(SD #11 EJFA) Help

[DGC94]

i need help with this problem, i never used cheat and it insists on staying.

pastebin.mtasa.com/999993546

[SpecT]

Welcome to the Forums!

Your situation seems to be similar to this one.

From the logs there is a process called injector.exe which is probably triggering the anti-cheat system.
Try with stopping the process and try again to join a server.

If this is the cause of this error just delete the file after locating it (if you need help with that can use the topic below to see the instructions).

Edited April 24, 2021 by SpecT

[DGC94]

I look for processes to finish and I can't find it, I found the address he is trying to delete and the message saying that it cannot be deleted because it is open appears, I cannot finish the process or delete it.

[SpecT]

If it's logged from MTADiag then you should be able to find to process in Task manager. Did you try the following instructions?

(From the other thread)

Open Task Manager, go to Details tab and look for a process called "injector.exe".
You have to select it and then stop it with the button End task.
If you want to stop it from starting up again (if it starts up with your PC) you can right-click on it and click the "Open file location" option to go to its directory and rename/delete it.
Of course you will have to stop it first before you rename or delete it!

Edited April 25, 2021 by SpecT

[Enanebrio]

El 25/04/2021 a las 04:23, SpecT dijo:

Si se ha registrado desde MTADiag, debe poder encontrar para procesar en el Administrador de tareas. ¿Probaste las siguientes instrucciones?

(Del otro hilo)

Abra el Administrador de tareas, vaya a la pestaña Detalles y busque un proceso llamado"inyector.exe".
Tienes que seleccionarlo y luego detenerlo con el botón Finalizar tarea.
Si desea evitar que se inicie de nuevo (si se inicia con su PC) puede hacer clic con el botón derecho en él y hacer clic en la opción"Abrir ubicación de archivo" para ir a su directorio y cambiar el nombre / eliminarlo.
Por supuesto que tendrá que detenerlo primero antes de cambiarle el nombre o eliminarlo!

Todavía recibo el mismo error, pero abro el administrador de tareas, detalles y no puedo encontrar el proceso del inyector.exe ahora cuál es la causa??

 

http://pastebin.mtasa.com/999993605

[SpecT]

@Enanebrio
You still have it running even twice!

Please make sure you look for injector.exe and not inyector.exe !

Edited April 26, 2021 by SpecT

[DGC94]

Espect irei responder na minha língua, consegui desde já agradeço sua atenção.

Eu conseguir resolver o erro, era um vírus trojan tão poderoso que infectou meu windows defender que não deixava deletar o vírus, e ainda máscarava ele no painel de processos.

Resolvi baixando o antivírus kapersky cloud free que de imediato encontrou a causa e mandou para o limbo.

Muito obrigado !!!

Há 41 minutos, Enanebrio disse:

Todavía recibo el mismo error, pero abro el administrador de tareas, detalles y no puedo encontrar el proceso del inyector.exe ahora cuál es la causa ??

 

http://pastebin.mtasa.com/999993605

Se não usava um antivírus assim como eu que confiava no windows defender, acho bom tentar baixa o kapersky cloud free ele resolveu meu problema, que era um vírus.

Por isso achei estranho, nunca usei trapaça no MTA e o erro era esse.

Edited April 26, 2021 by DGC94

[Dutchman101]

The injector.exe is a virus on your PC, this file: https://www.virustotal.com/gui/file/5de4e2b07a26102fe527606ce5da1d5a4b938967c9d380a3c5fe86e2e34aaaf1/detection

.. and should be located in this folder: C:\Users\USERNAME\AppData\Local\Temp\csrss\injector\

Because it interferes with MTA, it causes the kick. Many viruses would try to do things like modify the memory of any other process, games included, so the kick is logical. Run a full antivirus & malware scan to be safe again.

From translating your last reply i get that your virus came back, well, it applies to another file as well.. this one: https://www.virustotal.com/gui/file/3414ddda2d8e2d44f7e33cf513de0c6a10d593e0358ad55586657d42682ffb5c/detection "u20200626.exe" which is in that same folder. All files in that folder are probably part of the virus, so be aware for a full cleanup by your scanner.

In fact, your PC is virus-ridden, there's more infected virus files in other folders like C:\WINDOWS\rss\, such as fake csrss.exe (not a real Windows file as the name implies) which in reality is https://www.virustotal.com/gui/file/7d688d0d0c2047aead4e8a686c61dc0c86533f4ce6654598d789fb72dc3e8b53/detection - these virus files are ready to cause a kick once  you've cleaned up the other viruses, you gotta take firm action to ensure your safety as well. I would advise to just reinstall Windows (without keeping anything, the viruses may have literally spread to any files it can seek and infect) as with so many viruses, you cannot trust your OS anymore. Not all scanners will find everything.

[Dutchman101]

On 24/04/2021 at 23:09, DGC94 said:

I look for processes to finish and I can't find it, I found the address he is trying to delete and the message saying that it cannot be deleted because it is open appears, I cannot finish the process or delete it.

Manually deleting files that belong to a virus, obviously isn't the proper way to get rid of a virus infection. You'll have to use a good virus scanner capable of detecting and fully removing these virus types..

Viruses can protect these files against removal, simply move them elsewhere when attempted, or automatically repair (put back) its own files if tampered with. This is why specialized removal (Antivirus product) is important, so all traces and implants of the virus really are gone.

So the instructions given by @SpecT also aren't recommended

@DGC94 if even after all of this you are still unable to remove all virus infections from your PC, I would advise you to contact a computer repair shop or to ask for further help on a dedicated PC tech support forum (which we aren't). We sort of have reached the limit here. MTA technical support doesn't specialize in virus removal, hehe.