Hooking RCO

[fire]

I am running nwnx2 and odbc2 with delete character plugin to a mysql databse on a amd 64 machine.

After reboot, nwnx2 attempts to start nwserver, and there is an instance of server running in task manager, but the gui never loads on screen and nwnx2 will start another instance of nwserver.

If you open and look at properties for nwserver and then close, open and run nwnx2, the server starts up fine.

In checking the logs, a good instance shows hooking rco with an address.

Bad instance logs, hooking rco..... is all the shows.

Any ideas?
_________________
fire

[Papillon]

Please try to disable SCORCO hooking in the NWNX.INI file: hookscorco = false
_________________
Papillon

[fire]

OK set to false, will check when server resets in the morning and post results here.
_________________
fire

[fire]

No change whether SCORCO is hooked or not.
_________________
fire

[Papillon]

Hmm, could this be some kind of virus protection ? Try disabling everything that is not absolutely necessary. Which OS are you running ?
_________________
Papillon

[fire]

No virus protection and I have disabled Dr. Watson.

OS is Windows Server 2003.
_________________
fire

[odenien]

Have you tried this scenerio on WindowsXP and/or a 32bit version? Make sure the dlls are in the system path and not a user's path. Not done much with the task manager, but most windows requires that of services.

[Papillon]

There is this execution prevention feature in Windows XP or 2003 and on AMD processors.. not sure what the real (english) name is, but it's that feature that prevents code from beeing executed in data sections - something that is exploited by buffer overruns. Maybe it would be worth investigating into that direction.
_________________
Papillon