Game Troubleshooting

Restarting process and switching windows identity

Zerosu — Thu, 02 Jul 2009 01:57:43 GMT

When I open up a new game a program starts with it called game gard (anti hack program), however when this program opens blink gets the below error and decides to restart the process. Once the process is restarted my windows Identity gets switched and I have to logout and log back in to get my normal favorites/desktop icons.

Description: Blink detected a suspicious system call.
Program: C:\WINDOWS\explorer.exe
Reason: KERNEL32.DLL!VirtualProtect
Action: Restart process

Is there any way to stop this from happening? Right now i have to turn off the system protection to stop it from happening.

HAWX

modelrockettier — Tue, 09 Jun 2009 21:59:29 GMT

I can not for the life of me, get hawx multiplayer working. I realize that hawx does its multiplayer really trippy and different from a lot of games, but I can not get it working regardless of everything I have tried.

I reinstalled blink earlier today and during the short period that blink was uninstalled, i tested it and the hawx multiplayer worked fine (this is how I know that it is a blink issue, and not an issue with the game or my router). I have not had any problems with any of my games other than punkbuster on america's army (which was solved simply by allowing traffic to remote UDP port 1716). Wolfenstein Enemy Territory, America's Army, Call of Duty 4, multiple steam games, and many other games all work fine after simply allowing them at the prompt.

But hawx is still not working, I have tried turning off the blink firewall, turning off the system protection, the api protection, intrusion monitoring, turning off everything, shutting down blink, adding a firewall exception for all of the hawx ports, adding the entire hawx program files folder to the kevlar exceptions in the apiex.ini, and it is still not working, it seems the only way to fix it is to uninstall blink. I also have blink set to log all denied traffic and most everything else and the log threshold is 0, and nothing is logged, the multiplayer just still is not working.

Kevlar Exclusions (POST YOUR EXCLUSIONS HERE)

Blue1978 — Tue, 19 Jun 2007 01:15:00 GMT

If anyone is having to exclude applications from Blink's protection engine (by modifying the "apiex.ini" file) please post them here.

World of Warcraft

greenwapiti — Thu, 14 Jun 2007 11:41:44 GMT

I installed Blink Personal and updated to v.3.0.10 yesterday. I love the product so far, but seem to have had very high latency in certain internet communication, even when an application firewall rule has been established to ensure that the communication is being allowed. For instance, the reported latency of my PC's communcation with the World of Warcraft servers is extremely high, making the game unplayable at the moment, even after allowing all protocols to all remote IPs for the application. I don't want to "break" my Blink protection by allowing too much just to see if it helps! Any advice?

hey

alexa_alexa — Sun, 09 Mar 2008 15:04:10 GMT

I just log in here so...can u tell me what are u currently playing?

Star Wars Galaxies (AV False Positive Being Fixed)

Blue1978 — Sat, 17 Nov 2007 15:35:24 GMT

Just general information from my support portal for everyone else to see. It is Moreless FYI for anyone that "may" be playing the online game Star Wars Galaxie. Thanks eEye for helping fix this!

--------------------------------------------------

On 11/4/2007 6:08:21 PM you wrote:

I am unsure whether or not this is a false positive or not. I have been playing Sony's Star Wars Galaxies, MMO and Norman finds one of the executables "Bugtool.exe" to be malicious. Norman will quarantine the file, however, everytime I log onto my game, it updates and readds any missing files that it finds. The "BugTool.exe" happens to be one of these. This is the alert I received by Norman:

Malware Name W32/Zlob.gen61
Description [ General information ] * **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: ANALYSIS@NORMAN.NO - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**. * File length: 458838 bytes.
Triggered by C:\\Program Files\StarWarsGalaxies\BugTool.exe

---------------------------------------
Log Entries:

Event ID: BLINK-MAL-205
Severity: High
Description: Blink has found a malware application
Virus found: W32/Zlob.gen61
Item found: C:\\Program Files\StarWarsGalaxies\BugTool.exe
Action: Quarantine
Alert: Yes
Detected by: Sandbox
Name: W32/Zlob.gen61
Behavior: * File length: 458838 bytes.
Second Action: Delete
Category: Malware

Event ID: BLINK-ENG-202
Severity: Medium
Description: Blink has disinfected the system after malware was detected
Quarantine Location: 01C81F4A-A3FD1F98-0-W32/Zlob.gen61
Action: Quarantined
Item Found: C:\\Program Files\StarWarsGalaxies\BugTool.exe
Alert: No
Name: W32/Zlob.gen61
------------------------------------

I am wanting to know if someone can look at this file and actually tell if it is in fact malicious or not. Considering it is from Sony, anything is possible! I have attached the executable in the BugTool.zip file and the password is "Blink".

Thank you.

On 11/5/2007 10:50:37 AM eEye Digital Security wrote:

Hello Jeffrey,

Thank you for the files. I have forwarded this issue to engineering. I will keep you posted as I receive feedback.

Best Regards,
Jon

On 11/15/2007 12:29:33 PM eEye Digital Security wrote:

Hello Jeff,

Norman has notified us to let us know that the false positive will be fixed in the next signature update. Thanks!

Best Regards,
Jon

On 11/16/2007 7:37:00 PM you wrote:

Cool thank you for your help. You may close this ticket.

--------------------------------------------------

Lag When Playing Halo, and Other Issues

AMT — Sun, 10 Jun 2007 01:56:16 GMT

I just started using Blink, and I like it alot. However, there are a few problems with Blink and some of my games.

The first is with Battlefield 2 (or any other game that uses PunkBuster). PunkBuster kicks me from the server when I'm running Blink. I found out that by disabling Application Protection and restarting my computer the problem is fixed. It would be cool if you guys could figure out what particular part of Application Protection conflicts with PunkBuster and disable/fix it or write to PunkBuster and have them write an exception to their software for Blink (although they usually don't).

The second is with Halo. It runs fine but it lags horribly in multiplayer. It isn't connnection lag because my ping is pretty decent. I am assuming Blink is having trouble scanning all the data and is taking to long to send it back to the server and visa-versa. Disabling Blink entirely is the only way it seems to fix the problem. Also, I remember Application Protection (when I had it enabled) shut down one of the Halo processes because it thought the app was trying to control another process or something. I don't exactly remember - I was never able to figure out how to fix it.

Oh, and I'm running Blink 3.1 Beta.

halo crashing at microsoft video

xero1000 — Tue, 14 Aug 2007 23:44:56 GMT

I played Halo: Combat Evolved on the PC about a week ago at most, and it worked fine. However when i ran it today, it worked fine up until where I skipped through the Microsoft video at the beginning. When I pressed escape to skip it, it keeps replaying 2 frames of the video over and over. However, the sound has progressed to the menu music and if i move the mouse, I can hear it going over the buttons. I can even start a new game, with enough guesswork. However I still can't see anything, It's still the 2 frames. I've reinstalled Halo and it's doing the same thing, and I haven't installed anything new since last week.

I have a GeForce 7600 GS, up to date drivers for it as far as i know, not that it should matter since i haven't changed drivers since last week.

Question on Kevlar

dkasler — Mon, 16 Jul 2007 05:35:18 GMT

Does Kevlar work as well as disabling application protection all together or better? I've been having a problem since installing Blink, that all my games + Ventrillo and Team Speak are all lagging... Disabling application protection DOES NOT HELP. I have to disable Blink all together for the lag to stop. Its not a matter of system resources. My machine can more than handle the load and works just fine on local apps.

Will Kevlar solve this?

Civilization III Gold Edition will not run with blink

atpenn — Sun, 15 Jul 2007 03:14:46 GMT

I am trying to get Civilization III Gold Edition to run under blink. Every time I start it I get an application alert, and the program is killed. The log indicates I can disable protection for this program by putting an entry in the apiex.ini file, which I did, with the following line

"C:\Program Files\Civilization III Gold Edition\Civ3PTW\*";;Kevlar;0

This however does not solve the problem, regardless of if I put quotes or not on the path, regardless of restarting blink or rebooting or any other combination. The only thing that remotely worked was changing system protection to monitor and log only which does allow the program to start and generates a ridiculous number of events in the log. What is wrong with this picture ?

The blink version is 3.1.1.1631

Blink and Gametap

Virgil Woodfield — Thu, 14 Jun 2007 01:24:18 GMT

I have been trying to get gametap to cooexist with blink, but have had little success.

I turned on "log denied traffic", gave gametap.exe and the gametap\updater.exe full permission in the application firewall and still the only way I can get gametap to run is to disable blink.

I dislike having to disable blink but my kids really want to play gametap (which is much more cost effective than buying hundreds of pc games).

Any suggestions on what else to configure?

Thanks in advance for any help you can offer.

ZUMA Delux

JLM — Thu, 14 Jun 2007 22:29:00 GMT

After installing Blink Personal my game Zuma Delux stopped working. A copy of the event log follows:

Event ID:	BLINK-APP-100
Severity:	High
Description:	Blink detected a suspicious system call. If you believe this application is not malicious, you can add it to a list of approved applications in the Config\apiex.ini file using this format 'FilePath;[Optional MD5];Kevlar;0'
Reason:	Non-executable exception handler
Action:	Terminate Process
Program:	C:\Program Files\Yahoo! Games\Zuma Deluxe\Zuma.exe
Alert:	Yes

I added the following to the apiex.ini file [*Zuma.exe;MD5;Kevlar;0] but the game will still not run. If I disable application protection the game will run.

Anyone have any suggestions on what to do or add to the line in the ini file?

Thanks for any help.

Please post any PC game comments or suggestions within this forum.

eeyesupport — Wed, 13 Jun 2007 22:32:12 GMT

Post tips or tricks for some of your favorite games regarding integration with Blink Personal or Blink Neighborhood Watch Edition. It would be constructive also to put the game title or game utility such as (Mame, Kali, Quakeworld etc) in the title. Thanks!

"Kevlar" (Excluding Applications from Blink's Application Protection Engine)

Blue1978 — Mon, 11 Jun 2007 06:44:29 GMT

Depending on your system's configuration, some applications (especially games) will just not function at all with Blink for one reason or another. You may get en error in Blink's log that has this for the description:

"Blink detected a suspicious system call. If you believe this application is not malicious, you can add it to a list of approved applications in the Config\apiex.ini file using this format 'FilePath;[Optional MD5];Kevlar;0' "

If this is the case, you can choose exclude it from being protected under Blink's Application Protection Engine. If you did decide to exclude something you first go to the "apiex.ini" file which is located in the Config file folder inside the main Blink folder.

eEye's Post on it: http://forums.eeye.com/forums/t/116.aspx