封号原理与防封方法反外挂的原理（Title Principle and anti sealing method, anti plug-in principle）.doc

封号原理与防封方法反外挂的原理（Title Principle and anti sealing method, anti plug-in principle） Title Principle and anti seal 2010-02-26 05:42 Title Principle and sealing method, anti plug-in principle I dont feel like what the keyboard and mouse are. Ill introduce some anti - plug-in methods and Solutions Active defense: plug memory process name and Title Feature plug-in plug-in plug-in to the game window class name DLL into the name of the game plug-in hook ~ judgment system DLL used game has been modified NP injection protection method His anti - plug-in method is to insert a DLL into each of our processes and use DLL to determine if the code is endangering the game The solution is to install a DLLHOOK to our own plug-in so that his DLL cannot plug into our process for protection Title Protection Act The game determines whether the title of each window is accompanied by the keyword he specified, and if the tape is taken, it is judged to be an external one The solution is to customize an algorithm for random titles at the start of each plug-in Injection protection method Game judge plug-in to the game into the process name ~ this point is not necessary to modify the name, hidden in the process directly in the DLL can be Class name protection method Now many of the games anti plug has involved the plug on the window class name to judge ~ ~ if you like Warcraft is the program window class name to refer to him for the specified keyword plug-in whether or not you this is common not open plug has been closed Memory feature protection The anti - plugin of the game will capture your memory features (just as antivirus software gets the viruss key code) There are many ways to solve this problem, increasing your process permissions so that he cant view your external memory, add to your key memory features, make the game error, and so on Process name This is very common.. for example, you open a named external.Exe, that did not have to say, definitely sealed The solution is to change him t