[ipsBruno]

Quote:

GetTickCount is fine as long as the server doesn't run for more then 24 days; I don't think any (well-known) server runs even constantly for a week.

Not in all cases, but is true.

The attacks are made via "packets", using sockets, you can recognize this. To find packets used, I believe it would take a good "sniffer"

Get this:
http://www.solidfiles.com/d/0261/

Now try to reverse engineer it. Good Luck