Tom's Hardware Forums » Games General » PC Gaming » How to remove Securom malware after uninstalling the Bioshock demo
 

How to remove Securom malware after uninstalling the Bioshock demo




Word :   Username :  
 
Bottom
Author
 Thread : How to remove Securom malware after uninstalling the Bioshock demo
 
Profile: addict
More Information

Like many others I installed the Bioshock demo, played it and then later uninstalled it. Much to my horror I later discovered that even the demo installs Sony's Securom DRM sh*tware and, whats worse, leaves Securom on your system even if you uninstalled the Bioshock demo! :fou:

This is a security risk! :non:

So without further ado:

Securom uninstallation instructions for Windows XP SP2

Disclaimer 1: Only attempt these uninstallation instructions if you are reasonably computer literate and have backed-up your entire system.
Disclaimer 2: Only attempt these uninstallation instructions if you have no games installed which require Securom to be present.
Disclaimer 3: Only attempt these uninstallation instructions if you previously had to authorised your PC with Securom before you could play a game and that game is now uninstalled.

* Step 1: Uninstall the Bioshock demo.

* Step 2: Remove the Securom registry entries.
The Securom registry entries are deliberately made non-removable by default. In order to remove them download the http://www.microsoft.com/technet/s [...] lNull.mspx RegDelNull registry editing utility from Microsoft and install it on your C partition.
Run the following two commands from a Windows command prompt: "C:\regdelnull HKEY_CURRENT_USER\Software\SecuROM -s" and "C:\regdelnull HKEY_USERS\<Computer specific key>\Software\SecuROM -s" where "<Computer specific key>" can be determined by searching the registry for the "Securom" directory key. This "<Computer specific key>" typically has a form like "S-1-5-21-2052111302-1757341266-724545543-500". Once these two RegDelNull commands have been successfully issued the registry should be checked to confirm that these two keys have been deleted. If they are still present they will now be removeable due to the action of the RegDelNull utility.

* Step 3: Removal of the Securom service and related utilities.
Open a Windows command prompt and change directory to "c:\windows\system32". Type "uaservice7 /remove". This will stop the Securom user access service, and clean up its relevant registry entries. On the Windows command prompt type "regsvr32 /u cmdlineext.dll". Reboot and then manually delete the files "uaservice7.exe" and "cmdlineext.dll" from "c:\windows\system32". Note: Both of these files are Securom installed files which can be verified by checking their file properties (Right click - Properties).

* Step 4: Removal of Securom files under "C:\Documents and Settings".
Securom installs a hidden directory with 6 files under "C:\Documents and Settings\<Your Administrator name>\Application Data\Securom". The first 4 ordinary text files can simply be manually deleted once Windows explorer has been configured to show hidden files and folders. The two remaining malformed nominally unremoveable files require a special method to delete: Invoke a Windows command prompt with full Administrator privileges by typing the following into a Windows command prompt: "at <your current time + 1 minute> /interactive %systemroot%\system32\cmd.exe" e.g. "at 9:02pm /interactive %systemroot%\system32\cmd.exe". This will open a new Administrator command line when the time set has been attained. In this new command prompt change directory into the Securom folder e.g. "cd C:\Documents and Settings\<Your Administrator name>\Application Data\Securom". Issue the following command to show the two remaining hidden malformed files: "dir /A". To delete the two remaining hidden malformed files issue the following command: "del /F /AH *". Confirm "yes" for each of the two file deletions of the malformed files. Finally, the directory "C:\Documents and Settings\<Your Administrator name>\Application Data\Securom" can be deleted as per normal practice from within Windows explorer.


---------------
BaronMatrix:
"Now me, I have very nearly had sex on the dance floor of a club with a sober woman - about 4 times."
"AMD is actualy killing Intel."
"I think you're just a spreader of FUD."
Related Product

Register or log in to remove.

Profile: old hand
More Information

WOOT IT WORKED IT WORKED :D thanks

by the way do you know why Jack left?? its rather lonely without him to be quite honest.. too lose such an old member really sucks

"Hello" lied the politician
Profile: Faithful Poster
More Information

does this work for the full game? (i'm not finished playing it yet but when i do...)
edit: also I need to ask how to do it on vista (if anyone knows how) as it occurs to me that that is what I am running


Message edited by spuddyt on 08-26-2007 at 10:51:20 PM
Profile: enthusiast
More Information

Well 2k just lost a customer for bioshock. I am not putting any of sony's garbage DRM malware on my computer. This is getting pathetic. I can't believe that you put this crap on the computer and you can't get it off after you uninstall. Screw bioshock, sony, and securom. God, I hope someone sues them all for trespass to chattles. Those morons will never learn that people own their computers and have paid for their stuff. WTF do they leave it on others computers.

There is no reason that people should have to manually erase this garbage in the registry. Not everyone is leet with computers.


---------------
Gahleon Mod
http://img340.imageshack.us/my.php [...] 023yj7.jpg
http://img340.imageshack.us/my.php [...] 068gb0.jpg
"Hello" lied the politician
Profile: Faithful Poster
More Information

They are supposedly going to give people a program to remove securerom after a while (though it suxks that they put it in in the first place)

Profile: stranger
More Information

In principle, I don't like uninstalling something and having it leave stuff behind on my computer. But what impact does it have anyway?

I was going to try and manually uninstall it using the steps you listed above, but I checked the list of other games that use it. I already had it from Tomb Raider: Anniversary. :(

Profile: stranger
More Information

Please don't buy this game if you do not want to end up 'hiring' your games instead of buying them. If this games reach the number of sales it deserves as game, the publishers will be using more of this dunk. It really does deserve to sell well because it is a good game, but only if it hadn't had the DRM.


Profile: member
More Information

Immediate impact? Who knows. The last Sony DRM system though was an open door for anyone's rootkits to hide behind.

As usual, it's only the legitimate customers that'll be impacted. They've already been having to modify their system due to it being circumvented.

Someday they'll spend money developing games and not futile attempts at copy protection. I can dream I guess.

"Hello" lied the politician
Profile: Faithful Poster
More Information

or a playstation that doesn't cost as much as small house :lol:


---------------
E2160 @ 3 ghz, 4 gb ddr2 800 (4-4-4-12) 2900 pro @XT (those are the important bits for FPS :P)
Profile: member
More Information

On a Vista 64bit OS all I've got for securom is that
first registry key "C:\regdelnull HKEY_CURRENT_USER\Software\SecuROM -s"
After that, I've can't any other keys nor services. Am I doing this right or
does this program do not support Vista x64?



Message edited by lp231 on 08-31-2007 at 04:23:45 AM
Profile: journeyman
More Information

What are you guys talking about? I installed the BioShock demo off Steam, and it didn't install Securom. I've gone through my registry 3 times now, and I cannot find a registry key for SecuRom anywhere in it, on both my PC's that I played BioShock on.
I don't think the demo actually installs SecuRom software, or if it does, when I uninstalled it the SecuRom stuff went with it.

*Smacks turpit with a +5 ban stick*
Profile: Forum Veteran
More Information

Or just reformat.

Profile: stranger
More Information

Whoa whoa whoa....

Yes, invasive stuff that stays behind when you uninstall is not nice. Most of the software I've met does that on Windows, so this DRM stuff is really nothing "new" but it still sucks eggs.

Quote :

Please don't buy this game if you do not want to end up 'hiring' your games instead of buying them.



Hello? You NEVER OWN any digital content you "buy", you only purchase a license to use said form of entertainment. Hence license agreements, etc. I agree that malware stinks and it's not necessary to put it into the installers of games. But lets try to get our facts straight here. Where they've crossed the line is they're potentially violating their own agreement with you from their end by badly implementing their copy protection scheme.

Quote :

What are you guys talking about? I installed the BioShock demo off Steam, and it didn't install Securom. I've gone through my registry 3 times now, and I cannot find a registry key for SecuRom anywhere in it, on both my PC's that I played BioShock on.
I don't think the demo actually installs SecuRom software, or if it does, when I uninstalled it the SecuRom stuff went with it.



Exactly; I think they're taking the first steps to fix it. That doesn't help you if you have a disc copy but I'm sure that if Valve can do it, so can 2K and Securom, and it sounds like they're going to scrap the DRM if things keep going like this. If Securom as a company can't uninstall their own software there's something very wrong.

Profile: addict
More Information

I couldn't find anything either.. But my keyboard has been lagging for a while now.. >_<

Profile: addict
More Information

Fixed my page fault something BSOD on shutdown.

Nuke it, Nuke it good!
Profile: Eternal Poster
More Information