p2p news / p2pnet: StarForce isn’t only nasty, it’s a worm.
So says r-force.org.
"Right after the recent findings that Starforce will reboot your computer when it find ‘suspicious’ activity, it has now been found it also travels across networks," says a Digg post.
"This means Starforce has FULL access to the internet as it is a ring0 driver, so it could potentially be sending information back to their servers and wont show up on firewalls."
StarFarce, "attempts to stop game customers from copying their property, but it has the side-effects of destabilizing and crashing the computers on which it is installed," Cory Doctorow posted on BoingBoing recently.
And a CDFreaks story says StarFarce installs a driver, "that gains RING0 access (the highest level of access to your computer)."
"The installation requires Administrator level access to install the driver, which runs all of the time regardless of whether or not you’re playing a game with Starforce DRM. With such a high level of processor access (sharing the same levels the operating system enjoys), the Starforce driver can do anything to your computer at any time. This very ability is demonstrated, since the Starforce driver will force a reboot (not a shutdown) when it thinks it has discovered suspicious activity related to copying. The reboot occurs instantly, and any and all unsaved data could be lost."
Head over to r-force for an on-going email interchange in which the word ‘libel’ is mentioned.
Digg – Starforce now found out to be a worm., March 24, 2006
BoingBoing – StarForce threatens to sue me for criticizing its products, January 31, 2006
RING0 access – StarForce saga continues, March 21, 2006
r-force – Starforce Admin; Not happy with posting warez, now they resort to libel, March 22, 2006