Register for your free account! | Forgot your password?

Go Back   elitepvpers > Diablo 3 > Diablo 3 Main - Discussions / Questions
You last visited: Today at 14:40

  • Please register to post and access all features, it's quick, easy and FREE!

 

Warden Modul Ver 1.03B Scan-Infos

Reply
 
Old   #1
 
elite*gold: 0
Join Date: Sep 2009
Posts: 1,442
Received Thanks: 290
Warden Modul Ver 1.03B Scan-Infos

Quote:
Originally Posted by Zoid View Post
Here are the current relevant game scans:

Diablo III.exe ( Build: 1.0.3.10485)
Code:
0x00996210 0007 - [MAPHACK]     GetMinimapMarker
0x00943cd0 0009 - [HACK_CMD]    ConsoleInput
---------------------------------------------------------------------------
0x00748800 0014 - [HIDE CRASH]  ExecErrorReport
0x00717ed0 0014 - [HIDE CRASH]  UnhandledExceptionFilter
0x004a4730 0007 - [???]         MenuCallBack
0x00458100 0010 - [PKT SNIFFER] ParseServerMessage
0x003cbe61 0008 - [PKT_SNIFFER] SendMessage
0x00351bb0 0010 - [???]         GetEntityName
0x0032d286 0014 - [MAPHACK]
0x0032d22f 0015 - [MAPHACK]
0x003299d0 0015 - [MAPHACK]     IsMinimapMarkerVisible
0x002d8761 0009 - [MAPHACK?]    Target check crap
0x00263f30 0008 - [HACK_CMD?]   ChatMsg
0x0020dea0 0012 - [PKT_SNIFFER] SendClientAction
0x0020999d 0011 - [PKT_SNIFFER] Intercepting client action
0x0017f860 0017 - [BOT]         RenderGameFrame
0x0017cdc0 0010 - [BOT]         Intercept action on entity
0x00150a00 0008 - [???]         Window stuff
0x000c7700 0009 - [???]         GetEntityAttrib

There are more but these are most relevant and unlikely to be fake.

Also the *Buddy bots are detectable by Warden... You see there is a scan function in Warden that goes over every DLL and makes a signature of it. That means, if you forcefully load 'any' DLL into Diablo III Warden can see it. It doesn't matter if you promise not to change the process, you actually have to physically hide to truly be undetectable to this anti-cheat. (for example: a ReadProcessMemory hook)

If Autoit injects any helper libraries into the target process that too could be causing bans.

There are over 80 unique scans returning to Blizzard the state of other DLLs loaded into the game process. That is any DLL loaded with LoadLibrary(), There is also 5 scans looking for any memory created with VirtualAlloc(...), this can also be stuff put on the heap via a new operator, HeapAlloc, or free(). As all of those ultimately being put into a VirtualAlloc'd memory space.

Hopefully this article will make people realize that warden is alive and real. Bot authors need to take a more aggressive stance against it if they hope to narrow down the detection mechanisms.



Diablofarmer is offline  
Thanks
3 Users
Reply



« Previous Thread | Next Thread »

Similar Threads
Neue WARDEN Infos
Ich weiss nicht wie ich den Post von JSP einstufen soll, aber seht selbst: d2jsp Forums -> +/!\+ Warden Online - Iam Not Joking +/!\+ Demnach...
21 Replies - Diablo 2
D&D Online - Modul 10
Noch vor Weihnachten: Modul 10 im Anmarsch Das 10. Modul zu Dungeons and Dragons Online mit dem Titel "The Path of Inspiration", kommt noch vor...
0 Replies - User Submitted News
Gm modul?
Hey leute... Gibt es eigentlich ein GMmodul zur eingabe von Values? Weil die normalen benutzer können das ja nicht benutzen... Aber da die...
3 Replies - Metin2 PServer - Discussions / Questions



All times are GMT +1. The time now is 14:40.


Powered by vBulletin®
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.

Support | Contact Us | FAQ | Advertising | Privacy Policy | Abuse
Copyright ©2017 elitepvpers All Rights Reserved.