PB Kicking

[Habit]

Cheers ,

A friend of mine is having problems getting kicked from BF2 servers and the message says

Unknown Windows API Function [131129]

We have no Idea what this is or why this is.

I know without a doubt he hasn't got a hack of any sort so please donot reply with that.

I have went through updating PB with him but same error still happening.

sometimes he can play several maps without any problem then poof kicked for the above stated reason.

Any Idea's on how to fix this problem would be greatly appreciated.
Its truley sad this kind of stuff happens to straight forward dedicated players.

Thanks ,
HaBiT

[Manic Depressive]

Re: PB Kicking

it is a bug in the games files. just reinstall bf2 or fix it with the play disc on add remove programs

[Habit]

Re: PB Kicking

Tried a full unistall and reinstall redownloaded Patch.. Same end result

Unknown Windows API Function [131129]

Anyone know what the heck can fix this it has become irritating to say the least.!!

[Habit]

Re: PB Kicking

Follow up on this Topic.

Ran a virus scan as suggested by PB tech support and found a Trojan .

Cleaned the sysem and all is well again.

Thanks all who posted.

[jimbob]

Re: PB Kicking

wow are you serious tht was all you had to do? i am getting this to and it is really annoying me....

- reinstall doesnt fix it lol
i will do a scan and see whats happenin - what did you find it with Habit?

[[PBSTAFF]Stuart]

Re: PB Kicking

This appears to be from a trojan back door. Specifically Trojan.Horse.BackDoor.Agent.BA, and from researching this, AVG is the only program currently identifying it. It uses a random named dll in your system32 folder. There are ways to remove it, googling returns this:

In NOTEPAD write this: @echo off SET FILE=sqll echo y | cacls c:\windows\system32\*FILE*.dll /g Everyone:f attrib -r -s -h C:\Windows\system32\*FILE*.dll ren C:\Windows\system32\*FILE*.dll *FILE*.old del C:\Windows\system32\*FILE*.old Than change the *FILE* to the filename infected and save this as REMOVE.BAT file. Run it in normal mode and the trojan BackDoor.Agent.BA is OUT.

Now, the hard part appears to be finding the name of the dll. The dll is write protected, and is unable to be deleted normally. Try the free version of AGV to tag the DLL. Open a support ticket up at EvenBalance if this is unable to fix your problem.

[Habit]

Re: PB Kicking

This appears to be from a trojan back door. Specifically Trojan.Horse.BackDoor.Agent.BA, and from researching this, AVG is the only program currently identifying it. It uses a random named dll in your system32 folder. There are ways to remove it, googling returns this:

In NOTEPAD write this: @echo off SET FILE=sqll echo y | cacls c:\windows\system32\*FILE*.dll /g Everyone:f attrib -r -s -h C:\Windows\system32\*FILE*.dll ren C:\Windows\system32\*FILE*.dll *FILE*.old del C:\Windows\system32\*FILE*.old Than change the *FILE* to the filename infected and save this as REMOVE.BAT file. Run it in normal mode and the trojan BackDoor.Agent.BA is OUT.

Now, the hard part appears to be finding the name of the dll. The dll is write protected, and is unable to be deleted normally. Try the free version of AGV to tag the DLL. Open a support ticket up at EvenBalance if this is unable to fix your problem.

As mentioned by stuart the free version of AGV virus program Google it and run a scan if your getting this error.

[jimbob]

Re: PB Kicking

thnk you soooooooooooooooo much guys - thought you, habit, were just a passer by and hadgot your solution and had just waltzed on through without revealing it rofl - cheers heaps for your help guys - downloading avg now - now does it actually fix the prob or does it just locate it? thnx guys

[[PBSTAFF]Stuart]

Re: PB Kicking

Right now, I only have a few users, and once they get it fixed, well, most like to just start playing and don't tell me exactly what happened. It seems that AVG can remove this now, or some users say so. Whether or not it removes it completely, I'm not sure. Some seem to have it being replaced from System Restore backups, so watch for reappearences.

[Habit]

Re: PB Kicking

The only thing Jombob is this didnt happen to my personal PC , it happened to afriend of mine whom I game with and have for the past 7 years.

He isnt that PC savy and I got tired of him not being able to Play so I took the day Saturday and worked on his problem over a voice program.

With the another forum directing me to the even balance form I then got to deal with Stuart who was very helpfull and directed my friend what to do.
Stuart suggested a anti virus scan and it popped up with a trojan.
AVG has an option to vault the virus and I believe thats what was done , but to be Honest Im not positive.

Either way it has solved the problem and My friend is Back gaming again.

I do understand what you mean about geting a fix and running with the answers. I wouldnt do that because I realize how much it sucks having problems like that .

Although this place was alot friendly then some other places Ive posted. I had the comment thrown at me that said delete the hack and it should work. I hate it when people just want to throw some 2nd grade answer in there with no help intended.
Im happy to say that didn't happen here. Nor with the tech support a PB.

Hey if ya would like to hook up sometime and Play some BF2 check us out at : http://www.themastersofdisaster.com/

Salute ,
Habit.

P.S. Stuart was that logfile helpful? I didnt have it sent to me . I had it sent to you direct.
Also If downloading AVG make sure you run the updater several times untill it tells you no more updates availible.

[jimbob]

Re: PB Kicking

yeah ok i think its solved - have to test now....

i used AVG to recognize the file - it wouldnt let me delete or move it (although im not sure if i tried to vault it or not) but it did give me the file name which i put in tht script and ran and vuala! no more trojan

thnks for the help guys if anything i feel sorry for any noob out there tht doesnt cruise forums and will undoubtable end up doing a reformat b4 realizing this relatively simple fix to an absolutley BS problem.... how is any1 meant to know its a trojan......

UPDATE- script nor AVG removed it - AVG did give me filename which i went and renamed manually - game works fine... laggy piece of crp though lol