No, there ist any modified network packet. Just some bytes in asm code modified...

Linux windows... i see no difference.
Patch exists. But i dont want to publish it due to claymore can analizy it and make his software more secure...
My rigs are working now on v9.4. Almost 2 days. Everything is fine. Now working on 9.7...

I think programs like this is unnecessary. It is pretty easy to patch claymore binary to push it to use your wallet instead of devfee ones...
I've done that and I dont need such a software at all...

Millenium Falcon,
I am using Calmore 9.3 now and noticed that NoFee has stopped working.
Claymore`s logs show line:
send: {"id":2,"jsonrpc":"2.0","method":"eth_login","params":["0xc1c427cD8E6B7Ee3b5F30c2e1D3f3c5536EC16f5","x"]}
Your code is using "eth_submitLogin" detection...

One comment about the algorithm... I have made simular program on linux... The alg is based on transparent proxy. And I used json parser (json-c) to detect/parse/change wallet address. Maybe you use that idia in a new versions?