Proof of Fishy Practices / malware?

[Possemaster]

Hmm, I like the game but this seems very fishy to me.

This game creates 2 Startup Tasks in your user account to start as the user logs in.

If you have started the game once, Open taskmanager and go to StartUp Apps you see 2 tasks;
0 and a UUID {3cd4e915-5efa-49b9-8d0a-40f7f1d6a932} something like this (it changes every time)

I have removed them in registry under (HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run)
They are named:
AF_counter_2139460 with value 0
AF_uuid_2139460 with value 3cd4e915-5efa-49b9-8d0a-40f7f1d6a932 (This changes)

As soon as you start the game they are back immediately.
This is not OK, why would a game create a startup tasks for your user?

2139460 is the Steam Game ID, so that matches in the registry keys. But if they need to log something in the registry Run is NOT the location to do this.

[◬ ☥ 𝕄𝕚𝕝𝕜 ☥ ◬]

I would edit out your UUID numbers not really necessary to post your private information like that

AF_counter_XXXXXXX is better.

Secondly, try reading the forums instead of making another new post, there are a hundred fearmongering posts about it here with a hundred answers.

[Possemaster]

This UUID chnages every time I remove the keys so it does not link to me
next 2139460 is the STEAM Game ID.
Look at the URL of this discussion: https://steamcommunity.com/app/2139460/discussions/0/4410795908427053768/

[◬ ☥ 𝕄𝕚𝕝𝕜 ☥ ◬]

Your logic is completely flawed and also wrong but whatever floats your boat fella it changes because you deleted it and it establishes a new user ID. It doesn't care who you are it cares how many times you launched the game which is what the 0 number is. Again, been explained hundreds of times already

P.s. i didnt mention the game ID a single time to be overwhelmingly clear im talking about the VALUE of the 2nd one but if you dont care then it doesn't matter at all carry on

[Zero-Three]

Sort of a copy paste from another post i did, but still applies. It is definetly suspicious at first glance and really annoying to deal with, but seems to be a thing caused purely by incompetence of the people who ported the game. Summoners War's port has the same thing.
--------------------------------------------------------------------------------------------------
These 2 startup apps actually aren't apps at all, they should be inside the game registry but for some reason is registered as start up apps and does look worrying. It's an analytic software for Installs and uninstalls.

It's from this company https://en.wikipedia.org/wiki/AppsFlyer

The character strings is your assigned device ID, and the singular digit number is the amount of times you installed the game

They are a company that tracks installs/uninstalls for mobile games, for some reason it was included in the PC release of the game (like summoners war). If you are wondering why this is here, this game is actually a mobile game ported to PC.

Due to it being installed improperly, these "apps" aren't deleted when you uninstall the game. If you are playing the game actively, disable the process on startup as it'll restore the files every time you launch the game.

If you uninstalled and want the files gone, you'll want to run this string in your registery "Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" and delete the "AF_counter" and "AF_uuid" files

[Possemaster]

Originally posted by Zero-Three:

Sort of a copy paste from another post i did, but still applies. It is definetly suspicious at first glance and really annoying to deal with, but seems to be a thing caused purely by incompetence of the people who ported the game. Summoners War's port has the same thing.
--------------------------------------------------------------------------------------------------
These 2 startup apps actually aren't apps at all, they should be inside the game registry but for some reason is registered as start up apps and does look worrying. It's an analytic software for Installs and uninstalls.

It's from this company https://en.wikipedia.org/wiki/AppsFlyer

The character strings is your assigned device ID, and the singular digit number is the amount of times you installed the game

They are a company that tracks installs/uninstalls for mobile games, for some reason it was included in the PC release of the game (like summoners war). If you are wondering why this is here, this game is actually a mobile game ported to PC.

Due to it being installed improperly, these "apps" aren't deleted when you uninstall the game. If you are playing the game actively, disable the process on startup as it'll restore the files every time you launch the game.

If you uninstalled and want the files gone, you'll want to run this string in your registery "Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" and delete the "AF_counter" and "AF_uuid" files

Makes sense, thanks for explaining as a normal person.
They really should change the Registry location as this is not OK.
It makes sense that it comes from a Marketing platform AppsFlyer hence the name of the key AF : https://dev.appsflyer.com/hc/docs/nativepc-vanilla

[◬ ☥ 𝕄𝕚𝕝𝕜 ☥ ◬]

yep as explained has already been posted hundreds of times thank god this zero-three guy is willing to do the work for you (the "work" of searching the forums)

[Possemaster]

Originally posted by ◬ ☥ 𝕄𝕚𝕝𝕜 ☥ ◬:

Your logic is completely flawed and also wrong but whatever floats your boat fella it changes because you deleted it and it establishes a new user ID. It doesn't care who you are it cares how many times you launched the game which is what the 0 number is. Again, been explained hundreds of times already

P.s. i didnt mention the game ID a single time to be overwhelmingly clear im talking about the VALUE of the 2nd one but if you dont care then it doesn't matter at all carry on

Yes you did, you masked the SteamID in your post.... AF_counter_XXXXXXX

[◬ ☥ 𝕄𝕚𝕝𝕜 ☥ ◬]

I was giving an example of how you could censor it im sorry for assuming you could extrapolate from there my bad! (i dont really understand how you know what im talking about and i know what you're talking about but you cant figure out that i dont mean the game ID when you know what the game ID is and also know that it wouldn't matter) the next step would be looking at the other numbers that do matter hmmmmm

[Possemaster]

Originally posted by ◬ ☥ 𝕄𝕚𝕝𝕜 ☥ ◬:

I was giving an example of how you could censor it im sorry for assuming you could extrapolate from there my bad! (i dont really understand how you know what im talking about and i know what you're talking about but you cant figure out that i dont mean the game ID when you know what the game ID is and also know that it wouldn't matter) the next step would be looking at the other numbers that do matter hmmmmm

Aaah the world is a better place with you in it..... Wonder why people are so *** Up right now. Keep on trashing my friend.

[Zero-Three]

Originally posted by Possemaster:

Originally posted by Zero-Three:

Sort of a copy paste from another post i did, but still applies. It is definetly suspicious at first glance and really annoying to deal with, but seems to be a thing caused purely by incompetence of the people who ported the game. Summoners War's port has the same thing.
--------------------------------------------------------------------------------------------------
These 2 startup apps actually aren't apps at all, they should be inside the game registry but for some reason is registered as start up apps and does look worrying. It's an analytic software for Installs and uninstalls.

It's from this company https://en.wikipedia.org/wiki/AppsFlyer

The character strings is your assigned device ID, and the singular digit number is the amount of times you installed the game

They are a company that tracks installs/uninstalls for mobile games, for some reason it was included in the PC release of the game (like summoners war). If you are wondering why this is here, this game is actually a mobile game ported to PC.

Due to it being installed improperly, these "apps" aren't deleted when you uninstall the game. If you are playing the game actively, disable the process on startup as it'll restore the files every time you launch the game.

If you uninstalled and want the files gone, you'll want to run this string in your registery "Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" and delete the "AF_counter" and "AF_uuid" files

Makes sense, thanks for explaining as a normal person.
They really should change the Registry location as this is not OK.
It makes sense that it comes from a Marketing platform AppsFlyer hence the name of the key AF : https://dev.appsflyer.com/hc/docs/nativepc-vanilla

I hope they fix it soon because it is very confusing and annoying to deal with besides, but for the moment it is what it is. IDK if it's something they themselves can fix though.

[pofanim]

is it dangerous to download and play?

[Furry Lord]

I dont think it is dangerous, but it is suspicious indeed. Best to avoid for now.

[shadeaflame]

Originally posted by Zero-Three:

Sort of a copy paste from another post i did, but still applies. It is definetly suspicious at first glance and really annoying to deal with, but seems to be a thing caused purely by incompetence of the people who ported the game. Summoners War's port has the same thing.
--------------------------------------------------------------------------------------------------
These 2 startup apps actually aren't apps at all, they should be inside the game registry but for some reason is registered as start up apps and does look worrying. It's an analytic software for Installs and uninstalls.

It's from this company https://en.wikipedia.org/wiki/AppsFlyer

The character strings is your assigned device ID, and the singular digit number is the amount of times you installed the game

They are a company that tracks installs/uninstalls for mobile games, for some reason it was included in the PC release of the game (like summoners war). If you are wondering why this is here, this game is actually a mobile game ported to PC.

Due to it being installed improperly, these "apps" aren't deleted when you uninstall the game. If you are playing the game actively, disable the process on startup as it'll restore the files every time you launch the game.

If you uninstalled and want the files gone, you'll want to run this string in your registery "Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" and delete the "AF_counter" and "AF_uuid" files

it is software that collects data on the user and they are unable to uninstall them with the game. That is spyware. It doesn't matter if they are used by a company and are known. If they are persistent, collect information, and hide from the user that is spyware. This is unacceptable and should not be allowed. So as it stands Once Human is a malware distribution IP that should not be trusted.

[muug]

qppflyer sdk is for more than just mobile. can be used with anything. doesn't even have to be a game

i went through the sdk a bit just now. its not spyware or malware by definition. its just an analytics toolset. its no worse than playing something related to tencent or using tiktok. its just chinese based data tracking

unity analytics probably tracks just as much. even ordering a dominos pizza online is probably giving out more information then this. the counter/uuid is just tracking the amount of times you load up the game. its a player retention tracker that is sorta just poorly designed to the point that its easily visible.

saying its spyware or malware is a bit exaggerated. saying they hide it is funny too when its so in the open that non-technical users are finding traces of it in their filesystem. call it what it is. look i still personally won't use tiktok or play chinese games as i dont support authoritarian governments like that, so i get it bros. but theres no need to be sensational or fear monger about something you dont fully understand

steam is very very good about sorting out malware/spyware. you guys can relax and play the game if you really want to

[GeneticResearch]

Originally posted by Zero-Three:

the singular digit number is the amount of times you installed the game

That can not be correct because i have installed the game only one time but i have a number of 5.

Originally posted by Zero-Three:

this game is actually a mobile game ported to PC.

Thats also not correct. It is a pc game which was mainly developed for pc and which had several betas in the past to test it just for pc. It will be ported to mobile at the end of this year. Not the other way around.