What's new
By:
  • Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • Visit Resources
  • Visit Downloads
  • Visit Portal
RebornBuddy Forums

Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your own topics and posts, as well as connect with other members through your own private inbox!

Ways to prevent RAM scans?

S

Schuetzy

Member
Joined
Jun 4, 2013
Messages
112
It's safe to say that Blizzard is detecting us by performing scans on our RAM. Is there some sort of program that can "spoof" your RAM, or conceal it?
 
The question is... it is possible to do it? Would it change anything related to detection?
 
Schuetzy said:
It's safe to say that Blizzard is detecting us by performing scans on our RAM. Is there some sort of program that can "spoof" your RAM, or conceal it?
Click to expand...
Relax.

Blizzard do not scan outside Wow.exe dedicated name space in RAM.
 
summy said:
so i just rename wow.exe and im safe?
Click to expand...

62920142008105.jpg
 
Aion said:
Relax.

Blizzard do not scan outside Wow.exe dedicated name space in RAM.
Click to expand...

do you know that for sure? Some passive bots also got hit in the banwave and how can blizzard know if there is a programm running that doesn't write to ram ?
Please correct me if I'm wrong I don't want to spread false informations.
 
cryptexx said:
do you know that for sure? Some passive bots also got hit in the banwave and how can blizzard know if there is a programm running that doesn't write to ram ?
Please correct me if I'm wrong I don't want to spread false informations.
Click to expand...

Good god ...

Any "program" requires the use of computers memory to run .... lol <insert triple facepalm meme here>

You bot, you get banned, get over it. Don't use it on an account you really wouldn't miss, if you can't handle that then go back to playing legit because honorbuddy is 100% detected and you WILL 100% be banned.
 
Geez. Everybody is being... Not rude per say.. But not nice either. :P The guy or gal is new to botting - or isn't very tech savvy guys. Give em a break! If I had a penny for every don't bot on an account you'd miss get over it post I could buy out Microsoft. For the OP no changing your exe name doesn't help you unfortunately.
 
few years ago i was suggested to rename honorbuddy.exe to some other name like SchoolWorkxxx.exe but it dont matter much i dont think
 
KREWKON said:
Good god ...

Any "program" requires the use of computers memory to run .... lol <insert triple facepalm meme here>

You bot, you get banned, get over it. Don't use it on an account you really wouldn't miss, if you can't handle that then go back to playing legit because honorbuddy is 100% detected and you WILL 100% be banned.
Click to expand...

dude keep calm I may not used the right words, I know that every programm uses ram but every programm also has it's own reserved space in RAM, so just like an internet explorer, a passive bot wouldn't write to wow's ram space, just read some infos from it and simulate keystrokes and mouse clicks etc. HB does write into wow's ram space which is clearly detectable.
 
Has zero to do with processes. They're detecting the modification to the game client via the unlocker. How? If we knew it would already be solved.
 
cryptexx said:
dude keep calm I may not used the right words, I know that every programm uses ram but every programm also has it's own reserved space in RAM, so just like an internet explorer, a passive bot wouldn't write to wow's ram space, just read some infos from it and simulate keystrokes and mouse clicks etc. HB does write into wow's ram space which is clearly detectable.
Click to expand...
Simulating keystrokes to an DirectX application requires you to use the Windows SendInput API, using this API you are injecting the state of the keyboard to the application through windows. So you are still injecting information into the application. You cant build a bot without some sort of injection, its impossible and the easiest way to do it is using the Windows Native API.

In a none DirectX application, you only need to send a message to the window handle that a key is pressed. But DirectX doesnt care about those kind of messages.
 
Last edited:
Radonic said:
Simulating keystrokes to an DirectX application requires you to use the Windows SendInput API, using this API you are injecting the state of the keyboard to the application through windows. So you are still injecting information into the application. You cant build a bot without some sort of injection, its impossible and the easiest way to do it is using the Windows Native API.

In a none DirectX application, you only need to send a message to the window handle that a key is pressed. But DirectX doesnt care about those kind of messages.
Click to expand...

Thank you, finally a good answer with some facts, I didn't know about this.
 
You must log in or register to reply here.
Back
Top