Jump to content
  • Cyclone Boom
    Cyclone Boom

    important
    Microsoft releases update, blocks SC4 from starting

    Following the trend of Windows 10, Microsoft has released security update KB3086255 for Windows 7, Windows 8.1 & Windows Vista.
    Due to "security concerns", this intentionally disables the service which runs the secdrv.sys driver – a component of the SafeDisk protection which SC4 uses.

    As a result, this prevents the disk-based (CD) version of SimCity 4 from running, and you may receive an "Access Denied - Please login with administrator privileges and try again" or similar permissions error. Many other legacy games are also affected.

    It would seem the update simply disables the service, rather than removing secdrv.sys completely (like Windows 10 has).

    NOTE: This shouldn't impact users of a digital based game, such as from GOG or Steam, as these don't rely on the same copy protection.


    Full details of the update are as follows:

    Security update for the graphics component in Windows
    September 8, 2015 (KB3086255)

    https://support.microsoft.com/en-gb/kb/3086255

    MS_Update_KB3086255.png

     

    Workarounds

    1)  Purchase SC4 digitally

    Online retailers such as GOG or Steam offer a digital version of SimCity 4 Deluxe.

    This comes as a download without the need for the CD to start. It's also fully patched and doesn't use the same method of copy protection, so you can install KB3086255 without issue and play the game as normal. In the case of GOG, the game is currently sold DRM free, meaning it starts by itself without a client service (e.g. Steam).

    During seasonal sales, you can often purchase the game for as little as $5.

     


    2)  Redeem your SC4 Serial Number

    You may be able to redeem your original Serial Number (product key), found at the back at the CD's manual. This may entitle you to a free digital copy of the game, with the same benefits of not needing other workarounds.

    With Origin you can try contacting customer support, who can usually assist with this. As well as the serial number, you may need to provide physical evidence that you own the boxed copy, such as screenshots of the game's case & disks.

    Other online retailers may also offer a similar option, so it's best to contact them directly.

     


    NOTE: Use at your own risk!  *:read:
    The following suggestions will allow SimCity 4 to run, although they could potentially expose your system to security vulnerabilities (which the update intends to bypass). Therefore it's your own responsibility should any issues arise from not installing KB3086255, however the risk level of security flaws being exploited.



    3)  Uninstall KB3086255

    If updates are set to install automatically, you may have this update already installed.

    In which case, to allow the CD game to start again, without the need for any workarounds, you'll need to uninstall the update:
    http://www.sevenforums.com/tutorials/24373-windows-update-uninstall-update.html

    A quick way to check if it's installed:
    Enter KB3086255 in the "Search Installed Updates" box at the top right.


    Note: To reduce the risk, it might be worth disconnecting from the internet whilst the game is running. Also it's recommended to ensure your anti-virus has the latest protection definitions.

     


    4)  Hide KB3086255

    If you haven't installed KB3086255, it might be worth hiding it from the list of updates:
    http://www.sevenforums.com/tutorials/24376-windows-update-hide-restore-hidden-updates.html

     


    5)  Enable secdrv.sys on demand

    However if you wish to retain the update, the below instructions (from the knowledge base article) describe how to start the service on demand, which should allow SC4 to run from the CD when you require:
     

    Quote

    Summary

    In addition to the changes that are listed for the vulnerabilities that are described in Microsoft Security Bulletin MS15-097, this security bulletin addresses a defense-in-depth update for the secdrv.sys driver, a third-party driver. The update turns off the service for the secdrv.sys driver. This may affect the ability to run some older games.

     

    Known issues in this security update

    • After you install this security update, some programs may not run. (For example, some video games may not run.)
      To work around this issue, you can temporarily turn on the service for the secdrv.sys driver by running certain commands, or by editing the registry.

      Note: When you no longer require the service to be running, we recommend that you turn off the service again.

      Warning: This workaround may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

      To do this, type the following commands at an elevated command prompt. You should press "Enter" after you type each command:
       
      • To disable the driver's service, type the following command:
        sc config secdrv start= disabled
         
      • To set the driver's service to manual, type the following command:
        sc config secdrv start= demand
         
      • To enable the driver's service (and to set it to automatic), type the following command:
        sc config secdrv start= auto
        Note: As per the proper syntax shown above, a space is required after the equals sign (=). This is omitted in error on the official knowledge base article.
         
      • To manually start the driver's service, type the following command:
        sc start secdrv
         
      • To manually stop the driver's service, type the following command:
        sc stop secdrv

     

    Editing the registry

    Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs.

    For more information about how to back up and restore the registry, click the following article to view the article in the Microsoft Knowledge Base:
    322756 How to back up and restore the registry in Windows


    To edit the registry directly, follow these steps:

    1. Click Start, click Run, type regedit in the Open box, and then click OK.
       
    2. Locate and then click the following subkey in the registry:
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\secdrv
       
    3. Right-click Start, and then click Modify.
       
    4. In the Value data box, do one of the following:
      • Type 4 to disable the driver's service, and then click OK.
      • Type 3 to set the driver's service to manual, and then click OK.
      • Type 2 to set the driver's service to automatic, and then click OK.
         
    5. Exit Registry Editor.


    Source: https://support.microsoft.com/en-gb/kb/3086255

     

    Using a script

    Alternatively, see the following Reddit post for a way to start the service using a batch file:
    https://www.reddit.com/r/simcity4/comments/3kmfmi/quick_and_dirty_solution_to_recent_windows_update/

     

    List of systems the update is offered to:

    Spoiler

    Applies to

    • Windows 7 Service Pack 1
    • Windows 8 Enterprise
    • Windows 8 Pro
    • Windows 8
    • Windows 8.1 Enterprise
    • Windows 8.1 Pro
    • Windows 8.1
    • Windows Vista Service Pack 2
       
    • Windows Server 2012 R2 Datacenter
    • Windows Server 2012 R2 Standard
    • Windows Server 2012 R2 Essentials
    • Windows Server 2012 R2 Foundation
    • Windows RT 8.1
    • Windows Server 2012 Datacenter
    • Windows Server 2012 Standard
    • Windows Server 2012 Essentials
    • Windows Server 2012 Foundation
    • Windows RT
    • Windows Server 2008 R2 Service Pack 1
    • Windows Server 2008 Service Pack 2
    • Microsoft Windows Server 2003 Service Pack 2

     

     

    Feel free to post any comments, questions or suggestions below, or in the dedicated support thread. *:read:


      Edited by Cyclone Boom  

    • Like 15


    User Feedback




    I won't discuss "other" workarounds for this problem as this appears to be a taboo subject here (and is likely illegal).

    However, I'd like to go on record to say that officially suggesting to bypass a security update seems a bit irresponsible to me. If the vulnerability turned out to be actually exploited in the future, those instructions would potentially have exposed thousands of users - not to mention the risk for inexperienced users to screw something up when playing with their update settings. At the very least, I'd advise you guys to add some kind of "At your own risk" mention to these instructions in bold letters to cover your behinds in case something happens...

    Unless anyone has actually had a different experience, I think the best idea would be to get in touch with EA customer service and to request a digital copy of SC4/Rush Hour/Deluxe on Origin. This can be done in a matter of minutes by using their live chat. You will need to provide proof of physical ownership (a picture of your CDs and/or game manual with serial should suffice). Earlier this week I was able to activate a copy of Battlefield 2 that way, even though it had been purchased nearly 10 years ago and is even no longer for sale on Origin. I've got to hand it to EA, my experience with them was surprisingly very pleasant. IMO, this is the easiest, safest, most cost-efficient and most legit solution. 

    Share this comment


    Link to comment
    Share on other sites

    I've had problems with SimCity 4 every windows update for its disgusting. some scheme to make us buy new games. its one of the few games I can play that doesn't make my eyes tired and sore. Do I have to spend my time reading books now? nice way to ruin a sunday.


      Edited by Snugies  

    Share this comment


    Link to comment
    Share on other sites

    Thanks for the suggestions.

    The article has been updated with additional workarounds, and a notice about the potential risks of not installing the update.

    Share this comment


    Link to comment
    Share on other sites

    Here is another suggestion. If disabling the security is too dis-comforting, Get an alternate computer, set-up UntangleOS (Debian), which is free, then configure it as a gateway. I have been using it for years and have not the need for a firewall or ANY anti-malware software on any of my computers. It nukes viruses, malware, and hackers at the gateway before it even gets onto the user's computer. (http://www.untangle.com/). This is for those who can afford an alternate machine.

    Share this comment


    Link to comment
    Share on other sites

    This update has also prevented me from playing Simcity 3000 and Microsoft Flight Simulator 2004, Microsoft what have you done?!! Guess i'm just going to have to uninstall the update, and i'm definitely not upgrading to Win10!

    Share this comment


    Link to comment
    Share on other sites

    I uninstalled that POJ update as soon as I saw what was going on.  Given the way they're pressuring W7 users like me to upgrade, I'm calling Microsoft's bluff on the security issues.  I may still try Xander Dax's recommendation later on, though.


      Edited by metarvo  

    Share this comment


    Link to comment
    Share on other sites

    mines will not start at all

    Hello City89,

    You can probably keep the critical update and still run SC4. But in that case it might be necessary to first enable the service before you can start it manually (it was in my case). What helped for me:

    1. first enable the service manually: 
      start a command prompt as administrator
      type in command prompt:
      sc config secdrv start= demand 
    2. reboot
    3. start the service manually:
      start a command prompt as administrator
      type in command prompt: sc start secdrv
    4. start SC4

    Alternatively you could also set the service to start automatically every time you boot up your machine. The howto is described in Cyclone Boom's post. Just make sure you reboot one time after auto-enabling the service before you start SC4.

    Best regards,

    kaduuken

    Share this comment


    Link to comment
    Share on other sites

    As an FYI, the Direct2Drive version doesn't work.  It claims to be a "DRM Free" version (i.e. no Serial number provided).  I purchased it back in 2012 after losing my SC4 & Rush Hour CD during a move.  It won't install on my Windows 10 Machine, but I did have it previously installed when I was on Windows 7, on my External.  Even that wouldn't run, so I checked for a "Fixed EXE" file (i.e. cracked executable), which worked... but I don't like using it as a workaround...

    Share this comment


    Link to comment
    Share on other sites

    is anyone els getting this ok i uninstalled it ok thats fine but every time i reload the game i have to uninstall it agien y is this

    Share this comment


    Link to comment
    Share on other sites

    Sure glad I never updated after XP.  What a huge mistake that would have been.  Oh, and my pc wasn't hacked, taken over by some nefarious group like Micrsucks claimed would happen, didn't even update XP with their XP updates.  All I get a smooth running pc with no hiccups with the os.

    Share this comment


    Link to comment
    Share on other sites

    Sure glad I never updated after XP.  What a huge mistake that would have been.  Oh, and my pc wasn't hacked, taken over by some nefarious group like Micrsucks claimed would happen, didn't even update XP with their XP updates.  All I get a smooth running pc with no hiccups with the os.

    If that's your machine to do nothing but run vintage games on, sure. If you're using it normally, I'm sorry, but that's asinine and dangerous and you will get that confirmed not only by Microsoft. Your machine is extremely vulnerable and the "with no hiccups" part I consider to be entirely a subjective experience. You should really consider updating. I'm using Win 7 and considering it the best release so far. The fact that we're running into a very specific combination of circumstances here leading to a need to choose one from a pretty sizeable list of perfectly doable workarounds in my eyes fails to serve as an argument to stay 10+ years in the past, OS-wise.

    i removed the update, and it works fine.

    I suggest not doing that. If you stick to the instructions, manually reacivating the driver in question takes five minutes, is safe and it's a one-time thing. That way you don't rob yourself of the other security functions of the update.

    Share this comment


    Link to comment
    Share on other sites

    If the update in uninstalled and I never play the game over the Internet should my computer be safe for harm?

    Share this comment


    Link to comment
    Share on other sites

    The autoenable option works like a charm. I would suggest that anyone with administrator access to their machine use this method, as it also leaves you fully eligible for Microsoft support should any other unforeseen problem arise.

    I would advise, however, to seek a digital version ASAP. Hopefully they will have a sale soon, so I can pick it up for $5 on GOG or Amazon or something. That would be the best.

    Share this comment


    Link to comment
    Share on other sites

    Ha, already downloaded a crack for it before I even knew what the problem was. So physical copies of the game are now rendered virtually useless? Pretty weird though, I uninstalled the game and reinstalled it with no hiccups; thought it may have been wear and tear on the discs but no, just Microsoft being paranoid.

    Share this comment


    Link to comment
    Share on other sites

    If the update in uninstalled and I never play the game over the Internet should my computer be safe for harm?

    Without knowing the extent of the security flaws, it's hard to give a definitive answer really. What we do know is they're most likely nothing new, and there's been vulnerabilities in secdrv from as far back as 2007.

    In theory, disconnecting from the internet should reduce risks from remote exploits. This is because there'd be less chance an attacker could exploit the flaws remotely (when the service is on). Of course, having an updated anti-virus / firewall will also increase your system security, along with running frequent malware scans.

    Share this comment


    Link to comment
    Share on other sites

    Jeeeez, people. Enough hate already, don't exaggerate. Microsoft is a really OK company.

    What?!? they are so paranoid about piracy that they completely disabled the older games from running...

    The update is security-related, has nothing to do with piracy. But I guess MS is also to blame if you ignore their update and get compromised, right?


      Edited by Judazzz  

    Share this comment


    Link to comment
    Share on other sites



    Sign In or register to comment...

    To comment in reply, you must be a community member

    Sign In  

    Already have an account? Sign in here.

    Sign In Now

    Create an Account  

    Sign up to join our friendly community. It's easy!  

    Register a New Account


×

Thank You for the Continued Support!

Simtropolis depends on donations to fund site maintenance costs.
Without your support, we just would not be in our 24th year online!  You really help make this a great community. *:thumb:

But we still need your support to stay online. If you're able to, please consider a donation to help us stay up and running. This helps sustain a platform where we can share our community creations for years to come.

Make a Donation, Get a Gift!

Expand your city with the best from the Simtropolis Exchange.
Make a Donation and get one or all three discs today!

STEX Collections

By way of a "Thank You" gift, we'd like to send you our STEX Collector's DVD. It's some of the best buildings, lots, maps and mods collected for you over the years. Check out the STEX Collections for more info.

Each donation helps keep Simtropolis online, open and free!

Thank you for reading and enjoy the site!

More About STEX Collections