Xhunter1.sys Driver is causing memory integrity issues

[HyperWayne]

This is a monitoring driver installed by Xigncode3. Wellbia.com. I started to notice my pc was having odd issues and this driver was then found to be causing said issue.

I am unable to remove said driver and its a kernel level driver. It also installed ELGATO video capturing which has made me super uncomfortable. I uninstalled every driver once my memory was having issues.

I have confirmed from WINDOWS MICROSOFT that it does slow down your pc.

Alot of games here on steam use that driver for Anti Cheat but its not just an Anti Cheat its monitoring alot more than just that.

[HyperWayne]

Thought Id let alot of you know if your computer started to randomly malfunction after a game install.

[The Suave King]

Delete xhunter if you can.

[HyperWayne]

Originally posted by Soapylinks:

Delete xhunter if you can.

I did and found out how.

[Archform]

explains why google knows my every search, including file explorer...damn ads

[meh]

I thought steam had performance issues lately. So xhunter ended up being the problem. Everything works fine after deleting the .sys file and regedit entry.

[RiO]

Here's the list of known titles that use the driver, through a product called nProtect GameGuard:
https://en.wikipedia.org/wiki/NProtect_GameGuard

Yes; PUBG is on that list as well. And is the usual cause of this piece of crap finding its way onto your system.

As far as anti-cheat goes, it's extremely invasive. It apparently runs continuously and monitors all keyboard strokes. Which would mean it's blatant spyware.
Next to that it also indiscriminately decides to kill any process it deems suspect; or block any legit DirectX or Win32 API call it does not fancy. These can of course cause all kinds of weird compatibility problems with software other than the game it is meant to protect.

It's also a shoddy piece of work. It's tied to causing kernel memory corruptions that trigger BSODs. No doubt this is due to the same unsafe programming practices that also cause it to fail to pass the memory integrity conditions. Some versions of GameGuard also have an unpatched privilege escalation bug which allows malicious actors to gain administrator - possibly even system - level access on your machine.



If your system can handle it; I would always recommend running with memory integrity switched on. A driver which is incompatible with it is with nigh certainty written to execute dynamically built or received code. In case of anti-cheat solutions that usually means code prepared outside of the kernel by lower privilege processes, being passed to the kernel driver for execution. And that's basically: a remote code execution and privilege escalation vulnerability waiting to happen.

If a game requires such a driver to work; refund it. It is not a safe product.

[:::... FulVal85 [LMHT] ...:::]

Logitech drivers have the same problem (memory integrity issues only, i think not slowdowns, but i'm not sure), so i recommend to check it and to report the problem