Quote:
Originally Posted by SunDrake
[You must be logged in to view images. Log in or Register.]
Edit: Bwills, Vipre also didn't appreciate the wsock32.dll. I wasn't sure what it was either.
|
Here is a post from the FOH board:
Quote:
|
NOTE: WSOCK32.dll is a fake winsock program. If you require its source I can post it here but any disassembler can open it and you can clearly see it is a DLL loader for eqgame.dll and a proxy for WSOCK32.dll, if it flags as a virus then that's because it's named after a system file. This is just an order of operations issue in Windows that I exploit to load the actual code to EQGame.exe and it is not a virus.
|
From what I can see my virus suite likes to delete WSOCK32.DLL from the EQMac folder. When this happens I can't get to the login screen. I can get to server select but when I go to login I just get "You have been disconnected" right before the world loads.
Just turn off the virus scanner, copy the wsock32.dll from secrets patch back into eqmac, and the game loads fine. It doesn't seem malicious, but you never know. Not sure someone would go through this much trouble to make something work just to install a trojan that 20 or 30 people might try out.