945 réponses à ce sujet

[Valaskjalf]

Sblade wrote...

metalfenix wrote...

I can't access the reclaimyourgame site, it says 403 forbidden, it's only me or anyone else have this problem?

We have a heavy traffic site issue. I´m looking into that. It should be back in a matter of minutes

you guys need to double check your facts first. if you run that .exe in the screenshot that Ars shows, it is the release date check.

[disquette]

Argh, so frustrating.  I finally have a free weekend - no work, and I quit WoW a while ago, and I was really looking forward to downloading this from Steam and playing it all weekend.

But there's no way I'm going to install what's essentially a rootkit on my machine.

Guess I have to find some other game to play this weekend 

[crackling]

Thank god people caught on to this quick, I haven't opened up my signature edition yet but if this isn't fixed I think I'll just throw it up on ebay and hope for a quick sale before all the bad press on the game starts putting off people who aren't biodrones from buying the game.

[Dirwulf]

Eag07 wrote...

Securom installation leaves traces in your registry that can be easily found. You can check for yourself whether your system got "infected":

Open regedit, search for "Securom", it should find the key in HK_Current_UserSoftware, export the whole Securom folder as a text file so you can see the timestamps. There should be a few keys with creation time/date coinciding with the time you installed DA2.

I did your test. I have the Steam version. The last time anything was written to this file was 11/10. The only other date in the file in 4/09. So doesn't that mean DA2 isn't using it?

[Sblade]

Valaskjalf wrote...

Oppopji wrote...

metalfenix wrote...

I was thinking about that. All we have is the registry entries, but anyone have other evidence of securom running? like a file directory, or a process name running?

I don't know about securom at all, and I would like to know.

The files are located in %temp%mtka_tmp

if anyone actually runs that file they will see that it is merely the release date check. the traditional SecurROM disc control is nowhere to be seen.

Because DA2 hasn´t a disk check.

From a recently installed DA2. exported the Securom registry entry.

Here, read:

[HKEY_CURRENT_USER\\Software\\SecuROM]

[HKEY_CURRENT_USER\\Software\\SecuROM\\DFA]

[HKEY_CURRENT_USER\\Software\\SecuROM\\DFA\\DFAUD]

[HKEY_CURRENT_USER\\Software\\SecuROM\\DFA\\DFAUD\\3C31B647EFDF67D5C9E1F06A2FD45149]

[HKEY_CURRENT_USER\\Software\\SecuROM\\DFA\\DFAUD\\3C31B647EFDF67D5C9E1F06A2FD45149\\F7093905D9E569C85046B48EE17732C3015021A389835D32CFFEF02624E16923]
"DGU"=hex:03,fa,23,45,76,cf,41,b8,e1,8f,5b,67,6a,2b,ef,15,00,ee,fe,54,7c,5e,7c,\\
  74,47,a9,3c,6f,32,91,2b,56,93,c9,5d,70,fe,ef,16,8b,2e,2a,ee,13,1c,df,5e,68,\\
  52,9b,15,d4,d6,37,ba,44,1b,e6,b2,01,35,ac,1a,a7,d0,a8,82,10,82,2f,f1,e3,63,\\
  9d,7d,2f,33,48,5b,b5,f3,c3,70,e9,a5,dd,67,d2,61,6c,25,7b,1d,4f,25,18,c2,d5,\\
  3c,dd,bc,0c,64,8b,85,da,21,ae,76,35,ba,2c,7b,a6,d1,89,21,01,08,50,6e,4f,de,\\
  ea,a3,77,3d,20,f6,d8,be,99,73,b9,8b,96,85,51,81,15,7c,94,a3,17,d9,16,b6,2b,\\
  f3,cd,25,f4,f8,47,42,a3,e8,06,53,61,53,ad,dd,a0,2d,29,64,57,8f,34,61,95,be,\\
  b6,fa,d4,66,79,a0,8c,4d,69,d2,e9,14,08,1f,50,03,38,4d,ad

[HKEY_CURRENT_USER\\Software\\SecuROM\\FJABU]

[HKEY_CURRENT_USER\\Software\\SecuROM\\FJABU\\9D9B686B6697D1BCFFD7FDE28FC01EFA]

[Valaskjalf]

Sblade wrote...

Valaskjalf wrote...

Oppopji wrote...

metalfenix wrote...

I was thinking about that. All we have is the registry entries, but anyone have other evidence of securom running? like a file directory, or a process name running?

I don't know about securom at all, and I would like to know.

The files are located in %temp%mtka_tmp

if anyone actually runs that file they will see that it is merely the release date check. the traditional SecurROM disc control is nowhere to be seen.

Because DA2 hasn´t a disk check.

From a recently installed DA2. exported the Securom registry entry.

Here, read:

[HKEY_CURRENT_USERSoftwareSecuROM]

[HKEY_CURRENT_USERSoftwareSecuROMDFA]

[HKEY_CURRENT_USERSoftwareSecuROMDFADFAUD]

[HKEY_CURRENT_USERSoftwareSecuROMDFADFAUD3C31B647EFDF67D5C9E1F06A2FD45149]

[HKEY_CURRENT_USERSoftwareSecuROMDFADFAUD3C31B647EFDF67D5C9E1F06A2FD45149F7093905D9E569C85046B48EE17732C3015021A389835D32CFFEF02624E16923]
"DGU"=hex:03,fa,23,45,76,cf,41,b8,e1,8f,5b,67,6a,2b,ef,15,00,ee,fe,54,7c,5e,7c,
  74,47,a9,3c,6f,32,91,2b,56,93,c9,5d,70,fe,ef,16,8b,2e,2a,ee,13,1c,df,5e,68,
  52,9b,15,d4,d6,37,ba,44,1b,e6,b2,01,35,ac,1a,a7,d0,a8,82,10,82,2f,f1,e3,63,
  9d,7d,2f,33,48,5b,b5,f3,c3,70,e9,a5,dd,67,d2,61,6c,25,7b,1d,4f,25,18,c2,d5,
  3c,dd,bc,0c,64,8b,85,da,21,ae,76,35,ba,2c,7b,a6,d1,89,21,01,08,50,6e,4f,de,
  ea,a3,77,3d,20,f6,d8,be,99,73,b9,8b,96,85,51,81,15,7c,94,a3,17,d9,16,b6,2b,
  f3,cd,25,f4,f8,47,42,a3,e8,06,53,61,53,ad,dd,a0,2d,29,64,57,8f,34,61,95,be,
  b6,fa,d4,66,79,a0,8c,4d,69,d2,e9,14,08,1f,50,03,38,4d,ad

[HKEY_CURRENT_USERSoftwareSecuROMFJABU]

[HKEY_CURRENT_USERSoftwareSecuROMFJABU9D9B686B6697D1BCFFD7FDE28FC01EFA]

registry entry =/= software

[Sblade]

Open regedit, search for "Securom", it should find the key in HK_Current_User\\Software, export the whole Securom folder as a text file so you can see the timestamps. There should be a few keys with creation time/date coinciding with the time you installed DA2.

[Valaskjalf]

Sblade wrote...

Open regedit, search for "Securom", it should find the key in HK_Current_UserSoftware, export the whole Securom folder as a text file so you can see the timestamps. There should be a few keys with creation time/date coinciding with the time you installed DA2.

registry keys are not executable. 

[Dirwulf]

Sblade wrote...

Open regedit, search for "Securom", it should find the key in HK_Current_UserSoftware, export the whole Securom folder as a text file so you can see the timestamps. There should be a few keys with creation time/date coinciding with the time you installed DA2.

And like I said, the last date stamp is 11/10. I can send you my file if you want it.

Modifié par Dirwulf, 11 mars 2011 - 10:01 .

[Sblade]

Valaskjalf wrote...

Sblade wrote...

Open regedit, search for "Securom", it should find the key in HK_Current_UserSoftware, export the whole Securom folder as a text file so you can see the timestamps. There should be a few keys with creation time/date coinciding with the time you installed DA2.

registry keys are not executable. 

@Valaskjalf, what´s your point?

Anyone with DA2 can check my sentence above, and if there were no Securom folder before installing DA2, then it appears with the exact time stamp of the time of the installation of DA2...

Is this NOT proof of Securom being included by DA2?

[Sblade]

Dirwulf wrote...

Sblade wrote...

Open regedit, search for "Securom", it should find the key in HK_Current_UserSoftware, export the whole Securom folder as a text file so you can see the timestamps. There should be a few keys with creation time/date coinciding with the time you installed DA2.

And like I said, the last date stamp is 11/10. I can send you my file if you want it.

My sig said we tested Disk and Impulse version. Steam hasn´t been tested. I´m not sure if Securom is present on the Steam version

[RiouHotaru]

Date release check = SecuROM?

Wow, people are looking for any reason to get upset now.

[Valaskjalf]

Sblade wrote...

Valaskjalf wrote...

Sblade wrote...

Open regedit, search for "Securom", it should find the key in HK_Current_UserSoftware, export the whole Securom folder as a text file so you can see the timestamps. There should be a few keys with creation time/date coinciding with the time you installed DA2.

registry keys are not executable. 

@Valaskjalf, what´s your point?

Anyone with DA2 can check my sentence above, and if there were no Securom folder before installing DA2, then it appears with the exact time stamp of the time of the installation of DA2...

Is this NOT proof of Securom being included by DA2?

see this bioware quote: 

Fernando Melo wrote...

The release control software is also made by Sony DADC, the same team that makes securom.  But it is not the same product - for instance, it does not install anything etc just as we've stated before.  They have the same support site though which is the URL you're seeing.

I am saying those were added by the release date check (made by Sony DADC) which is not the traditional scary "rootkit" securom software is not included. So sensationalizing a registry key is really silly.

[Dirwulf]

Nothing to see here...move along...

[QuentaSilmarillion]

I posted earlier, I went to EA's support chat and they gave me a full refund and a 20 dollar gift code because of the non-disclosed malware they put on our machines when we install DA2. Its not Bioware's fault.

[Dirwulf]

QuentaSilmarillion wrote...

I posted earlier, I went to EA's support chat and they gave me a full refund and a 20 dollar gift code because of the non-disclosed malware they put on our machines when we install DA2. Its not Bioware's fault.

There is no SecuRom. Its a release date check.

Fernando Melo wrote...

The release control software is also made
by Sony DADC, the same team that makes securom.  But it is not the same
product - for instance, it does not install anything etc just as we've
stated before.  They have the same support site though which is the URL
you're seeing.

[Morty Smith]

Dirwulf wrote...

QuentaSilmarillion wrote...

I posted earlier, I went to EA's support chat and they gave me a full refund and a 20 dollar gift code because of the non-disclosed malware they put on our machines when we install DA2. Its not Bioware's fault.

There is no SecuRom. Its a release date check.

Fernando Melo wrote...

The release control software is also made
by Sony DADC, the same team that makes securom.  But it is not the same
product - for instance, it does not install anything etc just as we've
stated before.  They have the same support site though which is the URL
you're seeing.

After learning what the poison is, can we still get an antidote? 

[RiouHotaru]

Kroitz wrote...

Dirwulf wrote...

QuentaSilmarillion wrote...

I posted earlier, I went to EA's support chat and they gave me a full refund and a 20 dollar gift code because of the non-disclosed malware they put on our machines when we install DA2. Its not Bioware's fault.

There is no SecuRom. Its a release date check.

Fernando Melo wrote...

The release control software is also made
by Sony DADC, the same team that makes securom.  But it is not the same
product - for instance, it does not install anything etc just as we've
stated before.  They have the same support site though which is the URL
you're seeing.

After learning what the poison is, can we still get an antidote? 

No, because it's not a poison.  A date release check =/= SecuROM and there =/= malware.  It's a form of copy protection against pirates.  Deal with it.

[MartinPham]

Irrespective of the DRM implemented, its technical effects and so forth, the fact is EA/Bioware clearly miscommunicated on all levels and outright lied to its fanbase and potential Consumers RE: its DRM implementation strategy.

[RiouHotaru]

MartinPham wrote...

Irrespective of the DRM implemented, its technical effects and so forth, the fact is EA/Bioware clearly miscommunicated on all levels and outright lied to its fanbase and potential Consumers RE: its DRM implementation strategy.

...There's no lie.  It's not SecuROM, nothing was installed onto your computer, and it's a date release check exactly as they stated it was.  Exactly what lies or miscommunication has taken place?

[Morty Smith]

RiouHotaru wrote...

Kroitz wrote...

Dirwulf wrote...

QuentaSilmarillion wrote...

I posted earlier, I went to EA's support chat and they gave me a full refund and a 20 dollar gift code because of the non-disclosed malware they put on our machines when we install DA2. Its not Bioware's fault.

There is no SecuRom. Its a release date check.

Fernando Melo wrote...

The release control software is also made
by Sony DADC, the same team that makes securom.  But it is not the same
product - for instance, it does not install anything etc just as we've
stated before.  They have the same support site though which is the URL
you're seeing.

After learning what the poison is, can we still get an antidote? 

No, because it's not a poison.  A date release check =/= SecuROM and there =/= malware.  It's a form of copy protection against pirates.  Deal with it.

Well, a program that does hinder me, against all attempt to acces the product I bought, I refer to as something bad. They can build a ten foot tall brick wall around their games for all I care, if I´m able to play what I paid for. Deal with it. 

Modifié par Kroitz, 11 mars 2011 - 10:37 .

[Sblade]

Valaskjalf wrote...

Sblade wrote...

Valaskjalf wrote...

Sblade wrote...

Open regedit, search for "Securom", it should find the key in HK_Current_UserSoftware, export the whole Securom folder as a text file so you can see the timestamps. There should be a few keys with creation time/date coinciding with the time you installed DA2.

registry keys are not executable. 

@Valaskjalf, what´s your point?

Anyone with DA2 can check my sentence above, and if there were no Securom folder before installing DA2, then it appears with the exact time stamp of the time of the installation of DA2...

Is this NOT proof of Securom being included by DA2?

see this bioware quote: 

Fernando Melo wrote...

The release control software is also made by Sony DADC, the same team that makes securom.  But it is not the same product - for instance, it does not install anything etc just as we've stated before.  They have the same support site though which is the URL you're seeing.

I am saying those were added by the release date check (made by Sony DADC) which is not the traditional scary "rootkit" securom software is not included. So sensationalizing a registry key is really silly.

the key is named Securom, and is created by DA2.

Also, there are more indicators of this being Securom. Read the analysis

[Travie]

 For those spamming 'its just a release date check' here is proof it isn't.

vividgamer.com/2011/03/10/ea-fails-to-disclose-securom-in-dragon-age-ii/

Please inform yourselves before posting.

Modifié par Travie, 11 mars 2011 - 10:44 .

[Dirwulf]

Travie wrote...

 For those spamming 'its just a release date check' here is proof it isn't.

vividgamer.com/2011/03/10/ea-fails-to-disclose-securom-in-dragon-age-ii/

Please inform yourselves before posting.

That article is referring to Sblade's web site, the guy posting above you. That is the article we are refuting and that Bioware has reponded to by saying it is nothing more than a release date check. Please inform yourself before posting.

Modifié par Dirwulf, 11 mars 2011 - 10:49 .

[Sblade]

Dirwulf wrote...

Travie wrote...

 For those spamming 'its just a release date check' here is proof it isn't.

vividgamer.com/2011/03/10/ea-fails-to-disclose-securom-in-dragon-age-ii/

Please inform yourselves before posting.

That article is referring to Sblade's web site, the guy posting above you. That is the article we are refuting and that Bioware has reponded to by saying it is nothing more than a release date check. Please inform yourself before posting.

They'll try to call it something else, but if it looks like a duck, quacks like a duck, leaves droppings like a duck, is genetically identifiable as a duck, cooks and tastes like a duck, and passes like a duck, odds are it is not a swan or goose or other bird in the family Anatidae, but a duck.

This is SecuROM - or a type of duck. Whether or not it's the dreaded low level ring 0 duck or a lesser duck is inconsequential. Gamers do not like ducks. Gamers have an irrational hatred of ducks. Why do you think one of the first shooter games was called "Duck Hunt"?

Oh right, have to stay on topic. I actually get along well with ducks, actually.

Yes, this is a type of SecuROM and is part of the SecuROM suite. The executable had SecuROM strings in it. All of our tools identified it as part of SecuROM. It connected to Sony DADC servers. I somehow find it hard to believe that the people who put it in the game had any doubt in their mind as to what this would be seen as when it was recognized. If this is not SecuROM they should not label it as such on the executable