*coughs* Gizzmoe said that *cough*

I appreciate your commentary GT and I think our point has been made and we can lay this thread to rest.

No, please, let us have another round of this. One of my African Violets had to be thown out last week. I think Starforce was responsible.

LOL sorry about that Mustang... It's corrected.

No, this will never be laid to rest until something comes of it. Whether there's an amicable solution or not. There is genuine concern over the StarForce issues and can't be passed over lightly as some would like.

Takeda Shingen, glad you think it's funny. Wait until you have problems and then we can laugh at you. ;)

Please, GT182, it is over-the-top statements like that which hurt your little crusade. I had simpathy for you until one of your fellow crusaders labeled DVD drive failure a 'personal tragedy'. A family member dying is a personal tragedy. Losing your job is a personal tragedy. Being stricken with cancer is a personal tragedy. Computer failure is an inconvience.

The opponents of Starforce hold such an attitude of self-righteousness that, truthfully, it is hard to keep a straight face while reading this thread. Don't worry, though: As soon as I have problems, you'll be the first person I notify.

It could very well be StarForce! :P
Did you hear they also order people's computers to murder the owners first born sons in sacrifice to the Computer god (Master Computer) from TRON.

The problem is real, but as you said. there is no way to predict who it will happen to, how or even why. Computer Systems are too diverse, its like guessing who will catch a cold next. To simply warn people should be sufficient. whether they listen or not is not your responsibility. I can understand if it happened to you, how you want to ensure it happens to noone else. But put simply, you can't. And discussions like these that linger on and on look more like hoaxes.

If you want to help people educate them. You can tell them about what happened to you, but don't press the issue, don't try to make them fear that it /MIGHT/ happen to them.

so essentialy starforce says starforce is ok, noone else excpet for drebble and gizmoe believe them.


no version of starforce will ever make its way onto my new PC, regardless of how good the makers say it is.

I wrote Mark after reading this article asking him what company asked him to check out Starforce. For as far as I know I was the first to contact Mark. But my contact had nothing to do with checking for rootkits etc. I wanted him to check on what the driver is actually doing.

And Mark never did answer my specific questions.
He only referred me to the thread on his blog.

After several emails Mark Responded. "I haven't looked into it any further" So I left him alone.

Here are the original emails the first one is edited to protect names and certain people who did not want their indentity revealed.


--------------------------------------------------------------------------------
From: Larry
Sent: Friday, November 18, 2005 12:19 PM
To: Mark Russinovich
Subject: Starforce....
Importance: High


Hello Mark,
I was wondering if you would possibly be able to help in this matter. When I saw the deal with Sony...Many of us fellow gamers related this ordeal with the same problem we are seeing with Starforce copy protection. I have been posting links to your web site as well as stories from cnet etc about Sony on the Ubi forums as well as Subsim.com forums. Everyone has thanked me for these posts and ask that I personally thank you! So Thank you!

First off I want to tell you that I'm no hacker and I have no Alcohol 120 or daemon tools on my computer nor have I ever used these programs.
I tell you this as many of us gamers are being accused by Starforce of having these tools on our PC. They make up any excuse they can and when they can't seem to find out what's wrong they leave you hanging.

The details I have are lengthy and I don't want to bore you to death. But I would like to share what has been happening with all of this briefly. And I was actually seeking your help too.

I am (edited) that loves computer gaming...and have been working with Ubisoft (edited) My Plextor writer stopped working after installing Silent Hunter III. It contains Starforce. Also, I discovered Starforce installs drivers in the hidden area of device manager. Many of us have read the EULA and can't find a mention of Starforce being installed anywhere. I think this is wrong. Yet Starforce people have posted that the EULA covers them.

I have collected many incidents from Ubisoft game owners. I have admissions from Ubisoft that Starforce has problems. (from their tech support) (edited)

Starforce wrote an article in response to Aaron McKenna's article http://www.tgdaily.com/2005/10/01/th..._game_pirates/ that basically called all of us with problems "beginner level Hackers" I take offense to that as do many others. Here's Starforce's response: http://www.star-force.com/protection...l?c=256&id=658 Very unprofessional!
I did post Aaron's email to Dennis of Starforce on the UBI forum with Aaron's permission. Aaron has been affected with Starforce problems too as well as his associates. I spoke for 2 hours with Aaron on the phone from Ireland. I actually live in Iowa here in the states.

Starforce is based out of Russia...they lock posts on their web site for no reason and delete them shortly there after. They have helped some but most remain with no help whatsoever. The copy protection in some cases like mine made the cdrw drive have a complete drive failure. Plextor after getting my drive said they couldn't figure out why it died. Only had 16 burns on it and was never used to load or play games with.

It seemed a mystery to me what was going on at first and never thought of a game doing this. I don't install programs as freely as some.. So this game was the first install I did for about 5 months. So I knew where to look, although I didn't use my plextor drive until about a month after the game was installed, to burn our 25th wedding anniversary pics. That's when the trouble started. Although I did have events happening in event viewer in XP stating timeout errors on that drive after the install of the game I never thought of the game as the factor in this. As well as strange high spins for long periods of time upon boot up coming from the cdrw drive ! This seems to be a common description from others too. As well as games playing choppy after Starforce is installed. Not just the game with it on it ,but all others. I had that experience with Battlefield 1942 after installing Silent Hunter III. All these things led me to calling Ubisoft and going to the forums, only to discover I wasn't alone.


So if there is any more info you need or anything you can do to assist. I would appreciate it. Ubi techs don't have a clue on the protection they admitted that...that's why its vital I have someone techy that can assist.

Aaron has asked his associates at Toms Hardware lab also..But so far Aarron says...no word from them.

Another forum post one of many you may find interesting although it's long and can't expect you to read it. Aaron's personal email is on the first page half way down.
I'm Soulcommander in the forum.
http://forums.ubi.com/groupee/forums...2091013073/p/1

Thank you!!!


Larry



----- Original Message -----
From: Mark Russinovich
To: Larry
Sent: Saturday, November 19, 2005 8:10 AM
Subject: RE: Starforce....



Hi Larry,

Thanks for bringing this to my attention. I'll buy a copy of SilentHunder III and take a look. I'll let you know what I find.

Thanks for the feedback also.

-Mark




--------------------------------------------------------------------------------
From: Larry
Sent: Friday, December 09, 2005 7:54 PM
To: Mark Russinovich
Subject: Re: Starforce....


Hi Again Mark,
One of the gentleman that is in our Starforce Investigation group with Ubisoft pointed out this article Starforce put out:

http://www.star-force.com/protection.phtml?c=261&id=707

Want to go to Russia? And win $1,000 Of course you have to prove it to them. I think this is a joke myself....But wanted you to see it. I'm going to show Aaron McKenna from Toms Hardware as well.

Any news for me yet?

Thank you kindly,
Larry





----- Original Message -----
From: Mark Russinovich
To: 'Larry
Sent: Thursday, December 22, 2005 9:59 AM
Subject: RE: Starforce


Yes, here's my answer:

-------------------------------


Hi Larry,

I did take a look and commented here: http://www.sysinternals.com/Forum/fo...3&KW=starforce

-Mark










--------------------------------------------------------------------------------
From: Larry
Sent: Thursday, December 22, 2005 10:26 AM
To: Mark Russinovich
Subject: Re: Starforce


Hello Mark, thanks for the reply.
So the questions I asked:
Just curious as I have been getting lots of questions directed my way as if you actually disassembled the Starforce drivers, what you thought about the EULA with the game and if you tested with many combinations of hardware involving cdrw or combo drives with burning software installed and tried?
I want to know if you can share with us all what testing you conducted.

So from your response I will assume you have no further comment on what you actually did to come to your conclusion.Please don't feel I am bullying you. People that have been affected, including myself have been posting and emailing exactly how complete your tests were. I have directed them to your blog entry and I guess they were hoping for a little more detail.
If I don't hear from you again, I will deliver your message you sent to me twice now (Your Blog entry).

Thank you for your time,

Larry




From: "Mark Russinovich"
To: "'Larry
Subject: RE: Starforce
Date: Thu, 22 Dec 2005 10:52:45 -0600


I haven't looked at it any further.




There u have it folks....So again I wrote Mark to ask what game magazine asked him to do more testings. I would like to find out once again if he tested only for rootkit involvement and nothing more.

This article posted proves nothing except that there is no rootkit involvement... It still does not answer our questions on other matters.

I for one remain Starforce free!

Well here's what happened. I couldn't copy a DVD I had made from my camcorder. Nothing copyrighted or needing to be copy protected mind you. My burner would start the process but would not finish the burn at all. I ruined 10 dvds trying. Nothing wrong with the DVD ROM or DVD burner and all the firmware is up to date. As soon as I got rid of StarForce all is well and I can copy that dvd all I want. Now this was just this past November, after running SHIII since it came this past year. I built this computer one year ago this month with all new hardware and software. It ran perfectly after changing a bad ATA HDD over an SATA HDD. So it's run with no problems for 11 months but all of a sudden acts up in the one place StarForce will cause problems. Seems strange and a bit fishy.... did to me for a bit until all the StarForce controvercy really got going.

At least I could play SHIII where others couldn't right from the start. What others were telling me I thought was a joke for awhile, it couldn't possible happen. A friend really got looking into it and found a few things that made me think twice on how I took his and their complaints. He doesn't lie about his troubles with SHIII, just as he wouldn't if you took your computer to him for repairs. He's gotten nothing but a run around from the places he's asked for help and has been laugh at by them too. Just as some here laugh. He lost a perfectly good dvd drive in the process. I was lucky and didn't, as my problem was solved by removing StarForce.

Now you know why I won't let this die. If one person listens and gets one other to listen and they in turn keep passing it on and on, then I've done what I've set out to do.


Takeda, I'm serious, don't laugh or make lite at what I and others have to say, and I won't laugh back when a problem arises from StarForce. If you never have a problem with StarForce, great..... you're a lucky one out of the many that aren't. Just hope you never do have a problem either.... it's no joke. No not life threatening by any means, but still not something anyone wants to happen. Especially with the amount of money a computer can cost, even ones we build ourselves and are proud of. I sure don't want to lose the 2 grand I've put into mine.

Are you now even suggesting that SF is capable of destroying your entire PC? :hmm:

Well don't take it too harshly when I tell you I don't feel for your loss. A friend of yours lost a DVD Drive and you lost your burn capabilities, temporarily I might add...

Well my friend that's tough.

But before you go on a cruade such as this I would ask that you consider, I have had to do a complete reinstall of my OS, and throw out a perfectly good Redundant Array of Independent (or Inexpensive) Disk because StarForce ceased the Idle Spin and ruined several sectors including the part with the MBR(Master boot Record) I attribute this to StarForce's software based on looking at the RAID Drive's Log and found Cease\Term Sig:StarForce Enviroment Protection Driver. I have since replaced the effected parts(not cheap) and moved on with my life.

Ocassionally letting others know of the problem I had with it.


So I say to you /AGAIN/ before you continue this Crusade of yours. consider, your problem was minor compared to my own and note that you don't see me telling everyone to BEWARE! I know tons of people who never had a problem and several who have had similar to the problems you describe. A Total problem such as what I expierianced, well... I have yet to meet someone who shares it.
Which means its a slim chance and perhaps more related to my system config then with just StarForce.

The issue about StarForce containing rootkits is moot, because in my opinion StarForce in itself is a DRM>*edit: It's late.

Re: StarForce has been checked. No root-kits found
 

It really dies depend on what your classification of Malware is?


The laughable thing is that we have already stepped away from the rootkit association because it does not hide itself, it is their if you know where to look.

However we have quite clearly stated.

1. DMA step down. & occassionally Hardware failure.
2. Incompatibilities with SCSI and SATA
3. Ring 0 access given to Ring 3 level programs.
4. Code 41 errors (This creates the illusion of hardware failure). An illusion that is so good that Ubisoft/Starforce and even drive manufacturers did not know how to cure it. (Guess who cured it? :lol: :up: )

As usual they are ignoring the actual facts. Just to update Russinovich did just do a preliminary check on SF (As in rootkit, nothing else), he has not touched it since. As you can read in a previous post in this thread, Soulcommander has been chatting with him and ask him check it out properly.

Me thinks that is a bit of constructive reporting in that article. :down:

time to End this!
 

Okay here's how to make this thread
Kaput!

This thread has not been replied to by the following,
The Avon Lady(The Voice of Reason)
Bill Nichols(SubSim's Intelligence Officer)

So its either,
A) A waste of time.
B) Pointless(Edit* Pointless as in a debate with no possible ending. Except lock)
or
C) More Potentially Dangerous then actually Dangerous.

I say,
D) All of the above.

E) none of the above :lol:

There is NO E!
There is no Spoon!

SF itself cannot destroy your entire PC, it does however open Ring 0 (System wide access) to Ring 3 (user level programs).

To be more accurate and I have openly set a challenged to Starforce Technologies to come to NGH headquarters in the UK and prove otherwise.

SF is a Trojan Gateway. (Was this intentional? well we have no evidence of that, however it is very irresponsible of them not to close this massive security hole).

Can 3rd party malware, Viri etc use the hole left open by SF to destroy your computer?

Well let me give you an example what Ring 0 access gives you control of.

The Entire OS. HDD firmware, System Bios, GFX card Firmware, Router/ADSL/DSL modems and firmware, CD/DVD firmware.

Then I will ask do you think damage can be done to your hardware?

Without intentionally scaremongering there are over 5000 types of malware setup to exploit Ring 0 access of which over 1000 will physically destroy hardware, that is why Microsoft spent some much money and time closing it in the first place.

btw that affects Win 2000 through to XP.

responsible coders know not to use undocumented IDE register calls in a Virtual IDE driver. Purely because of incompatibility problems and because of the Security Issues that Ring 0 access creates.


In case you are wondering I have called Starforce a "Trojan Gateway" Directly to Starforce Technologies.

Am I being sued for such a slanderous comment on the net?

Well quite simply no! as that is exactly what Starforces IDE protection driver is. So they actually have not case for litigation.