Forums Logo


Welcome Guest ( Log In | Register )

4 Pages V  1 2 3 > »   
Closed TopicStart new topic
> Blocked O/s Privileges : 4fd
Sturm
post 6 Mar 2005, 12:10 AM
Post #1


Newbie
*

Group: Members
Posts: 24
Joined: 31-October 03
Member No.: 2,429




Today, Sat Mar 5 2005, Punkbuster Server version 1.50 was released.
Also, Punkbuster Client version 1.53 was released.

I get kicked from servers with the message:
"Blocked O/S Privileges : 4fd"
I have no idea what 4fd refers to.

I prefer to run my games as a non-administrator. I advise everyone else to do the same.
The EvenBalance FAQ lists 5 privileges that are required:
http://www.evenbalance.com/index.php?page=faq-q3.php

Debug Programs
Load and unload device drivers
Manage auditing and security log
Modify Firmware environment values
Profile Single Process

I have double checked that these privileges are enabled for this game user account.
I have run spy-ware checkers.
The obvious assumption is that a new privilege is required, one which is not documented.

If anyone has a clue to what this might be, please inform.

User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Omnix
post 6 Mar 2005, 12:13 AM
Post #2


Life Member
Group Icon

Group: PsB Retired Staff
Posts: 11,049
Joined: 22-August 04
From: UK
Member No.: 20,627





Also read http://www.punksbusted.com/forums/index.ph...wtopic=6074&hl=

If it is another privilege level then we don't know it yet, however we have contacted EB about it and are awaiting a response.

This post has been edited by Omnix: 6 Mar 2005, 12:25 AM
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Bloodwolf
post 6 Mar 2005, 01:12 AM
Post #3


Newbie
*

Group: Members
Posts: 1
Joined: 5-March 05
Member No.: 27,617





Yes im getting the same error now every time I run quake 3 on the limited account. "Restriction: blocked o/s privileges: 4fd" is getting annoying as I already checked out every other protocol regarding the "Inadequate o/s privileges" error and Im still getting this. And I dont want to have to run q3 under admin everytime I wanna play. :angry:
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Wolf
post 6 Mar 2005, 01:25 AM
Post #4


Regular
***

Group: Members
Posts: 90
Joined: 2-February 03
From: Montreal
Member No.: 95





eheheh... so now we find out who's been running the game with a lesser account. Same here... We can only wait for a reply, and additional info as to what needs to be adjusted permission-wise to settle this. Playing under a full non-restricted administrator account is not an option for me. There are just too many dishonest server operators out there.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Johnnie
post 6 Mar 2005, 11:21 AM
Post #5


Life Member
Group Icon

Group: PsB Senior Staff
Posts: 12,728
Joined: 15-April 03
From: UK
Member No.: 203





Nothing has changed with the Admin aspect of PunkBuster, it still requires the 5 items listed below:

# Debug Programs
# Load and unload device drivers
# Manage auditing and security log
# Modify Firmware environment values
# Profile Single Process

If you have followed the FAQ on EB site, and you still have issues; then there is probably some other software that is blocking it.

Raise a web ticket with Even Balance and quote the 3 digit code you received when kicked.

https://ssl.evenbalance.com/troubleticket/index.php?game=q3a
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
cptcalamari
post 6 Mar 2005, 08:23 PM
Post #6


Newbie
*

Group: Members
Posts: 4
Joined: 6-March 05
Member No.: 27,636





QUOTE(Johnnie @ 6 Mar 2005, 12:21 PM)
If you have followed the FAQ on EB site, and you still have issues; then there is probably some other software that is blocking it.


I'm trying to play CoD, but the problem seems to be the same. I have none of the mentioned programs, and also nothing that comes close to doing what these things seem to do. I haven't changed the setup over the past six months, only today I got the new PB version auto-installed. Boom. It breaks.

QUOTE
Raise a web ticket with Even Balance and quote the 3 digit code you received when kicked.


I tried that, telling them that I have none of these programs and all the correct user privileges set, but I got just the canned responses telling me to check for these programs and the privileges. It was quite obvious that they didn't even read what I wrote.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Johnnie
post 6 Mar 2005, 08:25 PM
Post #7


Life Member
Group Icon

Group: PsB Senior Staff
Posts: 12,728
Joined: 15-April 03
From: UK
Member No.: 203





:dntknw: Not alot we can do to help im afraid, its their software and they keep the workings of it a secret for good reasons. I can only suggest to keep submitting updates to your ticket.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Veire
post 6 Mar 2005, 09:14 PM
Post #8


Never Logs Off
*******

Group: Members
Posts: 3,197
Joined: 29-March 04
From: Behind Blue Eyes.
Member No.: 5,384





QUOTE(cptcalamari @ 6 Mar 2005, 08:23 PM)

I tried that, telling them that I have none of these programs and all the correct user privileges set, but I got just the canned responses telling me to check for these programs and the privileges. It was quite obvious that they didn't even read what I wrote.
*



try sending another support ticket but this time send them a "hijackthis" log too. load up the game as normal and the normal apps you would use and then run hijackthis. it will list your processes.

example as of now, this my log.

QUOTE
Logfile of HijackThis v1.99.1
Scan saved at 21:08:50, on 06/03/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
F:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
C:\Program Files\RedLine\Taskbar.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
F:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\ABIT\ABIT uGuru\uGuru_Event_Receiver.exe
F:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\redline\gameutil.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
G:\Program Files\Valve\Steam\Steam.exe
F:\Program Files\Winamp\winamp.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Jonathan\LOCALS~1\Temp\Rar$EX00.984\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.iolfree.ie:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [ABIT uGuru] C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [RedLine Taskbar] C:\Program Files\RedLine\Taskbar.exe
O4 - HKLM\..\Run: [InCD] F:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "F:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\RunOnce: [GrpConv] grpconv.exe -o
O4 - HKCU\..\Run: [RemoteCenter] C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe
O4 - HKCU\..\Run: [Steam] "g:\program files\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: gameutil.exe.lnk = ?
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ua_lsp.dll
O16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} (IntraLaunch.MainControl) - file://E:\SuperCD\IntraLaunch.CAB
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - F:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005\RpcSandraSrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


this is a spyware checker, but DON'T delete everyone thing is shows up. go to a tech forum for advice on what to delete.

but send your log to eb along with any other data you have, they may be able to help you more knowing that stuff your running on your computer.

link: http://www.spywareinfo.com/~merijn/downloads.html

look for "hijackthis" mid-way through.


5 mins later: hehe just deleted a virus :D , hooray for active scanning and anti-virus software.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Sturm
post 6 Mar 2005, 10:01 PM
Post #9


Newbie
*

Group: Members
Posts: 24
Joined: 31-October 03
Member No.: 2,429



I uninstalled ZoneAlarm and Mcafee AntiVirus, no difference was observed. These do not appear to be related to the problem.

"Blocked O/S Privileges" does mean blocked. I tried running as admin with one of the five privileges disabled. The kick message was something like "Inadequate Permissions" with no trailing number. Completely different error message.
The problem is not a missing privilege, but instead the inability of Punkbuster to verify the existing privileges status when logged on as a non-admin.

I believe that Microsoft has tightened up on the Microsoft Windows LSASS (Local Security Authority Subsystem Service) access, because of security concerns.
http://securityresponse.symantec.com/avcen...tent/10108.html

At this point I see no method of running Punkbuster enabled games in a non-admin account. It will have to be up to Evenbalance to determine if the admin level account is actually needed for cheat prevention.

User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Omnix
post 6 Mar 2005, 10:22 PM
Post #10


Life Member
Group Icon

Group: PsB Retired Staff
Posts: 11,049
Joined: 22-August 04
From: UK
Member No.: 20,627





Are there any common factors here like Service Pack 2 on Win XP?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post

4 Pages V  1 2 3 > » 
Closed TopicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 

- Lo-Fi Version Time is now: 9th September 2010 - 05:52 PM
Skin Designed (c) by Rooq.net, All Rights Reserved.