New Ts and Cs?

[spriggy666]

Hi Guys and Girls,

I was just about to sign up for another botting account and noticed the following on the sign up page under the "Anti-Cheating Agreement".

[/URL][/IMG]

As you can see they state that they do not scan outside of the memory that wow is using but they do also state that they somehow read the Windows Process List to determine if any confirmed hacking or cheating programs are presently open with WoW. I mentioned this ages ago in a post http://www.thebuddyforum.com/honorbuddy-forum/110352-proof-blizz-reading-running-processes-upon-startup.html but it was poo poo'd as usual with the old "Well if they can do it why hasnt everyone been banned. This is proof that they do and who knows if this is one way that they use once you have been reported.

All I can say is becarefull now as it does only seem a matter of time till one of your accounts are banned.


Regards,

 

[jordi1104]

http://www.thebuddyforum.com/honorbuddy-forum/112106-blizz-scans-now-windows-process-list.html

 

[icefrost]

ive been botting less then a month and already dropped 4 accounts upgraded fully to panda including 3 perma's which where reduced to 72 hour bans i highly suggest we look at this and take it seriously cause i think its the cause of some problems a few are having .

 

[jordi1104]

ive been botting less then a month and already dropped 4 accounts upgraded fully to panda including 3 perma's which where reduced to 72 hour bans i highly suggest we look at this and take it seriously cause i think its the cause of some problems a few are having .

Take a look at what I posted.

Btw this isn't anything ''new'' you're just getting banned becouse you're freaking using gb2 who else farms for more then 30mins to 2 hours then a bot?

 

[Vanhorne86]

Take a look at what I posted.

Btw this isn't anything ''new'' you're just getting banned becouse you're freaking using gb2 who else farms for more then 30mins to 2 hours then a bot?

Seriously, how are you supposed to mass make gold without GB2 realistically.

 

[spriggy666]

http://www.thebuddyforum.com/honorbuddy-forum/112106-blizz-scans-now-windows-process-list.html

Ahhhh cheers jordi didnt realise that this was posted before maybe I should have used the search function again lol. But looking back on the post people said that this is illegal. They have worded it so that it falls within guidelines of what is acceptable as people have to accept this terms of service to access the game.

The list of processes that they read is from the normal task manager but they request the information using the WMI Procedure Call as my old post shows. Basically they have everyones IP addresses from the client that we are connecting from, all they have to do is run a script (for example when someone gets reported) which calls the procedure from your local machine by basically impersonating your local machine then sends back to their server. That log is then probably checked to see what processes are running and if you have got one of the ones they have on their list they will probably just keep an eye on you untill more reports then run that script again. If they find it again and again thats when they are probably hitting that big ban hammer button.

The following code is from Microsoft Technet showing a basic script to do the job.

strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colRunningServices = objWMIService.ExecQuery _
("Select * from Win32_Service")
For Each objService in colRunningServices
Wscript.Echo objService.DisplayName & VbTab & objService.State
Next

 

[jordi1104]

Ahhhh cheers jordi didnt realise that this was posted before maybe I should have used the search function again lol. But looking back on the post people said that this is illegal. They have worded it so that it falls within guidelines of what is acceptable as people have to accept this terms of service to access the game.

The list of processes that they read is from the normal task manager but they request the information using the WMI Procedure Call as my old post shows. Basically they have everyones IP addresses from the client that we are connecting from, all they have to do is run a script (for example when someone gets reported) which calls the procedure from your local machine by basically impersonating your local machine then sends back to their server. That log is then probably checked to see what processes are running and if you have got one of the ones they have on their list they will probably just keep an eye on you untill more reports then run that script again. If they find it again and again thats when they are probably hitting that big ban hammer button.

The following code is from Microsoft Technet showing a basic script to do the job.

strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colRunningServices = objWMIService.ExecQuery _
("Select * from Win32_Service")
For Each objService in colRunningServices
Wscript.Echo objService.DisplayName & VbTab & objService.State
Next

Again read the thread last post and this aswell :

of course its not legal, they dont read outside of their own address space. when they say process list, they aren't referring to the one you see when you press Crtl-Alt-Del
they are talking about the list of processes that are interacting with wow. if you've ever seen an error crash, that's the kind of process list they are talking about.

That's what CodenameG sayd about it.

Basically as explained alot of times before they don't and when they do they will take advantage of it and ban everyone at once to create chaos .

 

[stelios21]

Since i am paranoid is there a way to block someone from the process list?

P.S The line in ToS is there for a specific reason.

 

[stelios21]

Yes there's a very handy way to you simply unplug the power cord from your computer and they cannot access your process list I recommend doing it right now to ensure safety.

For real if you're paranoid then you shoulden't use a bot lol.

i just got unmuted for raging to a kid like you throwing trash to the forum.please if you cannot provide useful information you might as well facepalm yourself.

 

[spriggy666]

Yes there's a very handy way to you simply unplug the power cord from your computer and they cannot access your process list I recommend doing it right now to ensure safety.

For real if you're paranoid then you shoulden't use a bot lol.

Not a very good answer there Jordi. Also do you know what a TOS actually is?

 

[jordi1104]

Not a very good answer there Jordi. Also do you know what a TOS actually is?

Obviously.... do you?

Tos don't go above the actual law if I put into my tos I don't accept any refund for tangible goods in the EU for example and a customer asks for a return then I am required by law to offer him a refund as the law requires that.

Basically tos doesn't say much blizzard is a company and isn't supposed to do any ''illigal'' things if they do I welcome you to report it to the police as with anything illigal.

 

[CodenameG]

they might of changed the wording but it hasn't changed what the ACTUAL program does, if there's a change that will put users in danger we will let you know, but obviously they didnt push out a new patch with new code today, so nothing new has been implemented.

thread closed.