• Visit Rebornbuddy
  • A guide to Blocking Blizzard Error Reporting

    Discussion in 'Honorbuddy Forum' started by hackersrage, Jul 18, 2017.

    1. hackersrage

      hackersrage Member Buddy Store Developer

      Joined:
      Nov 18, 2012
      Messages:
      342
      Likes Received:
      15
      Trophy Points:
      18
      Form time to time, your wow.exe will crash, resulting in a pair of files being written to your `World of Warcraft/Errors` folder. What you may not know, is that these files contain information about other processes ( dll's, not exe's ), as well as memory dumps, system information, all current wow configuration paramaters (such as whether or not CTM is enabled), and a list of all wow.exe and agent.exe processes running.

      If you don't want to send the data, ultimately, the only control you have is the little tick-box on a dialog that appears after a crash which is checked by default and any action on that window will (by default) send the data to blizz. If you are botting, this is probably not a wise choice, as this could expose enough information to process a ban, or the very least, further investigation/watch list flagging.

      I have written a batch script which when run in the root of your wow install drive, and if wow is installed on a different drive than where your "Program Files", "Program Files (x86)", and user data are located, you will want to run it on the root of that drive as well -- this will automatically search for BlizzardError.exe and SystemSurvey.exe and add a rule to your windows firewall (all profiles) which will block all outbound network communication from these applications.

      Code:
      @ECHO OFF
      FOR /F "delims=" %%Z IN ('dir /s /b blizzarderror.exe') DO (
          echo Blocking "%%Z"
          netsh advfirewall firewall add rule dir=out action=block program="%%Z" description="Block %%Z from outbound communication" name="Blizzard - BlizzardError" enable=yes profile=any localip=any
      )
      
      FOR /F "delims=" %%Z IN ('dir /s /b systemsurvey.exe') DO (
          echo Blocking "%%Z"
          netsh advfirewall firewall add rule dir=out action=block program="%%Z" description="Block %%Z from outbound communication" name="Blizzard - SystemSurvey" enable=yes profile=any localip=any
      )
      
      I recommend that anytime there is an update to either wow.exe, or battle.net client (even streamed), to do the following :

      * Open "Windows Firewall with Advanced Security"
      * Click on "Outbound"
      * Delete all "Blizzard - SystemSurvey" and "Blizzard - BlizzardError" entries.
      * Open a new command prompt as administrator access (or sufficient elevation to modify the firewall rules and search files)
      * Run the batch file.

      Another thing, is that applications can modify your firewall on your behalf, automatically adding in new entries for themselves or making changes to existing ones. To ensure you have full control over your firewall you can modify your group policy as shown in this superuser.com reply :

      upload_2017-7-18_13-33-40.png
       

    Share This Page