imo; however, the kid could have had a shit computer maybe causing the bot controlling his wow client to skyrocket the memory or cpu of the actual wowclient from injection of the bot since blizzard/wow no longer scans outside its own process, but even that sounds kinda outlandish.
 
DJKid said:
But I just read the email from blizzard that LAST MONTH someone got banned because Blizzard scanned their CPU/RAM and found HB, even tho the user claimed it wasn't even running when banned and never botted the account that got banned, but had run the bot recently on another account, same computer.

Did this user just make it all up? Cause I've seen his a few times, that's what raises my concern.

HERE: the link with the Email from Blizzard saying themselves that they scanned this US user's CPU/RAM and found HB. HERE
Click to expand...

That's a standard template ban mail from Blizzard, they put because they probably had some player reports they acted on or it got tripped by LCP. Anyone who has been botting long enough has picked up a few mails like that before. Don't take it at face value they really don't know for sure so appeal!
If warden was to detect HB it would cut the tripwire which would shut everyone's copy of HB down.
 
If they scanned your memory for anything it wouldn't be the name of the program, instead it would be the programs signature in the memory.
 
DJKid said:
But I just read the email from blizzard that LAST MONTH someone got banned because Blizzard scanned their CPU/RAM and found HB, even tho the user claimed it wasn't even running when banned and never botted the account that got banned, but had run the bot recently on another account, same computer.

Did this user just make it all up? Cause I've seen his a few times, that's what raises my concern.

HERE: the link with the Email from Blizzard saying themselves that they scanned this US user's CPU/RAM and found HB. HERE
Click to expand...

Unless it's changed, as I recall Blizzard can't legally scan RAM/CPU outside of the World of Warcraft process. Also, if they detected Honorbuddy somehow, it would be from it's behavior and not the title of the window.
 
I understand people are trying to be helpful with threads like this. But unless you have the working knowledge to sort an issue, and extensive knowledge of the issue...all these threads do is breed paranoia. Get out your tinfoil hats, the Speculation Train is ready to board! =P
 
dubs said:
If they scanned your memory for anything it wouldn't be the name of the program, instead it would be the programs signature in the memory.
Click to expand...
Deathshiver said:
Unless it's changed, as I recall Blizzard can't legally scan RAM/CPU outside of the World of Warcraft process. Also, if they detected Honorbuddy somehow, it would be from it's behavior and not the title of the window.
Click to expand...

Sweet, Thanx guys.
 
Blizzard dont scan, we've had this 101 times

but they do take a snapshot and monitor your windows processes, how often and under what circumstances is a different story i guess;

its even in their tos - and yes, even the eu tos before people come raging it saying its illegal in the eu

youve agreed to those terms and if it was illegal then all antivirus and malware programs as such would also be illegal

blizz doesn't scan your computer in the sense, ooh a folder on c drive, lets have a look in it, it just simply snapshots if anything/logs your windows processes, and as long as they conform the fsa etc on security and privacy - then i dont see how it would be illegal for them, after all youve agreed to their tos;

someone will disagree with me ofc, but still - its in their tos and tbh unless you worked for them - i dont see how you can state other wise
 
GIVEMEANAME said:
Blizzard dont scan, we've had this 101 times

but they do take a snapshot and monitor your windows processes, how often and under what circumstances is a different story i guess;

its even in their tos - and yes, even the eu tos before people come raging it saying its illegal in the eu

youve agreed to those terms and if it was illegal then all antivirus and malware programs as such would also be illegal

blizz doesn't scan your computer in the sense, ooh a folder on c drive, lets have a look in it, it just simply snapshots if anything/logs your windows processes, and as long as they conform the fsa etc on security and privacy - then i dont see how it would be illegal for them, after all youve agreed to their tos;

someone will disagree with me ofc, but still - its in their tos and tbh unless you worked for them - i dont see how you can state other wise
Click to expand...
Ok. So what gona happend when they found that I am running 32 bit version on 64bit Windows, even after they forced me to run 64 bit WOW? You can't run 32 bit WOW without some efort on 64bit Windows. I must be a stupid and not warried about that.
 
You must log in or register to reply here.
Back
Top