ok now when blizz wants to scan you, what would they use and how? and what would it be called? I know its a RAM scan? I guess? how would I do a SELF scan on my self. To test if the Paranoid guide works?
I think the quickest answer would be to press alt+ctrl+del (Task Manager), go to Processes, and look for HonorBuddy.exe and it's description. The 'paranoid' guide suggests this is a problem.
[ol][*]We don't know exactly what Blizzard scan.
[*]We don't know how or if scanned data contributed to a ban.
[*]We give permission for Blizzard to scan our CPU and RAM 'outside of the WoW process' when we agree to Blizzard's Terms of Service.
[*]Most people allude that this 'scanning' includes the ability to read your running processes, such as you see in Task Manager.
[*]Hardware ID (HWID) is also a piece if data that is known to be scanned.
[*]The 'Paranoid Guide' was a failed attempt at editing the HonorBuddy executable so that its Process identification 'name' and 'description' would be different [sic]. The guide suggests this would help to hide the process from Blizzard. The guide fails because once the HonorBuddy.exe meta data was edited it fails to authenticate with the auth servers.
[*]The argument that the 'Paranoid' guide makes is not new, and the HonorBuddy developers are well aware of it.
[*]The 'Paranoid' guide is also does not address that Blizzard can scan hardware ID (HWID) at authentication.
[*]Some people suggest simply renaming the HonorBuddy.exe -to Notepad.exe.
[*]Also recently, August 2013 I believe... Patch 5.3(?) introduced a hook called MSG_IsHonorBuddyDetected (I will edit later for exact info); this was a significant development as it indicated that Blizzard have specifically targeted HonorBuddy. This did at first spook the community but by time of implementation it was dealt with and understood by the HonorBuddy leadership.
[*]The HonorBuddy developers deal with these issues though, that is the foundation of HonorBuddy and why we pay for it; there are a core team of developers and dozens of others who contribute. There is a 'tripwire' mechanism that is supposed to be activated should HonorBuddy detect WoW is doing something that may indicate it has been compromised.
[/ol]
Simply put, we know what Blizzard can scan and we can detect certain bits of data that are scanned. How the data is used or contributes to a ban is however conjecture, we simply do not know Blizzard's strategy. We also know that the development team at HonorBuddy are on top of the core issues.
Hope that helps convey what we believe is scanned and the current state of how HonorBuddy deals with it.