Disconnected = Ransomware Protection on Win 10 // SOLVED

[Tex-Rec]

I got today around 5 times disconnected from middle of a session in multiplayer and my internet up and running without negative spikes , breacks or anything.

Each time i get disconnected when jumped back to the game menu i see everything from online part is greyed out , like offline or something like that , and it come back to normal only after i restart the game..

Starting to bug on me today.

https://steamcommunity.com/sharedfiles/filedetails/?id=1455385555

Edit:

Im not sure what this now is , but i never had this before.

https://steamcommunity.com/sharedfiles/filedetails/?id=1455434734

[♥samantha♥]

Make sure you have selected and are joining 'Peer to Peer' server, and not 'Dedicated' servers.

Go to the 'Browse Online' tab to view online servers, then select 'Filtered By....'

In 'Lobby Type' make sure 'Peer To Peer' is selectewd.

During the week I checked out a couple 'Dedicated Project CARS 2 servers, and they all kicked me backs to the main Race central menu.

[𝓕𝔁]

The second screen shot looks like "Ransomware Protection" in Windows Defender, there is an option to Protect files, folders and memory areas fro unauthorised changes.

If it's on, you can check/change protected folders. Documents is on by default, I think.
You can also allow an app (white list it)

Edit: Here's an article that may help:
https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/windows-defender-blocking/32c01f08-4d47-4d2c-bad7-529761cdfb15

[♥samantha♥]

Originally posted by RWB FxUK:

The second screen shot looks like "Ransomware Protection" in Windows Defender, there is an option to Protect files, folders and memory areas fro unauthorised changes.

If it's on, you can check/change protected folders. Documents is on by default, I think.
You can also allow an app (white list it)

Edit: Here's an article that may help:
https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning-windows_10/windows-defender-blocking/32c01f08-4d47-4d2c-bad7-529761cdfb15

It could also be a Nvidia Geforce Issue, I've just read others have had the same issue as TEX, running different games.

oawrapper.exe is known as NVIDIA GeForce Experience Application Ontology and it is developed by NVIDIA Corporation.

[𝓕𝔁]

Yes, it is GEForce Experience in the screenshot being blocked by the ransomware protection but it does also affect PC2. The ransomware protection blocks write access to the documents folder (amongst others) which is where the PC2 profile / config data is stored.

If you turn on the ransomware protection and don't whitelist PC2, then you will see when you load the game, you get the DLC notification and tutorial messages, as if its a new install. I tried it earlier ;)

Not saying that's the cause for the disconnections though, but.. it might be connected if its blocking something else. So far, I haven't had any app be considered "friendly" and therefore auto-allowed, like it states some should, in windows defender. Ransomware protection was off on mine, by default, so its probably being over-zealous, typical of these sorts of things.

[♥samantha♥]

I never download & install the complete Geforce Experience bundle drivers, I only use the standard WHQL GeForce Drivers for my video card.

[Tex-Rec]

Originally posted by RWB FxUK:

Yes, it is GEForce Experience in the screenshot being blocked by the ransomware protection but it does also affect PC2. The ransomware protection blocks write access to the documents folder (amongst others) which is where the PC2 profile / config data is stored.

If you turn on the ransomware protection and don't whitelist PC2, then you will see when you load the game, you get the DLC notification and tutorial messages, as if its a new install. I tried it earlier ;)

Not saying that's the cause for the disconnections though, but.. it might be connected if its blocking something else. So far, I haven't had any app be considered "friendly" and therefore auto-allowed, like it states some should, in windows defender. Ransomware protection was off on mine, by default, so its probably being over-zealous, typical of these sorts of things.

After setup up and adding pcars 2 to whitelist , no more messages from defender here. Now im still not sure haves this something to do with the disconetion's. Did not have my mate last night to try it out but i will report in again if its happening again or even disapears with this.

The thinkg is what ive noticed so far , like sayed before , each time we get disconnected , i was forced to restart the game because ingame was all online parts greyed out , when restarting game ive noticed this from windows defender in the taskbar or notification pages.

I will have tonight a long race again , and hope we will not get disconnected again before end of the race.

[Tex-Rec]

Just to give a note that it sems solved. It was the fail of the windows 10 ransomware protection. After i have add pcars folder from my documents to it as white listed , no more disconnection apers from my side , but we had once again when my friend hosted last night.

After i tould him to add the same folder like me to white list as he is using win 10 to , we raced in his looby for 6 hrs without any issue and he noted too , that there was no more warning messages from the prottection.

It seems like the ransomware protection just stoped pcars to write some online datas to the document files , and because it was blocked at that momment it disconnects you..

For me , or us , it seems like the problem is solved.

[𝓕𝔁]

Awesome and good to know ;)

[Mynuggets]

omg who let simpletons on the internet again, learn to look up a log or use common sense, chances of a person attacking you with a virus to hack you is more rare than anyone can imagine
one block is temp recording, one is the save, one is the overlay etc etc but by defualt they are allowed in WIN10 so you have blocked them yourself or refused access when it asked

[Mynuggets]

Originally posted by Tex-Rec:

Just to give a note that it sems solved. It was the fail of the windows 10 ransomware protection. After i have add pcars folder from my documents to it as white listed , no more disconnection apers from my side , but we had once again when my friend hosted last night.

After i tould him to add the same folder like me to white list as he is using win 10 to , we raced in his looby for 6 hrs without any issue and he noted too , that there was no more warning messages from the prottection.

It seems like the ransomware protection just stoped pcars to write some online datas to the document files , and because it was blocked at that momment it disconnects you..

For me , or us , it seems like the problem is solved.

yeah that stuff in win10 is ♥♥♥♥, get maywarebytes and a free AV scanner and your set, people that trust the windows programs are the people being hacked by the bussiness they trust ;)

[Mynuggets]

so do you use windows defender and no other AV/malware protection?

that is your issue right there, open your task manager and watch your network resources etc some of the new stuff can get past windows defender and uses alot of network resources

[Mynuggets]

get maywarebytes and do a scan ( you can scan and clean free once but is well worth buying, they will catch out most bugs these days

[MISTER WU]

Or just get ESET Node32 lol. I woulkd say MicrotiK butthey have had some isues latley with WinBox being infected on the host deviuce and also conhive scripts :|}.
Any decent UTM is good enough like a sphos box etc etc

[Mynuggets]

for me i just watch task manager and can see things :P eg if system is always like 70% chances are one of your sys32/64 files are corrupted and than boot safemode and remove myself and run a scan on boot next restart to clean anything i missed.
i think the most recent one has been they over take main system files hence why it can only be fixed in safemode and 100% of all scanners will miss them if you scan while in normal mode in windows ( you can stop service and remove etc etc but 99% of the time it will reinstall itself )

[MISTER WU]

LOL, nah man learn to use a NirSoft && SysInternals suite to get a get a better view, EG:ProcMon.exe can vie reg keys and everything! I would even go as far to say learn how to use Kali XOR Metasploit but thats a diff subject mate ;)