SECDRV.SYS Not Loading in Windows 10; this will break thousands of older games.

Anonymous
2015-08-01T20:13:40+00:00

Hello,

I have discovered an unfortunate problem with Windows 10.

Many games from the early-mid 2000's used Macrovision's SafeDisc (version 2) as a means of copy protection. At game startup, Windows loaded SECDRV.SYS to verify an original game disc was in the drive, after which the game would start.

When you try to run ANY game which uses this SafeDisc form of copy protection in Windows 10, the following happens:

 - You get an error window that tells you to log in with Administrator Privileges and to try again. This happens on any account, even those with Administrator access. The game fails to start.

 - If you then set "Run as Admin" compatibility mode on the game's startup file, the message disappears, but the game doesn't start.

 - Keeping a window open for C:\WINDOWS\SYSWOW64\DRIVERS shows SECDRV.SYS appearing at the moment you try to start the game. Based on its size, it appears to be the file that is present on the game disc (tested across several games), even though I see no disc activity and cannot find the file elsewhere on my system.

 - The Windows event log shows that SECDRV.SYS failed to load.

 - This happens both with an upgraded install (Windows 8.1 > Windows 10) and with a fresh Windows 10 install, with one of the games being installed immediately upon the fresh install completing.

 - On my Windows 64-bit 8.1 system, C:\WINDOWS\WINSXS has a folder called amd64_macrovision-protection-safedisc_31bf3856ad364e35_6.3.9600.16384_none_4e6b3758913c9240 with a SECDRV.SYS in it, presumably the one that ships with Windows. Windows 10 had such a folder in early builds, but it is missing from the release build. It appears SafeDisc support is missing entirely.

OTHER TESTING I HAVE DONE:

 - I updated one of the games to a version that no longer required the CD check, and it started immediately and ran perfectly once the check was removed. However, this is possible only with a very limited number of games, or resorting to fixes that violate the game's EULA or put the user's system security at risk.

 - I tried disabling driver signature verification and installing one of the games again; same problem.

 - Multiple compatibility modes; same problem. XP (Service Pack 3) mode and / or Run as Administrator mode make the error message go away, but the games still fail to launch.

SIGNIFICANCE:

Unless this is fixed in Windows 10, a massive catalog of older games will cease to function in Windows 10 for the simple reason that they cannot pass the SafeDisc copy protection check. I am accustomed to some games breaking with every new version of Windows as technology progresses (for example, the loss of the ability to run 16-bit programs in 64-bit Windows), but this seems to be an unnecessarily harsh change.

Windows for home | Windows 10 | Gaming

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

293 answers

Sort by: Most helpful
  1. Anonymous
    2015-09-16T16:00:44+00:00

    I'm no Linux expert, but Secure Boot should work with it. You just need a bootable distribution that is properly signed for it to work. If yours doesn't work with a particular (size of) USB disk, I suggest you update to a more recent version. Or switch to Windows since that works with any and all USB disks in my experience.

    That said, it's off topic for this thread.

    For Windows, you can boot to Recovery Environment, open a Command Prompt from there and use Dism to backup/restore/move partitions in conjunction with bcdboot/bcdedit and diskpart. Or you make a Windows PE USB disk to do exactly the same. That might be slightly more involved however, but is useful if Windows RE isn't present or you want to move or resize the UEFI boot or system partitions. There's plenty resources on the Internet on how this all works. You will need a (USB) disk with enough free space to backup stuff, but that's smart anyway, since in-place editing of partitions is bound to get you into a 'have a good yesterday' style problem whatever software you use to do it.

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2015-09-16T12:56:17+00:00

    Live Linux USB sticks have been handy for along time, but they do not work well on bigger capacity sticks.

    I installed clonezilla to be able to copy disks and partitions as desired

    The secure boot configures the BIOS to boot the hard disk and the F8 key brings up the boot menu, and if it finds no UEFI loader it may be empty, but the windows installer will see all hard disks 

    all it means is I have to configure the BIOS to boot the Linux stick, Linux can see GPT disks as well as MBR

    Secure boot does not require bitlocker, the boot process is protected until Windows Defender is loaded

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2015-09-16T02:47:53+00:00

    you just buy it from the online store https://www.facebook.com/permalink.php?story_fbid=505695542923114&id=505694222923246. Genuine product, effective reply and good customer service.

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2015-09-15T13:43:22+00:00

    Isolate the computer from your phones, iPads and other computers by making sure it's network location is set to Public.

    Note that it's quite pointless to only do this while you're playing games, since a security hole might compromise the whole computer permanently. So dual boot to an isolated disk, use different passwords, different, preferably local accounts, etc, then follow these instructions.

    As follows:

    For Windows 8.1:

    http://www.7tutorials.com/change-location-network-private-public-windows-81

    For Windows 10:

    On a wired network, click Settings, Network & Internet, Ethernet.

    There's an icon indicating 'Connected' under it, open it.

    Under 'Find devices and content' turn the switch to 'Off'.

    On a wifi network, click Settings, Network & Internet, Wifi.

    Scroll down to 'Advanced Options' and tap it.

    Under 'Find devices and content' turn the switch to 'Off'.

    You'll have to do this afterconnecting to a Wifi network (if you have Ethernet and Wifi like on my tablet).

    You might have to do this again after you connect to a different Wifi network.

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2015-09-15T13:34:46+00:00

    I'm so sorry. I can't be **** to read through this top to bottom.

    I refer to the link posted below: https://support.microsoft.com/en-us/kb/3086255

    All shouting, trolling or bashing left aside, it mentions a workaround. Best to dual boot and isolate that OS you use to play games from other computers, accounts, harddrives and networks you use. SECDRV will be compromised sooner rather than later.

    This particular link mentions it applies to Windows 8.1 RT, Windows 8.1 and Windows Server 2012 R2, but not Windows 10. I actually think it might work just the same, at least after test-signing SECDRV.sys and enabling TESTSIGNING boot mode.

    Let me summarize here:

    • After you install this security update, some programs may not run. (For example, some video games may not run.) To work around this issue, you can temporarily turn on the service for the secdrv.sys driver by running certain commands, or by editing the registry.

    Note When you no longer require the service to be running, we recommend that you turn off the service again.

    Warning This workaround may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

    Start a Command Prompt (Administrator)

    To allow the service to be started only on demand (safer than automatically upon boot) and then start the service:

    sc config secdrv start= demand

    sc start secdrv

    <start game>

    To stop and disable the service:

    sc stop secdrv

    sc config secdrv start= disabled

    Was this answer helpful?

    0 comments No comments