• Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.

Capcom puts anti-cracking rootkit in Street Fighter 5 PC version update

D

DRock

has yet to tasted the golden nectar that is tag
I'll give them a few days to fix this and if not I'm requesting a steam refund for the game, season pass and any other $ spent.

Fuck this kernel level access bullshit.
 
R

Raytow

Member
DRock said:
I'll give them a few days to fix this and if not I'm requesting a steam refund for the game, season pass and any other $ spent.

Fuck this kernel level access bullshit.
Click to expand...

Unless you have less than 2 hours played, don't think that's going to fly with Steam maybe if this blows up and it gets more traction because that rootkit bullshit shouldn't be permitted like at all.
 
J

Jaded Alyx

Member
Wonko_C said:
The game now doesn't start if you have modified .inis to tweak graphics settings or disable frame smoothing. Which means players with low end PCs that could make the game more playable (like me) with those tweaks are now SOL.

Thanks, Capcom.
Click to expand...

No, this isn't right. I have v-sync off via the .ini file and I can run the game. Initially after the update, I couldn't run it, but after running the game as an administrator, it's been ok.
 
D

DRock

has yet to tasted the golden nectar that is tag
Raytow said:
Unless you have less than 2 hours played, don't think that's going to fly with Steam maybe if this blows up and it gets more traction because that rootkit bullshit shouldn't be permitted like at all.
Click to expand...
Ya, we'll see about that. They deployed a patch that requires a highly invasive modification to my system. Sounds like a breach of contract to me.
 
Ooccoo

Ooccoo

Member
Clinging to micro transactions. Welcome to the Big show Capcom. Cannot wait for your FPS and strategy games!
 
A

AcceptableGhost

Member
So I am hearing this is actually trying to load an unsigned driver at run time? Don't fresh installs of Windows 10 with Anniversary Update not allow unsigned drivers at all (unless you disable some stuff)? This seems like a really bad idea either way!
 
R

Raytow

Member
AcceptableGhost said:
So I am hearing this is actually trying to load an unsigned driver at run time? Don't fresh installs of Windows 10 with Anniversary Update not allow unsigned drivers at all (unless you disable some stuff)? This seems like a really bad idea either way!
Click to expand...

Lets put it this way you are giving kernel access to a game that does P2P multiplayer and if you are a fairly active player you are giving the keys of your pc to around 20 o 30 guys a day, sounds like fun.
 
C

Cyborgmatt

Member
Yeah this is definitely something you should consider removing ASAP until it's fixed.
Since this driver is so small, it's also extremely easy to tell what it does. After taking a look, I would never let this product run on my machine.

The driver first registers itself using a pseudo-randomly generated name. That's kind of suspicious. It also doesn't specify any security, so any user at any privilege level can attempt to open and control the device. That's bad.

It sets up custom handlers for opening the device object, closing the device object, and performing ioctls on the device object. This is pretty normal, although a driver that didn't set up basic security when creating its device should perform security checks when opening the device. This driver does not.

The ioctl handler is where everything "interesting" happens. It checks for control codes 0xAA012044 and 0xAA013044, does some buffer size checks, disables data execution protection and then runs the arbitrary code passed in through the ioctl buffer with kernel permissions.

In short, this driver creates a back door which can allow a non-privileged user to run code with permissions of the kernel.

https://www.reddit.com/r/Games/comm...c_update_is_accessing_kernel_level_in/d7z4eev
Click to expand...
 
L

low-G

Member
Nyoro SF said:
I actually uninstalled yesterday but I stupidly waited until the update was done. Guess I have to go dll digging lol
Click to expand...

AFAIK the telltale sign is capcom.sys. I didn't run it after the update either and I haven't found that file, so I think I'm safe.

But seriously for everyone else UNINSTALL NOW! MAJOR vulnerability...
 
deadscreensky

deadscreensky

Member
How safe am I if I just don't play the game? I don't actually need to uninstall if I don't touch SF5, right? It's only dangerous when the game runs it?
 
K

KingBroly

Banned
deadscreensky said:
Good advice. I'll keep the game installed for now -- I assume Capcom is going to fix this ASAP, though I'm probably optimistic -- but at least delete the file.
Click to expand...

I'd also do a virus/malware scan as well. My malware scan picked up a PUP.Optional file since my last scan 2 days ago.
 
R

RK9039

Member
mbpm1 said:
They don't seem to have thought much beyond that.
Click to expand...

They're so stupid, people are uninstalling the game to be safe and Steam reviews are at the lowest it's ever been. Hope that FM was worth it Capcom, it's a bit like that scene from the movie when Sagat and DeeJay end up with the useless bison dollars.
 
S

SatelliteOfLove

Member
Yup, that's a giant and not a windmill there. A biiiiiiiiiiiiiiiiiiig one.

Capcpom gonna Capcpom™

Glad I didn't update yet from other things going on.
 
K

Kalopsia

Neo Member
This is fucking above and beyond for Capcom. Shitty business practices are one thing but installing a backdoor onto PCs is absolutely reprehensible.
 
B

BiggNife

Member
Capcom is rolling back the security update.

We are in the process of rolling back the security measures added to the PC version of Street Fighter V.

After the rollback process to the PC version, all new content from the September update will still be available to players.

We apologize for the inconvenience and will have an update on the time-frame for the PC rollback solution soon.
Click to expand...

https://twitter.com/StreetFighter
 
H

HotHamBoy

Member
I own the game on PS4 but this shit with the PC version is unacceptable. Was waiting to buy the Season Pass on sale, will not be buying anything now.

This game has been anti-consumer as fuck since launch and a massive nickel-and-diming operation to exploit the fanbase. Now they're not just being shoddy, they're being shady. Putting people's systems at risk to protect their over-priced DLC bullshit in their unfinished game... Nope, that's the line.

Hey guys, Guilty Gear Xrd Revelator is on sale for $24 on PS4 this weekend. Good time to jump in, best fighter this gen and cheaper than the SFV season pass.

EDIT: don't care about the rollback, trying to slip that shit by is disrespectful.
 
L

LelouchZero

Member
mbpm1 said:
Basically this post if your question wasn't rhetorical
Click to expand...

Yeah it was rhetorical, I'm just in disbelief.

This is incredibly dodgy and we have no idea its doing either.

I squeezed a good 2+ hours out of the game today as-well, ugh, I never thought that a game developer could do this to their game and their players.

Nocturno999 said:
Have you seen the "daily" challenges? Capcom has Zero respect for their dwindling fan base and they still don't get it.
Click to expand...

Yup, oh man.

Brashnir said:
AKA they got caught and are now trying to destroy the evidence harder than Palmer Luckey's girlfriend
Click to expand...

Huh? Damn I've gotta take a peep in that thread, I've been missing out.
 
I

InsertCookiesHere

Neo Member
Unknown Soldier said:
DirectInput has been deprecated since 2005 when Xinput was introduced, and MS stopped recommending that anybody still use it after 2011. I'm not sure what the big deal about DirectInput is, it's Sony's responsibility to implement Xinput support for Dualshock controllers instead of relying on a decade-obsolete standard.

Does anyone know if the "official" wireless adapter Sony released for the Dualshock 4 finally implements Xinput support for PS4 controllers on PC?
Click to expand...

To do that Sony would be required to adopt the XInput standards per specification which means copying the XBox Controllers input, buttons, and sticks and work identically. XInput doesn't support anything else but the XBox controller specs, it's not a free for all do what you want ala DirectInput.
The XInput standard is also only available under license from MS, plus the revised licensing terms from 2014 require a MS logo on all packaging containing supported XInput products and prohibits usage of or support for alternative input.

Supporting XInput would necessitate giving MS exclusive control over all supported input devices on the PlayStation 4, and how they would interface with the system and what inputs are allowed. Sony would also be required to include a MS logo on the PS4 packaging.

There is no chance on earth Sony would cede control over input devices on the PS4 to Microsoft and remove any opportunity for differentiation there.
And unless Sony is willing to do so any native XInput support isn't possible.

In short native XInput support will never come, and would never be allowed anyway because the controller doesn't abide by Microsoft's required input.
 
Wonko_C

Wonko_C

Member
Jaded Alyx said:
No, this isn't right. I have v-sync off via the .ini file and I can run the game. Initially after the update, I couldn't run it, but after running the game as an administrator, it's been ok.
Click to expand...

Haven't thought of running is as Administrator. I'll give it a try, thanks!
 
M

MrCarter

Member
Nocturno999 said:
And with that money you can unlock a color a week. Assuming it's affordable.

Capcom needs to get rid of the idiots that keep making these decisions.
Click to expand...

I think you can roughly get 20-30K a month which is good in my opinion. I was expecting far worse so was pleasantly surprised.
 
You must log in or register to reply here.

Similar threads

[GI.biz] Analysts offer predictions for 2023 in games
16
3K
Magic Carpet replied
Street Fighter 5 Update For PC Is A Complete Mess. Security Concerns + Game Issues
42
6K
BennyBlanco replied
Capcom removes rootkit from update to Street Fighter V
2 3 4
165
31K
ColonialHawk replied
Street Fighter V PC has a security issue
8
3K
BlizzKrut replied
Capcom acknowledges they sent out rootkit in update for SFV as "security risk"
2
93
19K
jacobeid replied
Top Bottom