fun information - wpe detector

11/06/2010 21:04 enot78#1
im find silent detector of WPE
its try to find windows with caption WPE, WPE PRO,WPE PRO - Nostale.dat and WPE PRO - NostaleX.dat.

its check windows captions at moment of run and every 10minutes after it.

if detector find WPE its send next message to server:
PHP Code:
[B]guri 1005 [/B]random($64) random($64) random($64) 
dont run WPE even you use it not for nostale(its no work anyway)
ps: i find this detector at version by 14september and all later versions ...lol
11/06/2010 21:48 Elektrochemie#2
Yes, i found it yesterday too.
Its true.

Für die Englisch schwächeren:
NosTale scannt die laufenden Prozessen nach ihren Titeln ab. Aktuell scannt es nach

Quote:
WPE, WPE PRO,WPE PRO - Nostale.dat, WPE PRO - NostaleX.dat.
Daher, NostaleX.dat umbennen, WPE Titel ändern und es sollte nichts finden ;)
11/06/2010 22:07 Δbraxas#3
Can they scan for AutoIt, too 0.o? That would be worse!
11/06/2010 22:11 Elektrochemie#4
They are scanning for the process title. They could scan for AutoIt or something else.
But i think its possible to change the title / caption of the bots, isn't it? So it shouldn't be possible.

At the moment they're scanning for the captions formica said. Not more.
Quote:
WPE, WPE PRO,WPE PRO - Nostale.dat and WPE PRO - NostaleX.dat.
11/06/2010 22:21 Δbraxas#5
Can I use WPE if i change the title or is it still fixed?
11/06/2010 23:36 enot78#6
Quote:
Originally Posted by _THE_RAIN_ View Post
Can I use WPE if i change the title or is it still fixed?
why you need WPE now?
yes you can if change windows caption

client scanning no process name. its scanning windows name by FindWindowA function

first image= procedure that search WPE window(every 10minutes)
second image= create thread for this procedure(can simple nop it^^)
have fun)
11/07/2010 00:15 Δbraxas#7
Quote:
first image= procedure that search WPE window(every 10minutes)
second image= create thread for this procedure(can simple nop it^^)
How do you make that 0.o?

Can you tell me how to use WPE now, and how I change the windows caption?
11/07/2010 02:03 endszo17#8
Quote:
Originally Posted by enot78 View Post
why you need WPE now?
yes you can if change windows caption

client scanning no process name. its scanning windows name by FindWindowA function

first image= procedure that search WPE window(every 10minutes)
second image= create thread for this procedure(can simple nop it^^)
have fun)


what do you mean by this?
did you used assembler?
and regarding w/ those image what are those for?
11/07/2010 02:29 enot78#9
Quote:
Originally Posted by endszo17 View Post
what do you mean by this?
did you used assembler?
and regarding w/ those image what are those for?
i never use assembler or other programming languages/
only a mental projection into astral :bandit:

if you dont understand that imaged on this screenshots -> its screenshots not for you
11/07/2010 02:47 endszo17#10
Quote:
Originally Posted by enot78 View Post
i never use assembler or other programming languages/
only a mental projection into astral :bandit:

if you dont understand that imaged on this screenshots -> its screenshots not for you

i know how to put those codes,

just a question

where should do i put those codes?
11/07/2010 03:28 Alisami#11
Wenn man für dieses Paket instant banned wird, kann man dann nicht ein Banprogramm machen? ;D Wäre praktisch, für diverse Zwecke.