mIRC Homepage
Posted By: Thadir mIRC 6.12 crash on WinXP sp1 with out .NET - 12/11/03 08:06 AM
I am running a clean install of Win XP pro whit sp1
whith out .Net frame works.

When I runs mirc 6.12 it runs fine but afther a while it crashes. Whit out a reson.

(I search trough the forum and found nothing about this). As soon as I can get crash info ill post it.

Regards,
Thadir
Here is more inf o

AppName: mirc.exe AppVer: 6.1.2.0 ModName: mirc.exe
ModVer: 6.1.2.0 Offset: 0002b567

<?xml version="1.0" encoding="UTF-16"?>
<DATABASE>
<EXE NAME="mirc.exe" FILTER="GRABMI_FILTER_PRIVACY">
<MATCHING_FILE NAME="animenfo_mirc.dll" SIZE="192512" CHECKSUM="0x4C415D63" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" LINK_DATE="08/20/2002 02:05:51" UPTO_LINK_DATE="08/20/2002 02:05:51" />
<MATCHING_FILE NAME="mirc.exe" SIZE="1867776" CHECKSUM="0x4EE3EFF3" BIN_FILE_VERSION="6.1.2.0" BIN_PRODUCT_VERSION="6.1.2.0" PRODUCT_VERSION="6.12" FILE_DESCRIPTION="mIRC" COMPANY_NAME="mIRC Co. Ltd." PRODUCT_NAME="mIRC" FILE_VERSION="6.12" ORIGINAL_FILENAME="mirc.exe" INTERNAL_NAME="mIRC" LEGAL_COPYRIGHT="Copyright © 1995-2003 mIRC Co. Ltd." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x10004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="6.1.2.0" UPTO_BIN_PRODUCT_VERSION="6.1.2.0" LINK_DATE="10/13/2003 19:22:04" UPTO_LINK_DATE="10/13/2003 19:22:04" VER_LANGUAGE="Engels (Verenigde Staten) [0x409]" />
<MATCHING_FILE NAME="addons\encrypt.dll" SIZE="48128" CHECKSUM="0x3B05AAD5" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" LINK_DATE="01/22/2002 02:40:58" UPTO_LINK_DATE="01/22/2002 02:40:58" />
<MATCHING_FILE NAME="addons\moo.dll" SIZE="39424" CHECKSUM="0x3BBA879A" BIN_FILE_VERSION="4.0.4.1" BIN_PRODUCT_VERSION="4.0.4.1" PRODUCT_VERSION="4.0.4.01" FILE_DESCRIPTION="mIRC extension DLL" COMPANY_NAME="influenced.net" PRODUCT_NAME="moo.dll" FILE_VERSION="4.0.4.01" ORIGINAL_FILENAME="moo.dll" INTERNAL_NAME="moo" LEGAL_COPYRIGHT="Copyright © 2000-2003 Mark Hutton" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="4.0.4.1" UPTO_BIN_PRODUCT_VERSION="4.0.4.1" LINK_DATE="10/16/2002 07:56:37" UPTO_LINK_DATE="10/16/2002 07:56:37" VER_LANGUAGE="Engels (Verenigd Koninkrijk) [0x809]" />
<MATCHING_FILE NAME="addons\wamp.dll" SIZE="24576" CHECKSUM="0xD3AD07F1" BIN_FILE_VERSION="10.5.2003.0" BIN_PRODUCT_VERSION="10.5.2003.0" PRODUCT_VERSION="2.54" FILE_DESCRIPTION="Winamp Information Extractor" PRODUCT_NAME="SysReset " FILE_VERSION="10.05.2003" ORIGINAL_FILENAME="wamp.dll" INTERNAL_NAME="wamp" LEGAL_COPYRIGHT="Copyright © 2002-2003 Ryan Power." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="10.5.2003.0" UPTO_BIN_PRODUCT_VERSION="10.5.2003.0" LINK_DATE="10/12/2003 15:23:13" UPTO_LINK_DATE="10/12/2003 15:23:13" VER_LANGUAGE="Engels (Verenigde Staten) [0x409]" />
<MATCHING_FILE NAME="backup\mirc.exe" SIZE="1867776" CHECKSUM="0xC43D9341" BIN_FILE_VERSION="6.1.1.0" BIN_PRODUCT_VERSION="6.1.1.0" PRODUCT_VERSION="6.11" FILE_DESCRIPTION="mIRC" COMPANY_NAME="mIRC Co. Ltd." PRODUCT_NAME="mIRC" FILE_VERSION="6.11" ORIGINAL_FILENAME="mirc.exe" INTERNAL_NAME="mIRC" LEGAL_COPYRIGHT="Copyright © 1995-2003 mIRC Co. Ltd." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x10004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="6.1.1.0" UPTO_BIN_PRODUCT_VERSION="6.1.1.0" LINK_DATE="10/10/2003 18:16:05" UPTO_LINK_DATE="10/10/2003 18:16:05" VER_LANGUAGE="Engels (Verenigde Staten) [0x409]" />
</EXE>
<EXE NAME="kernel32.dll" FILTER="GRABMI_FILTER_THISFILEONLY">
<MATCHING_FILE NAME="kernel32.dll" SIZE="971264" CHECKSUM="0xBC776192" BIN_FILE_VERSION="5.1.2600.1106" BIN_PRODUCT_VERSION="5.1.2600.1106" PRODUCT_VERSION="5.1.2600.1106" FILE_DESCRIPTION="DLL-bestand voor Windows NT BASE API-client" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Besturingssysteem Microsoft® Windows®" FILE_VERSION="5.1.2600.1106 (xpsp1.020828-1920)" ORIGINAL_FILENAME="kernel32" INTERNAL_NAME="kernel32" LEGAL_COPYRIGHT="© Microsoft Corporation. Alle rechten voorbehouden." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xED992" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.1106" UPTO_BIN_PRODUCT_VERSION="5.1.2600.1106" LINK_DATE="09/09/2002 21:06:45" UPTO_LINK_DATE="09/09/2002 21:06:45" VER_LANGUAGE="Nederlands (Nederland) [0x413]" />
</EXE>
</DATABASE>
I swear I could hear Khaled go "ahaa..."
What does this have to do whit the problem ??
you added sysreset script with a slew of dlls that where not written to work correctly with 6.12 mirc is what it appears to me, but thats all just my guess
None of the dlls are active by default, you have to manually load them.

In any case, the core script never makes any dll calls and the crashes still occur. This includes times when no dlls are running.
no thats not the case in the above instance, look at all the modules loaded, moo.dll is one ill point out, that is an added dll by the script, and its not even the only one it loads,


look at this short expert from the above described problem

<MATCHING_FILE NAME="addons\moo.dll" SIZE="39424" CHECKSUM="0x3BBA879A" BIN_FILE_VERSION="4.0.4.1" BIN_PRODUCT_VERSION="4.0.4.1" PRODUCT_VERSION="4.0.4.01" FILE_DESCRIPTION="mIRC extension DLL" COMPANY_NAME="influenced.net" PRODUCT_NAME="moo.dll" FILE_VERSION="4.0.4.01" ORIGINAL_FILENAME="moo.dll" INTERNAL_NAME="moo" LEGAL_COPYRIGHT="Copyright © 2000-2003 Mark Hutton" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="4.0.4.1" UPTO_BIN_PRODUCT_VERSION="4.0.4.1" LINK_DATE="10/16/2002 07:56:37" UPTO_LINK_DATE="10/16/2002 07:56:37" VER_LANGUAGE="Engels (Verenigd Koninkrijk) [0x809]" />
<MATCHING_FILE NAME="addons\wamp.dll" SIZE="24576" CHECKSUM="0xD3AD07F1" BIN_FILE_VERSION="10.5.2003.0" BIN_PRODUCT_VERSION="10.5.2003.0" PRODUCT_VERSION="2.54" FILE_DESCRIPTION="Winamp Information Extractor" PRODUCT_NAME="SysReset " FILE_VERSION="10.05.2003" ORIGINAL_FILENAME="wamp.dll" INTERNAL_NAME="wamp" LEGAL_COPYRIGHT="Copyright © 2002-2003 Ryan Power." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="10.5.2003.0" UPTO_BIN_PRODUCT_VERSION="10.5.2003.0" LINK_DATE="10/12/2003 15:23:13" UPTO_LINK_DATE="10/12/2003 15:23:13" VER_LANGUAGE="Engels (Verenigde Staten) [0x409]" />


thats atleast 2 dlls added and loaded, and there is more. please dont correct me when you dont take the time to read the problem fully.
Um, I don't believe the list he posted is a list of running dlls, but a list of all exes detected in the directory. Notice that mIRC appears twice.

What I am saying is that the script in question will still crash even if you delete those dlls, the actual problem appears to be in mIRC itself.

Also, it does not appear to be in the script, or any specific script action that causes the crash due to it's random nature. It looks like a buffer overflow or specific exploit of some kind.

Also see: http://www.sysreset.com/phpbb2/viewtopic.php?t=1308
© mIRC Discussion Forums