[Next Message in Time] | [Previous Message in Time] | [Next Message in Topic] | [Previous Message in Topic]

Message ID: 17365
Date: Wed Apr 5 16:51:29 BST 2000
Author: Cyr, Thierry
Subject: new policy and stuff


thought i'd share this with you all, its burning up the necro mailing list
reguarding the EULA.

Rakka/Minkin
Sol Ro


> >From Caster's Realm message boards:
> _________________________________________
>
> I have a program that monitors all file disk activity done through the
> windows kernel. When I read the new patch message, this peaked my
curiosity
> and had to check what EQ was doing. They going to scan me, I'm going to
see
> what, well some of it anyway
> Heres some odd lines.. I don't know much about this sort of thing, but
maybe
> the more experienced can make something out of it. Of course it just might
> be crap that I'm making a big deal over when its nothing, but here goes
>
> I added a * and how many lines I saw in a row for the certain command for
> when I saw many of the same line in a row. I did this so I didn't spam as
> much as I already am =)
>
> Note: Some of the offsets/lengths changed for each of the consecutive
> read/seek commands but i didn't post the differences.
>
> Eqgame FindOpen D:\EVERQUEST\MEMORY.TXT NOTFOUND
> Eqgame Delete D:\EVERQUEST\MEMORY.TXT NOTFOUND
>
> eq trying to dump memory contents to a text file then delete it? no biggie
> here if it is
>
> Here comes the stuff that made me decide to post...
>
> Eqgame Attributes C:\WINDOWS\TEMPORARY INTERNET FILES SUCCESS
GetAttributes
> *4 lines of this
>
> Eqgame Attributes C:\WINDOWS\TEMPORARY INTERNET FILES\DESKTOP.INI SUCCESS
> GetAttributes
>
> Eqgame Attributes C:\WINDOWS\COOKIES SUCCESS GetAttributes *2 lines
>
> Eqgame Attributes C:\WINDOWS\HISTORY SUCCESS GetAttributes *5 lines
>
> Eqgame Attributes C:\WINDOWS\HISTORY\DESKTOP.INI SUCCESS GetAttributes
>
> Eqgame Attributes C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5 SUCCESS
> GetAttributes
>
> Eqgame Attributes C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5 SUCCESS
> GetAttributes *3 lines
>
> Eqgame Open C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
> SUCCESS CREATENEW OPENEXISTING READWRITE DENYNONE
>
> Eqgame Seek C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
> SUCCESS Beginning Offset: 0 / New offset: 0 *3 lines
>
> Eqgame Close C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
> SUCCESS CLOSE_FINAL
>
> Eqgame Open C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
> SUCCESS CREATENEW OPENEXISTING READWRITE DENYNONE
>
> Eqgame Seek C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
> SUCCESS Beginning Offset: 0 / New offset: 0 *3 lines
>
> Eqgame Attributes C:\WINDOWS\COOKIES SUCCESS GetAttributes
>
> Eqgame Attributes C:\WINDOWS\COOKIES SUCCESS GetAttributes *3 lines
>
> Eqgame Open C:\WINDOWS\COOKIES\INDEX.DAT SUCCESS CREATENEW OPENEXISTING
> READWRITE DENYNONE
>
> Eqgame Attributes C:\WINDOWS\COOKIES\INDEX.DAT SUCCESS Set Modify
>
> Eqgame Seek C:\WINDOWS\COOKIES\INDEX.DAT SUCCESS Beginning Offset: 0 / New
> offset: 0 *3 lines
>
> Eqgame Close C:\WINDOWS\COOKIES\INDEX.DAT SUCCESS CLOSE_FINAL
>
> Eqgame Open C:\WINDOWS\COOKIES\INDEX.DAT SUCCESS CREATENEW OPENEXISTING
> READWRITE ENYNONE
>
> Eqgame Attributes C:\WINDOWS\HISTORY\HISTORY.IE5 SUCCESS GetAttributes *3
> lines
>
> Eqgame Open C:\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT SUCCESS CREATENEW
> OPENEXISTING READWRITE DENYNONE
>
> Eqgame Attributes C:\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT SUCCESS Set
> Modify
>
> Eqgame Seek C:\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT SUCCESS Beginning
> Offset: 0 / New offset: 0 *3 lines
>
> Eqgame Close C:\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT SUCCESS CLOSE_FINAL
>
> Eqgame Open C:\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT SUCCESS CREATENEW
> OPENEXISTING READWRITE DENYNONE
>
> Eqgame Seek C:\WINDOWS\HISTORY\HISTORY.IE5 INDEX.DAT SUCCESS Beginning
> Offset: 0 / New offset: 0 *3 lines
>
> Eqgame Read C:\WINDOWS\HISTORY\HISTORY.IE5\INDEX.DAT SUCCESS Offset: 0
> Length: 0 **20 LINES!!!
>
> Eqgame Attributes C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5 SUCCESS
> GetAttributes *3 lines
>
> Eqgame Attributes C:\WINDOWS\TEMPORARY INTERNET
> FILES\CONTENT.IE5\DESKTOP.INI SUCCESS GetAttributes
>
> Eqgame Attributes C:\WINDOWS\HISTORY\HISTORY.IE5 SUCCESS GetAttributes *3
> lines
>
> Eqgame Attributes C:\WINDOWS\HISTORY\HISTORY.IE5\DESKTOP.INI SUCCESS
> GetAttributes
>
> Eqgame Seek C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
> SUCCESS Beginning Offset: 0 / New offset: 0 *9 lines
>
> then RIGHT after those
>
> Eqgame Read C:\WINDOWS\SYSTEM\RASAPI32.DLL SUCCESS Offset: 131072 Length:
> 4096 *2 lines
>
> Eqgame Read C:\WINDOWS\SYSTEM\TAPI32.DLL SUCCESS Offset: 106496 Length:
> 4096 - 2 lines
>
> then randomly later on I keep seeing 3 lines of this here and there:
>
> Eqgame Seek C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\INDEX.DAT
> SUCCESS Beginning Offset: 0 / New offset: 0
>
> EQ reading internet history and cookie files?! Whats up with that? If
theres
> some useful info for an Internet game in the history/cookie folders then
say
> it here, however tiny.. I dont want to start something huge, because this
> might mean nothng.
>
> I use microslop IE explorer if you didn't notice. Didn't try this with
> netscrape yet.
>
> I started the file monitor right before I clicked the EULA agree button. I
> then went to the server select, chose my server, then when I got to
> character select screen I kept hitting escape until I got to desktop to
look
> at the log. I might have missed something, after all I was looking through
a
> log that had over 49000 file commands recorded =P
>
> ---------------------------------------------
>
> -----Original Message-----
> From: Jeff Burgess [mailto:jburgess@...]
> Sent: Wednesday, April 05, 2000 9:58 AM
> To: 'EQ-Necromancers@egroups.com'
> Subject: RE: [EQ-Necromancers] Re: EULA
>
> Another related post I've found on the official boards:
> --------------
>
> Ajax,
> Of course you can decline at any time, but you will be unable to log into
> EQ if you don't agree.
> However, to get at the heart of your concern let me assure you that we
> could care less about anything that isn't going to interfere with EQ.
> We aren't Big Brother and we're not sending back a list of sites you've
> been browsing, or anything else for that matter. Specifcally we have
> technology that can find the signatures of programs that are known to be
> hacking tools. If you have those tools, that's fine. Just don't run them
> when you're playing EQ. That's all we are saying.
> John Smedley
> President and CEO
> Verant Interactiv, Inc.
> .