I've been reading a few interesting posts on the recent bannings/detections and "scanning" of computers by Mythic with regards to their new anti-cheat program, etc. I'm a former user who has stopped using XU at least until the software masking comes to something that I can see from a programming standpoint works effectively. I'm also fairly well versed in coding techniques.
It's become very clear to me that many(at least some) people who use this software are blissfully unaware of how Windows processes are launched, and why it is that Mythic can so easily detect XU and other pieces of software running. So here's a short explanation, very very pared down just to touch on basic detections.
First off... ANY piece of software can find out what else is running on the computer using very simple function calls built into Windows. This is not snooping. This is matter of fact and common ground. It's not illegal, because the function calls are normal Windows routines available to any piece of software. So all Mythic has to do is call the routine, and if any of the processes running look like.. as an example.. xunleashed.exe.. it's a no-brainer that you're running a cheat program.
Secondly... XU in particular launched game.dll, the main file that runs DAOC, through it. Meaning, you run XU first.. then you click play, which launches the DLL. This is so that XU can read the data passing between the DLL file (the main program), and Windows. So all Mythic has to do, is look to see if it's running through another process it shouldn't be. Also very easy to detect with simple Windows routines.
I suggest reading the User Agreements that Mythic supplies. In essence, when you install the software, you have consented to allow them to detect software such as XU. In the case of XU, it will ALWAYS be against the TOS (Terms of Service), because you are intercepting packet data, and/or launching the software through another process, which is considered hacking.
In my opinion, this is a losing battle because XU and Mythic will keep one-upping each other, and eventually most people will be caught one way or another. It's just not worth it, which is why I stopped using it even though I only used it for the macro feature for crafting and twisting on my pallie.
I just wish Mythic would put as much effort into shutting down the nearly pro cash for DAOC Plat sites that are clearly in violation of the TOS.