perma ban, ram scan technique

[Nab]

Who leaves the executable named honorbuddy anyhow?? quick rightclick and rename and that log now says you are running "gaypornosaurs.exe" instead of honrobuddy.exe

Why would I have to rename my HB process? Don't think you think that if it had -any- impact on how blizzard detects a botter, the buddyteam wouldn't randomly generate a different .exe name or something?

 

[bl4ck]

"I believe that blizzard will check the log dump files if you have been flagged for botting,"

1. omg omg who the fu** have time to read log dump if GM want check flagged bot can see him in the game....

2. Delete BlizzardError.exe from installation folder and after update wow you can change name folder ProgramData\Battle.net and run game from file Wow.exe

There are many possibilities....

 

[v iralis]

Blizzard Entertainment, Inc., by and through itself and/or its licensees and affiliates, considers cheating through the use of "unauthorized third party programs" to be a gross violation of the Terms of Use Agreement ("TOU") and/or the End User License Agreement ("EULA") that you have accepted in order to view this notice, that pertain to any or all Blizzard Entertainment video games, such as, but not limited to, World of Warcraft?, StarCraft II?, Diablo III?, and their respective expansions ("Blizzard Games"). An "unauthorized" third party program as used herein shall be defined as any third party software, including without limitation, any "add-on" or "mod" that in Blizzard Entertainment's sole determination:

(i) enables or facilitates cheating of any type;
(ii) allows users to modify or "hack" a Blizzard Game's user interface, environment, and/or experience in any way not expressly allowed by Blizzard Entertainment in the EULA and/or the TOU;
(iii) intercepts, mines or otherwise collects information from or through Blizzard Games.
In an effort to combat the efforts of those individuals who are willing to violate the EULA and/or the TOU, Blizzard Entertainment utilizes an "anti-cheating" utility that runs as part of Blizzard Games. This "anti-cheating" utility performs limited scans of:

(i) the Random Access Memory ("RAM") that is occupied by a Blizzard Game to confirm that the Blizzard Game's program has not been altered or "hacked" in violation of the Blizzard Games Terms of Use;
(ii) the Blizzard Games "process" to determine if any unauthorized third-party programs or computer code has been attached to the Blizzard Games process; and
(iii) the Windows Process List to determine if any confirmed hacking or cheating programs are presently open in violation of the Blizzard Games Terms of Use.
The information that is obtained from this activity is communicated to Blizzard, who uses it solely to determine if the computer that a user is using to log on to Blizzard Games has any unauthorized third-party programs, "hacks," or "cheats" that violate the Blizzard Games Terms of Use Agreement and is not used for any marketing purposes, and will never be sold, leased, or otherwise transferred to any third party. Also, note that other than the previously mentioned scanning activity, Blizzard currently does not employ any other scans of the computer that you use to play Blizzard Games.
In the event that Blizzard Games detect an unauthorized third-party program, Blizzard may in its sole determination:

(a) communicate information back to Blizzard Entertainment, including without limitation your account name, details about the unauthorized third party program(s) detected, and the time and date the unauthorized third party program was detected; and/or
(b) exercise any or all of its rights under the TOU, with or without prior notice to you.

this is directly from the battlenet account signup page

notice they do say the scan your proccesses

 

[jordi1104]

this is directly from the battlenet account signup page

notice they do say the scan your proccesses

Dude seriously this has been answered tons of times.

Wow doesn't scan outside of it's own process.

 

[mdcane7]

100% agree with you I shoulden't even post a reply when you look at the guy postcount and join date you know.

b'c postcounts are like ilvl, tells you how good you are.

 

[jordi1104]

b'c postcounts are like ilvl, tells you how good you are.

No it tells you that they're new.

New people usually don't understand that their questions have already been answered the answer to this thread is wow doesn't scan outside of it's process.

Basically if the bot was detectable then we would all be banned.

Logs are something different if you sent them your logs containing ur processes then well that's not a good idea i've never sent them my logs I think so I don't really know what's in them.

 

[syntaxtc]

I cant seem to find a list of running processes in my error crash log, unless i am blind?

 

[Alucardtnuoc]

this is directly from the battlenet account signup page

notice they do say the scan your proccesses

(i) the Random Access Memory ("RAM") that is occupied by a Blizzard Game to confirm that the Blizzard Game's program has not been altered or "hacked" in violation of the Blizzard Games Terms of Use;

Let's start with this. It can only scan, the memory of which it occupies, thus any outside process, which does not directly attach/modify/influence the memory, can't be scanned.

(ii) the Blizzard Games "process" to determine if any unauthorized third-party programs or computer code has been attached to the Blizzard Games process;

Well, that's saying "if you attach Cheatengine, we can scan for it"

(iii) the Windows Process List to determine if any confirmed hacking or cheating programs are presently open in violation of the Blizzard Games Terms of Use.

Now, you may think "aha! got you now, see they scan the windows process list!"... no, just no. This had been said so many times, it's stupid... Blizzard is unable to scan outside of the memory it uses, due to breach of privacy, ToS are not 100% legal binding.... Otherwise you could say "If you accept this, you will have to give us your first born" and you would have to.

Should note, with the last one... i've NEVER changed the HB name... so if they could scan the windows process list, well... you know should have happened already.