securom 13001 error

[TippeX]

Anyone experiencing a 13001 error when running a securom exe?, some of the recent updates keep giving me this error, im not using any loaders or anything and can't quite figure out whats causing it

[Blazkowicz]

And what else does securom say?

[BarryB]

Not sure about that error but if you run progs like filemon or regmon they keep a driver resident in memory that securom detects (even after exiting the prog) and gives the 'security module cannot be activated' message and only a reboot will clear the problem.

Could be something you've run prior to the securom app preventing it running?

[TippeX]

naw, filemon nor regmon not running (did reboot to make sure..) .. no hiding tools, nothing.. i guess noone else has seen it.. oh well.. time to debug

http://www.securom.com/message.asp?m=module&c=13001

SecuROM™ has determined that the protected application file is corrupt or tampered.

* It could be caused by a Virus, please close all programs which are running in the background and run an in-depth virus, trojan and spyware scan.
* If the problem persists, please re-install the original file which was included in the setup of your application.

bugger, virus scan showed nothing, nor did ad scan... guess i gotta debug some more...

[Muyfa666]

Have you considered that you actually may have a virus?

[TippeX]

totally 110% sure i do not have a virus, i scanned using many scanners, also checked my system dlls against those on the cd, as well as checking api's for hooks and such, and rookits etc.. virus.. i definately do not have...

[BarryB]

HD/mem gone bad?

[TippeX]

nope, replaced that too.. its weird, think its kerio or something, gonna strip the os down, and start checking...

[BarryB]

Why would a firewall interfere with the integrity of a file?

Can you get an MD5 of the file on your HD and the one on your disc and check they're the same, if you know which file is the problem one of course?

[TippeX]

well it could be ADS or something, or possibly DEP related, so much to track down, cant really do any full testing/tracing until the weekend, i'll get it sorted anyway.. thanks for the suggestions

[Blazkowicz]

Have you tried reinstalling game?

[TippeX]

yup reinstalled it, crc of exe matches that on cd, it must be getting changed or something in memory.. wish microsoft documented the dep crap a lot more like its 'internals'.. as im beginning to suspect thats whats causing it... or somethings patching the exe in memory and it isn't matching the file on disk... odd, odd odd... i'll see what happens in vmware at the weekend.. see if that sheds some light on it...

[ByteMare]

antivirus messing? M$ Security patches? tried it on a different machine? what's the game ( I assume it's a game) and version? Maybe Securom finally do things "da J0w00t style"

[TippeX]

dark messiah, naw no jowood... i'd know if it was joowod, cos it'd never work, and my pc would probably start sparking

[BarryB]

Have you stuck /noexecute=alwaysoff at the end of your OS line in boot.ini? This will disable DEP permanently.

Check KB917422 hasn't installed itself without you knowing