Help - Search - Members - Calendar
Full Version: Unknown Windows Api Kick
PunksBusted.com > Game Specific Forums > Battlefield Series > Battlefield 2
[PBSTAFF]Stuart
There are going to be more an more API kicks likely in the near future. I think we should look into a Sticky, started here, and then copied to all games. These API checks will be rolling out to all PB games, and like the Insuffecient OS Privs, will be subject to reoccuring lapses as trojans/virii/spyware make their rounds. Tools and instructions for each type of vio would be very useful to start compiling into one spot.

API Kick 131124:

Known cause: BF2Amp
Solution: Don't use it

Known cause: PowerStrip
Solution: Get the latest version. Old versions of PS cause this kick.

API Kick 131126:

Known cause: Researching - Contact Evenbalance Support for troubleshooting - EvenBalance Support Ticket
Solution: Unknown

API Kick 131127:

Known cause: Researching - Contact Evenbalance Support for troubleshooting - EvenBalance Support Ticket
Solution: Unknown

API Kick 131129


Known cause: Trojan.Horse.BackDoor.Agent.BA
Solution: ID and remove it using AVG or other AV program (AVG recommend, currently only AV detecting this 11/28/05)

In NOTEPAD write this:
CODE
@echo off SET FILE=sqll echo y | cacls c:\windows\system32\*FILE*.dll /g Everyone:f attrib -r -s -h C:\Windows\system32\*FILE*.dll ren C:\Windows\system32\*FILE*.dll *FILE*.old del C:\Windows\system32\*FILE*.old

Than change the *FILE* to the filename infected and save this as REMOVE.BAT file. Run it in normal mode and the trojan BackDoor.Agent.BA is OUT.

Now, the hard part appears to be finding the name of the dll. The dll is write protected, and is unable to be deleted normally. Try the free version of AGV to tag the DLL. Also check out http://www.symantec.com/.../backdoor.agent.b.html

Known cause: Proxy.L Trojan
Solution: Remove with AV or Trojan remover

Known cause: Trojan horse Downloader.Agent.AL
Solution: Remove with AV or Trojan remover

Known cause: Trojan horse PSW.Delf.2.A
Solution: Remove with AV or Trojan remover

API Kick 131133:

Known cause: Ventrillo Voice Overlay - Possibly other overlay programs. (ATI tool tray from Omega Drivers suspect)
Solution: Disable overlay program

Known cause: DxTweaker
Solution: Disable DxTweaker program

Known cause: Older TSO - Causes a "Missing/Corrupted API" kick
Solution: Update TSO to latest build

API Kick 131135 - disabled as of 12/01/05

Known cause: Tiny Firewall
Solution: Uninstall it for a quick fix. Looking for options to disable API hooking and keep it installed.

Known cause: Kaspersky
Solution: possible options

Known cause: Ad-Aware
Solution: appears to load files on boot or run that stay active. Reboot and do not enable to play.

API Kick 131136

Known cause: Running BF2 in compatability mode
Solution: Disable compatabilty mode, do not run other programs in compatability mode at the same time.
Silz
Comments split off to keep this sticky specific and up to date
billyzane1
Yes, I get kicked every time now, ever since we updated to new PB files yesterday..

Get unknown windows API kick, banned for ZERO minutes. Can jump right back in, then 5 minutes later it happens again.

I have over 300 hours playin with no prob and now this. How frustrating. I am not turning off my firewall to play. I know I have a virus or two I cannot get rid of..

One is called justsched.exe

Maybe that is it.

Anybody have and suggestions?
Terrynator
Try your pm billyzane1
We do keep records you know.
Geordie
QUOTE(billyzane1 @ 29 Jan 2006, 03:00 AM) *

One is called justsched.exe

Maybe that is it.

Anybody have and suggestions?

rolleyes.gif Thats just Java runtime updater, not a virus laugh.gif rtfm.gif

QUOTE(Terrynator @ 29 Jan 2006, 09:13 PM) *

Try your pm billyzane1
We do keep records you know.


laugh.gif
billyzane1
QUOTE(Geordie @ 29 Jan 2006, 09:19 PM) *

rolleyes.gif Thats just Java runtime updater, not a virus laugh.gif rtfm.gif
laugh.gif



Thanks. We are all squared. lol
billyzane1
FYI, found out is was 131133. I was running ventrilo overlay AND ATI tool overlay. Disabled both and I can play!!!!!!!!!!!!!!!!

Thanks for the help.
PistolPete
Ventrilo has an overlay? That's news to me. no.gif
Cpt. Obvious
I am not understanding why DX tweaker should have anything to do with Punkbuster. The only thing it does is enable Triple Buffering when Vsync is enabled. It is in no way a cheat and there are so many people using this program so they can run their LCD's with Vsync on and not have to worry about tearing. I would personnaly like to thank Punkbuster for screwing up this great program and now I and many others have to deal with tearing images on LCD monitors. DX tweaker worked great until this latest update. rtfm.gif
PistolPete
Complain to the makers of DXTweaker, it's does something that PB doesn't like. wink.gif
Cpt. Obvious
QUOTE(PistolPete @ 31 Jan 2006, 06:33 PM) *

Complain to the makers of DXTweaker, it's does something that PB doesn't like. wink.gif



It seems it would be easier for PB to add it to a known list of programs. Even if they rewrite DxTweaker to work with PB who is to say that at a later date PB will not start kicking users again.
Geordie
QUOTE(Cpt. Obvious @ 1 Feb 2006, 12:14 AM) *

I am not understanding why DX tweaker should have anything to do with Punkbuster. The only thing it does is enable Triple Buffering when Vsync is enabled. It is in no way a cheat and there are so many people using this program so they can run their LCD's with Vsync on and not have to worry about tearing. I would personnaly like to thank Punkbuster for screwing up this great program and now I and many others have to deal with tearing images on LCD monitors. DX tweaker worked great until this latest update. rtfm.gif

FYI, ATi Tool does exactly the same thing wink.gif
Nikita
We've had kicks on our server #131133.

What we've learned is that TSO version 1.7.7 Build 57 & version 1.7.5 Build 55 are causing this kick. Not to say those are the only one's, but just the ones we know of right now.

People changed to version 1.7.8 Build 58 and all is well.

Note: Oopsie, this is actually for kicks received in JO, not BF2. I didn't see this in JO though. Maybe an Admin can move it? I'm too lazy to do it myself.
kc2keo
well,

i've taken your suggestions into mind and I still have had no luck. I am retrieving the Unknown Windows API Function 131124 when joining a 32 size map. I have not tried the 16. The large 64 size maps allow me to stay connected so far. I dont know what else to try as of now. I am still investigating the issue.

DogGunn
I was getting kicked with the error "131133" because I'm using Microsoft Windows Vista.
Nothing else is running.
Splattergnejs
help.gif I am "trying" to play BF2 but after about 10-20 sec in the game I get kicked out with a PB message saying "Unknown Windows API Function [131125]" and thats it!

I have been able to play BF2 for hours and hours before but I have not tried it since April, May earlier this year without any problems whatsoever.

Any help would be much appreciated - Thank You!

I am running WinXP, 91.31 Nvidia drivers P4 3.0, 2 GB RAM, Creative Live! 5.1

/Splattergnejs
Splattergnejs
QUOTE(Splattergnejs @ 12 Aug 2006, 10:47 AM) *

help.gif I am "trying" to play BF2 but after about 10-20 sec in the game I get kicked out with a PB message saying "Unknown Windows API Function [131125]" and thats it!

I have been able to play BF2 for hours and hours before but I have not tried it since April, May earlier this year without any problems whatsoever.

Any help would be much appreciated - Thank You!

I am running WinXP, 91.31 Nvidia drivers P4 3.0, 2 GB RAM, Creative Live! 5.1

/Splattergnejs


What I have done so far is;

Manually updated Punkbuster via PBSETUP
Repatched BF2 with full 1.3 patch
Played Call of Duty 2 MP online for about three hours without any problem (COD2 uses the same version of PB according to www.punkbuster.com)

...but still I get the API error as soon as I try BF2 - arghhhh

I will now try to uninstall the whole BF2 + SP and reinstall the game.

Best Regards,

SG

---------------------------------------------------

OK - I have now uninstalled everything old BF2 related from my computer and have made a fresh install of BF2 - then I updated BF2 to 1.3 using the full patch and ran pbsetup.exe to manually update Punkbuster - I login to a server (holding my thumbs very hard...) and gets kicked exactly the same way as before!!! AARGH - frustrating!

I have ticketed evenbalance three days ago - and hopefully they will get back very soon - until then - ANY further suggestions, solutions, proposals are more than welcome!

Tnx for your support so far!

Grateful regards,

Splattergnejs
oracom
QUOTE(Splattergnejs @ 13 Aug 2006, 01:30 PM) *



OK - I have now uninstalled everything old BF2 related from my computer and have made a fresh install of BF2 - then I updated BF2 to 1.3 using the full patch and ran pbsetup.exe to manually update Punkbuster - I login to a server (holding my thumbs very hard...) and gets kicked exactly the same way as before!!! AARGH - frustrating!

I have ticketed evenbalance three days ago - and hopefully they will get back very soon - until then - ANY further suggestions, solutions, proposals are more than welcome!

Tnx for your support so far!

Grateful regards,

Splattergnejs


I'm having the exact same problem. It only started Yesterday, but its driving me crazy.

I have also reinstalled BF2 and update 1.3

I have even deleted my profile and BF2 Registry entries prior to reinstalling.

I have updated PB via PBSETUP.exe

I have reinstalled my Video Card Drivers (ATI Catalyst 6.7)

I have disabled my firewall, Ventrilo and Xfire

I have opened a case with Evenbalance - but no reply as of yet.

I dont understand it - i have about 200 hours logged and this is the first time it has ever happened. How many others are affected?

oracom
SOLVED IT!!!!!! After applying some common sense - i realized that the only thing that had changed from one day to the next were the windows updates.

So guess what ... I uninstalled the windows updates and voila! it worked. For all those who are experiencing the same problem - here are the following updates I uninstalled. I would asssume that only 1 of the following 7 updates conflict with Punkbuster, however I dont have the time to go back and check which one.

Here are the updates - try uninstalling them and see if it works. I have also relayed the information to evenbalance technical support - so that they have the fix in their KB.

*Security Update for Windows (KB917422)
*Security Update for Windows (KB921398)
*Security Update for Windows (KB922616)
*Security Update for Windows (KB920683)
*Security Update for Windows (KB920670)
*Cumulative Security Update for Internet Explorer (KB918899)
*Security Update for Windows (KB921883)

Have fun, and Bf2 responsibly!
Oracom
Splattergnejs
Dear Oracom,

I am not able to try your solution until tonight since I am at work for the moment, but I am eager to try - I am so grateful for your assistance and I will update this post as soon as I have tried it out!

Best Regards,

Splattergnejs biggrin.gif
Splattergnejs
Dear All,

OK - I was too optimistic - I have uninstalled every KB mentioned below BUT it did not help me - I still get kicked out with the same message. I have also run a utility called RootkitRevealer to see if I have any rootkit infections, but I can only find quite "normal" entries in the report - please, please - assist me with further assistance on what part of my system that is the most probable cause to the 131125 message - right now it feels like I am stumbling in the dark hitting on every little shadow that might pop up in my own mind!

I am soo grateful too you all in your assistance - THANK YOU!

Best regards,

Splattergnejs
oracom
QUOTE(Splattergnejs @ 16 Aug 2006, 02:55 AM) *

Dear All,

OK - I was too optimistic - I have uninstalled every KB mentioned below BUT it did not help me - I still get kicked out with the same message. I have also run a utility called RootkitRevealer to see if I have any rootkit infections, but I can only find quite "normal" entries in the report - please, please - assist me with further assistance on what part of my system that is the most probable cause to the 131125 message - right now it feels like I am stumbling in the dark hitting on every little shadow that might pop up in my own mind!

I am soo grateful too you all in your assistance - THANK YOU!

Best regards,

Splattergnejs


Splattergnejs - I'm sorry to hear that it didnt work. The message I was receiving was Error 131131 - your message seems to be different.

For error 131131 - I was able to figure out that Security Update for Windows (KB917422) is the update that conflicted with Punkbuster. Once I removed it, it worked.

I have also been in communication with evenbalance. They have informed me that Kasperky Security Software could also be messing with people's BF2

QUOTE
"You don't by any chance run Kaspersky security software of any kind do you? We're trying to get to the bottom of this, and we think there may be a connection with the Microsoft updates messing with Kaspersky software as well. "


If you have the software, I would try disabling the process /service and see if that helps.


I hope that helps someone.

Oracom
Splattergnejs
Dear Friends,

It seems I might have found the solution via using a fantastic peace of software called "Autoruns" (http://www.sysinternals.com/) in which you can see EVERYTHING that is automatically loaded in your computer (and it is really A LOT of stuff)

Systematically I turned of different autostarting applications and tried to run BF2 to see whether or not I would be kicked out and suddenly I could play! After further investigation I found the single application that caused the problem and it was an application for hijacking sound and transfer it to an Apple Airport Express (quite niched app. but super-great for its purpose) - the name is "Airfoil" and is shareware from http://www.rogueamoeba.com/airfoil/windows/ - I had a BETA version 2 running and I have not yet tried the full version (and I do not intend to test it before the weekend, cause now I am roing enjoy great BF2 games 24/7 ok.gif )

Tnx for your support - itīs been extremly valuable!

Best Regards,

Splattergnejs
LostSoul
I've been trying to play battlefeild 2 and i have been kicked for unknown API function 131133 and i dont use and overlay programs or DxTweeker and im not quite sure what you mean by TSO (teamspeak overlay?) please help i really want to play bf2 and i dont want to have to keep reinstalling it help.gif helpsmilie.gif

Thanks
LostSoul
S}GQ{F
Hey guys, anyone get the 131130 error? I noticed alot of other errors but I didnt see this one on here nor did I see anyplace to look up that error and what it means.. i tried all the "back door" tools on here and my system is clean. I have never downloaded a cheat.
JiiPee
Global or Hardware bans are controlled by Even Balance and not PunksBusted.com, we are unable to assist with any queries in relation to this, please contact Even Balance direct.
Tobbe
I get kicked of this everytime "unknown windows api function" 131144
it since I updated my pb.. have play this game a long time now and never been kickt by pb before.. Need some helps
JiiPee
QUOTE(Tobbe @ 17 Jan 2007, 09:08 PM) *

I get kicked of this everytime "unknown windows api function" 131144
it since I updated my pb.. have play this game a long time now and never been kickt by pb before.. Need some helps


Contact EB, instructions above your own post. We can't help you with that issue.
BOHICA
QUOTE(Tobbe @ 17 Jan 2007, 02:08 PM) *

I get kicked of this everytime "unknown windows api function" 131144
it since I updated my pb.. have play this game a long time now and never been kickt by pb before.. Need some helps



It seems this is a common problem and has been for quite some time. I have been searching for a solution here and haven't found any yet. Have been playing Quake for a while now without any problem. Just rebuilt my computer and did a clean install. Everything fine until a punkbuster update yesterday. then all of a sudden I get the Unknown Windows API Function 131144 error. I don't have any other software installed, no viruses, no tweeks, not anything. I obviously have all the needed windows securuty updates installed.

Can some one please, please tell me where I can find the info to fix this problem. I'm sure enough people have had it and resolved this issue, I just can't seem to find it here. I have also checked EB and can't find the solution there either.

please let me play Quake again, help me resolve this issue

Many thanks

BOHICA
runner23
Did you read the post right above yours that says Contact Even Balance

http://www.evenbalance.com
Sorian
Hey all, I got an Unknown Windows API Function [131134].

After contacting Even Balance I got this:
QUOTE(Even Balance)
We have confirmed that the DVD copyprotection "Alpha-DVD" can cause this kick. If you have recently watched a DVD (e.g. "Mr. & Mrs. Smith" for German customers) on your computer that installed this copyprotection, you need to uninstall it first.

Please use the following tool to remove the software
http://www.sophos.com/products/free-tools/...otkit/download/


I am adding this info to this thread so if anyone else should get this error, they will know how to fix it.
Claude Kenni
I was playing Q3 and i get kick from API 131146... whats that means?
The_Barbarian
Hello im also now since installing vista a API 131144 problem in SOF2

ive played sof2 since it came out back around 6 years ago and have used it on win98 win2000 winxp and never had a problem

since installing vista i cant adjust the gamma it doesnt move and im getting kicked in 1 min by PB

athlon 4200
Asus m2n32-sli delux
2gb geil ddr2 800
nvidia 7600 gt

on my other machine
atlon 3500
gigabyte k8ns ultra 939
1gb geil ddr 400
radeon x800

i have no problems at all the gamma changes and the game doesnt crash

im going to put money on the nvidia 7600 gt being the problem once i get a chance and by a radeon card to try i will post and let people know
pcshiningstar
hello i am shiningstar and i play in PARTYCAFE.
but if i go play on the server i can play 5 sec and then i got this fould:

server disconnected - has been kicked via punkbuster (for 0 min)
RESTRICTION: unknown windows API function [131144] help.gif help.gif

what must i do so i dont get that ennymoreGoogle: help
Urlor J'kron
While playing BF2 PB has been kicking me with the following error: Unknown Windows API function [131134]. I see that a previous poster has already resolved his issue by removing some copyright protection software using a rootkit removal tool. I used the same tool and found nothing.

I think I'm having this issue because I recently installed Blink. I have try disabling it and completely turning it off but to no avail. I'm afraid I may have to uninstall and restore my registry. I was hoping someone here might know of some other option I could pursue. I have already submitted a ticket to Even Balance Technical Support, but it is a bit earlier to expect an answer back just yet.

Thanks for any help.
Urlor J'kron
I managed to find a solution.
  1. In Blink go to View>Options...
  2. Click the Application Protection tab.
  3. Select Monitor and log only.
  4. Reboot (this is required).
  5. Turn off Application Protection.
=BEL=Obscureboulle
Hello everybody!!

I've read the threads about the problems and how to solve some of them. It's been interresting....
Here's my problem with my number one game....
I bought myself a new monitor today, plugged it in, installed a driver, (wich i did not need, but hey, you never know.... dntknw.gif ). It's a samsung 206bw 20'. tft. So far ,so good. Now, when i wanted to play BF2 on my new screen, i got kicked from our server by pb with a API Kick 131133...... wink.gif wink.gif
After browsing the net for a while, and some help from my fellow clanmembers, i came here. This seems the place to be asking for help.
I updated pb manually, i removed everything from the driver to some extra software wich came with the monitor.
As far as i know, everything is the same as yesterday....or is it??
I can't play BF...... helpsmilie.gif helpsmilie.gif help.gif help.gif

If there are any overlay programs still running, and causing a problem...why didn't they do this earlyier on??

I'm not running ventrilo, but TS.

Help pls!!!

Thx in advance!!


Greetz!!!!
=BEL=Obscureboulle
Nobody got an idea???

Greetz!!!
runner23
QUOTE(=BEL=Obscureboulle @ 29 Jul 2007, 04:42 AM) *

Nobody got an idea???

Greetz!!!

If this started happening after the driver for the monitor was installed, logic would suggest removing it.

I have a samsung wide screen at home and there wasn't a driver for it that I remember but then I never install drivers unless I know for sure what there for and to be honest a monitor that takes a driver is stupid in "my" opinion.

Is there anything else you may have installed security software wise?
Badslats
Just popping in to add something to the topic.

I was kicked for this: Punkbusterkick (RESTRICTION: Unknown Windows API Function [131133])

and i solved it this way...


Uninstalled teamspak overlay and file named winsys2.exe (click me) (it looks that it was a trojan). So uninstaled the two .exe's and ran ccleaner. Shutting down the two processes was not enough...

I HOPE it doesn't come back.... (keeps fingers crossed) and helps some other people...


Maybe you can add it the you can add it to the sticky part of this topic

FieldMouse
You should add that running BF2 from a shortcut in steam (resulting in the use of the Steam Community Overlay) causes the API Kick 131133 error too.
Geordie
QUOTE(FieldMouse @ 17 Oct 2007, 09:32 PM) *

You should add that running BF2 from a shortcut in steam (resulting in the use of the Steam Community Overlay) causes the API Kick 131133 error too.

But you must also remember that some TF2 servers try to change the GUI Overlay as well...
MajorDisaster
I'm getting this error in Call of Duty 4 Steam/Valve version. IPB Image
thanks for any suggestions

Restriction: Unknown Windows API Function [131136]

OS:: Vista x64
CPU: Intel Core 2 Duo E6600
Motherboard: Abit AB9 pro
Memory: 2GB DDR2 PC2-5400 SpecialOps Edition
Video Card: Evga 8800GTX
Sound Card: Razer Barracuda AC-1 7.1
MajorDisaster
QUOTE(MajorDisaster @ 26 Nov 2007, 08:39 AM) *

I'm getting this error in Call of Duty 4 Steam/Valve version. IPB Image
thanks for any suggestions

Restriction: Unknown Windows API Function [131136]

OS:: Vista x64
CPU: Intel Core 2 Duo E6600
Motherboard: Abit AB9 pro
Memory: 2GB DDR2 PC2-5400 SpecialOps Edition
Video Card: Evga 8800GTX
Sound Card: Razer Barracuda AC-1 7.1


Update:
Disabling steam community fix worked for me.

1. Right clicking the steam icon in the bottom right hand corner.

2. Click settings.

3. Go to the tab in-game.

4. Uncheck the box Enable Steam Community In-game.

5. Hit ok.
Royd
This worked for me

Just change the compatibility to run with windows server 2003.

("Quote From www.crimsonsoldiers.org")

I think this is caused by something hooking into an API function.

This can be done by both cheats and also genuine programs that users have on their computers. From a little bit of searching it seems common for ppl using vista.

Someone running COD on Vista has mentioned on a punksbusted forum that if they ran that in windows server 2003 compatibility mode (right click on the exe and see what's under the compatibility options) and that solved it for them. Other than that you might try turning off as many unnecessary programs as possible.

If you have a 32 bit version of your OS available rather than the 64 bit version try that too, as sometimes these errors seem to be caused by 64 bit Os's trying to run 32 bit compatible drivers.

Let us know how you get on.

Hemo

("End Quote")
Cpt_Kirk_Ger
I am kicked from my own BF2 server with #131134.
pbsvc.exe says everything would be ok.
I DO NOT use BF2amp, I use openSuSE 10.3.
Same problem with CoD and UO.

At the moment I see only few possible solutions:
- Dont play games
- Using a crappy OS for playing
- Disabe Punkbuster at the server
- Punkbuster stuff solve this problem

Guess what I would prefere...
Trexer
Contact evenbalance if you aren't cheating, false positives are possible.
Not Luck
M8

The best is DON'T Update Punkbuster when it works Fine biggrin.gif

Punkbuster only update whit Valation Problems:D
PINPOINT
I have found a soulution for myself for the Windows API Function 131136, which I had while running Frontines Fuel of War, not BF2. After many attempts to track down the cause of this, I started disabling items on start up in Vista x64, and found that it was EVGA Precision which was causing this error for me. I do however like precisin, so I leave it on auto startup with windows to control my fans on my cards. Turn it off just before you jump in the game, and it should not affect your GPU fan control and still enables you to play the game. I believe it is the monitoring aspect of Precision which causes the error. As I said, I had this error while playing Frontlines Fuel of War, not BF2. I am running Vista x64. This may be true with Ntune, Atitool or any other monitoring software, so you might want to start there. Hope it helps some of you.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.