So yesterday I was playing RT and, guess what, I ran into what seems to be a hack user (account Ihatejokes). The game lasted like 10 seconds, after which my WC3 crashed with a fatal error message; the same thing happened to the opponents. So I was wondering, would the error log be any help to know how the guy did that ? I have the Crash.txt file corresponding to the game in my "Errors" folder.

Post it here then. I don't believe the Crash Hack actually produced an error message/error log, it may be a real issue. Does this happen to you consistently?

lol? He lost some...?

But anyway, I don't believe that Crash hack puts out an error message. At least, it didn't used to.

---

Q u o t e:
Post it here then. I don't believe the Crash Hack actually produced an error message/error log, it may be a real issue. Does this happen to you consistently?

---

This is a real issue, but it only concerns the unfortunate people who play with/against this "ihatejokes" guy (see threads on the WC3 section talking about him too); otherwise my WC3 has no problems. What it means is that the account owner is able to shut the WC3 of all players, except him I guess, resulting in a win for him, a tie for his ally, and I think a lose for his opponents; much like the crash hack, though this one does leave a log in the Errors folder because you get the fatal error.

Here is the log anyway :

This application has encountered a critical error:

FATAL ERROR!

Program: c:\program files\warcraft iii\war3.exe
Exception: 0xC0000005 (ACCESS_VIOLATION) at 001B:6F0EE4E1

The instruction at '0x6F0EE4E1' referenced memory at '0x00000000'.
The memory could not be 'read'.


War3Build: 1.24.3.6384
Played Maps\FrozenThrone\(4)PhantomGrove.w3x
Player 0 DoL)Downfall Race Human StartLoc 0
Player 1 Parnisha Race Orc StartLoc 2
Player 2 iHATEjokes Race Orc StartLoc 3
Player 3 ImSTaR Race Orc StartLoc 1
Player 4 <Unused> Race Human StartLoc -1
Player 5 <Unused> Race Orc StartLoc -1
Player 6 <Unused> Race Human StartLoc -1
Player 7 <Unused> Race NightElf StartLoc -1
Player 8 <Unused> Race Undead StartLoc -1
Player 9 <Unused> Race Undead StartLoc -1
Player 10 <Unused> Race Human StartLoc -1
Player 11 <Unused> Race NightElf StartLoc -1
------------------------------------------------------------------------------

----------------------------------------
x86 Registers
----------------------------------------

EAX=00000000 EBX=03320730 ECX=061E1690 EDX=00000000 ESI=061E14F4
EDI=6F677265 EBP=05FD3C04 ESP=0012E4DC EIP=6F0EE4E1 FLG=00010246
CS =001B DS =0023 ES =0023 SS =0023 FS =003B GS =0000


----------------------------------------
Stack Trace (Manual)
----------------------------------------

Address Frame Logical addr Module

6F0EE4E1 05FD3C04 0001:000ED4E1 c:\program files\warcraft iii\Game.dll

----------------------------------------
Stack Trace (Using DBGHELP.DLL)
----------------------------------------

6F0EE4E1 Game.dll <unknown symbol>+0 (0x00000000,0x000080C3,0x00009CB4,0x6F982428)


----------------------------------------
Loaded Modules
----------------------------------------

0x00350000 - 0x00359000 Normaliz.dll
0x00400000 - 0x0047D000 war3.exe
0x00CE0000 - 0x00CEE000 sysenv.dll
0x00CF0000 - 0x00D46000 MSVCR71.dll
0x097A0000 - 0x09A7A000 xpsp2res.dll
0x10000000 - 0x10007000 MSNChatHook.dll
0x15000000 - 0x15061000 Storm.dll
0x21100000 - 0x2115F000 mss32.dll
0x22600000 - 0x22616000 Mssfast.m3d
0x22700000 - 0x22717000 Mssdolby.m3d
0x22C00000 - 0x22C18000 Msseax2.m3d
0x24600000 - 0x24611000 Reverb3.flt
0x26F00000 - 0x26F2A000 Mp3dec.asi
0x404A0000 - 0x40571000 WININET.dll
0x40B40000 - 0x40B85000 iertutil.dll
0x4D5E0000 - 0x4D639000 WINHTTP.dll
0x58B50000 - 0x58BEA000 COMCTL32.dll
0x5B090000 - 0x5B0C8000 uxtheme.dll
0x5D3F0000 - 0x5D491000 dbghelp.dll
0x5F070000 - 0x5F13C000 OPENGL32.dll
0x60000000 - 0x6005D000 ijl15.dll
0x62DC0000 - 0x62DC9000 LPK.DLL
0x62E40000 - 0x62E99000 hnetcfg.dll
0x68000000 - 0x68036000 rsaenh.dll
0x68100000 - 0x68126000 dssenh.dll
0x6CEF0000 - 0x6CF11000 GLU32.dll
0x6DE60000 - 0x6DE66000 d3d8thk.dll
0x6DE70000 - 0x6DF98000 d3d8.dll
0x6F000000 - 0x6FBD4000 Game.dll
0x6FEE0000 - 0x6FF35000 netapi32.dll
0x71990000 - 0x719D0000 mswsock.dll
0x719D0000 - 0x719D8000 wshtcpip.dll
0x719E0000 - 0x719E8000 WS2HELP.dll
0x719F0000 - 0x71A07000 WS2_32.dll
0x71A10000 - 0x71A1A000 WSOCK32.dll
0x71B50000 - 0x71B63000 SAMLIB.dll
0x72220000 - 0x72225000 SensApi.dll
0x72C60000 - 0x72C68000 msacm32.drv
0x72C70000 - 0x72C79000 wdmaud.drv
0x736B0000 - 0x736FB000 DDRAW.dll
0x73B10000 - 0x73B16000 DCIMAN32.dll
0x73E30000 - 0x73E34000 KsUser.dll
0x73E60000 - 0x73EBC000 DSOUND.DLL
0x74690000 - 0x746DC000 MSCTF.dll
0x75140000 - 0x7516E000 msctfime.ime
0x753C0000 - 0x7542B000 USP10.dll
0x75ED0000 - 0x75EE3000 cryptnet.dll
0x76320000 - 0x7633D000 IMM32.dll
0x76340000 - 0x7638A000 comdlg32.dll
0x76790000 - 0x767B8000 schannel.dll
0x76960000 - 0x76A16000 userenv.dll
0x76AE0000 - 0x76B0F000 WINMM.dll
0x76BA0000 - 0x76BAB000 PSAPI.DLL
0x76BE0000 - 0x76C0E000 WINTRUST.dll
0x76C40000 - 0x76C68000 IMAGEHLP.dll
0x76ED0000 - 0x76EF7000 DNSAPI.dll
0x76F10000 - 0x76F3D000 WLDAP32.dll
0x76F60000 - 0x76F68000 winrnr.dll
0x76F70000 - 0x76F76000 rasadhlp.dll
0x76F80000 - 0x76FFF000 CLBCATQ.DLL
0x77000000 - 0x770D4000 COMRes.dll
0x770E0000 - 0x7716B000 OLEAUT32.dll
0x77390000 - 0x77493000 comctl32.dll
0x774A0000 - 0x775DD000 ole32.dll
0x77650000 - 0x77671000 NTMARTA.DLL
0x779E0000 - 0x77A77000 CRYPT32.dll
0x77A80000 - 0x77A92000 MSASN1.dll
0x77BA0000 - 0x77BA7000 midimap.dll
0x77BB0000 - 0x77BC5000 MSACM32.dll
0x77BD0000 - 0x77BD8000 VERSION.dll
0x77BE0000 - 0x77C38000 msvcrt.dll
0x77DA0000 - 0x77E4C000 ADVAPI32.dll
0x77E50000 - 0x77EE2000 RPCRT4.dll
0x77EF0000 - 0x77F39000 GDI32.dll
0x77F40000 - 0x77FB6000 SHLWAPI.dll
0x77FC0000 - 0x77FD1000 Secur32.dll
0x78130000 - 0x781CB000 MSVCR80.dll
0x7C250000 - 0x7C352000 MFC71U.DLL
0x7C800000 - 0x7C906000 kernel32.dll
0x7C910000 - 0x7C9C9000 ntdll.dll
0x7C9D0000 - 0x7D1F5000 SHELL32.dll
0x7E390000 - 0x7E421000 USER32.dll


----------------------------------------
Memory Dump
----------------------------------------

Code: 16 bytes starting at (EIP = 6F0EE4E1)

6F0EE4E1: 8B 10 8B C8 8B 42 64 57 8B 3D 4C D4 AC 6F FF D0 .....BdW.=L..o..


Stack: 1024 bytes starting at (ESP = 0012E4DC)

* = addr ** *
0012E4D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E4E0: 9A F3 0E 6F 08 00 00 00 DE 69 E7 08 80 E5 12 00 ...o.....i......
0012E4F0: 30 07 32 03 01 00 00 00 00 00 00 00 31 36 BE 45 0.2.........16.E
0012E500: F2 6D 11 45 00 00 00 00 00 00 00 00 00 00 00 00 .m.E............
0012E510: 65 72 67 6F 00 00 00 00 02 00 00 00 02 00 00 00 ergo............
0012E520: 50 E5 12 00 60 AA 27 6F 65 72 67 6F 00 00 00 00 P...`.'oergo....
0012E530: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E540: 00 00 00 00 90 E5 12 00 98 7E 80 6F 00 00 00 00 .........~.o....
0012E550: F5 D0 10 6F 80 E5 12 00 80 E5 12 00 30 07 32 03 ...o........0.2.
0012E560: CF E5 10 6F 80 E5 12 00 F4 14 1E 06 04 3C FD 05 ...o.........<..
0012E570: 12 AB 27 6F 80 E5 12 00 4E 68 E7 08 04 3C FD 05 ..'o....Nh...<..
0012E580: 88 9A 88 6F 00 00 00 00 65 72 67 6F 04 3C FD 05 ...o....ergo.<..
0012E590: E4 E5 12 00 A8 56 82 6F 00 00 00 00 D1 12 2A 6F .....V.o......*o
0012E5A0: 04 3C FD 05 00 00 00 00 00 00 00 00 BE B3 2C 6F .<............,o
0012E5B0: 04 3C FD 05 00 00 00 00 8E 68 E7 08 94 E6 12 00 .<.......h......
0012E5C0: C0 E8 12 00 00 00 00 00 00 00 00 00 04 3C FD 05 .............<..
0012E5D0: 58 16 1E 06 FF FF FF FF FF FF FF FF 00 00 00 00 X...............
0012E5E0: 00 00 00 00 FC E7 12 00 60 AD 82 6F 01 00 00 00 ........`..o....
0012E5F0: CC DE 2C 6F F4 14 1E 06 04 3C FD 05 00 00 00 00 ..,o.....<......
0012E600: 36 6B E7 08 F0 0A 0B 10 D4 F4 9F 0F D4 F4 9F 0F 6k..............
0012E610: A4 03 D8 02 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E620: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E630: 00 00 00 00 00 00 00 00 A8 02 C3 07 00 00 00 00 ................
0012E640: 90 03 C8 07 00 00 00 00 F5 5A 02 15 68 E6 12 00 .........Z..h...
0012E650: C0 E8 12 00 F2 6D 11 45 31 36 BE 45 00 00 00 00 .....m.E16.E....
0012E660: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E670: C0 04 C3 07 00 00 00 00 01 00 00 00 F4 14 1E 06 ................
0012E680: 00 00 00 00 00 00 00 00 D2 1C 00 00 02 00 00 00 ................
0012E690: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E6A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E6B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E6C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E6D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E6E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E6F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E710: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E720: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012#@%0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E750: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E760: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E770: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E790: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E7A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E7B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E7C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E7D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E7E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0012E7F0: 00 00 00 00 00 00 00 00 00 00 00 00 4C E8 12 00 ............L...
0012E800: 67 B2 82 6F 04 00 00 00 5E 80 53 6F 0D AE 62 6F g..o....^.So..bo
0012E810: C0 E8 12 00 2A 65 E7 08 C0 E8 12 00 BC 00 76 02 ....*e........v.
0012E820: 02 00 00 00 00 00 00 00 00 00 00 00 42 00 00 00 ............B...
0012E830: F0 0A 0B 10 74 11 DA 02 74 11 DA 02 74 11 DA 02 ....t...t...t...
0012E840: E4 0A DA 02 00 00 00 00 00 00 00 00 F0 E8 12 00 ................
0012E850: 68 32 85 6F 00 00 00 00 E0 AE 62 6F 11 00 0A 00 h2.o......bo....
0012E860: C0 E8 12 00 C0 E8 12 00 28 24 98 6F B1 A1 62 6F ........($.o..bo
0012E870: 11 00 0A 00 C0 E8 12 00 B8 00 76 02 97 83 53 6F ..........v...So
0012E880: C0 E8 12 00 B8 00 76 02 C0 E8 12 00 B8 00 76 02 ......v.......v.
0012E890: 27 C4 53 6F C0 E8 12 00 34 E9 12 00 00 00 00 00 '.So....4.......
0012E8A0: DD 13 54 6F AC 73 88 6F 00 00 00 00 7A 00 00 00 ..To.s.o....z...
0012E8B0: 86 65 E7 08 00 00 00 00 B0 00 76 02 00 00 00 00 .e........v.....
0012E8C0: FC 4D 94 6F 00 00 00 00 11 00 0A 00 00 00 00 00 .M.o............
0012E8D0: 00 00 00 00 11 02 0A 00 02 00 00 00 65 72 67 6F ............ergo


------------------------------------------------------------------------------

Any thoughts ?

I'd report the user:
http://us.blizzard.com/support/article.xml?locale=en_US&tag=hacksform

---

Q u o t e:
I'd report the user:
http://us.blizzard.com/support/article.xml?locale=en_US&tag=hacksform

---

And we both know this would be of no use.

So, does anyone know if this log reveals anything special ?

i have the same problem and its only in ladder games.

This application has encountered a critical error:
And u get disced, and no replay only error log.

Same issue only ladder games, just started today:


This application has encountered a critical error:

FATAL ERROR!

Program c:\program files\warcraft iii\war3.exe
Exception 0xC0000005 (ACCESS VIOLATION) at 001B:6F0EE4E1

The instruction at '0x6F0EE4E1' referenced memory at '0x00000000'
The memory could not be 'read'

This is a hack.

Pies, the Legacy Patch team will work on SC2? I wasn't aware of that...




Yeah. No.

---

Q u o t e:
Greetings Dol)downfall,

We have noticed a string of error messages that have the referenced memory listed as "0x00000000" in which a virus or trojan could be generating this message. To ensure the safety of your computer, I'd like you to run a full virus scan of your computer if you have anti-virus security software installed. Another program that can also pick up malicious software on your computer is Malwarebytes that can be downloaded from the link below:

http://malwarebytes.org/

Let me know what the results were from the scan and be sure to select "Full Scan" instead of "Quick Scan" from the security suite option menu.

---

I'm sorry but this is just incorrect, this is not a result of a virus being placed on your computer, there is a new crash hack that was created a few days ago and was released to the public yesterday on (EDITED FOR BLUE TO SEE)

This crash hack, unlike the previous one, does not utilize a stack overflow, it simply gives your opponents a fatal error after doing one simple command. I don't know how it works, but this needs to be investigated with much higher priority. The previous crash hack at least gave you a minute or so because it needed to build up, we were able to create some sort of defense against it, but this crash hack has absolutely no defense because it occurs seconds after the game is loaded up, and it is rampant on Battle.net

Thanks.

Sixen, can you pass on this info to your Blizzard source in the RTS scene? I know you have them, and it would help to expedite things

There are three most notable hacks currently present:

1.) Indestructible building hack. Creates a building that can not be destroyed by any sources, results in an AFK battle after the opponent is defeated.

2.) Mass summons hack. Able to create summoned creatures very fast with little or no cooldown, most prominent with the Beastmaster.

*** PRIORITY 3.) This crash hack. Fatal error seconds after a game is loaded in, the log is identical always to what is posted above. Even worse than the previous crash hack

These hacks were all developed and released after Patch 1.24d was released.

Thanks.

---

Q u o t e:
Originally posted by Darkness-calls

Sixen, can you pass on this info to your Blizzard source in the RTS scene? I know you have them, and it would help to expedite things

There are three most notable hacks currently present:

1.) Indestructible building hack. Creates a building that can not be destroyed by any sources, results in an AFK battle after the opponent is defeated.

2.) Mass summons hack. Able to create summoned creatures very fast with little or no cooldown, most prominent with the Beastmaster.

*** PRIORITY 3.) This crash hack. Fatal error seconds after a game is loaded in, the log is identical always to what is posted above. Even worse than the previous crash hack

These hacks were all developed and released after Patch 1.24d was released.

Thanks.

---

These hacks are just going to get forwarded to the hacks team -- I know Chuck already sent them in. I'll check with him and see if he reported all three.

---

Q u o t e:
Originally posted by Piesofthenorth

I think they're just gonna play SC2/WoW/D3/New MMO at this point.

They seem to just think that after releasing 1.24d that war3 no longer needs their attention.

which makes sense, the game is 8 years old, but if they don't plan on doing anything about the rampant hacks then they should at least say so.

---

Sorry I didn't respond, I was busy with SC2.

Kidding... Well, serious, but whatever. The Legacy team is still devoted to the legacy games... Soon(TM), the legacy games are going to be ported to SC2.

Downfall is right, it is not a Virus or Malware.

I have a MAC and I have the same problem except that I get no FATAL ERROR but my screen freezes and when I leave the game (by pressing : ALT + APPLE + ESC), my Finder (explorer for mac) is fine and all my applications are running well (Teamspeak for example works perfectly).

I tried to play with native Warcraft on MAC and with CROSSOVER (a sort of wine to play windows game) but the result was the same.

However, one time I stared an arranged team and opponent have all left at the beginning of the game at 0 second. So perhaps it is a problem with BNET and not a problem of hacker but the account Downfall has shown us is very strange ....

---

Q u o t e:
Greetings Dol)downfall,

We have noticed a string of error messages that have the referenced memory listed as "0x00000000" in which a virus or trojan could be generating this message. To ensure the safety of your computer, I'd like you to run a full virus scan of your computer if you have anti-virus security software installed. Another program that can also pick up malicious software on your computer is Malwarebytes that can be downloaded from the link below:

http://malwarebytes.org/

Let me know what the results were from the scan and be sure to select "Full Scan" instead of "Quick Scan" from the security suite option menu.

---

I ran a Full Scan and it did not find anything. Anyway it is 100% sure that those Fatal errors are related to the recent new drophack released.

Any update on how to counter the fatal error hack yet?