Was too easy before (patching out the initialize function).
The client has either a new check, or more likely it has authentication now.
nProtect is about the same, if there is authentication (challenge/response packet), usually 10 minutes, but can be more or less.
Maybe a feature of "plus" or "pro" HackShield:
Ahh well, time to RE that mess..