Zuitana

the battle continues, with an infected dashost.exe sitting in windows/WinSys at 94 kt, and me shotgunning down any and all connections, and trying 2 download windows updates that would fix the rogue file. currently typing this on my laptop from a phone connected usb connection. im not enjoying this time at all, my laptops discord is 100% hijacked as process, and i can't re-establish control over it. although, i can fully monitor it on my phone.

And after finally gaining access 2 task manager i was greeted by a windowskeskeytys process translating as windowsprevention using up 100% of the processor. Big surpise there. It almost immediately went down significantly and 2 2.3% and keeps bouncing around task manager, in order 2 prevent itself from being shutdown. System was also there, operating ntosknl, which when attempting deletion requires our old friend, yup! You guessed it, TrustedInstaller. When looking at other suspect files, i noticed 3 com surrogates running from dllhost. Upon deletion? TrustedInstaller.

And since whoever was responisble knew that there is absolutely nothing more it can do, it had significantly slowed down my cheap shit laptop, and tries hiding the folder in winsys where it's hidden, so that comodo can't quarantine it again. And now when trying 2 be deleted, it pretends 2 need that requires admin priviledges, of SYSTEM despite me being the admin with no other users present.

After cutting lose it's remaining life lines of the infected dasmhost.exe after i read online on how 2 dispose of it, and it once again in last ditch effort cuts my internet access upon realizing that im updating Windows. Fortunately, 1 update got past the download phase and is trying 2 install itself. I will keep you guys posted on the situation as it continues developing.

Oh look, downloading a program that would supposedly fix my dasmhost.exe, smuggled in dasmhost.exe onto laptop after it snuck onboard after being transferred from my phone. And instead of being in system32 folder, whoever tried reasserting control knew that the jig was up, and in desperation tried hiding it in the c:/windows/WinSxS/amd64_micrsoft_windoews-o...(it gets cut off in the search bar afterward, thanks windows 10) was up 2 it's old tricks by inserting an inbound system connection, several scvhost.exe files running and trying 2 access culauncher.exe which is the control at comodo, in order 2 do more damage.

The very fact that i was lying, or not trying get Access would be counterproductive at best, and worst would entirely undermine my entire threads existence, extensive details, evidence, analysis, speculation and effort in problem solving. It just wouldn't logically make any sense, unless it was it was a really bad prank. Which it isn't, as im not even that type of person.

Yet, what would i have gain instead of playing on a pso server, which is something i'd rather do?

Well, after a long and drawn out battle, i finally found the culprit: dasmhost.exe, at 93.5kt (that's the finland version known as kilotavu), and it had asserted complete dominance over the system, and after the battle was over, repeatedly tried messing with my internet, while using a system through an igmp connection, whatever that is, and trying 2 maintain control with multiple scvhost.exe files running. At that point i had enough, and promptly handed comodo an arrest warrant, and dasmhost.exe was promptly arrested, taken into custody, and trialed, which was a show trial, and permanently placed into quarantine, as killing via deletion required permission from trusted installer, despite being a Microsoft Windows service product. Afterword, i was free once again, but my laptops internet no longer functions.

Well lads,i think i finally figured it out. looks like someone kept messing with comodos auto-contaiment, and used it 2 make a containment procedure that the all applications and set them as malicious, and were 2 be blocked. that would explain why the connections were never allowed, as ephinias client got me 2 my ban message as soon as it was removed. so, i promptly changed the password on the settings, 4 all the good that it will do me. some interloper keeps accessing my cheap sh*t laptop as either an inbound or outbound connection, using either ip, tcp or udp 2 access it. the rulesets that i put in place 2 detect it's entry was fully wiped as well, which made me do a lot of work setting up a minefield. it wasn't fun. i should be able 2 access the server now, just need 2 test it.

or that the distant host name is unable 2 be figured out

well, i went 2 my comodo's firewall settings, and turned it off. then got treated with this message afteword. http://www.mediafire.com/view/k3odfgoj6la8fdn/you try figuring this shit out..png# from what i can understand, the files.txt is missing on the update server side, and refuses my connection.

*sigh* the patch server just doesn't like me anymore. im going 2 check my faithful watchdog, comodo, and turn it off if turns up 2 c if that's causing it or not.

and cause the launcher was updated, i made a false assumption, and after digging up that link, it buries up the evidence. and before anyone asks, here's the source where i found it. that would have been very helpful 2 know btw, yet nobody pinpointed that issue.

and cause of this link below, i can't prove that the id registered does not exist error exists. you wanna know why? cause print screen doesn't actually save a screenshot during login. https://www.phantasystaronline.net/forum/index.php?/account-management/account-recovery/ why is that you may ask? cause the account was fixed with that link several hours back, meaning i can no longer backtrace the issue. otherwise i would provide evidence on it, just like everything else.

the link is stupid easy 2 obtain, just click left click the link itself, and select copy link destination. as 4 the installation, it's literally dumped 2 the default location: the c:/ultima PSOBB. i have not messed aroud with it.

or well, password recovery.

if that was the case, then why was the id NOT REGISTERED upon login? the site itself told me that the ingame account was good 2 go. just admit that your system f*cked up. as 4 the forum account recovery, on the it's nowhere stated that it is indeed 4 forum account recovery, not ingame. oh what? i didn't notice the hint at the link that says forum? who the h*ll expects that when the page is a blank account recovery? you keep assuming fault with my familiarity with your of system, that im supposed 2 know everything, when it differs from every other service.

remember, your system gave me the verification email, which i did verify. and the account creation page told me everything was fine, and that i could login. which, spoilers: it wasn't.

There was no mistake on my end, the system responsible 4 it's creation messed up. You'll get nowhere blaming me on that. This was the link that was responsible 4 the thought process that the account was deleted. How the h*ll was i supposed 2 know it's not responsible 4 account recovery, when your system differs from every other site that i use? https://www.phantasystaronline.net/forum/index.php?/lostpassword/

you guys really do insist on the fact that i forgot my details, which is simply not case. Remember, the account didn't temporarily exist upon login, but fixed itself after i tried account recovery, which proves there was an error after the account was created. Please don't try 2 shift the blame of your system on me.

and now the download server is giving me sh*t and keeps f*cking over every download attempt i make. This is just what i need.

nothing more i enjoy than having 2 babysit my downloads 2 make sure that they don't cr*p out on me midway through. it's not like i don't have anything better 2 do. no sir.

oh looky. the installer got updated. im honestly not surprised. goodbye hours work, hello bullsh*t. and the download abruptly stopped with no f*cking reason. AGAIN. f*ck my life.

more like broken login credintals initially. oh well. time 2 if the update server connection cr*aps out on me again. wish me luck. yup, it didn't do sh*t. guess it's time try downloading a new copy of ultima.

yup, still fails 2 connect 2 update server. Tha'ts highly unusual. gonna try and burn the current installation, and try installing again. i am NOT spending another 13 minutes at most trying 2 download the installer just incase it was updated recently.