What's new
By:
  • Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • Visit Resources
  • Visit Downloads
  • Visit Portal

Question about VM and ban

H

hardbrain

New Member
Joined
Oct 3, 2012
Messages
11
Reaction score
0
Botting under a virtual machine increase or decrease the probability of a ban?
 
You would still be using the same internet connection (same IP-address), your characters will be coming into contact with one-another etc. If I worked at Blizzard's ban hammer department, I wouldn't really care at all what hardware was running the process, whether it was virtual/spoofed and so on, I'd just see 10 (?) accounts running on the same network 24/7, occasionally sifting funds to one Paypal account and that would conclude my investigation. I don't know what the thresholds are to be relatively safe (or if there are any), but I do know that 1 account on 1 IP-address running for just some of the day (or night) doesn't seem to trip any wires so far, then again, there are people on these forums that have managed to run 10+ accounts 24/7 for almost a year now, using the same network, same machine and for all I know, the same contact and payment information without any bans, then again, some have been caught in a week of starting botting. That last fact leads me to believe Blizzard employs some kinds of statistics to find obvious botters.

tl;dr: I'm 99% certain using a VM makes no difference except for the loss in computing power.
 
but with only 1 account, is there any lead that tell bottingu nder VM reduce the vision of thedemonbuddy injection? or otherwise blizzard focus on VM because it s unatural way of playing etc... ?
 
The point of VM is to run multiple bots meaning no point in running 1 bot and using a VM.
With that said, I know many people who ran the bot few hrs a day on their only account
All got hit on the wave last december.
 
You do not just use VM alone. You get a V P N service and put V P N connection on each VM window so each game will be running on a different IP(network)
 
It's easier to manage if you're using multiple ***s with public IP addresses.
 
Ok here my info after 1.5 year of D3 botting. Peoples saying "VM is a myth" dont know shit. Year ago I was arguing with some people but I dropped it - more bans = more market for me. Market is almost over for me (gonna quit march 2014) so will share my thoughts again. During 1.5 year I only once got banned - the big wipe 18 december 2012. That day they pulled all strings and banned almost all people - almost because one of my toon survived 18 december (weird stuff, but it did).

After 18 december, I recreated 15 toons via VM, zero bans till today.

Here how it goes with VM and D3. My job in reallife is professional programmer (15 years), so i was thinking how would be easly method to detect botting without any harddata / behavior mining - low resource usage.
When you first run Diablo3 it creates uniqe hash id for the game and save it in windows registry. This hash is also stored on blizzard server - that is how they recognize when u try to login from different machine (different unieq hash id).
When you run more instances from one system - on blizzard side they see that particular uniqe hash is active in more that one instances. Easy to monitor (almost zero resources), easy to flag, almost zero resources is needed.

When u use VM (or switching windows user like somebody does) - every toon runs from different uniq hashid. Thats its most important for bot to live long. Not IPs, MAC and other stuff that people spamming for long time. After ban - all you need to do is to clean windows registry and thats it. Did it after 18 december 2012 ban - zero bans till today.

I even tested it - ran 5 toons on one machine, without VM. They died after 4 weeks. Rest toons on VM - alive. Pretty sure these 5 toons got easly flagged bcause of multiple instances on same uniq hash id. Of course some people live long running toons on one machine - its proably because human person didnt check it yet.

So generally its bullshit about "VM is a myth". yes VM take some resources. But u can easly run 5 toons via VM per machine (or more, but i stayed with 5) - 1 toon on real system, 4 on VMs. Every game runs with their own uniqe gamehash id and u stay low as u can get.

If u run more instances of game with same uniqe hashid - pretty sure its autoflag, then - whey they got human resources - it is beeing checked someday by human person (because it can be multiboxing - wich is allowed). After checks - they set another flag "to be banned". And on next wave - these accounts are closed.

it wont help u 100% - but it keep you toon as low as you should be from their system, so they wont use human resources to check "invidual bot". With their hands busy on other projhects now, they proably check only groups of bots = multiple instances of same uniq hash id.

My friend runs 10 toons with this method and zero bans also (despite 18 december 2012).
 
Actually, they use your subnet as well.
Example:
Laptop (your hwid.. or "unique hash id" would always be the same)
Battle.net launcher application doesnt require you to authenticate that often.

Now you take your laptop to a friends house that uses a different ISP, or is even located on a different subnet within the same ISP. You will need to authenticate in order to log back into the battle.net application.. This is mostly why you will recieve something about logging in from a different/unknown location..

While I fully agree about your theory of VMs, such as vmware, do understand that they could still see that as well. VMWare in particular uses a generic video driver, since it can not map directly to your video card. This driver is something like vmware svga generic or something like that. If they really wanted/needed to, they would be able to see a list of loaded drivers (I am not sure what virtual box uses).

I wouldn't really care at all what hardware was running the process, whether it was virtual/spoofed and so on, I'd just see 10 (?) accounts running on the same network 24/7
Click to expand...

Some colleges do not NAT properly, and will show alot of people connecting from the same IP address.. Banning just on that assumption alone is a bad idea.. in which case a hwid/MAC would come in handy to determine.
 
Yesterday got 9 accounts (all but 1) banned on one of the comps. Every each of them was running in a separate VMware virtual window. Every virtual machine has its own OS installed separately, not just copied. I guess that wasn't enough since all 9 were banned on the same computer. I am seriously starting to think that VM is complete waste of resources.
 
They have of course other methods - did u have all accs full separate - every acc has own paypal , u do not trade between etc? So unlucku, sorry for your lose. Since december 18, cumulative 15+12 toons (2 dudes) without scratch.
VMWare + full separate just lowering odds, nothing more. One multiple hashid is just praobly autoflag by default (no virtualisation)
Despite VMWare i have full separation all accs (gold for items traded via aouction house), separate paypalsand every 2-3 toon got different ip.
Lowering odds, never can be sure. Still 1.1 year without 1 ban.

Need to add that I use some old version od DBBeta and old trnity- hasnt upgraded it for like 3-4 months (just adjusted item rules)
 
the vm driver name can been changed by tech ways. more safety
 
solokazama said:
They have of course other methods - did u have all accs full separate - every acc has own paypal , u do not trade between etc? So unlucku, sorry for your lose. Since december 18, cumulative 15+12 toons (2 dudes) without scratch.
VMWare + full separate just lowering odds, nothing more. One multiple hashid is just praobly autoflag by default (no virtualisation)
Despite VMWare i have full separation all accs (gold for items traded via aouction house), separate paypalsand every 2-3 toon got different ip.
Lowering odds, never can be sure. Still 1.1 year without 1 ban.

Need to add that I use some old version od DBBeta and old trnity- hasnt upgraded it for like 3-4 months (just adjusted item rules)
Click to expand...

i have 6 bots with the same ip on the same Pc without any VM and othe shit

also i have one PayPal for two of them and sold a lot of stuff on RMAH - from last year on near $13000
no bans from december 2012

all bots 24/7
 
Kevin Spacey said:
i have 6 bots with the same ip on the same Pc without any VM and othe shit

also i have one PayPal for two of them and sold a lot of stuff on RMAH - from last year on near $13000
no bans from december 2012

all bots 24/7
Click to expand...
really? so cool
 
Not D3 Related, But when I was professionally botting with WOW I was running 12 wow accounts from a single PC and a Single IP no V P N S no VM software nothing..

I botted for almost 3 years. (not just Honnorbuddy) 20 hours a day on each account..

I lost 1 account in all that time.. The one account I tried on VM.
 
You must log in or register to reply here.
Back
Top