250k plat bounty (Prexus) for fix to this problem

[horseshoecrab]

http://www.showeq.net/forums/showthread.php?t=5775&highlight=process+eqgame.exe

specifically - the problem is that I load the server, load the client, hit "Go" or "Connect" or whatever the button is called, and am told that the process "eqgame.exe" can't be found.

The user I'm logged in as on Windows XP professional (with all the latest updates and released service packs) has admin rights but just to be sure, I also logged out, rebooted, and logged in as Administrator with no change in the error.

If somebody can fix this and can use 250k PP on Prexus, it's all yours.

Cheers!

[Seaxouri]

Run the server in debug mode and run the process check test. Paste here what it tells you.

[brianp]

A friend of mine had a similar problem on Vista. The fix was using the run as administrator option. I think there was one spot to set that in the properties and then you can right click and say it too. Not sure if that works on XP but it is worth a try.

And yes, his account was an administrator anyway, but this fixed it. go figure huh? *claps for windows*

[horseshoecrab]

First, thanks for humoring me here.

I have tried running in both normal and debug mode logged in as Administrator, logged in as my proper name, and "running as" administrator while logged in with my proper name, all to no avail. I am attempting to run the server and client software on the same box. A second PC is not available to me to try this.

This is what the server console generates without the debug flag:


C:\Program Files\MySEQ\v1.22.0>myseqserver
========================
MySEQ Open v1.22.0
========================
This software is covered under the GNU Public License (GPL)
December 2007

IniReader: Reading INI file ./myseqserver.ini with patch date of 1/16/2008
Spawn: Spawn Offsets read in.
Item: GroundItem Offsets read in.
NetworkServer: Port value and memory offsets read in.
NetworkServer: Listening on port 5555

NetworkServer: New connection from: 127.0.0.1
MemReader: Failed to locate process 'eqgame'
NetworkServer: Closing client socket
NetworkServer: Closing listener socket
IniReader: Reading INI file ./myseqserver.ini with patch date of 1/16/2008
Spawn: Spawn Offsets read in.
Item: GroundItem Offsets read in.
NetworkServer: Port value and memory offsets read in.
NetworkServer: Listening on port 5555 Ran it from the windows command prompt to make copy/paste possible. The spew is the same when running from the desktop icon created at time of install.

Here's the output using the debug flag:


C:\Program Files\MySEQ\v1.22.0>myseqserver debug
========================
MySEQ Open v1.22.0
========================
This software is covered under the GNU Public License (GPL)
December 2007

IniReader: Reading INI file ./myseqserver.ini with patch date of 1/16/2008
MemReader: Failed to locate process 'eqgame'
Spawn: Spawn Offsets read in.
Item: GroundItem Offsets read in.
Debugger: Memory offsets read in.

Debug Menu
=======================
d) display current offsets
r) reload all offsets from INI file
spo) set a primary offset (index/name) (hex value)
sso) set a secondary offset (index/name) (hex value)
ez) examine raw data using pZone
et) examine raw data using pTarget
fz) find zonename using pZone (zonename)
ft) find spawnname using pTarget (spawnname)
fs) find spawnname using pSelf (spawnname)
ps) process a spawn entity using pSelf
pt) process a spawn entity using pTarget
sp) scan process names (process name)
sft) scan for floating point using pTarget (X,Y,Z)
sfa) scan for floating point using Address (X,Y,Z,Address)
sg) scan for ground items
ws) walk the spawnlist (reverse) using pSelf
wt) walk the spawnlist (reverse) using pTarget
vs) walk the spawnlist (forward) using pSelf
vt) walk the spawnlist (forward) using pTarget
x) exit

>


I looked at the permissions of the EQ shortcut launch button, of eqgame.exe, and of everquest.exe and in the process, made every last permission box available to both administrator and my proper name. Unless I missed something, it should be bullet proof for permissions, but obviously it isn't.

Is there any interest in seeing my process list, having me uninstall and then reinstall the .Net framework, etc? I don't want to do a bunch of busy work, but I'm really out of ideas.

Thanks!

[brianp]

Have you ever had it work properly on this machine?

Also, you have the old offsets still. I assume though that you had this problem before the patch as well.

http://www.showeq.net/forums/showthread.php?t=6021

Copy those and paste them over the old ones in your myseqserver.ini


Also if this does not solve the problem, you may want to try the older version of the client/server (with latest offsets of course).

[horseshoecrab]

bleh, it ate my reply! Or I don't know how to use a message board. Either is possible :rolleyes:

Result from the older server version is showing the same thing:


C:\Documents and Settings\MyName.ComputerName\Desktop\myseq older\myseq.server.1.20.0>myseqserver debug
========================
MySEQ Open v1.20.0
========================
This software is covered under the GNU Public License (GPL)
February 2007

IniReader: Reading INI file ./myseqserver.ini with patch date of 2/6/2008
MemReader: Failed to locate process 'eqgame'
Spawn: Spawn Offsets read in.
Item: GroundItem Offsets read in.
Debugger: Memory offsets read in.

Debug Menu
=======================
d) display current offsets
r) reload all offsets from INI file
spo) set a primary offset (index/name) (hex value)
sso) set a secondary offset (index/name) (hex value)
ez) examine raw data using pZone
et) examine raw data using pTarget
fz) find zonename using pZone (zonename)
ft) find spawnname using pTarget (spawnname)
fs) find spawnname using pSelf (spawnname)
ps) process a spawn entity using pSelf
pt) process a spawn entity using pTarget
sp) scan process names (process name)
sft) scan for floating point using pTarget (X,Y,Z)
sfa) scan for floating point using Address (X,Y,Z,Address)
sg) scan for ground items
ws) walk the spawnlist (reverse) using pSelf
wt) walk the spawnlist (reverse) using pTarget
vs) walk the spawnlist (forward) using pSelf
vt) walk the spawnlist (forward) using pTarget
x) exit

>

I don't think I ever tried this version before. Quite some time ago, I had been using a different version maintained by some guy who seems to really get off on self-congratulatory polls alternating with posts of self-pity. When they finally decided that they would no longer make updates available to people who failed to donate to what I thought had been GPL code, I stopped using it. However, I think I had been using their code on an older PC of mine. I'm not sure I ever used it on this newer PC.

As for the offsets, the Feb 6 numbers didn't make any difference to the problem. I had the older offsets when they were current to the previous patch of the eqgame.exe.

FWIW, I can run MQ2 on this machine and it sees eqgame.exe just fine. I tried unloading that app, and even rebooting the machine to see if it might somehow be interfering with the operation of SEQ, but no dice. I also downloaded the install for the .NET 2.0 framework and had it "repair" my existing installation, rebooted the system, but again, no dice.

[horseshoecrab]

I grabbed an app off of Microsoft's site a long time ago called Process explorer. eqgame.exe is just about the only fully application that doesn't have an "image name" in the description column. Is that significant to finding process eqgame.exe for SEQ?

[Syn]

I'm not sure which executable you are applying permissions against, but what I'd suggest trying is directly running the "eqgame.exe" executable with "patchme" as the argument. You'll likely have to make a new shortcut for this. This will bypass the patchers and directly run the executable that MySEQ looks for. You may want to do the same thing as previous with this new short cut (set admin privs and whatnot). This may change how it is run and allow it to now be found by MySEQ server.

As for Process Explorer, it's very likely that the image name that is blank is the same string the server looks for.

When you tried running "myseqserver debug", try giving it the "sp" command and paste the output here. That may clue us in on some other cause.

Other things that you can try are:
Check your system for virii, spyware, rootkits, etc.
Try running in Safe Mode with Networking (I've never tried doing this for either Everquest or MySEQ but it may exposes something.) I wouldn't go too far with this test if it doesn't immediately work.
After checking and making sure your system is clean, you can try uninstalling your virus checker and other protection tools. These often hook into system-level areas and may through things off. (Be sure to reinstall them soon afterwards and I'd suggest limiting browsing and other activities while they are un-installed...if you have any doubts of your ability to do this, it may be best to skip this for now.)

Oh, regarding the offsets...those only come into play after the eqgame process is found so having them updated won't matter until the main issue is resolved.

[Ulanbat]

had the same problem before

http://www.showeq.net/forums/showthread.php?t=5532

cant remember what fixed it though

[horseshoecrab]

Thanks Syn, appreciate the feedback. I tried the "eqgame.exe patchme" idea and failed to mention it before. Unfortunately, it doesn't work. Here's the "sp" output you requested:



> sp
Looking for process with name: eqgame
hProcessSnap is 0x000007D8
->Detected process with name: [System Process]
->Detected process with name: System
->Detected process with name: smss.exe
->Detected process with name: csrss.exe
->Detected process with name: winlogon.exe
->Detected process with name: services.exe
->Detected process with name: lsass.exe
->Detected process with name: ati2evxx.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: LBTServ.exe
->Detected process with name: ati2evxx.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: spoolsv.exe
->Detected process with name: explorer.exe
->Detected process with name: DrgToDsc.exe
->Detected process with name: LVComS.exe
->Detected process with name: GoogleDesktop.exe
->Detected process with name: realsched.exe
->Detected process with name: avgnt.exe
->Detected process with name: SOUNDMAN.EXE
->Detected process with name: jusched.exe
->Detected process with name: amd_dc_opt.exe
->Detected process with name: LogiTray.exe
->Detected process with name: hpwuSchd2.exe
->Detected process with name: sched.exe
->Detected process with name: iTunesHelper.exe
->Detected process with name: avguard.exe
->Detected process with name: rundll32.exe
->Detected process with name: AppleMobileDeviceService.exe
->Detected process with name: svchost.exe
->Detected process with name: btwdins.exe
->Detected process with name: kxmixer.exe
->Detected process with name: GoogleDesktop.exe
->Detected process with name: LBTWiz.exe
->Detected process with name: svchost.exe
->Detected process with name: MOM.exe
->Detected process with name: BTTray.exe
->Detected process with name: mdm.exe
->Detected process with name: ctfmon.exe
->Detected process with name: mssysmgr.exe
->Detected process with name: GoogleToolbarNotifier.exe
->Detected process with name: feedreader.exe
->Detected process with name: SMAgent.exe
->Detected process with name: svchost.exe
->Detected process with name: BTSTAC~1.EXE
->Detected process with name: 4t-min.exe
->Detected process with name: SetPoint.exe
->Detected process with name: CCC.exe
->Detected process with name: iPodService.exe
->Detected process with name: KHALMNPR.exe
->Detected process with name: alg.exe
->Detected process with name: Azureus.exe
->Detected process with name: firefox.exe
->Detected process with name: WINWORD.EXE
->Detected process with name: eqgame.exe
->Match found (PID:0xc0). Attempting to attach...
-->Access denied.
->Detected process with name: taskmgr.exe
->Detected process with name: avscan.exe
->Detected process with name: wuauclt.exe
->Detected process with name: msiexec.exe
->Detected process with name: MsMpEng.exe
->Detected process with name: MSASCui.exe
->Detected process with name: myseq.exe
->Detected process with name: cmd.exe
->Detected process with name: myseqserver.exe
MemReader: Failed to locate process 'eqgame'
Looking for process with name: eqgame
hProcessSnap is 0x000007D8
->Detected process with name: [System Process]
->Detected process with name: System
->Detected process with name: smss.exe
->Detected process with name: csrss.exe
->Detected process with name: winlogon.exe
->Detected process with name: services.exe
->Detected process with name: lsass.exe
->Detected process with name: ati2evxx.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: LBTServ.exe
->Detected process with name: ati2evxx.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: spoolsv.exe
->Detected process with name: explorer.exe
->Detected process with name: DrgToDsc.exe
->Detected process with name: LVComS.exe
->Detected process with name: GoogleDesktop.exe
->Detected process with name: realsched.exe
->Detected process with name: avgnt.exe
->Detected process with name: SOUNDMAN.EXE
->Detected process with name: jusched.exe
->Detected process with name: amd_dc_opt.exe
->Detected process with name: LogiTray.exe
->Detected process with name: hpwuSchd2.exe
->Detected process with name: sched.exe
->Detected process with name: iTunesHelper.exe
->Detected process with name: avguard.exe
->Detected process with name: rundll32.exe
->Detected process with name: AppleMobileDeviceService.exe
->Detected process with name: svchost.exe
->Detected process with name: btwdins.exe
->Detected process with name: kxmixer.exe
->Detected process with name: GoogleDesktop.exe
->Detected process with name: LBTWiz.exe
->Detected process with name: svchost.exe
->Detected process with name: MOM.exe
->Detected process with name: BTTray.exe
->Detected process with name: mdm.exe
->Detected process with name: ctfmon.exe
->Detected process with name: mssysmgr.exe
->Detected process with name: GoogleToolbarNotifier.exe
->Detected process with name: feedreader.exe
->Detected process with name: SMAgent.exe
->Detected process with name: svchost.exe
->Detected process with name: BTSTAC~1.EXE
->Detected process with name: 4t-min.exe
->Detected process with name: SetPoint.exe
->Detected process with name: CCC.exe
->Detected process with name: iPodService.exe
->Detected process with name: KHALMNPR.exe
->Detected process with name: alg.exe
->Detected process with name: Azureus.exe
->Detected process with name: firefox.exe
->Detected process with name: WINWORD.EXE
->Detected process with name: eqgame.exe
->Match found (PID:0xc0), but we are in 'Next' mode. Continuing search...
->Detected process with name: taskmgr.exe
->Detected process with name: avscan.exe
->Detected process with name: wuauclt.exe
->Detected process with name: msiexec.exe
->Detected process with name: MsMpEng.exe
->Detected process with name: MSASCui.exe
->Detected process with name: myseq.exe
->Detected process with name: cmd.exe
->Detected process with name: myseqserver.exe



I have Windows Defender doing a deep scan for spyware now and Avira Antivirus doing a full virus scan since nothing came up on the quick scan. Will report back on that later.

I don't think safe mode supports DX9 graphics, but I'll try anyway.

And finally, I'm not averse to uninstalling system-hooking tools such as antivirus. That's a reasonable idea.

[Syn]

HorseShoeCrab,

For the running as administrator parts you mentioned, I'm not sure if you were focusing on the eqgame.exe shortcut or the MySEQ server shortcut...but at this point, I think that MySEQ is the one that we want to have the the higher permissions. The eqgame one just needs enough permissions enabled for EQ to run properly. Adjusting permissions higher than that won't help things. (I was a bit hasty in my suggestions around this earlier.)

I'm not sure which version of Windows you're running, but if you are using Vista, you might want to try turning off the User Account Control.

Other than that though, this is getting into new territory for me. One thing that I found that may have a bit of potential is enabling some debug output on failure. Seaxouri may have more input on this though.

I must say that I'm curious now though.

Seaxouri,

It looks like GetLastError (http://msdn2.microsoft.com/en-us/library/ms679360(VS.85).aspx (http://msdn2.microsoft.com/en-us/library/ms679360%28VS.85%29.aspx)) could be helpful for this and this URL has what may be a decent example: http://msdn2.microsoft.com/en-us/library/ms686701(VS.85).aspx (http://msdn2.microsoft.com/en-us/library/ms686701%28VS.85%29.aspx)

[horseshoecrab]

I'd be more than happy to run a build that spews debug code and feed it back to you guys.

After my last reply I uninstalled:

Avira Antivirus
Windows Defender
Magelo Autoupdate (or whatever it's called)
and a couple other older programs I didn't even recognize

Yes, this is XP. I tried disabling the firewall widget that came with SP2, and I did try the most recent build of seq v1.22 and the previous version with mismatched version numbers for client and server as the administrator.

I really appreciate the help you've provided so far. I have to admit to feeling a little frustrated because I come from a reasonably solid PC background and can't figure this out on my own. Any further suggestions will be tried.

note: haven't tried the safe mode thing yet, working on my resume' atm. Yay for being laid off!

[The one]

Horseshoecrab i have the Exact same problem as your atm..

[horseshoecrab]

Still no fix, and I just uninstalled the application compatibility database v2.5 and 3.0 (one of which) EQ needed several years ago to facilitate alt-tab or some such nonsense.

Help me Obi Wan, you're my only hope.

[Seaxouri]

The problem is right there in the debug output.


->Detected process with name: eqgame.exe
->Match found (PID:0xc0). Attempting to attach...
-->Access denied.

You are not running the myseqserver with admin privileges.

I don't have Vista so I cannot tell you more than that if you are running Vista. I know others with Vista have it working, so they will have to help you out here more than I.

Basically you have to give myseqserver enough admin rights to peek into the EQ process, otherwise you are denied.

If you are running XP, I know it works fine. Thats what I use, but you must be a computer administrator for that.

You might want to try disabling your Windows Defender and/or AV (although I have never had to disable any AV before).

My gut feeling is that either you are not admin, you are running some tool that is blocking the ability to peek from process to process, or you have run something which toggled a flag inside Windows to prevent the ability to peek from process to process.

BTW: Ulunbat's problem was totally different. He had copied the game folder manually from one computer to another, which renamed the file to uppercase EQGAME.EXE. We were checking only for the official Sony executable name, which is lowercase. That fix has long been in the server (since 1.19.1 iirc), and is clearly not your problem. We find the process, we are just not allowed to look at it. It has nothing to do with MySEQ at this point. You need to find out what is blocking the myseqserver access.

It has *nothing* to do with NET.
It has *nothing* to do with offsets.

Syn, GetLastError is not going to help at all. I can see from the debug output what the problem is. All GLE() is going to give me is 'EACCESSDENIED' or something like that. Whoopeedoo. I know that already!

Here is the code:
http://seq.cvs.sourceforge.net/seq/myseq/server/MemReader.cpp?view=markup


// We found a matching process that we are allowed to open
127 RTDEBUG("->Match found (PID:0x" << pe32.th32ProcessID << "). Attempting to attach...");
128 if (OpenProcess(PROCESS_VM_READ, false, pe32.th32ProcessID))
129 {
130 // Access granted. Stop searching and set 'current' values.
131 RTDEBUG("-->Access granted.");
132 currentEQProcessID = pe32.th32ProcessID;
133 currentEQProcessHandle = OpenProcess(PROCESS_VM_READ, false, currentEQProcessID);
134 originalFilename = procExe;
135 rtn = true;
136 break;
137 }
138 else
139 {
140 // Access denied. Continue search
141 RTDEBUG("-->Access denied.");
142 currentEQProcessID = 0;
143 currentEQProcessHandle = NULL;
144 }

Clearly the call to:
OpenProcess(PROCESS_VM_READ, false, pe32.th32ProcessID)
is failing.

[Seaxouri]

Just to clarify all the gorp above.

On XP, your account is either type 'Computer Admin' or 'Limited User'. Your account type *must* be Computer Admin for this tool to work. Windows XP does not have 'Run As Administrator' options, that's Vista. Changing persmissions of the EQ game executables is totally irrelevant. Leave those alone.

Go into Control Panel -> User Accounts and make sure under your Account name is says "Computer Administrator".

If it does not, you will need to login as 'Administrator' or 'Owner' and change your account to be of type 'Computer Administrator', since you cannot do this from your own account.

If you don't know how to login to the Administrator account, you are SoL.

[horseshoecrab]

I've already logged in as administrator with the same problem.

FWIW, XP does allow you to run with different credentials. Right click the shortcut or .exe file, choose Run As and you'll have a credentials menu.

Despite all of this and having uninstalled a healthy number of apps and having killed every process possible in Windows Task Manager, I'm still not able to pass "Go."

Thanks for the help all the same.

[Seaxouri]

Run the SP trace as administrator.

From the same CMD shell, issue:
echo %username%

Then run:
myseqserver debug

> sp


Paste all the output here.

Thanks.

PS: Did you install MS Visual Studio 2008 by any chance? I read a tidbit about the OpenProcess call failing after someone installed that.

[horseshoecrab]

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\WINDOWS>echo %username%
Administrator

C:\WINDOWS>



> sp
Looking for process with name: eqgame
hProcessSnap is 0x000007D8
->Detected process with name: [System Process]
->Detected process with name: System
->Detected process with name: smss.exe
->Detected process with name: csrss.exe
->Detected process with name: winlogon.exe
->Detected process with name: services.exe
->Detected process with name: lsass.exe
->Detected process with name: ati2evxx.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: LBTServ.exe
->Detected process with name: ati2evxx.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: aawservice.exe
->Detected process with name: explorer.exe
->Detected process with name: DrgToDsc.exe
->Detected process with name: LVComS.exe
->Detected process with name: spoolsv.exe
->Detected process with name: GoogleDesktop.exe
->Detected process with name: realsched.exe
->Detected process with name: SOUNDMAN.EXE
->Detected process with name: jusched.exe
->Detected process with name: amd_dc_opt.exe
->Detected process with name: LogiTray.exe
->Detected process with name: hpwuSchd2.exe
->Detected process with name: iTunesHelper.exe
->Detected process with name: rundll32.exe
->Detected process with name: kxmixer.exe
->Detected process with name: MOM.exe
->Detected process with name: LBTWiz.exe
->Detected process with name: BTTray.exe
->Detected process with name: svchost.exe
->Detected process with name: ctfmon.exe
->Detected process with name: mssysmgr.exe
->Detected process with name: GoogleDesktop.exe
->Detected process with name: btwdins.exe
->Detected process with name: GoogleToolbarNotifier.exe
->Detected process with name: feedreader.exe
->Detected process with name: svchost.exe
->Detected process with name: 4t-min.exe
->Detected process with name: mdm.exe
->Detected process with name: BTSTAC~1.EXE
->Detected process with name: SMAgent.exe
->Detected process with name: svchost.exe
->Detected process with name: CCC.exe
->Detected process with name: iPodService.exe
->Detected process with name: alg.exe
->Detected process with name: OUTLOOK.EXE
->Detected process with name: WINWORD.EXE
->Detected process with name: wordpad.exe
->Detected process with name: eqgame.exe
->Match found (PID:0x6a0). Attempting to attach...
-->Access denied.
->Detected process with name: AMDClock-1.exe
->Detected process with name: msiexec.exe
->Detected process with name: firefox.exe
->Detected process with name: cmd.exe
->Detected process with name: myseqserver.exe
MemReader: Failed to locate process 'eqgame'
Looking for process with name: eqgame
hProcessSnap is 0x000007D8
->Detected process with name: [System Process]
->Detected process with name: System
->Detected process with name: smss.exe
->Detected process with name: csrss.exe
->Detected process with name: winlogon.exe
->Detected process with name: services.exe
->Detected process with name: lsass.exe
->Detected process with name: ati2evxx.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: LBTServ.exe
->Detected process with name: ati2evxx.exe
->Detected process with name: svchost.exe
->Detected process with name: svchost.exe
->Detected process with name: aawservice.exe
->Detected process with name: explorer.exe
->Detected process with name: DrgToDsc.exe
->Detected process with name: LVComS.exe
->Detected process with name: spoolsv.exe
->Detected process with name: GoogleDesktop.exe
->Detected process with name: realsched.exe
->Detected process with name: SOUNDMAN.EXE
->Detected process with name: jusched.exe
->Detected process with name: amd_dc_opt.exe
->Detected process with name: LogiTray.exe
->Detected process with name: hpwuSchd2.exe
->Detected process with name: iTunesHelper.exe
->Detected process with name: rundll32.exe
->Detected process with name: kxmixer.exe
->Detected process with name: MOM.exe
->Detected process with name: LBTWiz.exe
->Detected process with name: BTTray.exe
->Detected process with name: svchost.exe
->Detected process with name: ctfmon.exe
->Detected process with name: mssysmgr.exe
->Detected process with name: GoogleDesktop.exe
->Detected process with name: btwdins.exe
->Detected process with name: GoogleToolbarNotifier.exe
->Detected process with name: feedreader.exe
->Detected process with name: svchost.exe
->Detected process with name: 4t-min.exe
->Detected process with name: mdm.exe
->Detected process with name: BTSTAC~1.EXE
->Detected process with name: SMAgent.exe
->Detected process with name: svchost.exe
->Detected process with name: CCC.exe
->Detected process with name: iPodService.exe
->Detected process with name: alg.exe
->Detected process with name: OUTLOOK.EXE
->Detected process with name: WINWORD.EXE
->Detected process with name: wordpad.exe
->Detected process with name: eqgame.exe
->Match found (PID:0x6a0), but we are in 'Next' mode. Continuing search...
->Detected process with name: AMDClock-1.exe
->Detected process with name: msiexec.exe
->Detected process with name: firefox.exe
->Detected process with name: cmd.exe
->Detected process with name: myseqserver.exe


Now, your comment on Visual Studio is interesting. I recently uninstalled VS2003 in an attempt to influence any background debugger which might exist. In addition, I know for a fact that I had at one point in time in the far past installed VS2006 Express but later removed it.

Is there a way to identify the phenomenon you mentioned with VS2008 and to undo it, assuming one of my SW installations did the same thing?

[maxawesome]

Have you checked DEP?

If not, open System Properties > Advanced > Performance Options > Data Execution Prevention, and either select 'Turn on DEP for essential Windows programs and services only', or be sure to add eqgame.exe and SEQ server/client to the exception list.

[Seaxouri]

Only thing I can suggest is making another account, not using Administrator, and give that account Admin level privs. Then login with that account and try it.

After that I'm out of ideas. Clearly you have something altered on your system that noone else seems to have.

DEP should have no effect on getting access to read the process' memory. I think you're just stabbing wildly without thinking.

[Hidron]

I had this same problem on just box (WinXP Pro). It worked perfectly on 2 others I run. The box the server was not working on, the client worked fine (As long as I connected it to the server on another box). I could not seem to find anything to do that allowed access to the eqgame process. My final solution was to do a complete format/reinstall. At least I had nothing else on this system. At least it is working now.

[kkmonte774]

Could possibly be a multiprocessor/hyperthreading issue? try this:

I run XP and Win2003 and this is what I found on the interweb.

http://www.reality-xp.com/support/kn...ebase/1006.htm (http://www.reality-xp.com/support/knowledgebase/1006.htm)

I just placed the imagecfg.exe in my EverQuest directory and ran the following from my dos prompt.

imagecfg -a 0x1 eqgame.exe

One processor luvin. <3

[Seaxouri]

no. not even close. its a permission issue, not an affinity issue.

something in the registry was tweaked to not allow even admin to peek into the eqgame process. There is probably some obscure registry entry somewhere that is causing the problem that some security software set, or else some preloaded image had it set.

Default Windows installs do not seem to exhibit the problem.

It would probably take an actual MS Windows developer to tell us the setting. You would be absolutely amazed at the thousands of settings you can tweak if you load the proper applets into the control console. Its overwhelming. And once altered, the only way to undo it is to drill down to the setting again... the basic interfaces dont touch or reset those tweaks.

If you do drill down and change a setting, make sure you remember where and what it was, otherwise you will *never* find it again. Its a needle in a haystack sort of thing.

[BlueAdept]

You may want to check your group policy. There are a couple settings in there for debugging programs. Who can and who cant. That is the only thing I can think of that might be causing it.

load mmc and add group policy. You will have to spend some time looking but I know there are two settings that deal with allowing and who can run debugging programs.