Command and Conquer: Renegade Official Forums: RenGuard Client » Renguard not connecting; Worm threat occurs simultaneously

Home » Archived Forums » RenGuard Client » Renguard not connecting; Worm threat occurs simultaneously

Show: Today's Messages :: Polls :: Message Navigator

Renguard not connecting; Worm threat occurs simultaneously [message #221590]

Sat, 23 September 2006 16:47

Beta
Messages: 1
Registered: February 2006

Karma: 0

Recruit

Just tried firing up Renegade and Renguard for the first time in almost a year. Didn't work. Went through a few checks, then one of my spyware scanners gave me a worm message, then Renguard gave me an error.

The program which gave me the warning is STOPzilla. The name of the worm is Surila.B. Is it related to this? If so, what do I do... just allow it?

[Updated on: Sat, 23 September 2006 16:49]

Report message to a moderator

Re: Renguard not connecting; Worm threat occurs simultaneously [message #221715 is a reply to message #221590]

Sat, 23 September 2006 18:57

light
Messages: 988
Registered: January 2005

Karma: 0

Colonel

Yes, I believe it's a false positive.

Quote:

W32/Surila-B is a network worm which may try to send a link to itself or W32/MyDoom-W to ICQ contacts.

W32/Surila-B places the main component of itself as dx32cxlp.exe to the Windows system folder and the All Users' startup folder, and as systemst.exe to the Windows system folder. The worm also drops other components of itself to iexpl1orer.exe and SVKP.sys in the Windows system folder.

W32/Surila-B creates the following registry entry:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
iestart = <path to iexp1orer.exe>

Additionally W32/Surila-B creates a service named SVKP which causes the file SVKP.sys to be executed when the service starts, for example at system startup.

http://www.sophos.com/virusinfo/analyses/w32surilab.html

Renguard uses SVKP.sys for protection against is being decompiled by cheater (IIRC). SVKP.sys is not a danger to your system.

http://www.azupload.com/displayImage.php/setid2745.png

Report message to a moderator

Re: Renguard not connecting; Worm threat occurs simultaneously [message #221773 is a reply to message #221715]

Sun, 24 September 2006 04:35

0x90
Messages: 142
Registered: September 2006
Location: Germany

Karma: 0

Recruit

light wrote on Sun, 24 September 2006 03:57

Renguard uses SVKP.sys for protection against is being decompiled by cheater (IIRC). SVKP.sys is not a danger to your system.

yeah lol.. and it does it very well.... (not) Razz

i really dont know - since so many honest RG players have problems with svkp and since its fully 'hacked' and therefore worthless - why they dont release a non-packed RenGuard version.
perhaps the 64bit os problem will be solved with this also.
3rd party exe packers almost always cause unpredictable problems.

just my 2cents.
0x90

Report message to a moderator

Re: Renguard not connecting; Worm threat occurs simultaneously [message #221811 is a reply to message #221773]

Sun, 24 September 2006 07:24

cmatt42
Messages: 2057
Registered: July 2004

Karma: 0

General (2 Stars)

0x90 wrote on Sun, 24 September 2006 06:35

yeah lol.. and it does it very well.... (not) Razz

Hey, guess what? All of these problems will/have already been solved for the next version! Sarcasm

GunKataGaming.net

[Updated on: Sun, 24 September 2006 07:25]

Report message to a moderator

Re: Renguard not connecting; Worm threat occurs simultaneously [message #221814 is a reply to message #221811]

Sun, 24 September 2006 07:56

0x90
Messages: 142
Registered: September 2006
Location: Germany

Karma: 0

Recruit

cmatt42 wrote on Sun, 24 September 2006 16:24

Hey, guess what? All of these problems will/have already been solved for the next version! Sarcasm

ahh sorry, of course! stupid me! the high&mighty next version of renguard! the holy 1.04! when will it be released again? soon? or next wednesday?
hey.. you could always make an anticheat for duke nukem forever! THAT would be great Razz

0x90

Report message to a moderator