PSA: Denuvo Anti-Cheat In Doom Eternal Is Kernel-Level Driver


Thought you ought to know.

Doom Eternal received Update #1 this week introducing empowered demons in single player, Echelon leveling, and adding friends to your favorites. It also brought in Denuvo Anti-Cheat which is now required to play the Battlemode multiplayer on PC and some folks aren’t too happy.

Denuvo Anti-Cheat is a kernel-level driver that starts when the game launches and stops when the game stops. According to Bethesda, it does not take screenshots, scan your file system, or stream shellcode from the internet, and can be uninstalled at any time through the “add or remove programs” system function. If you try to uninstall it it will simply reinstall the next time you start Doom Eternal.

Denuvo is not the first anti-cheat software to use kernel-level access, but the software does pose a potential security risk if hackers manage to crack it open like a delicious coconut. In 2016 Capcom introduced kernel-level anti-cheat to Street Fighter V. Although the application was quickly rolled back and removed, some hackers figured out a way to exploit the driver to bypass other anti-cheat software.

As Denuvo Anti-Cheat is a new and thus not field-tested product, the risk is there for consumers. The anti-cheat should not be confused with Denuvo’s anti-tamper DRM which is a completely different program run by the same company, but to prevent piracy. Denuvo anti-tamper has had varying success in protecting games from pirates.

Source: Doom Eternal