[SMCentral]

Код:

[13/09/2013 06:53:23] [debug] Server crashed due to an unknown error
[13/09/2013 06:53:24] [debug] Native backtrace:
[13/09/2013 06:53:24] [debug] #0 77e1331f in ?? () from C:\Windows\SysWOW64\ntdll.dll
[13/09/2013 06:53:24] [debug] #1 77e135a7 in ?? () from C:\Windows\SysWOW64\ntdll.dll
[13/09/2013 06:53:24] [debug] #2 77e13492 in ?? () from C:\Windows\SysWOW64\ntdll.dll
[13/09/2013 06:53:24] [debug] #3 758414dd in ?? () from C:\Windows\syswow64\kernel32.dll
[13/09/2013 06:53:24] [debug] #4 00492ac1 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #5 00450689 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #6 0048c387 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #7 0048c4bc in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #8 00488afd in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #9 00495151 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #10 00495161 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #11 ffc30000 in ?? ()
[13/09/2013 06:53:24] [debug] #12 e8042474 in ?? ()
[13/09/2013 06:53:24] [debug] #13 ffffffbf in ?? ()
[13/09/2013 06:53:24] [debug] #14 c01bd8f7 in ?? ()
[13/09/2013 06:53:24] [debug] #15 4859d8f7 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #16 247c83c3 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #17 06740008 in ?? ()
[13/09/2013 06:53:24] [debug] #18 412d01c6 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #19 8b56d8f7 in ?? ()
[13/09/2013 06:53:24] [debug] #20 f7d233f1 in ?? ()
[13/09/2013 06:53:24] [debug] #21 83082474 in ?? ()
[13/09/2013 06:53:24] [debug] #22 057609fa in ?? ()
[13/09/2013 06:53:24] [debug] #23 eb57c280 in ?? ()
[13/09/2013 06:53:24] [debug] #24 30c28003 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #25 85411188 in ?? ()
[13/09/2013 06:53:24] [debug] #26 c6e677c0 in ?? ()
[13/09/2013 06:53:24] [debug] #27 8a490001 in ?? ()
[13/09/2013 06:53:24] [debug] #28 88018a16 in ?? ()
[13/09/2013 06:53:24] [debug] #29 06884911 in ?? ()
[13/09/2013 06:53:24] [debug] #30 72f13b46 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #31 55c35ef2 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #32 7d83ec8b in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #33 458b0a10 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #34 850a7508 in ?? ()
[13/09/2013 06:53:24] [debug] #35 6a067dc0 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #36 eb0a6a01 in ?? ()
[13/09/2013 06:53:24] [debug] #37 ff006a05 in ?? ()
[13/09/2013 06:53:24] [debug] #38 4d8b1075 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #39 ff9fe80c in ?? ()
[13/09/2013 06:53:24] [debug] #40 458bffff in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #41 5d59590c in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #42 244c8bc3 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #43 24448b08 in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #44 ff006a04 in ?? ()
[13/09/2013 06:53:24] [debug] #45 e8102474 in ?? ()
[13/09/2013 06:53:24] [debug] #46 ffffff85 in ?? ()
[13/09/2013 06:53:24] [debug] #47 1024448b in ?? () from C:\files\samp-server.exe
[13/09/2013 06:53:24] [debug] #48 e8c35959 in ?? ()

It seems like it's attacking a lot of servers.

[DartfoL]

Yeah, it's a huge vulnerability in raknet engine

[dugi]

You should post a crash report from crashlog.txt, that information is much more useful.

[SMCentral]

Here you go pal, this is the most recent one:

Код:

--------------------------

SA-MP Server: 0.3x



Exception At Address: 0x77E19E83 Module: (ntdll.dll)



Registers:

EAX: 0x048E6918	EBX: 0x00000000	ECX: 0x0000FF95	EDX: 0x04C15DE0

ESI: 0x04C15DD8	EDI: 0x00290000	EBP: 0x77DFFEE2	ESP: 0x0402FD08

EFLAGS: 0x00010297



Stack:

+0000: 0x00000048   0x00000048   0x00000048   0x04BF3F58

+0010: 0x0402FD00   0x77DE0000   0x00000000   0x0001002F

+0020: 0x00000000   0x00000000   0x00000000   0x00000000

+0030: 0x00000000   0x00000000   0x0000027F   0x00000000

+0040: 0x0000FFFF   0x00000000   0x00000000   0x00000000

+0050: 0x00000000   0x00000000   0x00000000   0x00000000

+0060: 0x00000000   0x00000000   0x00000000   0x00000000

+0070: 0x00000000   0x00000000   0x00000000   0x00000000

+0080: 0x00000000   0x00000000   0x00000000   0x00000000

+0090: 0x00000000   0x00000000   0x00000000   0x00000000

+00A0: 0x00000000   0x00000000   0x0000002B   0x00000053

+00B0: 0x0000002B   0x0000002B   0x00000000   0x00000000

+00C0: 0x01ECFEB8   0x00000000   0x00000000   0x0049524C

+00D0: 0x00000000   0x77DF01B4   0x00000023   0x00000202

+00E0: 0x0402FFF0   0x0000002B   0x0000027F   0x00000000

+00F0: 0x00000000   0x00000000   0x00000000   0x00000000

+0100: 0x00001F80   0x0000FFFF   0x00000000   0x00000000

+0110: 0x00000000   0x00000000   0x00000028   0x00000028

+0120: 0x00000028   0x049C9F10   0x00000000   0x00000000

+0130: 0x00000000   0x00000000   0x00000000   0x00000000



--------------------------



Loaded Modules:

samp-server.exe	A: 0x00400000 - 0x004F5000	(C:\files\samp-server.exe)

ntdll.dll	A: 0x77DE0000 - 0x77F60000	(C:\Windows\SysWOW64\ntdll.dll)

kernel32.dll	A: 0x75830000 - 0x75940000	(C:\Windows\syswow64\kernel32.dll)

KERNELBASE.dll	A: 0x75520000 - 0x75567000	(C:\Windows\syswow64\KERNELBASE.dll)

SHELL32.dll	A: 0x75CC0000 - 0x7690A000	(C:\Windows\syswow64\SHELL32.dll)

msvcrt.dll	A: 0x76A60000 - 0x76B0C000	(C:\Windows\syswow64\msvcrt.dll)

SHLWAPI.dll	A: 0x755D0000 - 0x75627000	(C:\Windows\syswow64\SHLWAPI.dll)

GDI32.dll	A: 0x757A0000 - 0x75830000	(C:\Windows\syswow64\GDI32.dll)

USER32.dll	A: 0x76960000 - 0x76A60000	(C:\Windows\syswow64\USER32.dll)

ADVAPI32.dll	A: 0x75AF0000 - 0x75B90000	(C:\Windows\syswow64\ADVAPI32.dll)

sechost.dll	A: 0x75BC0000 - 0x75BD9000	(C:\Windows\SysWOW64\sechost.dll)

RPCRT4.dll	A: 0x77280000 - 0x77370000	(C:\Windows\syswow64\RPCRT4.dll)

SspiCli.dll	A: 0x754C0000 - 0x75520000	(C:\Windows\syswow64\SspiCli.dll)

CRYPTBASE.dll	A: 0x754B0000 - 0x754BC000	(C:\Windows\syswow64\CRYPTBASE.dll)

LPK.dll	A: 0x76950000 - 0x7695A000	(C:\Windows\syswow64\LPK.dll)

USP10.dll	A: 0x76B10000 - 0x76BAD000	(C:\Windows\syswow64\USP10.dll)

WSOCK32.dll	A: 0x72970000 - 0x72977000	(C:\Windows\system32\WSOCK32.dll)

WS2_32.dll	A: 0x76910000 - 0x76945000	(C:\Windows\syswow64\WS2_32.dll)

NSI.dll	A: 0x75940000 - 0x75946000	(C:\Windows\syswow64\NSI.dll)

WINMM.dll	A: 0x71F00000 - 0x71F32000	(C:\Windows\system32\WINMM.dll)

IMM32.DLL	A: 0x75740000 - 0x757A0000	(C:\Windows\system32\IMM32.DLL)

MSCTF.dll	A: 0x76F70000 - 0x7703C000	(C:\Windows\syswow64\MSCTF.dll)

sscanf2.DLL	A: 0x10000000 - 0x1000D000	(C:\files\plugins\sscanf2.DLL)

MSVCR100.dll	A: 0x71D50000 - 0x71E0F000	(C:\files\MSVCR100.dll)

streamer.DLL	A: 0x71D10000 - 0x71D4E000	(C:\files\plugins\streamer.DLL)

MSVCP100.dll	A: 0x71C30000 - 0x71C99000	(C:\Windows\system32\MSVCP100.dll)

Whirlpool.DLL	A: 0x00340000 - 0x0034C000	(C:\files\plugins\Whirlpool.DLL)

MSVCR80.dll	A: 0x747B0000 - 0x7484B000	(C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc\MSVCR80.dll)

mysql.DLL	A: 0x00360000 - 0x00373000	(C:\files\plugins\mysql.DLL)

LIBMYSQL.dll	A: 0x02450000 - 0x02591000	(C:\files\LIBMYSQL.dll)

MSVCR90.dll	A: 0x73310000 - 0x733B3000	(C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742\MSVCR90.dll)

MSVCP90.dll	A: 0x71BA0000 - 0x71C2E000	(C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742\MSVCP90.dll)

NLAapi.dll	A: 0x74F00000 - 0x74F10000	(C:\Windows\system32\NLAapi.dll)

napinsp.dll	A: 0x74EE0000 - 0x74EF0000	(C:\Windows\system32\napinsp.dll)

mswsock.dll	A: 0x75380000 - 0x753BC000	(C:\Windows\System32\mswsock.dll)

DNSAPI.dll	A: 0x74E60000 - 0x74EA4000	(C:\Windows\system32\DNSAPI.dll)

winrnr.dll	A: 0x74EF0000 - 0x74EF8000	(C:\Windows\System32\winrnr.dll)

rasadhlp.dll	A: 0x71760000 - 0x71766000	(C:\Windows\system32\rasadhlp.dll)

wshtcpip.dll	A: 0x75180000 - 0x75185000	(C:\Windows\System32\wshtcpip.dll)

IPHLPAPI.DLL	A: 0x722A0000 - 0x722BC000	(C:\Windows\system32\IPHLPAPI.DLL)

WINNSI.DLL	A: 0x72290000 - 0x72297000	(C:\Windows\system32\WINNSI.DLL)

wship6.dll	A: 0x75190000 - 0x75196000	(C:\Windows\System32\wship6.dll)

PROPSYS.dll	A: 0x71AA0000 - 0x71B95000	(C:\Windows\system32\PROPSYS.dll)

OLEAUT32.dll	A: 0x77490000 - 0x7751F000	(C:\Windows\syswow64\OLEAUT32.dll)

comctl32.dll	A: 0x6C690000 - 0x6C82E000	(C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll)

apphelp.dll	A: 0x720F0000 - 0x7213C000	(C:\Windows\system32\apphelp.dll)

CLBCatQ.DLL	A: 0x756B0000 - 0x75733000	(C:\Windows\syswow64\CLBCatQ.DLL)

iertutil.dll	A: 0x76BB0000 - 0x76D69000	(C:\Windows\syswow64\iertutil.dll)

urlmon.dll	A: 0x77370000 - 0x77481000	(C:\Windows\syswow64\urlmon.dll)

WININET.dll	A: 0x77160000 - 0x7727B000	(C:\Windows\syswow64\WININET.dll)

Normaliz.dll	A: 0x77DB0000 - 0x77DB3000	(C:\Windows\syswow64\Normaliz.dll)

SETUPAPI.dll	A: 0x75950000 - 0x75AED000	(C:\Windows\syswow64\SETUPAPI.dll)

CFGMGR32.dll	A: 0x75B90000 - 0x75BB7000	(C:\Windows\syswow64\CFGMGR32.dll)

DEVOBJ.dll	A: 0x75630000 - 0x75642000	(C:\Windows\syswow64\DEVOBJ.dll)

profapi.dll	A: 0x74550000 - 0x7455B000	(C:\Windows\system32\profapi.dll)

Secur32.dll	A: 0x75100000 - 0x75108000	(C:\Windows\system32\Secur32.dll)

[Richard_Gere]

This is new crasher.

[SDraw]

Quote:

Originally Posted by Richard_Gere This is new crasher.

That's right...

[SMCentral]

Quote:

Originally Posted by Richard_Gere This is new crasher.

Yeah, the entire hosted list was attacked. All of the servers were down or constantly restarting. It is something triggering the crash of ntdll.dll.

[Richard_Gere]

144.76.3.47:7777 have 0.3x R2 and dont crash

[Vince]

Is this only affecting Windows servers?

[DartfoL]

Linux versions crashs, too