PDA

View Full Version : FIX for DSETUP.DLL (Also known as DSETUP.0LL)


Korben
07-10-2014, 01:08 PM
Suddenly antivirus programs are deleting, quarantining, removing this file due to the specific nature of it. It's detecting trojan-like activity.

This file is basically used to look at what other .exe's are running, and is mainly a anti-cheat countermeasure put in place by the devs. Someone a little more tech savvy might explain this better.


HOW TO FIX THIS:

Step 1) Tell your antivirus to ignore this file, or your entire P1999 directory if you want to be cavalier about it. It won't scan it any longer. Most(all?) antiviruses should have this capability.

Step 2) Go re-download the latest patch files http://www.project1999.com/forums/showthread.php?t=155457 and copy them into your P1999 directory.

Step 3) Log back into EQ and train/flame/poopsock to your heart's content.

Jepaxis
07-11-2014, 08:48 AM
How to fix it is for the devs to fix it on their end. People should NOT be disabling virus software ever.

Korben
07-11-2014, 09:32 AM
How to fix it is for the devs to fix it on their end. People should NOT be disabling virus software ever.

The devs will not remove this functionality, just plain will not happen. This is one of their best anti-cheating countermeasures. If you don't like it, don't play it.

I did not tell anyone to disable their antivirus, I told them to tell it not to scan this specific file, or at worst the P1999 folder. Troll harder.

lvpa
07-11-2014, 10:56 AM
The devs will not remove this functionality, just plain will not happen. (...) If you don't like it, don't play it.

That's not a very satisfying answer. No other games I play feel the need to do this. It punishes 99% of the population for the 1% who cheat, and the 1% who cheat will find another way. They probably already have. I would bet money on it.

Korben
07-11-2014, 10:59 AM
That's not a very satisfying answer. No other games I play feel the need to do this. It punishes 99% of the population for the 1% who cheat, and the 1% who cheat will find another way. They probably already have. I would bet money on it.

Then go play one of the games you have to pay to purchase and/or play.

ALSO, you must not play Diablo II or Diablo III or WoW? I know for a fact MANY games are allowed to see what .exe's you have running to prevent cheating, etc, which is what this .dll does.

lvpa
07-11-2014, 11:06 AM
This is a difficult enough situation without someone cheerleading it. Please stop.

Korben
07-11-2014, 11:20 AM
This is a difficult enough situation without someone cheerleading it. Please stop.

Please stop because I showed you that plenty of other massive games use this same sort of thing, after you said no other game did?

Anyways, if the first post where I showed people how to fix their issue helped, I'm glad I could help.

Nirgon
07-11-2014, 11:36 AM
Good bye auto fire.

Hello EverQuest.

Frieza_Prexus
07-11-2014, 11:40 AM
That's not a very satisfying answer. No other games I play feel the need to do this. It punishes 99% of the population for the 1% who cheat, and the 1% who cheat will find another way. They probably already have. I would bet money on it.

This server is unique among emulators in how well policed the cheating is. No one is being punished because you willingly submit to the anti-cheating measures when you play here. That is the cost of Project 1999, and it will not change.

Cheaters will continue to do so, and the devs will continue to fight them. That is the nature of escalation, and it will not change.

lvpa
07-11-2014, 11:43 AM
Please stop because I showed you that plenty of other massive games use this same sort of thing, after you said no other game did?.

Blizzard is a billion dollar company. If I let Blizzard into my system folder and they accidentally turn my computer into a brick, I can sue them. And they're one of the few companies that get away with it, even with the resources of a corporation behind them.

This is a hobby project on the internet. It's anonymous and free. If I let them into my system folder and they accidentally turn my computer into a brick, I have no recourse. I'm just screwed.

Tampering with the system folder is a big deal. One typo and boom, my computer is a brick. One weirdness that's unique to my system-- boom, my computer is a brick. Your antivirus is right to flag this. It is dangerous software.

Grimjaw
07-11-2014, 12:29 PM
can u sue? EVE Online, in 2007, replaced many users Boot.ini file with one from their patch, and did exactly that - bricked tons of Windows PCs. Don't think they ever got sued for that.

https://community.eveonline.com/news/dev-blogs/about-the-boot.ini-issue/

http://arstechnica.com/gaming/2007/12/eve-online-trinity-borks-windows-deletes-boot-ini/

http://www.youtube.com/watch?v=msXRFJ2ar_E



also, what exactly do you mean "let them into my system folder"? You realize every windows application auotomatically references dlls from the system folder? (See the PATH environment variable)

Clasick
07-11-2014, 12:46 PM
It's really simple
If you don't like it, don't play here

Everyone thinks they are a snowflake and deserve special treatment or want the rules changed because they don't like them. See above and move along to another server that suits you better.

Frieza_Prexus
07-11-2014, 12:50 PM
can u sue?

You can sue, but your odds of success would probably be pretty low. You'd probably have to argue that you did not consent to the file being put on your system or that its functions exceeded the terms of your consent. Given that you clicked "install" or "OK" you're 99.9% likely to be SOL. You could maybe argue negligence too, but little success there.

lvpa
07-11-2014, 12:52 PM
can u sue? EVE Online, in 2007, replaced many users Boot.ini file with one from their patch, and did exactly that - bricked tons of Windows PCs.

That's exactly the problem here.

gwideon
07-11-2014, 01:05 PM
I would like to know what are the limitations of what it can and will do. As much as I like and trust the developers here. I would like assurance that it does not grab any Personally Identifiable Information from my PC that could be used for Identity Theft or other malicious activity. Even if the current users of this information do not have intents on this, if it is stored it is vulnerable to theft from their servers if it is captured.

|3igHurb
07-11-2014, 01:31 PM
That's exactly the problem here.

go away troll

omg if u guys think ur "database" is gonna be "haxored" to steal your social security numbers than i suggest killing yourself IRL because you are a retard. that simple. now stfu.

kruptcy
07-11-2014, 01:37 PM
go away troll

omg if u guys think ur "database" is gonna be "haxored" to steal your social security numbers than i suggest killing yourself IRL because you are a retard. that simple. now stfu.

What if they can read my social_security.txt file and my credit_card_numbers.txt?

Frieza_Prexus
07-11-2014, 01:45 PM
What if they can read my social_security.txt file and my credit_card_numbers.txt?

Just replace them with decoy_credit_card_numbers.txt.

Duh.

Bohab
07-11-2014, 02:09 PM
who cares? afraid the p99 staff is gonna find your kiddy porn stash?

do you use google? gmail? google maps? ANYTHING GOOGLE?! you think this is invasive? please... your online habits and more are making others profit everyday.

gwideon
07-11-2014, 02:30 PM
Yuck it up if you want. I suppose none of you use quicken to upload transactions into a budget, nor any of you file your taxes electronically and keep a pdf of the return for next year, nor balance your check book in excel. You make light of it, but there is a reason the scanners pick up certain types of changes.

While I believe in the good nature of the developers, they are for the most part anonymous to us. Would you trust your information with someone you only know through a chat room?

kruptcy
07-11-2014, 02:34 PM
Yuck it up if you want. I suppose none of you use quicken to upload transactions into a budget, nor any of you file your taxes electronically and keep a pdf of the return for next year, nor balance your check book in excel.

If you are that worried about it, encrypt those files.

gwideon
07-11-2014, 02:45 PM
If you are that worried about it, encrypt those files.

While that is good advice, I am not sure I will get all of the potential files or temporary files that might be stored. Nor am I sure my wife will do the same thing. Is there a way apart from having a totally different machine I can segregate what the application can see? Will a separate user account on the PC do any good?

Glenzig
07-11-2014, 03:33 PM
Yuck it up if you want. I suppose none of you use quicken to upload transactions into a budget, nor any of you file your taxes electronically and keep a pdf of the return for next year, nor balance your check book in excel. You make light of it, but there is a reason the scanners pick up certain types of changes.

While I believe in the good nature of the developers, they are for the most part anonymous to us. Would you trust your information with someone you only know through a chat room?

Here's a clue. If they wanted that stuff so horribly badly they would just take it with or without this dll. patch. Home computers aren't Fort Knox.

Bohab
07-11-2014, 03:36 PM
Point is you're so worried about this game file being flagged (as a false positive I might add) when social media and or free services like google log, track, and sell everything you do online. Shit who knows if your 'antivirus' application isn't calling home with a list of files from your computer. The p99 .dll is the least of your worries.

burn your computer to the ground! break out the pen and paper and file that shit in metal cabinet! computers are not secure enough by your standards ;)

please click... I ACCEPT or gtfo!

Ambrotos
07-11-2014, 03:48 PM
Use a different/ MUCH better scanner. No one is saying to run without any protection, use malewarebytes as example. Unless you think they are in bed with Rogean to steal all our information and bank accounts.

Either like it or don't. Your choice to either play or not. Stop crying.

Artaenc
07-11-2014, 04:49 PM
Use a different/ MUCH better scanner. No one is saying to run without any protection, use malewarebytes as example. Unless you think they are in bed with Rogean to steal all our information and bank accounts.

Either like it or don't. Your choice to either play or not. Stop crying.

malware bytes is a decent software, I use it.

Pint
07-11-2014, 05:31 PM
I use mse and premium malwarebytes and still havnt had this DLL come up as flagged

Akesedo
07-22-2014, 01:17 AM
Followed all the steps, still getting the "missing dsetup" message... not computer savvy, any help?

Tacitus
07-22-2014, 01:35 AM
Followed all the steps, still getting the "missing dsetup" message... not computer savvy, any help?

turn off antivirus, open p99 patch .rar
extract the dll from there into your eq folder.
run eq
profit

Alluveal
07-22-2014, 08:51 PM
Thanks for posting this! I had a bit of a freakout both with Norton and the game, and had it fixed in no time.

Korben
07-22-2014, 11:35 PM
Followed all the steps, still getting the "missing dsetup" message... not computer savvy, any help?

It's likely that your antivirus is still yoinking the dsetup file from your P99 folder, and can even happen if you replace it before a restart(it will remove it after the next restart if it has already flagged it, even if you replace it).

Make sure you tell your antivirus to ignore this file, do a clean reboot, or two to be paranoid, then replace the file with the one from the latest patch files.

Let me know if this persists and we can go from there.

Alluveal
07-23-2014, 12:10 AM
I went into Control Panel / Programs, clicked on EQ Titanium and asked it to "Repair."

Then deleted all the nek/arena type files, repatched and was in like 5 min. later.

Jepaxis
07-26-2014, 08:14 AM
Software just started flagging the newer .DLL again.

Thulack
07-26-2014, 10:38 AM
Software just started flagging the newer .DLL again.

So tell your software to stop flagging it. Only should have to add something to your exception list once.

Zaphyer
07-29-2014, 07:10 AM
This does not work.

My PC is still saying DESETUP.DLL was not found.

myriverse
07-29-2014, 07:15 AM
This does not work.

My PC is still saying DESETUP.DLL was not found.
Reinstall latest patch.
Tell your antivirus program to ignore your P99 folder. Or get a better antivirus.

Zaphyer
07-29-2014, 07:18 AM
Reinstall latest patch.
Tell your antivirus program to ignore your P99 folder. Or get a better antivirus.

Well i fixed it with some work. is AVG 2014 anti virus a formidible program? or should i get something better.

picaro11
07-29-2014, 09:48 AM
Can someone help me navigate the exclusion process on AV:

MacAfee OAS?

Please!

Thulack
08-11-2014, 12:37 AM
Bump for all the newbies out there.

Thulack
08-13-2014, 09:26 PM
^

Ssouky
08-19-2014, 04:32 AM
Playing from my corporate laptop, can't exclude anything from the McAffee list.
I tried everything but I can't turn down the anti-virus, and can't even extract the files : it gets deleted with a warning by the AV right away.

P99 might be finished for me :'(

phacemeltar
08-19-2014, 04:41 AM
this is hardly a fix. if anything this post should be called "how to use your antivirus"

EQLZ
02-23-2015, 06:51 PM
My last 4 days...
Last Thursday - Old friend emails me and says "Hey, remember EQ? There is this Project1999 site that is doing private server, old school Ruins of Kunark and it's free." If you still have your disks, check it out because I'm gonna start playing again and I think you should too."

Last Thursday Night - Locate my disks after rummaging through boxes I packed up a decade and a half ago. Install using the instructions, but had to go to bed before I could get to play.

Last Friday Night - Get off work, spent some time with the GF then logged on and started leveling a Barbar Shammy. Original UI, original models. Hit like level 5, decided to do some research, hit up your site, found instructions on the newer UI and the newer models, decided I'd toy with that Saturday morning.

Last Saturday - Modified everything, started playing with the new UI and the newer models. Played most of the day, but right after I logged off, which was almost exactly 3am, my daily AV scans popped up saying that DSETUP.DLL was a trojan. This concerned me, checked out the forums, read this thread then, decided to uninstall from my main system, did so, then ran exhaustive checks with 3 different AV products and 2 different malware/adware products. Scan came up clean, decided to put it to bed for the evening...

Yesterday - Because the combination of the trojan hit, your advice to just have it ignore the threat, and the fact that I am a little cautious in general...I decided to take the precaution of pulling my other system out and installing it on that one. My other system is essentially an anonymous PC, there is no personal information on it, it has never browsed my email, never been to my social media sites, nada. Installed, modified for the newer UI and models, ran an AV scan and it hit the same DLL as a trojan but I wanted to check it out, so I logged in and started playing. Played for about 4 hours, in windowed mode...all of a sudden Chrome opens, is made default browser, redirects to malware site, download starts, install starts, POWER BUTTON, restart and rollback to prior to actually logging in. Started real time monitoring on AV and malware apps, started task manager, loaded game again and logged in to start playing. All was fine for about 2 hours, then, all of a sudden IE opens, is made default and browser redirect to another malware site, download and install starts, AV catches it and its stopped in its tracks. I kill the browser, reset default browser, clear history, clear cache and temp files, logged back in. About another 3-4 hours pass, and it happens again with Chrome...so what's the deal?

And please don't give your standard response of "If you don't like it, don't play."...because after this happening to me, honestly; it makes you look suspect. Love EQ, really want to play, love that you guys are doing what you are doing, but peace of mind and personal information security is more important to me than all of that. I'm asking you to address a legitimate concern of someone who has experienced the trojan aspect that you are telling people to dismiss and ignore.

Man0warr
02-25-2015, 10:46 AM
Yesterday - Because the combination of the trojan hit, your advice to just have it ignore the threat, and the fact that I am a little cautious in general...I decided to take the precaution of pulling my other system out and installing it on that one. My other system is essentially an anonymous PC, there is no personal information on it, it has never browsed my email, never been to my social media sites, nada. Installed, modified for the newer UI and models, ran an AV scan and it hit the same DLL as a trojan but I wanted to check it out, so I logged in and started playing. Played for about 4 hours, in windowed mode...all of a sudden Chrome opens, is made default browser, redirects to malware site, download starts, install starts, POWER BUTTON, restart and rollback to prior to actually logging in. Started real time monitoring on AV and malware apps, started task manager, loaded game again and logged in to start playing. All was fine for about 2 hours, then, all of a sudden IE opens, is made default and browser redirect to another malware site, download and install starts, AV catches it and its stopped in its tracks. I kill the browser, reset default browser, clear history, clear cache and temp files, logged back in. About another 3-4 hours pass, and it happens again with Chrome...so what's the deal?

That's not caused from the DLL in the game's files that's for sure. If it was, there would be a lot more people reporting it.

EQLZ
02-25-2015, 11:30 AM
That's not caused from the DLL in the game's files that's for sure. If it was, there would be a lot more people reporting it.

I'm actually kind of stumped on troubleshooting the issue at this point. EQ Titanium is the only thing I've loaded since this started happening, and the only other application running while my EQ client is running is Skype so I can chat with my buddy that brought me to p1999. I've scrubbed the system numerous times, run scans with Malwarebytes, MS Security Essentials, and Spybot S&D after each play session and at least 100 vulnerabilities pop up with each scan. This only occurs while I have the EQ client running and it is somehow bypassing security measures that will catch and stop malware if I go to the same malware sites on my own in Chrome. When hitting those sites on my own, real time monitoring immediately alerts me of the threat and asks me if I want to prevent it from installing, yet while running the EQ client, without a browser process even running, the malware just flows in as if I have no security measures in place at all. At this point I am so frustrated that I'm having trouble justifying the annoyance in order to play EQ again.

myriverse
02-26-2015, 10:06 AM
Yesterday - Because the combination of the trojan hit, your advice to just have it ignore the threat, and the fact that I am a little cautious in general...I decided to take the precaution of pulling my other system out and installing it on that one. My other system is essentially an anonymous PC, there is no personal information on it, it has never browsed my email, never been to my social media sites, nada. Installed, modified for the newer UI and models, ran an AV scan and it hit the same DLL as a trojan but I wanted to check it out, so I logged in and started playing. Played for about 4 hours, in windowed mode...all of a sudden Chrome opens, is made default browser, redirects to malware site, download starts, install starts, POWER BUTTON, restart and rollback to prior to actually logging in. Started real time monitoring on AV and malware apps, started task manager, loaded game again and logged in to start playing. All was fine for about 2 hours, then, all of a sudden IE opens, is made default and browser redirect to another malware site, download and install starts, AV catches it and its stopped in its tracks. I kill the browser, reset default browser, clear history, clear cache and temp files, logged back in. About another 3-4 hours pass, and it happens again with Chrome...so what's the deal?

And please don't give your standard response of "If you don't like it, don't play."...because after this happening to me, honestly; it makes you look suspect. Love EQ, really want to play, love that you guys are doing what you are doing, but peace of mind and personal information security is more important to me than all of that. I'm asking you to address a legitimate concern of someone who has experienced the trojan aspect that you are telling people to dismiss and ignore.
Absolutely nothing like this is from anything having to do with P99. It's from something else you did with that computer.

myriverse
02-26-2015, 10:21 AM
Skype
That's likely your problem, right there.

EQLZ
02-26-2015, 02:13 PM
I think I figured it out last night. I was able to play without any trouble at all, and during real time monitoring, and the scans I did after play just to be sure, no threats detected, so I should be good now. While I can't confirm this, when I loaded from the actual disks, the getting started instructions also mention WinEQ2 as a preemptive measure and that many players use it. So I downloaded it and unpacked it in the event that I'd need it. Didn't install it, but downloaded and extracted it just in case. From the best I can tell, something came through with the WinEQ2 download.