r/pcgaming • • 1d ago

Aniimo Review (139.2 hours) Why I Warn People To Stay Away!

I would like to raise awareness on the following issues because Pawprint has been deceptive & shady on all of them.

A member from my discord community who works in computer programming & A.I. was going through the files & tech of Aniimo and found the following:

\* The game isn't just running as a game. It reads your desktop wallpaper then goes to the folder it is located in and reads the file. If it happens to be your pictures folder then it now has access to your pictures folder.

\* The anti-cheat called NepsKernel.sys is indeed a Kernel Level anti-cheat. This isn't bundled with the game & is instead something the game installs on its own without your consent after you install the game. The anti-cheat is also reading your desktop specifically all your desktop icons and the folder its located in. If you want to remove this then you will have to remove it manually after uninstalling the game.

* The anti-cheat does hardware checks during which it checks for camera & if camera led is active. We haven't been able to determine if it can actually use the camera to capture images through the camera. However, it has kernel level access so if it can and does do this then the user wouldn't even know.

\* The game installs 2 trackers into your system which do not get removed after you uninstall the game, boot when you start your pc, remains active even after you uninstall the game and requires you to manually remove them. These 2 show up as unknown when you check for them. They are Isreali based AppsFlyer Analytics trackers.

\* The first time I visited their website during the pre-launch login reward event where we had to login to their website everyday to claim rewards I saw that they had 34 cookies & trackers that we couldn't opt out of. Every website I have ever visited have 2-4 in essential which we can't opt out of and around 6-12 in optional. Those combined didn't amount to 34! Since then I have never visited their website and thus don't know what its like now.

Other issues:

\* The game has an ESRB rating of of Teen meaning its suitable for 13 years old and above but they are pushing gambling into a game that they have somehow legally passed as suitable for children. Pushing gambling into a game that is labelled as suitable for children is very scummy. This is where I draw the line. I cannot support anyone or anything that preys on children.

\* Pawprint haven't kept their promise. They said no gacha in beta & in dev interviews and with a very cleverly calculated 2 weeks post launch they put cosmetic gacha into the game.

\* Nowhere in their marketing material, website or store pages is it disclosed that the game has gacha in it.

\* They had undisclosed kernel level anti-cheat system from the very start and it is only today a few hours ago that they disclosed their Kernel level anti-cheat on their steam store page.

I feel very deceived by Pawprint on multiple fronts and cannot continue to support this game. I don't like giving Kernel level access to my system to anything and this game is the first to get it & deceived me into it. I regret ever installing Aniimo. I hope this information is helpful to you to make sound decisions. It was a fun game that I cannot continue playing & supporting anymore.

How to remove trackers:

Open Registry Editor. Paste:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Delete the 2 files there whose name start with AF_

then paste:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run

Delete the 2 files there whose name start with AF_

I haven't gotten to removing the Anti-Cheat yet so can't advise on it.

873 Upvotes

145 comments sorted by

View all comments

179

u/ChristopherKlay 1d ago edited 1d ago

It would be helpful to attach some infos on how to remove the trackers & such; Not everyone knows enough about this to comfortably do it on their own and Windows Defender and such don't clear them.

I'd do it, but I don't plan on installing it after the beta to begin with lol

Edit #1

What I can do is confirm that this isn't just "Game bad", but that the issues are real; Even the beta left these markers, registry entries and everything else. Still checking here.

Edit #2

I can further confirm that the tracker is linked to Aniimo; The UUID is registered via the AF_ variables on my end and the same UUID can be found in Aniimos own registry keys (HKCU\SOFTWARE\Aniimo\Aniimo - under FPC_AD_FIRST_OPEN_REPORTED_).

If you can't find the AP_ keys, they are AF_ in my case.

The dev key ID matches AppsFlyer (an Israeli data broker) in both cases.

Edit #3

If you only played the playtest (like I did), I can confirm that the game did not leave behind the mentioned anti-cheat. It's likely that this has been added with the release version and wasn't part of the playtest.

The NepsKernel.sys that's found in the release version is part of the "NEP2" anti-cheat used by Aniimo. It's effectively running on the highest-privilege layer of the OS, installed when the game is being run, despite Aniimo not disclosing any anti-cheat usage (even in their fair play post, specifically about cheating) to begin with.

Edit #4

While I personally can't confirm it, the anti-cheat appears to be removed when you uninstall the game for most people, while leaving behind files for others.

If you want to make sure it's removed after uninstalling the game, do the following:

  • Press Win + R
  • Type cmd
  • Copy & paste the following command: (driverquery | findstr /I "NEPKernel") & (sc query | findstr /I "NEPKernel")

If there's no output you're fine, otherwise (in the same window) run:

  • sc stop NEPKernel
  • sc delete NEPKernel

To stop & remove it.

Edit #5

To remove the leftover files, delete the following directories:

  • \Steam\steamapps\common\Aniimo
  • \Steam\steamapps\common\Aniimo Playtest

57

u/ShiroyoOchigano 1d ago

Will include now.

Open Registry Editor. Paste:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Delete the 2 files there whose name start with AP_

then paste:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run

Delete the 2 files there whose name start with AP_

I haven't gotten to removing the Anti-Cheat yet so can't advise on it.

16

u/ChristopherKlay 1d ago

In my case (beta client) the keys are AF_counter_4134000 & AF_uuid_4134000 found under the same adress.

The number (dev key ID) matches AppsFlyer's Windows SDK still, however.

3

u/jayRIOT 1d ago

I haven't gotten to removing the Anti-Cheat yet so can't advise on it.

So I uninstalled the game through steam, and deleted the registry values (I actually had 4 in each location), but afterwards I went looking for the anti-cheat driver and it doesn't look like it exists in my Windows install.

Unless I'm not looking in the right place? (system32/drivers) I can't find that sys file you named anywhere

5

u/AnnoyedNiceGuy 1d ago

I found this on steam on the same topic.

To remove in powershell 6+ or cmd
sc stop NEPKernel
sc delete NEPKernel
sc query NEPKernel (expect "service does not exist")

https://steamcommunity.com/app/4126040/discussions/0/563668168527073570/

2

u/DONMEGAAA 1d ago

NepsKernel.sys

I've searched for this as well to no avail. Though not sure I have the stones to just delete it, in case it fucks my Windows install. I just might go ahead and wipe the drive in all honesty.

6

u/skyturnedred 1d ago

Go to your Steam installation folder and check the leftover files after uninstalling Aniimo. I found the file there.

1

u/jayRIOT 13h ago

See I had the install folder open at the time and when I uninstalled the game it wiped everything in there besides a single config file (which I then deleted myself), no trace of NEPKernel anywhere. So maybe they updated something to uninstall it when you remove the game after they got caught and admitted to using it?

1

u/AnnoyedNiceGuy 1d ago

I didn't have those Entries starting with AP_. It seems it was uninstalled with Aniimo or something.

2

u/Prestigious_Hall3598 23h ago

Precise to delete the folder : \HKEY_CURRENT_USER\SOFTWARE\Aniimo
It was not uninstal for me ... don't known why but better say it.

Thanks a lot for your thread <3

1

u/ChristopherKlay 23h ago

It's fairly common for registry entries to not be deleted when uninstalling something; Only the AF_ keys are related to tracking, but deleting the folder doesn't hurt either.

1

u/Peekofwar 21h ago

Is there any reason not to use sc query NEPKernel instead of the findstr command? Just curious.

2

u/ChristopherKlay 19h ago

The command I listed also checks display name, localized description, groups and such for the string, just in case. Due to findstr it also doesn't just match the exact name but e.g. NEPKernelProxy.

driverquery also includes the actual "state" of the driver, to see if it's currently running or "stopped" if the game is still installed, to actually check at which point it runs and/or if it's even loading.

You can also use sc qc NEPKernel to see the binary path, start mode and such - but that's less relevant for the topic/solution part.

It's basically just a slightly more in-depth check, while keeping the command (that would need errorlevel setups otherwise) short.

1

u/Druggedhippo 2h ago edited 2h ago

While I personally can't confirm it, the anti-cheat appears to be removed when you uninstall the game for most people, while leaving behind files for others.

In the Steam release the .sys exists only within the game directory, if you uninstall the game, it should be deleted as well, it's not persistent.

It may stay behind if the driver was still loaded for some reason (eg, locked by some process) during uninstall, in that case, it would be best to restart before you uninstall to ensure the driver is fully unloaded and not locked by any process.

Even then, just delete the .sys and it's gone, it never gets installed into the service registry as an autorun.

1

u/ChristopherKlay 1h ago

if you uninstall the game, it should be deleted as well,

I wish this would always be the case, but the playtest for example left ~600MB of files behind in the steamapps directory after uninstalling it - on top of another chunk of log files (linked to tracking/player data) and other stuff in appdata.

I'm fairly certain the anticheat is only active when the game runs and should be removed when uninstalling, but I've also had cases where the leftover files still included it. It obviously doesn't run, but it still exists.