there have been this kind of unfair competition with this guy going around crashing all the server so his own server can stay on top.
i think he do some kind of packet attack.
at first we encounter some weird bug like item switching all over the place.
like lapis icon on helm. armor.
wrong itemcount all over the place too.
and then after sometimes the ps_game crash.
here is the log.
i applied the enchant bug fix but sadly this is not the case.
mine was a ep4.5 ps_game.
C:\ShaiyaServer\PSM_Client\bin\ps_game.exe, loaded at 0x00400000 - 09/07/15 12:22:00
WARNING: ps_game.exe is not accessible
Symbol search path is: ps_game.pdb
WARNING: ps_game.pdb is not accessible
WARNING: ps_game.pdb is not accessible
Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\ShaiyaServer\PSM_Client\bin\Log\20211007_235157 _ps_game.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available
Windows Longhorn Version 9200 MP (4 procs) Free x86 compatible
Product: Server, suite: TerminalServer DataCenter SingleUserTS
Debug session time: Fri Oct 08 02:24:33 2021
System Uptime: not available
Process Uptime: 0 days 2:32:36.000
Symbol search path is: ps_game.pdb
Executable search path is: ps_game.exe
.................................................. .
The call to LoadLibrary(ext) failed, Win32 error 2
"The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(exts) failed, Win32 error 2
"The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(uext) failed, Win32 error 2
"The system cannot find the file specified."
Please check your debugger configuration and/or network access.
The call to LoadLibrary(ntsdexts) failed, Win32 error 2
"The system cannot find the file specified."
Please check your debugger configuration and/or network access.
(1c74.ad4): Unknown exception - code 00000000 (!!! second chance !!!)
i trimmed only the lines causing issue.
can anyone please help me to address this exploit?
well after checking the other threads i found another server facing the same issue as me.
i guess this kind of attack must be very popular these day.
pls point me in the right direction.
It seems like you got packet injection cause to crash. There are 2 options I can recommend:
1. Server side: Edit your ps_game.exe to drop the invalid merge item packets.
2. Client side: Attach an anti-cheat to your game.exe to prevent injection from running.
The #2 just a "buy-time" solution, if the "mental-guy" who did it to your server can bypass your anti-cheat system, then it will be crashed again, so it is better to have the fix on the server side. Of course, if you can deliver these 2 options, it will be more secure.
In additional, there was SQL Deadlock you need to check too.
It seems like you got packet injection cause to crash. There are 2 options I can recommend:
1. Server side: Edit your ps_game.exe to drop the invalid merge item packets.
2. Client side: Attach an anti-cheat to your game.exe to prevent injection from running.
The #2 just a "buy-time" solution, if the "mental-guy" who did it to your server can bypass your anti-cheat system, then it will be crashed again, so it is better to have the fix on the server side. Of course, if you can deliver these 2 options, it will be more secure.
In additional, there was SQL Deadlock you need to check too.
hi there,
thank you for pointing that out for me.
unfortunately, i'm not familiar much with assembly and packet editing.
the server need to be up and running asap.
i'm willing to pay for the fix if you can do it.
in the meanwhile, i'll learn reverse engineering to better secure my server.
Yeah I know, I know you need the server is back up as soon as possible.
However, my advice is if you can not completely kill this exploit, do not re-open it, it will destroy your reputation in gamer's eyes, that is exactly the purpose of the "psycho-guy". Or you can think about upgrading your EP to 5.4 or above.
that's what i thought too.
upgrading was not an option since our home country "official shaiya" was dead at 5.3, so we stuck with the latest client which support our language (utf-8) at 5.3.
guess i'll stuck w 5.3 and waiting for someone who can fix this
[HELP] ItemMall.dll crash ps_game.exe 12/30/2017 - Shaiya PServer Development - 3 Replies Hello EPvP Community
I found the problem of ps_game.exe crash and its itemmall.dll
Anything to fix it ?
Note:
If i remove it item mall is bugged , if i keep itemmall.dll the ps_game.exe crush i try to replace it with itemmallfix.dll this works but item mall still bugg
How to resolve ?
PS_Game.exe Crash !!!Help 10/19/2017 - Shaiya PServer Development - 0 Replies Hello , im having some issues with ps_game.exe crash
I changed the NPC, client is encrypted/server decrypted
jungle mobs/bosses setup to AI 1
changed Skill.Sdata
also the skills +>100 level
Need help asap ( im willing to pay for the fix ) contact skype:lilquzerr
Logs
ps_game.exe CRASH 04/04/2017 - Shaiya PServer Development - 3 Replies Hello i have problem with ps_game.exe when i open server after 5 min server crash.I asked but noone can fix this problem. Can you help me?
Thanks.
2017-04-01 11:07:59 PS_GAME__system log start (Game01)
2017-04-01 11:07:59 Loaded Behavior In Factory : data/ai/sorp1
2017-04-01 11:07:59 Loaded Behavior In Factory : data/ai/croco1
2017-04-01 11:07:59 Loaded Behavior In Factory : data/ai/croco2
PS_Game.exe crash! Need help! 04/07/2016 - Shaiya PServer Development - 2 Replies Hello to all!
Since few days my server is attacked by god knows who and ps_game.exe crashes every time and then i need to reset server and again and again and again. Works same as enchant overflow but i already HAVE nubness's fix :(
Here is the log