Why This Game is using my SYSTEM32 Folder?

[ScooPaX]

explain this?

there is a batch file called DriverInstaller.bat installing/copy a sys file into my system32 folder!!

what is this file ateam64.sys? what kind of driver is this? why this file needs access to my system32 folder?

what is this file for? why the game not even asked me for a permission to copy files to my system32 folder?

even if u deinstall the game the file ist still in my system32 folder explain this?





@echo off

copy /y "%~dp0\ateam64.sys" "%windir%\Sysnative\"

sc create ateam64 binPath= SYSTEM32\ateam64.sys type= kernel start= auto DisplayName= ateam64

sc start ateam64

if %errorlevel% equ 5 exit /b 1

exit /b 0

[ScooPaX]

BUMP!!

what is this file for PLS answer devs!!

[Fortuna]

this looks more like a malware that "other system file", remember sf5 malware?, maybe is the same trash, but with other name

[ScooPaX]

Originally posted by Fortuna:

this looks more like a malware that "other system file", remember sf5 malware?, maybe is the same trash, but with other name

I thought of that at first, a game should never have access to windows system folders without permission. have already reported this to steam because the developers do not want to answer

[Fortuna]

Originally posted by ScooPaX:

Originally posted by Fortuna:

this looks more like a malware that "other system file", remember sf5 malware?, maybe is the same trash, but with other name

I thought of that at first, a game should never have access to windows system folders without permission. have already reported this to steam because the developers do not want to answer

don't try, never response, only recieve ingame purchase errors

[Fortuna]

bump my review, add this information for more security

[CaOtIcOs]

Devs?

[Daydreaming Insomniac]

Originally posted by Fortuna:

this looks more like a malware that "other system file", remember sf5 malware?, maybe is the same trash, but with other name

sf5 malware? What's this?

[Fortuna]

Originally posted by Daydreaming Insomniac:

Originally posted by Fortuna:

this looks more like a malware that "other system file", remember sf5 malware?, maybe is the same trash, but with other name

sf5 malware? What's this?

https://kotaku.com/street-fighter-v-update-pulled-because-it-made-pcs-vuln-1787038586

[Tama Kaze]

ah proobably that are cookies about that website directly using your default browser from the game.

[ScooPaX]

Originally posted by Askura Asukara:

ah proobably that are cookies about that website directly using your default browser from the game.

1000% no cookies

thats the batch file this will run this unknown file in kernel mode for me it is a backdoor or maleware... so this file is running in background all the time even if u dont play the game.

just check your services


@echo off

copy /y "%~dp0\ateam64.sys" "%windir%\Sysnative\"

sc create ateam64 binPath= SYSTEM32\ateam64.sys type= kernel start= auto DisplayName= ateam64

sc start ateam64

if %errorlevel% equ 5 exit /b 1

exit /b 0

[DimensionalLucario]

The file is pretty much unremovable by the way... can't be deleted, can't be forcefully deleted even with CMD. Reminds me of the Valorant scandal. Shame Bluestacks no longer works with the game

[Pink Gorilla]

I don't know if I should be replying this old thread but I've also asking the same question few weeks ago.

But after a little bit of research on the file contents between Valkyrie Connect and Genshin Impact, it is most likely this is their form of anti-cheat software. They are using the same game engine so the file structure is almost the same.

Too bad it doesn't run on Linux because of that.