POL: "No such interface supported" = virus/keylogger BEWARE

[fishstix]

So apparently, this is a good indication that you have some sort of virus or keylogger on your system. More info can be found here http://www.bluegartr.com/forum/viewt...hp?f=2&t=34205 on removal instructions. I wouldn't limit myself to doing only what this says and believe you're safe though. I'm the first I know of that got this error message and got hacked and although I didn't run a hijackthis scan, AVG picked up the virus: PSW.OnlineGames.ALLT from the file name FFloader.exe, so if your computer has been compromised, I would not only follow these instructions, but follow up with running a deep virus scan, changing your password from a clean computer, etc.

I'm used to formatting my computer often and installing everything, so that's what I did to be 100% sure my system was clean. Also, if you have your friend's logon, or your friend has yours, make sure you're clean, make sure they're clean. I had 2 of my RL friend's info stored on my computers and I used to logon frequently. Not only was I hacked, but they took both those accounts also.

If anyone cares, my friends followed my toon while they could and found it partied with an RMT'd acct-turned odqan camper. After I got my friend's acct back, there was stuff being sent to Antonella who was exping in the dunes, a day later he/she/it was mining 24/7 in Mount Z. My own char was transfered to Phoenix before I was able to regain control (and SE refuses to move me back so I'll have to pay that charge + another when I go back). A few days after I got there, I got a strange /befriend request from someone I didn't know. Cvmap or something who lived in Quicksand Caves killing random NMs there, selling off the Adaman Ores. Well, what I'm trying to say is, yeah I can almost say with complete certainty that an organized RMT group jacked my acct. Through the internet cache on my computer, I found the addresses that FFloader.exe came from and whois pointed to a location in china.



Original Post:

Lately, I've been getting this error message:
http://i127.photobucket.com/albums/p...1x/error-1.jpg

Nothing's changed on my computers that I know of recently. Nothing showed up on spyware. It happens on different computers I have at home, happens when it goes from POL to the first game screen. When I start POL a 2nd time, there's no problem. I use windower 3.3 on windows XP. I believe I don't get this problem if I don't use windower... but it's hard to live without it. It's not exactly a huge problem, just annoying that I have to start up POL twice just to log on. I just hope it's not a symptom/side effect of some larger problem.

I'll try the windower lite version, or loading windower without any plugins tonight. The only other solutions I can think of is to reinstall or if that doesnt work, format and reinstall :/ Any help or suggestions would be appreciated.

[Killgannon]

such a vague error code could mean anything =/

kinda lame theres no other details or anything

could be a video interface, or a network interface, who knows =/

[fishstix]

Video problem might make some sort of sense. This error pops up and kills POL when it goes from the POL window to pseudo full screen from windower. I haven't changed any video drivers in months, so I dunno why it'd do this unless SE ninja updated something relating to this.

[Xanthe]

I could be wrong, but isn't "Pseudo-fullscreen" mode in Windower broken? That looks like the error normally received when trying to start up in that mode.

[fishstix]

I only get this error message once when starting up. POL crashes, but the second time I start up, it works perfectly fine. Not sure if it's related... but I just got hacked and 3 accts I had access to, their PW is also changed.

[fishstix]

I ran a virus scanner on my computer that this error message came up, and sure enough PSW.OnlineGames.ALLT trojan keylogger was found. Still not 100% sure this error message is related, but if you dont regularly scan for viruses and spyware, do so if anything strange happens.

[Elipse]

Sorry to bump this but I have the exact same problem. Was any solution found? I start it once and it crashes, second time its ok.

So any clue?

[Ichthyos]

Bump. Someone I know is also getting this error, and an account he had access to was also compromised. Maybe coincidence, maybe not.

fishstix, what found the keylogger? AVG?

Edit: The person in question is also using Windower 3.3.

[Kyte]

I've started to get this error as well >=(

[Narse]

Happening to me on one of my computers as well.

[Elipse]

edit: character restore going to be needed I'll post after

[Narse]

I've done virus scans and I can't seem to find anything...

[Kiyuan98]

I had this happen last week on both of my laptops (both identical dell xps's). I havent had the message pop up ever since I turned off "Window mode" for the POL viewer. Kinda sucks since I don't like POL in fullscreen =/.

[Narse]

One of my three accounts had the PW changed yesterday, other two did not.... Ungh..

[Kyte]

Thanks, unchecking the "start POL in Windowed mode" option made it so FFXI could be played in windowed mode. Hopefully someone else finds another solution though, because POL looks kinda fugly full screen.

[Kiyuan98]

Thanks, unchecking the "start POL in Windowed mode" option made it so FFXI could be played in windowed mode. Hopefully someone else finds another solution though, because POL looks kinda fugly full screen.

very... annoying...

[Kyte]

As a side note, this solution does not work with Windower 3.4

[Eohuo]

Yo guys, I found the fix for this. Its a simple installation of a couple *.dll files. So you can keep using windower and play the game as usual with spell recast and everything.

Anyway here it is (taken from http://www.dcs-media.com/desdev/javascr ... olved.aspx):

There's a nasty JavaScript browser bug on the loose; if it hasn't gotten to you yet, it may be just around the corner. And even if this bug hasn't bitten you, you still need to worry about it, because it's probably attacking people visiting your site.

This particular creepy-crawly is the mutant offspring of a star-crossed union between a beta version of Microsoft Internet Explorer 4.0 and the browser's final release. You've met the bug if you've ever gotten the perplexing "No such interface supported" error when clicking a link to open a pop-up window using IE 4.0.

The browser chokes on this line of code:

popupWin = window.open("file.html", "remote");

The weird thing is that only some users get this error. The article specifically focuses on the case when selecting "Open in new window" when right-clicking a hyperlink won't actually open window. But product support assured me that the JavaScript window.open() problem is related, and that the following resolution, excerpted from the article, will heal all:

1. Click the Start button on the Windows toolbar, then click Run.

2. In the Open box, type regsvr32 actxprxy.dll.

3. Click OK. You should see the following in a message box:

DllRegisterServer in actxprxy.dll succeeded.

4. Click OK.

5. Click the Start button, then click Run.

6. In the Open box, type regsvr32 shdocvw.dll.

7. Click OK. You should see the following in a message box:

DllRegisterServer in shdocvw.dll succeeded.

8. Click OK.

9. Shut down and restart Windows.

It worked for me, and hopefully it can work for others.

Peace.

[Afrohatch]

Just tried that, restarted windows, and it's still happening to me

[Mafai]

see here, i posted in FFXI advanced

viewtopic.php?f=2&t=34205