fun information - wpe detector

[enot78]

im find silent detector of WPE
its try to find windows with caption WPE, WPE PRO,WPE PRO - Nostale.dat and WPE PRO - NostaleX.dat.

its check windows captions at moment of run and every 10minutes after it.

if detector find WPE its send next message to server:

PHP Code:

[B]guri 1005 [/B]random($64) random($64) random($64) 


dont run WPE even you use it not for nostale(its no work anyway)
ps: i find this detector at version by 14september and all later versions ...lol

[Elektrochemie]

Yes, i found it yesterday too.
Its true.

Für die Englisch schwächeren:
NosTale scannt die laufenden Prozessen nach ihren Titeln ab. Aktuell scannt es nach

WPE, WPE PRO,WPE PRO - Nostale.dat, WPE PRO - NostaleX.dat.

Daher, NostaleX.dat umbennen, WPE Titel ändern und es sollte nichts finden

[Δbraxas]

Can they scan for AutoIt, too 0.o? That would be worse!

[Elektrochemie]

They are scanning for the process title. They could scan for AutoIt or something else.
But i think its possible to change the title / caption of the bots, isn't it? So it shouldn't be possible.

At the moment they're scanning for the captions formica said. Not more.

WPE, WPE PRO,WPE PRO - Nostale.dat and WPE PRO - NostaleX.dat.

[Δbraxas]

Can I use WPE if i change the title or is it still fixed?

[enot78]

Originally Posted by _THE_RAIN_

Can I use WPE if i change the title or is it still fixed?

why you need WPE now?
yes you can if change windows caption

client scanning no process name. its scanning windows name by FindWindowA function

first image= procedure that search WPE window(every 10minutes)
second image= create thread for this procedure(can simple nop it^^)
have fun)

[Δbraxas]

first image= procedure that search WPE window(every 10minutes)
second image= create thread for this procedure(can simple nop it^^)

How do you make that 0.o?

Can you tell me how to use WPE now, and how I change the windows caption?

[endszo17]

Originally Posted by enot78

why you need WPE now?
yes you can if change windows caption

client scanning no process name. its scanning windows name by FindWindowA function

first image= procedure that search WPE window(every 10minutes)
second image= create thread for this procedure(can simple nop it^^)
have fun)

what do you mean by this?
did you used assembler?
and regarding w/ those image what are those for?

[enot78]

Originally Posted by endszo17

what do you mean by this?
did you used assembler?
and regarding w/ those image what are those for?

i never use assembler or other programming languages/
only a mental projection into astral

if you dont understand that imaged on this screenshots -> its screenshots not for you

[endszo17]

Originally Posted by enot78

i never use assembler or other programming languages/
only a mental projection into astral

if you dont understand that imaged on this screenshots -> its screenshots not for you

i know how to put those codes,

just a question

where should do i put those codes?

[Alisami]

Wenn man für dieses Paket instant banned wird, kann man dann nicht ein Banprogramm machen? ;D Wäre praktisch, für diverse Zwecke.