[RaiderZ] GG Bypass, and GameGuard in general

[sullx]

OK so I want to pick this topic up a bit as I am finding it educational. I have found that RaiderZ/GG cannot detect CE if you attach and do debugging (you just need to enable DBVM). But if I inject a piece of code, even if it doesn't actually change anything, after about 30 seconds, RaiderZ closes and says it some unusual behavior hack/malware etc. So is it gameguard that is detecting this and closing the game? Or is it RaiderZ.exe?

From my understanding, GG hooks many of the windows api's so as to prevent you from utilizing some of the more common botting techniques, and in order to bypass these we do what is known as a hook hop. What I am not sure I understand is how the game/gameguard detects if I have injected and made a code cave, for instance. I did just a basic injection that didn't actually change any functions (read: I left the original code the same and didn't add any new functions in the CE auto assemble code injection template), and the game still closed after a short time with the same error as above.

Can someone elaborate on what GG does to prevent you from injecting like this? And maybe some of the general techniques of getting away with it? Read: just some keywords I can google and learn about as right now I reached a dead end in what I know to search for. Thanks.

[h2o157]

By myself idk, but i heard that GG detects some piece of code from known 'hack programs'. And i guess it is true, cuz i have a memory edit/scan tool and other hooks that work without being detect and without using any special techniques

PS: almost useless what i said but.....

[medievil17]

i look for my CE and it says it's not supported by dbvm win 7 64bit