"Gatewayserver" is underattack

Results 1 to 12 of 12
  1. #1
    Apprentice UnFoRGiVeN78 is offline
    MemberRank
    Oct 2012 Join Date
    16Posts

    "Gatewayserver" is underattack

    Hello

    I believe this is a DDOS attack against my server, Take a look yourself:

    First i get this error from "Gatewayserver"



    Then,
    "SMC" service becomes "Red" and everytime i click "start service" it becomes "Red" again in 2 seconds



    I tried to replace "Gatewayserver.exe" with another one but it didn't work
    Please help, tell me what to do?

    Thank you


  2. #2
    non timebo mala ! Isoline is offline
    MemberRank
    Jan 2013 Join Date
    228Posts

    Re: "Gatewayserver" is underattack

    Quote Originally Posted by UnFoRGiVeN78 View Post
    Hello

    I believe this is a DDOS attack against my server, Take a look yourself:

    First i get this error from "Gatewayserver"



    Then,
    "SMC" service becomes "Red" and everytime i click "start service" it becomes "Red" again in 2 seconds



    I tried to replace "Gatewayserver.exe" with another one but it didn't work
    Please help, tell me what to do?

    Thank you
    its a known exploit, the fix was released here: http://forum.ragezone.com/f722/gatew...er-fix-904853/
    but i just took a look and the thread opener just editted removed the fix :S

  3. #3
    Apprentice UnFoRGiVeN78 is offline
    MemberRank
    Oct 2012 Join Date
    16Posts

    Re: "Gatewayserver" is underattack

    Quote Originally Posted by Isoline View Post
    its a known exploit, the fix was released here: http://forum.ragezone.com/f722/gatew...er-fix-904853/
    but i just took a look and the thread opener just editted removed the fix :S
    I checked this thread earlier, i don't know why he removed the fix! that's why i created a new thread so that some1 may help me.
    Thank you

  4. #4
    non timebo mala ! Isoline is offline
    MemberRank
    Jan 2013 Join Date
    228Posts

    Re: "Gatewayserver" is underattack

    Quote Originally Posted by UnFoRGiVeN78 View Post
    I checked this thread earlier, i don't know why he removed the fix! that's why i created a new thread so that some1 may help me.
    Thank you
    anyway here is the fix:
    open Gateway via Olly
    right click search for all commands: PUSH 6308 change it to any nr you want.

  5. #5
    Apprentice UnFoRGiVeN78 is offline
    MemberRank
    Oct 2012 Join Date
    16Posts

    Re: "Gatewayserver" is underattack

    Quote Originally Posted by Isoline View Post
    anyway here is the fix:
    open Gateway via Olly
    right click search for all commands: PUSH 6308 change it to any nr you want.
    It's stopped since 5 hours, I'm going to test it in case i get attacked again.
    Thank you very much <3

  6. #6
    non timebo mala ! Isoline is offline
    MemberRank
    Jan 2013 Join Date
    228Posts

    Re: "Gatewayserver" is underattack

    Quote Originally Posted by UnFoRGiVeN78 View Post
    It's stopped since 5 hours, I'm going to test it in case i get attacked again.
    Thank you very much <3
    no problem, have fun...

  7. #7
    Apprentice UnFoRGiVeN78 is offline
    MemberRank
    Oct 2012 Join Date
    16Posts

    Re: "Gatewayserver" is underattack

    The attack is back..
    I'm gonna try to apply your fix to my gatwayserver.
    i got his msg:
    "Hey *** .. i'll keep attacking ur game and make it Check 24/7 .. so let's make a deal when u come back .. and i hope when u read my msg u will remsg me .. if u care about ur game"
    Thank you
    Last edited by UnFoRGiVeN78; 23-04-13 at 05:33 PM.

  8. #8
    Apprentice Metamore is offline
    MemberRank
    Feb 2013 Join Date
    7Posts

    Re: "Gatewayserver" is underattack

    Quote Originally Posted by UnFoRGiVeN78 View Post
    The attack is back..
    I'm gonna try to apply your fix to my gatwayserver.
    i got his msg:
    "Hey *** .. i'll keep attacking ur game and make it Check 24/7 .. so let's make a deal when u come back .. and i hope when u read my msg u will remsg me .. if u care about ur game"
    Thank you
    give me ur skype if u got account on it

  9. #9
    Proficient Member pr0xy1337 is offline
    MemberRank
    Aug 2012 Join Date
    182Posts

    Re: "Gatewayserver" is underattack

    Use this gateway...
    https://mega.co.nz/#!2tpVDCbB!LTnTIx...nzkgG-phKgvvSE

    It's a GW with applied fix. Keep your original one too, because when u want to make an automatic update you will need the original gateway since the opcode that is changed in this one won't work with the original SMC.

  10. #10
    (⌐■_■) NourAyman is offline
    MemberRank
    Feb 2012 Join Date
    Behind you :PLocation
    683Posts

    Re: "Gatewayserver" is underattack

    Just change your smc port by changing the gateway port from cert. ini files
    then make sure you are only have the permissions to make moudle patch from smc not anyone else

  11. #11
    Proficient Member pr0xy1337 is offline
    MemberRank
    Aug 2012 Join Date
    182Posts

    Re: "Gatewayserver" is underattack

    Quote Originally Posted by NourAyman View Post
    Just change your smc port by changing the gateway port from cert. ini files
    then make sure you are only have the permissions to make moudle patch from smc not anyone else
    It is an exploit, getting gateway port is kinda easy with pk2 extractor... so better use the fix that I gave him I use it and I don't have any problems.

  12. #12
    Member Dizzie is offline
    MemberRank
    Nov 2011 Join Date
    82Posts

    Re: "Gatewayserver" is underattack

    There is another exploit too, which will (how to say properly...) disconnect gatewayserver from smc/cert. Works almost the same way as the other.

    Just change 631D opcode to something else and everything should be fine :)



Advertisement