I can't launch SCUM. It says "Please close WinDivert before launching the game"

[Bench]

When I try to launch SCUM, it says "please close WinDivert before launching the game". How the ♥♥♥♥ do i fix this, please help me

[Shotgun Susan]

Have you tried closing WinDivert?

Open task manager and see if that's a running process and then end it.

[Bench]

Shotgun Susan původně napsal:

Have you tried closing WinDivert?

Open task manager and see if that's a running process and then end it.

no, it was not a running process

[Shotgun Susan]

Looks like you may have malware on your system. Check out this thread.

https://steamcommunity.com/app/513710/discussions/0/2590022385660130241/
https://www.reqrypt.org/windivert.html

Somebody is watching the network traffic on your machine

[M.Spengler]

WinDivert.sys is a network packet capture and (re)injection library. Often used by cheating software. It is used for:

capture network packets
filter/drop network packets
sniff network packets
(re)inject network packets
modify network packets

RegistryKey : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDivert
Image Path : C:\Windows\system32\WinDivert64.sys

You should remove it, can be used by spyware.

[Bench]

M.Spengler původně napsal:

WinDivert.sys is a network packet capture and (re)injection library. Often used by cheating software. It is used for:

capture network packets
filter/drop network packets
sniff network packets
(re)inject network packets
modify network packets

RegistryKey : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDivert
Image Path : C:\Windows\system32\WinDivert64.sys

You should remove it, can be used by spyware.

I can't find the windivert64 file

[PRSK]

Not even in registry? Windows key + r > write "regedit" > Registry window pops up

[M.Spengler]

Fladnag původně napsal:

M.Spengler původně napsal:

WinDivert.sys is a network packet capture and (re)injection library. Often used by cheating software. It is used for:

capture network packets
filter/drop network packets
sniff network packets
(re)inject network packets
modify network packets

RegistryKey : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDivert
Image Path : C:\Windows\system32\WinDivert64.sys

You should remove it, can be used by spyware.

I can't find the windivert64 file

Could be hidden.
Hold left windows-key and press R -> Type cmd and press return

Enter this into the box:
pushd c:\windows\system32\
dir /AH

Check if it is there; If not it could be a false flag or embedded into some piece of software currently running.

[Bench]

M.Spengler původně napsal:

Fladnag původně napsal:

I can't find the windivert64 file

Could be hidden.
Hold left windows-key and press R -> Type cmd and press return

Enter this into the box:
pushd c:\windows\system32\
dir /AH

Check if it is there; If not it could be a false flag or embedded into some piece of software currently running.

it says when I type it in "The system cannot find the path specified"

[M.Spengler]

Fladnag původně napsal:

M.Spengler původně napsal:

Could be hidden.
Hold left windows-key and press R -> Type cmd and press return

Enter this into the box:
pushd c:\windows\system32\
dir /AH

Check if it is there; If not it could be a false flag or embedded into some piece of software currently running.

it says when I type it in "The system cannot find the path specified"

type into the command box :

pushd %windir%\system32\
dir /AH

[Bench]

M.Spengler původně napsal:

Fladnag původně napsal:

it says when I type it in "The system cannot find the path specified"

type into the command box :

pushd %windir%\system32\
dir /AH

it's not there

[Shotgun Susan]

Fladnag původně napsal:

M.Spengler původně napsal:

type into the command box :

pushd %windir%\system32\
dir /AH

it says that "it is not recognized as an internal or external command, operable program or batch file." Am I typing it in wrong?

It's 2 separate commands just in case you're running it as one.

pushd %windir%\system32\
and then after running that
dir/ AH

It should print a list of files

[Shotgun Susan]

If you still can't find it, try a scan with both of these pieces of software

https://www.emsisoft.com/en/software/eek/
https://www.malwarebytes.com/mwb-download/

[M.Spengler]

Shotgun Susan původně napsal:

If you still can't find it, try a scan with both of these pieces of software

https://www.emsisoft.com/en/software/eek/
https://www.malwarebytes.com/mwb-download/

Most antivirus software don't identify this as a possible threat.
The library itself is no harm but often used by spyware / malware and cheating software.
Should it be locked, use the recovery console or linux to remove it. (Link for Ubuntu / Easy to use and Live / Can boot from CD without install / Has a GUI like Windows)
https://www.ubuntu.com/download/desktop
Good luck AFK for party....