Hooked module--getting kicked from servers

Discussions about UT99
Post Reply
sampson
Posts: 2
Joined: Sat Aug 13, 2016 4:33 am

Hooked module--getting kicked from servers

Post by sampson »

For the past week and a half i continue to get this hooked module that kick me from servers after only a few minutes of play time. I have tried reinstalling game several times, tried antivirus, malware, spyware, adware and that hook remains embedded. Any help/suggestions would be much appreciated.


1.<?php
2.
3.[ACEv08h]: PlayerName...: -=CoN=-sampson
4.[ACEv08h]: PlayerIP.....:
5.[ACEv08h]: OS...........: Microsoft Windows Vista/2008 x86 (Version: 6.0.6002)
6.[ACEv08h]: CPU..........: AMD Athlon(tm) 64 X2 Dual Core Processor 5200+
7.[ACEv08h]: CPUSpeed.....: 2609.272313 Mhz Measured - 2612.032761 Mhz Reported
8.[ACEv08h]: NICDesc......: NVIDIA nForce Networking Controller #2
9.[ACEv08h]: MACHash1.....:
10.[ACEv08h]: MACHash2.....:
11.[ACEv08h]: HWID.........:
12.[ACEv08h]: UTVersion....: 436
13.[ACEv08h]: Renderer.....: D3DDrv.D3DRenderDevice
14.[ACEv08h]: SoundDevice..: Galaxy.GalaxyAudioSubsystem
15.[ACEv08h]: CommandLine..: <none>
16.[ACEv08h]: KickReason...: Hooked Module
17.[ACEv08h]: TimeStamp....: 29-07-2016 / 17:44:24
18.[ACEv08h]: +---------------------------------------------------------------+
19.[ACEv08h]: | Extra Info |
20.[ACEv08h]: +---------------------------------------------------------------+
21.[ACEv08h]: BaseAddress..: 0x11000000
22.[ACEv08h]: LibraryName..: Window.dll
23.[ACEv08h]: LibraryPath..: C:\UnrealTournament\System\Window.dll
24.[ACEv08h]: LibrarySize..: 483328 bytes
25.[ACEv08h]: LibraryHash..: 532BEE3D7D03A9AF85B00E56C22BED0B
26.[ACEv08h]: LibraryVer...: UT v436 Std
27.[ACEv08h]: +---------------------------------------------------------------+
28.[ACEv08h]: | Hook Description |
29.[ACEv08h]: +---------------------------------------------------------------+
30.[ACEv08h]: HookType.....: IAT
31.[ACEv08h]: ImportNum....: 0
32.[ACEv08h]: Expected.....: 0x745A32A1 -> COMCTL32.dll!o:17
33.[ACEv08h]: Found........: 0x724345C1 -> COMCTL32.dll!InitCommonControls+0x0000
34.[ACEv08h]: +---------------------------------------------------------------+
35.[ACEv08h]: | Screenshot Status |
36.[ACEv08h]: +---------------------------------------------------------------+
37.[ACEv08h]: Success......: TRUE
38.[ACEv08h]: FileName.....: ../Logs/ACE/Shots/[ACEShot] - ___-=CoN=- Freestyle Sniper____2016.07.29.17.44.25_DM-![OMA]MarriedWchildren_-=CoN=-sampson.jpg
39.[ACEv08h]: +---------------------------------------------------------------+
User avatar
Barbie
Godlike
Posts: 2792
Joined: Fri Sep 25, 2015 9:01 pm
Location: moved without proper hashing

Re: Hooked module--getting kicked from servers

Post by Barbie »

Sorry, IDK anything about ACE, but
sampson wrote:16.[ACEv08h]: KickReason...: Hooked Module
...
28.[ACEv08h]: | Hook Description |
...
32.[ACEv08h]: Expected.....: 0x745A32A1 -> COMCTL32.dll!o:17
33.[ACEv08h]: Found........: 0x724345C1 -> COMCTL32.dll!InitCommonControls+0x0000
if you do a web search for "ACE" and "COMCTL32.dll!InitCommonControls" you may get some answers.

<EDIT>
Hint: COMCTL32.DLL is not a game related file but a windows system file. So have a look at your other installed programs.
</EDIT>
"Multiple exclamation marks," he went on, shaking his head, "are a sure sign of a diseased mind." --Terry Pratchett
Higor
Godlike
Posts: 1866
Joined: Sun Mar 04, 2012 6:47 pm

Re: Hooked module--getting kicked from servers

Post by Higor »

Do you have some gaming/driver software that's supposed to enhance user experience or something?
Looks like some form of runtime patcher that hooks into games for this same reason.
User avatar
anth
Adept
Posts: 257
Joined: Thu May 13, 2010 2:23 am

Re: Hooked module--getting kicked from servers

Post by anth »

This is a false positive but a very weird one. Try running the game in compatibility mode by right clicking your UT.exe shortcut and selecting Windows XP in the compatibility list.
sampson
Posts: 2
Joined: Sat Aug 13, 2016 4:33 am

Re: Hooked module--getting kicked from servers

Post by sampson »

Higor I don't have anything like that running.

anth, I tried the compatibility mode and still running into same problems. I reinstalled all of the ACE software as well. This is a butt kicker man. Do you have any other ideas?

Thank you all for your help, truly appreciated.
User avatar
Barbie
Godlike
Posts: 2792
Joined: Fri Sep 25, 2015 9:01 pm
Location: moved without proper hashing

Re: Hooked module--getting kicked from servers

Post by Barbie »

sampson wrote:Do you have any other ideas?
If your operating system supports a start with minimal driver and system programs loaded, I'd try this. If ACE accepts you then, I'd reactivate components step by step to see which one causes the hook.
"Multiple exclamation marks," he went on, shaking his head, "are a sure sign of a diseased mind." --Terry Pratchett
User avatar
Chamberly
Godlike
Posts: 1963
Joined: Sat Sep 17, 2011 4:32 pm
Personal rank: Dame. Vandora
Location: TN, USA
Contact:

Re: Hooked module--getting kicked from servers

Post by Chamberly »

Screenshot program? Saw 1 reported on Snagit.
Image
Image
Image Edit: Why does my sig not work anymore?
User avatar
sektor2111
Godlike
Posts: 6403
Joined: Sun May 09, 2010 6:15 pm
Location: On the roof.

Re: Hooked module--getting kicked from servers

Post by sektor2111 »

So I don't see posted if you did a check of both files: Yours-Installed and the one original from CD. A MD5 hash check would confirm if your file is being screwed or not or if reading Drive containing file returns wrong bytes. Because if you have it screwed for some reason it would be better to copy original overwriting what you have. If this doesn't help then... I must think at other thing... definitely you need a process hacker application to see what exactly does run in background and why.
User avatar
anth
Adept
Posts: 257
Joined: Thu May 13, 2010 2:23 am

Re: Hooked module--getting kicked from servers

Post by anth »

The cause for this kick is not file corruption. Your window.dll seems to be in pristine state. What's happening here is the Operating System is doing something unexpected. Have you tried to play on any servers that run ACE v0.9c?
SC]-[WARTZ_{HoF}
Adept
Posts: 426
Joined: Tue Feb 21, 2012 7:29 pm

Re: Hooked module--getting kicked from servers

Post by SC]-[WARTZ_{HoF} »

I highly doubt there are any game servers currently running ACE v0.9c. If you need to test this issue against v9c let me know I can set it up fairly easy.
Image
Image
Image
Post Reply