Webzen Archlord Gameguard

Quote:

Originally Posted by EmmeTheCoder netstat -n , see to what address it sends the info to, and just make a junk info and send to same address ;)

Emme nothing work with this version it is rev 1352 and even you can not more make it bypass by own Apache server running or other old crap bypass methods

I have the alfclient.exe now on my version 3 and its running without to close AL imediatly. i become a warning that Themedia is detecting a debugger but i can ignore that and run further. After Loading i have a few sec later a error in the memory :mad: but i think im on the right way.

And please if you have no idea leafe this thread we dont need any sensless posts here from people that would only spamm. THX



And here is a list what is GG do after start (other game but same rev)


06:37:40 [EXECUTION] "c:\programas\wizet\sea\gameguard\gamemon.des" was allowed to run
[EXECUTION] Started by "c:\programas\wizet\sea\maplestory.exe" [3156]
[EXECUTION] Commandline - [ \x01\xd0\xd5\x95\x41\x6d\x78\x17\xab\x3c\x73\x3c\x 61\x0c\x8e\x41\xbc\xe2\x95\x69\x61\xce\x18\xf6\x59 \x96\x10\x9a\x11\x81\xfc\x60\x05\x11\xc6\x8c\x4e\x ee\x74\x33\x1e\x64\x60\x70\x31\x09\x4d\x90\x79 ]
06:37:41 [DRIVER/SERVICE] c:\programas\wizet\sea\gameguard\gamemon.des [2872] Tried to install a driver/service named dump_wmimmc
06:37:41 [DRIVER/SERVICE] c:\programas\wizet\sea\gameguard\gamemon.des [2872] Tried to install a driver/service named dump_wmimmc
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\csrss.exe [1044]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\winlogon.exe [1152]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\services.exe [1196]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\lsass.exe [1208]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\svchost.exe [1352]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\svchost.exe [1408]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\svchost.exe [1456]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\svchost.exe [1496]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\svchost.exe [1600]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\explorer.exe [2024]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\spoolsv.exe [120]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\grisoft\avg free\avgamsvr.exe [224]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\grisoft\avg free\avgupsvc.exe [240]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\grisoft\avg free\avgemc.exe [256]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\svchost.exe [332]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\processguard\dcsuserprot.exe [396]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\zapp turbo\client\ventc.exe [564]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\rundll32.exe [652]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\igfxtray.exe [848]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\hkcmd.exe [868]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\synaptics\syntp\syntplpr.exe [972]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\wscntfy.exe [1384]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\synaptics\syntp\syntpenh.exe [1476]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\alg.exe [1652]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\rthdcpl.exe [1756]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\alcmtr.exe [1852]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\grisoft\avg free\avgcc.exe [1924]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\msnshell\msnshell.exe [820]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\zango\zango.exe [1252]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\java\j2re1.4.2_12\bin\jusched.exe [904]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\processguard\pgaccount.exe [1556]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\ctfmon.exe [1632]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\messenger\msmsgs.exe [1664]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\lg_swupdate\gilautouc.exe [1484]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\zapp\z010 connect\z010.exe [2496]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\processguard\procguard.exe [616]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\csrss.exe [1044]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\winlogon.exe [1152]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\services.exe [1196]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\lsass.exe [1208]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\svchost.exe [1352]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\svchost.exe [1408]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\svchost.exe [1456]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\svchost.exe [1496]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\svchost.exe [1600]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\explorer.exe [2024]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\spoolsv.exe [120]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\grisoft\avg free\avgamsvr.exe [224]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\grisoft\avg free\avgupsvc.exe [240]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\grisoft\avg free\avgemc.exe [256]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\svchost.exe [332]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\processguard\dcsuserprot.exe [396]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\zapp turbo\client\ventc.exe [564]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\rundll32.exe [652]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\igfxtray.exe [848]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\hkcmd.exe [868]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\synaptics\syntp\syntplpr.exe [972]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\wscntfy.exe [1384]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\synaptics\syntp\syntpenh.exe [1476]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\alg.exe [1652]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\rthdcpl.exe [1756]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\alcmtr.exe [1852]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\grisoft\avg free\avgcc.exe [1924]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\msnshell\msnshell.exe [820]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\zango\zango.exe [1252]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\java\j2re1.4.2_12\bin\jusched.exe [904]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\processguard\pgaccount.exe [1556]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\windows\system32\ctfmon.exe [1632]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\messenger\msmsgs.exe [1664]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\lg_swupdate\gilautouc.exe [1484]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\zapp\z010 connect\z010.exe [2496]
06:37:41 [MODIFY] c:\programas\wizet\sea\gameguard\gamemon.des [2872] was blocked from modifying c:\programas\processguard\procguard.exe [616]

It tries to hook all the main files for your computer so it will be even harder, if the hookfile is null then it will give an exception, else it will continue. Hmm, I'll need to have a better look into this when I have time.

btw any1 around who emme gave realm trade to? i have some questions coz he gave me the method but im having some difficulties and emme cant figure out whats wrong, ugh... so any1 acutally got this to work?

fgd

Intrested in knowing what you know bout the realm trades i'll give it a few thousand tries

Here is some Info on Gameguard that I found:
[Only registered and activated users can see links. Click Here To Register...]

NOTE: The link above IS NOT a post TO DISABLE GameGuard. As Brian mentioned in his article, this is a way to REMOVE GameGuard AFTER you REMOVE the game as well. I hope you find it helpful becouse there is some info about the hidden files and the rigistry (as well as some Anti-Rootkit scanner programs).

Quote:

Originally Posted by zelion i'll give it a few thousand tries

lmao :D

[Only registered and activated users can see links. Click Here To Register...]

screw gameguard..

fav that link guys.. im gonna update it as soon as poss :)

Quote:

Originally Posted by Drakonis [Only registered and activated users can see links. Click Here To Register...]

now thats sick! :handsdown::handsdown::handsdown::handsdown:

So anyone managed to use WPE PRO getting through GG unnoticed?

Quote:

So anyone managed to use WPE PRO getting through GG unnoticed?

I dunno....... try it

Nvm don't!

Quote:

Originally Posted by hellzer123 So anyone managed to use WPE PRO getting through GG unnoticed?

Use the search function on how to bypass GG, i dont know if bypassing it works because i havent tested it myself but from what i can recall people did get it to work so try it out then try using wpe :) good luck!

Can webzen find out about that?

cant any game find out about anything u do which your not meant to? they always can find out in some sort of way.. When using a hack or exploit its your own risk in doing so. if u get caught dont be a bitch and cry about it :p