Author Topic: MTA Ban  (Read 2664 times)

:T.L:Suro|CO-L|

  • Guest
MTA Ban
« on: 10 01, 2022, 11:37:41 pm »
Alright so this been happening for the past couple months after upgrading my gpu and cpu. Anyone got a clue ? Please dont reply with "update your drivers" or anything random, all my drivers are updated and there is barely anything installed on my pc. I have tried reinstalling mta don't reply saying do that as well. Thank you

Show content


Heres my rig if anyone wondering I highly doubt it has anything to do with the specs but just in case

Show content


EDIT: and please dont say run an antivirus. I installed a brand new windows a couple weeks ago, with malwarebytes premium running in the background 24/7


« Last Edit: 10 01, 2022, 11:43:40 pm by Suro »

Offline IceWolf.

  • Regular Community Member
  • ***
  • Posts: 1278
  • Registered: 03/09/2015
    YearsYearsYearsYearsYearsYearsYearsYears
Re: MTA Ban
« Reply #1 on: 11 01, 2022, 12:24:40 am »
Run an antivirus

Offline GoldNugget

  • Senior Community Member
  • ****
  • Posts: 527
  • Force is meaningless without skill
  • Registered: 04/12/2013
    YearsYearsYearsYearsYearsYearsYearsYearsYearsYears
  • Group: xCode
  • Ingame: GoldNugget
Re: MTA Ban
« Reply #2 on: 11 01, 2022, 12:35:18 am »
Heres my rig if anyone wondering I highly doubt it has anything to do with the specs but just in case

Show content

nice flex



That thing iQVW64.SYS is an intel's network adapter diagnostic software running in background, afaik it isn't necessary at all and you can simply uninstall it.

Search > Add or remove programs > find IntelĀ® iQVW64.SYS in the application list > uninstall if you found it  :ez:

there are people who think and there are people who follow

Offline GoldNugget

  • Senior Community Member
  • ****
  • Posts: 527
  • Force is meaningless without skill
  • Registered: 04/12/2013
    YearsYearsYearsYearsYearsYearsYearsYearsYearsYears
  • Group: xCode
  • Ingame: GoldNugget
Re: MTA Ban
« Reply #3 on: 11 01, 2022, 01:01:34 am »
I mean fuck, I haven't tried this but there is no such shit in the application list when I search for it.

Show content

Run cmd as admin -> resmon -> see if there is a running process named iQVW64 or anything intel related.

there are people who think and there are people who follow

Offline Vampire

  • vompire
  • Non Administrative Staff
  • ****
  • Posts: 3304
  • The Undeadly Thirst
  • Registered: 17/04/2015
    YearsYearsYearsYearsYearsYearsYearsYears
  • Ingame: [CIT]Vampire
Re: MTA Ban
« Reply #4 on: 15 01, 2022, 01:16:11 pm »
@Suro, did you manage to fix it?
"Being reminded for something you worked really hard is good to your soul, and see that you left your mark behind is good to your mind" - Vampire 2017

Offline Vampire

  • vompire
  • Non Administrative Staff
  • ****
  • Posts: 3304
  • The Undeadly Thirst
  • Registered: 17/04/2015
    YearsYearsYearsYearsYearsYearsYearsYears
  • Ingame: [CIT]Vampire
Re: MTA Ban
« Reply #5 on: 16 01, 2022, 12:34:36 pm »
Okay, so start posting a screenshot of a full virus scan and Malwarebytes result please.

When you finish scanning everything I mentioned above, download and run MTAdiag. You will get a pastebin link once it finishes so you can either post it here or send me a forum PM.

Gonna try to help you asap.
"Being reminded for something you worked really hard is good to your soul, and see that you left your mark behind is good to your mind" - Vampire 2017

Offline Vampire

  • vompire
  • Non Administrative Staff
  • ****
  • Posts: 3304
  • The Undeadly Thirst
  • Registered: 17/04/2015
    YearsYearsYearsYearsYearsYearsYearsYears
  • Ingame: [CIT]Vampire
Re: MTA Ban
« Reply #6 on: 21 01, 2022, 11:41:22 pm »
Okay, so check the following paths and tell me if there's a file named iqvw64e.sys there:
- C:\Users\Your User\AppData\Local\Temp\
- C:\Windows\system32\Drivers\
"Being reminded for something you worked really hard is good to your soul, and see that you left your mark behind is good to your mind" - Vampire 2017

Offline Vampire

  • vompire
  • Non Administrative Staff
  • ****
  • Posts: 3304
  • The Undeadly Thirst
  • Registered: 17/04/2015
    YearsYearsYearsYearsYearsYearsYearsYears
  • Ingame: [CIT]Vampire
Re: MTA Ban
« Reply #7 on: 22 01, 2022, 10:49:27 am »
Then I can't see why you are getting that kick. Also your MTAdiag doesn't show the kick reason while it should.
« Last Edit: 22 01, 2022, 10:51:02 am by Vampire »
"Being reminded for something you worked really hard is good to your soul, and see that you left your mark behind is good to your mind" - Vampire 2017

Offline GoldNugget

  • Senior Community Member
  • ****
  • Posts: 527
  • Force is meaningless without skill
  • Registered: 04/12/2013
    YearsYearsYearsYearsYearsYearsYearsYearsYearsYears
  • Group: xCode
  • Ingame: GoldNugget
Re: MTA Ban
« Reply #8 on: 22 01, 2022, 03:36:46 pm »
Quote from: Dutchman101  Source link: https://forum.mtasa.com/topic/129901-ac4/  Date: March 19 2021
You're getting kicked due to a security violation. There's a driver running on your PC that is vulnerable, and as such only really used by gamehacks (cheats for other games included) and viruses/malware.

The anti-cheat kick message you should get is: UPDATE INTEL LAN/GPU DRIVER (iqvw64e.sys) // DON'T RUN HACKS FOR OTHER GAMES WHILE MTA IS OPENED

Folder location of the problematic driver file: C:\Users\YOUR USERNAME\AppData\Local\Temp\iqvw64e.sys or C:\Windows\System32\drivers\iqvw64e.sys

The vulnerable version is 1.03.0.7 (which is affected by an exploit known as CVE-2015-2291, info) only and the presence of this file on your PC can only mean 2 things:

- You have used cheats in other game(s), and either the cheat is still constantly running or installed it in a way that the hackdriver will always be running (persist, even if you remove or no longer used the cheat). Just a note, no one likes cheaters, not in any game.. if this option applies to you, just don't cheat (to avoid scrutiny & technical problems in any other game)

- Your PC is infected with a virus. Viruses like to use vulnerable drivers such as this particular one, as it facilitates important malicious functions - a signed vulnerable kernel driver is neccesary for deep system actions that viruses rely on (messing with your PC in advanced ways)

So basically, the problem is on your end. All we can do is help you with information required to identify and resolve the problem that is on your PC.

Running such vulnerable drivers (this intel iqvw64e is just 1 of many examples) is considered a violation by the anticheat of most games. In order to resolve it, you must identify the source of it (why is this hackdriver there, and actively running?) e.g perform a full virus & malware scan of your PC, and think about any cheats for any games that you may need to completely close before playing MTA. Be very aware that your PC is probably infected with a virus at the moment, endangering your online safety and data. Take it very seriously and perform full scans, or fully reinstall Windows operating system (preferably a secure, up-to-date OS like Windows 10) if you want to be entirely sure that any potential virus infection is wiped out.

Read the below spoiler if you really can't fix it (last resorts only):
Show content
1)
Eventually, there is a 0.01% chance that it's neither of those 2 options, but using a really outdated Intel LAN driver. This driver is dominated by gamehacks and computer viruses, probably no one would legitimately use a specific version from 2013 out of the tons of releases & later updates, one that happens to exactly be vulnerable. But just in case, if you cannot solve it, also install the latest version of LAN driver (select your version of Windows  there) in case your PC even has an Intel LAN adapter. If it doesn't, you clearly have a virus or persistent gamehack

2)
Manually removing the driver is the ultimate last resort option, because it doesn't guarantee the thing that keeps this vulnerable driver running, is really gone. For example, if it was a virus infection, the virus will still be there.. either with limited functionality (still unsafe) or with the ability to repair itself, e.g a lot of viruses that use vulnerable drivers to perform their functions are able to restore the driver file and start it back up. This means the problem, both with the  safety of your PC and anticheat kicks of various games like MTA, can return (almost) immediately or with a slight delay. The message is clear: you must always tackle the roots of the problem, instead of the symptoms.

If you realize this from point 2) and want to go ahead anyways, follow these instructions:


- You will observe that the driver file (in this case iqvw64e.sys in either of the earlier mentioned folders) cannot be deleted, because it says that the file is in use by something else. Files that are in use cannot be deleted, WIndows prevents it

The solution is to delete it in Safe mode. This ensures nothing is running that keeps the .sys file in use. For instructions on how to get into Windows safe mode, see these results from Google and make sure to find a specific guide for your version of Windows, the results definately contain them.

Log in to your Windows account like usual once in safe mode, and go to the folder again to now delete iqvw64e.sys. This time it should be getting deleted successfully. Then reboot your PC, back into the normal version of Windows.

If that doesn't solve the problem of anticheat kick, but you have already deleted the file in safemode, then what is described above (about viruses being able to restore the file automatically, when its missing) applies to you. You should now worry about the security of your PC and with an obvious virus infection, the safety of your data. Take it seriously, and do clean up the virus or completely reinstall Windows operating system to be entirely sure. Having skipped to "manual file removal" spoiler then was a bad idea.


Note: this was a long detailed post, because it will be used as a template reply for any cases where a vulnerable hackdriver is causing anticheat kicks.

@Suro

there are people who think and there are people who follow

Offline Hallow2

  • Junior Community Member
  • **
  • Posts: 132
  • GO NEWGROUNDS!
  • Registered: 21/03/2021
    YearsYearsYears
  • Group: FBI
  • Ingame: Hallow[FBI-MW]
  • Squad: Merryweather
Re: MTA Ban
« Reply #9 on: 22 01, 2022, 05:01:35 pm »
As GoldNugget might have stated the quote problem, the more favorable reason I could imagine is that some malicious program is running on your PC that even your antivirus can not detect itself, it might be the reason that you are getting kicked from the server. I strongly recommend you to format your computer and reinstall  to make sure that if there is any virus it will be eliminated for sure.
Law Tournament Founder - Head Staff | Ex. Deputy Director and Honorable from FBI | Ex. SAPD member - Station Officer |  Introduction | my old account Hallow