Log in

View Full Version : How To Block ASD Attacks


Dermo
Apr 1, 2006, 01:31 PM
go to www.downloads.com and download process guard. Once downloaded and installed, go to protection tab. Once under protection tab, go to add app. Look under the system32 folder and find drwtsn32(.exe). Now under the little block thingies, don't authorize it to read, modify, or terminate. Block it from reading, being modified, or being terminated. Now this evil little file won't be able to terminate jj2. The only downside is it doesn't block long name, or laser crashing so you'll need to run a filter. But if you have a filter running, this file can be set to terminate jj2. Now no longer can it. Another downside is if you have a locked up program, it won't be able to terminate it. You'll need to launch process guard and remove the termination protection from that locked up file. Well here you go. How to block your jj2 client from crashing when a filter's on. see www.freewebs.com/jj2stuff to join my server (when up) and stuff!

Birdie
Apr 1, 2006, 02:06 PM
There is already a filter to block ASD attacks.

NovaStar
Apr 1, 2006, 03:18 PM
Oh? Howcome we never heard of this before?

Torkell
Apr 2, 2006, 03:19 AM
Just to clear things up:

drwtsn32.exe is a part of windows designed to work out why a program crashed. By default, if a program crashes the system will run drwtsn32, which will then save the current state of the program (registers, call stack, memory, etc.). This information can then be used to find where the program crashed and often why.

It's not a good idea to let a program continue running after it has crashed, because what happens next is unpredictable. It could work fine, or it could start randomly deleting files.

ChaosRR
Apr 2, 2006, 04:16 AM
Didn't hacker's use WPE now? I haven't got any violations anymore