Hi guys. So, I'm trying to record Diablo 2 history for posterity and I ran into a bit of a dead end here so I hope someone on this forum can straighten this out.

From what I have managed to piece together rust storm was known about before it was implemented because Geoff Frazer was posting about it on the old blizzard forums.

https://www.lurkerlounge.com/forums/archive/index.php?thread-10987.html

People knew something was coming with the new patch (1.10). But it isn't clear exactly what this was or how it worked. Was it an account level scan or did you need to join a game? Was it just a change to how the game parsed item ids or something? What?
Some people told me it had to do with getting rid of dupes, but we can see that blizzard was already doing periodical dupe checks before that.
Others said it was strictly bugged and hacked items targeted. Some say "ith" items were purged with it, while others say it was a completely separate change to the patch itself and how it handled rune-words with no runes. I know someone on this forum knows... wug for me d2jsp?

Strictly an item scanner/delete that have specific target of ITH items per example.
ITH is a glitched runeword item that does not exist, an hybrid runeword is an example of an ITH item.

If you quit a game (even today) with an hybrid unsocketed item, the server will catch it and deelte it right away. Thats why they had to be re-socketed with their new original runeword to be officially/perm with a unique ID

Once socketed with duress runes per example, its seen as a duress armor on the realm. Whether or not it remains (an enigma) in background as ITH.

For the rest of the items, it was easy for battle.net to scan for 4os/6os bugged items and flag/delete automaticly with their rust storm system. The 1.10 patch implementation was essentially a whole server/scans wiping of all unwanted items. Everything passing from 1.09 to 1.10 were given a unique item IDs making them forever perm

Thats the difference between today perm & unperm, the unperm are items duped after patch 1.10. everything duped before 1.10 is now legit/perm

What period is this and what do you have written down for the 2008 event (loader/maphack mass suspension).

This post was edited by ferdia on Apr 24 2026 12:17am

I have not gotten that far yet. I am currently working my way through old dupe methods, starting with the wp dupe. I recently learned how ith items were made, and I am trying to go foreward year by year.

okie dokie, feel free to send me stuff once written and i can check a couple of things for you (presumably you were around at the time).

Thanks thats great info. I do have one point of confusion though. I made an ith item in single player with a hero editor. I tried giving it to a 1.10 character but it poofed before he could even enter a game. I tried the same thing with a 1.09 character and it worked just fine. Is rust storm built into the code of 1.10 or is it a scan they ran on the servers from time to time? That's what im trying to clarify right now.

Ith indeed are indeed something more of pre 1.10 yes, per example we had an ith item maker for 1.09 patch back then.
Now with the newer patches in place, the item is catch-up and deleted before you can enter/exit game with it. The only way to counter that is to uses hack in real time and force the item to become ITH when unsocketed (without game rejoin) Once unsocketed it will be shown as ITH. If you drop it on the ground or open trade screen with someone server will crash and item will be gone forever. If you socket it with a runeword (giving it another name) you can now exit/rejoin everygame you want

ith items get deleted when loading
same items with matching ids will not save when leaving the game
in other words, if you manage to get into the game with a restricted item, as long as it can bypass the dupe scanner, it saves

I assume this is what you're asking?