atom0s Moderator Reputation: 198 Joined: 25 Jan 2006 Posts: 8518 Location: 127.0.0.1
|
Posted: Wed Feb 28, 2018 1:16 am Post subject: |
|
|
If they aren't detecting attaching to the game or just having CE open then it sounds like what you are doing is causing it to be detected instead.
Activation of a script causing detection sounds like either:
- They are detecting your memory allocations. (alloc/dealloc)
- They are detecting your memory protection changes. (fullaccess)
- They are detecting your ASM/memory edits.
These would result in detections from the following API:
- OpenProcess
- VirtualProtectEx
- VirtualQueryEx
- WriteProcessMemory _________________ - Retired.
|
|