mIRC Home    About    Download    Register    News    Help

Print Thread
mIRC 6.12 crash on WinXP sp1 with out .NET #59965 12/11/03 08:06 AM
Joined: Nov 2003
Posts: 5
T
Thadir Offline OP
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
T
Joined: Nov 2003
Posts: 5
I am running a clean install of Win XP pro whit sp1
whith out .Net frame works.

When I runs mirc 6.12 it runs fine but afther a while it crashes. Whit out a reson.

(I search trough the forum and found nothing about this). As soon as I can get crash info ill post it.

Regards,
Thadir

Re: mIRC 6.12 crash on WinXP sp1 with out .NET #59966 13/11/03 07:14 AM
Joined: Nov 2003
Posts: 5
T
Thadir Offline OP
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
T
Joined: Nov 2003
Posts: 5
Here is more inf o

AppName: mirc.exe AppVer: 6.1.2.0 ModName: mirc.exe
ModVer: 6.1.2.0 Offset: 0002b567

<?xml version="1.0" encoding="UTF-16"?>
<DATABASE>
<EXE NAME="mirc.exe" FILTER="GRABMI_FILTER_PRIVACY">
<MATCHING_FILE NAME="animenfo_mirc.dll" SIZE="192512" CHECKSUM="0x4C415D63" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" LINK_DATE="08/20/2002 02:05:51" UPTO_LINK_DATE="08/20/2002 02:05:51" />
<MATCHING_FILE NAME="mirc.exe" SIZE="1867776" CHECKSUM="0x4EE3EFF3" BIN_FILE_VERSION="6.1.2.0" BIN_PRODUCT_VERSION="6.1.2.0" PRODUCT_VERSION="6.12" FILE_DESCRIPTION="mIRC" COMPANY_NAME="mIRC Co. Ltd." PRODUCT_NAME="mIRC" FILE_VERSION="6.12" ORIGINAL_FILENAME="mirc.exe" INTERNAL_NAME="mIRC" LEGAL_COPYRIGHT="Copyright © 1995-2003 mIRC Co. Ltd." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x10004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="6.1.2.0" UPTO_BIN_PRODUCT_VERSION="6.1.2.0" LINK_DATE="10/13/2003 19:22:04" UPTO_LINK_DATE="10/13/2003 19:22:04" VER_LANGUAGE="Engels (Verenigde Staten) [0x409]" />
<MATCHING_FILE NAME="addons\encrypt.dll" SIZE="48128" CHECKSUM="0x3B05AAD5" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" LINK_DATE="01/22/2002 02:40:58" UPTO_LINK_DATE="01/22/2002 02:40:58" />
<MATCHING_FILE NAME="addons\moo.dll" SIZE="39424" CHECKSUM="0x3BBA879A" BIN_FILE_VERSION="4.0.4.1" BIN_PRODUCT_VERSION="4.0.4.1" PRODUCT_VERSION="4.0.4.01" FILE_DESCRIPTION="mIRC extension DLL" COMPANY_NAME="influenced.net" PRODUCT_NAME="moo.dll" FILE_VERSION="4.0.4.01" ORIGINAL_FILENAME="moo.dll" INTERNAL_NAME="moo" LEGAL_COPYRIGHT="Copyright © 2000-2003 Mark Hutton" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="4.0.4.1" UPTO_BIN_PRODUCT_VERSION="4.0.4.1" LINK_DATE="10/16/2002 07:56:37" UPTO_LINK_DATE="10/16/2002 07:56:37" VER_LANGUAGE="Engels (Verenigd Koninkrijk) [0x809]" />
<MATCHING_FILE NAME="addons\wamp.dll" SIZE="24576" CHECKSUM="0xD3AD07F1" BIN_FILE_VERSION="10.5.2003.0" BIN_PRODUCT_VERSION="10.5.2003.0" PRODUCT_VERSION="2.54" FILE_DESCRIPTION="Winamp Information Extractor" PRODUCT_NAME="SysReset " FILE_VERSION="10.05.2003" ORIGINAL_FILENAME="wamp.dll" INTERNAL_NAME="wamp" LEGAL_COPYRIGHT="Copyright © 2002-2003 Ryan Power." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="10.5.2003.0" UPTO_BIN_PRODUCT_VERSION="10.5.2003.0" LINK_DATE="10/12/2003 15:23:13" UPTO_LINK_DATE="10/12/2003 15:23:13" VER_LANGUAGE="Engels (Verenigde Staten) [0x409]" />
<MATCHING_FILE NAME="backup\mirc.exe" SIZE="1867776" CHECKSUM="0xC43D9341" BIN_FILE_VERSION="6.1.1.0" BIN_PRODUCT_VERSION="6.1.1.0" PRODUCT_VERSION="6.11" FILE_DESCRIPTION="mIRC" COMPANY_NAME="mIRC Co. Ltd." PRODUCT_NAME="mIRC" FILE_VERSION="6.11" ORIGINAL_FILENAME="mirc.exe" INTERNAL_NAME="mIRC" LEGAL_COPYRIGHT="Copyright © 1995-2003 mIRC Co. Ltd." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x10004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="6.1.1.0" UPTO_BIN_PRODUCT_VERSION="6.1.1.0" LINK_DATE="10/10/2003 18:16:05" UPTO_LINK_DATE="10/10/2003 18:16:05" VER_LANGUAGE="Engels (Verenigde Staten) [0x409]" />
</EXE>
<EXE NAME="kernel32.dll" FILTER="GRABMI_FILTER_THISFILEONLY">
<MATCHING_FILE NAME="kernel32.dll" SIZE="971264" CHECKSUM="0xBC776192" BIN_FILE_VERSION="5.1.2600.1106" BIN_PRODUCT_VERSION="5.1.2600.1106" PRODUCT_VERSION="5.1.2600.1106" FILE_DESCRIPTION="DLL-bestand voor Windows NT BASE API-client" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Besturingssysteem Microsoft® Windows®" FILE_VERSION="5.1.2600.1106 (xpsp1.020828-1920)" ORIGINAL_FILENAME="kernel32" INTERNAL_NAME="kernel32" LEGAL_COPYRIGHT="© Microsoft Corporation. Alle rechten voorbehouden." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xED992" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.1106" UPTO_BIN_PRODUCT_VERSION="5.1.2600.1106" LINK_DATE="09/09/2002 21:06:45" UPTO_LINK_DATE="09/09/2002 21:06:45" VER_LANGUAGE="Nederlands (Nederland) [0x413]" />
</EXE>
</DATABASE>

Re: mIRC 6.12 crash on WinXP sp1 with out .NET #59967 14/11/03 03:20 PM
Joined: Dec 2002
Posts: 37
O
oracel Offline
Ameglian cow
Offline
Ameglian cow
O
Joined: Dec 2002
Posts: 37
I swear I could hear Khaled go "ahaa..."


Bloop
Re: mIRC 6.12 crash on WinXP sp1 with out .NET #59968 14/11/03 03:53 PM
Joined: Nov 2003
Posts: 5
T
Thadir Offline OP
Nutrimatic drinks dispenser
OP Offline
Nutrimatic drinks dispenser
T
Joined: Nov 2003
Posts: 5
What does this have to do whit the problem ??

Re: mIRC 6.12 crash on WinXP sp1 with out .NET #59969 14/11/03 09:44 PM
Joined: Dec 2002
Posts: 1,527
_
_D3m0n_ Offline
Hoopy frood
Offline
Hoopy frood
_
Joined: Dec 2002
Posts: 1,527
you added sysreset script with a slew of dlls that where not written to work correctly with 6.12 mirc is what it appears to me, but thats all just my guess


D3m0nnet.com
Re: mIRC 6.12 crash on WinXP sp1 with out .NET #59970 20/11/03 03:18 AM
Joined: Sep 2003
Posts: 4
R
Rz_Ten1 Offline
Self-satisified door
Offline
Self-satisified door
R
Joined: Sep 2003
Posts: 4
None of the dlls are active by default, you have to manually load them.

In any case, the core script never makes any dll calls and the crashes still occur. This includes times when no dlls are running.

Re: mIRC 6.12 crash on WinXP sp1 with out .NET #59971 20/11/03 09:39 PM
Joined: Dec 2002
Posts: 1,527
_
_D3m0n_ Offline
Hoopy frood
Offline
Hoopy frood
_
Joined: Dec 2002
Posts: 1,527
no thats not the case in the above instance, look at all the modules loaded, moo.dll is one ill point out, that is an added dll by the script, and its not even the only one it loads,


look at this short expert from the above described problem

<MATCHING_FILE NAME="addons\moo.dll" SIZE="39424" CHECKSUM="0x3BBA879A" BIN_FILE_VERSION="4.0.4.1" BIN_PRODUCT_VERSION="4.0.4.1" PRODUCT_VERSION="4.0.4.01" FILE_DESCRIPTION="mIRC extension DLL" COMPANY_NAME="influenced.net" PRODUCT_NAME="moo.dll" FILE_VERSION="4.0.4.01" ORIGINAL_FILENAME="moo.dll" INTERNAL_NAME="moo" LEGAL_COPYRIGHT="Copyright © 2000-2003 Mark Hutton" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="4.0.4.1" UPTO_BIN_PRODUCT_VERSION="4.0.4.1" LINK_DATE="10/16/2002 07:56:37" UPTO_LINK_DATE="10/16/2002 07:56:37" VER_LANGUAGE="Engels (Verenigd Koninkrijk) [0x809]" />
<MATCHING_FILE NAME="addons\wamp.dll" SIZE="24576" CHECKSUM="0xD3AD07F1" BIN_FILE_VERSION="10.5.2003.0" BIN_PRODUCT_VERSION="10.5.2003.0" PRODUCT_VERSION="2.54" FILE_DESCRIPTION="Winamp Information Extractor" PRODUCT_NAME="SysReset " FILE_VERSION="10.05.2003" ORIGINAL_FILENAME="wamp.dll" INTERNAL_NAME="wamp" LEGAL_COPYRIGHT="Copyright © 2002-2003 Ryan Power." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="10.5.2003.0" UPTO_BIN_PRODUCT_VERSION="10.5.2003.0" LINK_DATE="10/12/2003 15:23:13" UPTO_LINK_DATE="10/12/2003 15:23:13" VER_LANGUAGE="Engels (Verenigde Staten) [0x409]" />


thats atleast 2 dlls added and loaded, and there is more. please dont correct me when you dont take the time to read the problem fully.


D3m0nnet.com
Re: mIRC 6.12 crash on WinXP sp1 with out .NET #59972 23/11/03 03:51 AM
Joined: Sep 2003
Posts: 4
R
Rz_Ten1 Offline
Self-satisified door
Offline
Self-satisified door
R
Joined: Sep 2003
Posts: 4
Um, I don't believe the list he posted is a list of running dlls, but a list of all exes detected in the directory. Notice that mIRC appears twice.

What I am saying is that the script in question will still crash even if you delete those dlls, the actual problem appears to be in mIRC itself.

Also, it does not appear to be in the script, or any specific script action that causes the crash due to it's random nature. It looks like a buffer overflow or specific exploit of some kind.

Also see: http://www.sysreset.com/phpbb2/viewtopic.php?t=1308

Last edited by Rz_Ten1; 23/11/03 03:54 AM.