||This article contains a pro and con list. (November 2013)|
|Operating system||Windows XP and later, OS X, Ubuntu (beta)|
|Platform||Microsoft Windows, Linux|
|Website||Valve Anti-Cheat (VAC) System - Steam Support|
Valve Anti-Cheat, abbreviated to VAC, is an anti-cheat solution developed by Valve Corporation as a component of the Steam game development platform, first released with Counter-Strike 1.6 in 2002. During one week of November 2006, the system detected over 10,000 cheating attempts. As of 2012, it is estimated that over 1.5 million Steam accounts have been banned by VAC. As of 2013, it is used in over 60 games on Steam.
When the software detects a cheat on a players system, it will ban them in the future, possibly days or weeks after the original detection. It may kick players from the game if it detects errors in their system's memory or hardware. No information such as date of detection or type of cheat detected is disclosed to the player.
In 2001, Even Balance Inc, the developers of the anti-cheat software PunkBuster designed for Counter-Strike and Half-Life mod stopped supporting the games as they had no support from Valve. Valve had also rejected business offers of integrating the technology directly into their games.
Valve started coding on a 'long-term solution' for cheating in 2001. VAC was first released with Counter-Strike 1.4 in 2002, during its initial release, it only banned players for 24 hours. The duration of the ban was increased over time, players were banned for 1 year and 5 years, until 2005 when any new bans became permanent. The initial version, VAC1, saw success for a period, but in March or April 2004 updates ran dry as the Valve engineers maintaining it moved on to the production of its successor, VAC2.
During the early testing phase in 2002, some information was revealed about the program via the HLDS mailing lists. It can detect versions of "OGC's OpenGl Hack", OpenGL cheats, and also detects CD key changers as cheats. Information on detected cheaters is sent to the ban list server on IP address 188.8.131.52 on port 27013. There is also a 'master ban list' server. The port was later changed to 27011. RAM/hardware errors detected by VAC may kick the player from the server, but not ban them.
On November 17, 2006 they announced that "new [VAC] technology" had caught "over 10,000" cheating attempts in the preceding week alone,
Eric Smith and Nick Shaffner was the original contacts for game administrators. In February 2010, the VAC Team consisted of Steam's lead engineer John Cook and his team of 16 engineers.
The software sends client challenges to the machine, if the appropriate response is not received, it is flagged as a possible violation.
It uses heuristics to detect possible cheats when scanning the computers memory, an incident report is created whenever an anomaly is detected, which is then analyzed by Valve's engineers. The engineers inspect the code and may also run it on their own copies of the game. If the code is confirmed as a cheat, it is added to the database of cheat codes. New detections are also compared to previous detections in this database.
According to Steam's lead engineer John Cook, to stop the anti-cheat software itself from being exploited, "The software is constantly updated and sent down in small portions for the servers as needed, so hackers only get to see small portions of it running on any particular time. So while they may be able to work around pieces of it, they can never hack everything."
Valve also accepts submissions of cheat programs and cheat websites from players through the official Steam Forums. Players may also report players they suspect of cheating through their Steam Community profile, although players are not banned from these reports alone.
- Total integration through Steam, including using the Steam framework for any update tasks.
- Delayed bans deny cheat producers accurate and timely information. This causes a reduction in the supply of cheat programs to players who want to cheat online.
- VAC does not detect 'content hacks', where, for example, texture transparency and color are manipulated, since they do not involve modifying any program code. In Source engine games the option to create "pure" servers (
sv_pure) that prevent custom content from overwriting the game's defaults was created to alleviate this. Although this does not apply to Call of Duty: Modern Warfare 2 & Call of Duty: Modern Warfare 3, which does not allow the editing of any game files except config files.
Delayed bans, criticism and rationale
If a cheat is found the player's Steam account will be flagged as cheating immediately, but the player will not receive any indication of the detection. It is only after a delay of "days or even weeks" that the account is permanently banned from "VAC Secure" servers for that game, along with other games that use the same engine. (e.g. Valve's Source games, GoldSrc games, Unreal engine games). Valve never discloses which cheat was detected.
There have been allegations that VAC has banned users for false positives.
- There are six recorded instances of incorrect detections, which were fixed and rescinded:
- VAC1: On its initial release, VAC would issue bans for faulty memory. Valve quickly updated VAC to only kick for faulty memory.
- VAC1: Running a VAC-protected game through the Cedega software compatibility layer for Linux.
- VAC1: An apparent server-side glitch on April 1, 2004.
- VAC2: Over two weeks in July 2010, approximately 12,000 owners of Call of Duty: Modern Warfare 2 were banned when Steam updated a DLL file on-disk after it had been loaded into memory by the game. Those affected received a free copy of Left 4 Dead 2 or an extra copy to send as a gift.
- VAC2: In January 2011, owners of Call of Duty: Modern Warfare 2 or Call of Duty: Black Ops were banned due to their computers being infected by the trojan Win32/Spyeye.H.
- VAC2: In June 2011, an unknown false positive detection caused a handful of Team Fortress 2 owners to become banned.
- There are four recorded instances of game plugins that are not considered cheats triggering bans. These are:
- VAC1: HLamp, which allowed the user to control Winamp from the game's interface.
- VAC2: The X-Spectate tool, which allowed server administrators to enable a translucent wallhack effect while spectating to help decide if another player was doing the same. Later downgraded to a kick from the server, but bans not rescinded.
- VAC2: Some Half-Life modifications, such as Paranoia and Half-Life FX which made changes to the engine's renderer that propagated to multiplayer games. This still triggers a ban and no bans caused by it have been reversed.
- VAC and VAC2: sXe Injected, an anti-cheat system for Counter-Strike.
Cheats may be hidden inside otherwise legitimate mod or skin downloads that are created to maliciously get innocent people banned. Since the source of a cheat installed on a computer cannot be proven, bans due to this are never rescinded.
Valve has "a zero-tolerance policy for cheating and will not lift VAC bans under any circumstances." This includes account hijacking and other circumstances beyond the control of the account's owner.
Manually applied bans
In July 2010, several players who successfully used information leaked from Valve to increase their chances of finding a rare cosmetic Team Fortress 2 item called the Golden Wrench found themselves banned by VAC.
Games that support VAC
- Alien Swarm
- Call of Duty: Black Ops
- Call of Duty: Black Ops 2
- Call of Duty: Modern Warfare 2
- Call of Duty: Modern Warfare 3
- Chivalry: Medieval Warfare
- Counter-Strike: Condition Zero
- Counter-Strike: Source
- Counter-Strike: Global Offensive
- Critter Crunch
- Dark Messiah of Might and Magic
- Day of Defeat
- Day of Defeat: Source
- Dead Island
- Dota 2
- Deathmatch Classic
- Dino D-Day
- Dungeon Defenders
- Garry's Mod
- Gotham City Impostors
- Half-Life 2: Deathmatch
- Half-Life Deathmatch: Source
- Half-Life: Opposing Force
- IL-2 Sturmovik: Cliffs of Dover
- Insurgency: Modern Infantry Combat
- Killing Floor
- Left 4 Dead
- Left 4 Dead 2
- Lost Planet: Extreme Condition
- Magic: The Gathering – Duels of the Planeswalkers
- Might & Magic: Clash of Heroes
- Monday Night Combat
- Moonbase Alpha
- Mount&Blade: With Fire & Sword
- Natural Selection 2
- Nuclear Dawn
- ORION: Dino Horde
- Primal Carnage
- Red Faction: Armageddon
- Red Orchestra: Ostfront 41-45
- Red Orchestra 2: Heroes of Stalingrad
- Resident Evil 6
- Resident Evil: Revelations
- Revelations 2012
- Roller Coaster Rampage
- Shattered Horizon
- Swords and Soldiers HD
- Team Fortress 2
- Team Fortress Classic
- The Ship
- Total War: Shogun 2
- Tower Wars
- War of the Roses
- Wargame: European Escalation
- Zombie Panic: Source
Mods based on the games above may inherit VAC support from the host game.
Denotes GoldSrc games, if a player is banned in one of these games they are banned from all of them.
Denotes Source engine games, if a player is banned in one of these games they are banned from all of them.
Denotes games that have a stricter policy of having all servers VAC protected, and additionally bans players for editing of any game files except config files.
- "Steam Message". Steam Update News. November 17, 2006. Retrieved December 11, 2002.
- "gameME - Make gaming competitive! - Bans". TTS Oetzel & Goerz GmbH. 2 January 2013. Retrieved 2 January 2013. "VAC: 1,573,554 Players"
- "See the VAC status of any Steam account (Counter Strike, Left 4 Dead, Call of Duty: Modern Warfare 2, etc)". Surian and AnAkIn. 2 January 2013. Retrieved 2 January 2013. "Total Banned: 1,574,544"
- "I've Been Banned". Valve Support FAQ. January 23, 2008. Retrieved September 18, 2008.
- "Punkbuster to stop HL/CS development".
- "Punkbuster Retires From HL".
- "Eric Smith, Valve, HLDS mailing list, October 2001".
- "Online cheaters face games ban". BBC News. August 29, 2002. Retrieved August 23, 2006.
- "VACBanned - Information".
- "Eric Smith, Valve HLDS Mailing List, July 2002".
- "Eric Smith, Valve, HLDS mailing list, August 2002".
- "Eric Smith, Valve, HLDS mailing list, February 2003".
- "Eric Smith, Valve, June 2003".
- "CS-Nation-the future of Coutner-Strike".
- "Steamed: Valve Software Battles Video-game Cheaters".
- "Valve Anti-Cheat System (VAC)". Steam Support. November 15, 2006. Retrieved December 23, 2006.
- "Pure Servers". Valve Developer Community. June 6, 2007. Retrieved July 11, 2007.
- "VAC Update". SK Gaming. June 18, 2003.
- "WineX and VAC". CS Nation. July 10, 2003. Archived from the original on May 28, 2006. Retrieved July 28, 2006.
- "VAC Bans Ramp Up". CS Nation. April 15, 2004. Retrieved July 28, 2006.[dead link]
- Smith, Quintin. "Valve Anti-Cheat software goes a bit GlaDOS?". Rock, Paper, Shotgun. Retrieved July 26, 2010.
- "Valve offers free game after 12,000 false Steam bans". Gamesindustry.biz. GamesIndustry International. July 27, 2010.
- Kubba, Sinan (September 21, 2012). "Joystiq". Gamedaily.com.
- "Re: Told You So !!!!". Valve Software. Archived from the original on February 28, 2011. Retrieved March 4, 2011.
- "For those hit by the recent ban wave over the past two days". Valve Software. July 1, 2011. Retrieved July 2, 2011.
- "X-Spectate and Admin ESP*".
- "Mod DB - Paranoia".
- "TF2 Engineer Update Gets Serious – VAC Bans Issued". DeviceMAG.
- "Golden Wrench Scandal – Team Fortress 2 Golden Wrench Stolen". Top Tier Tactics.
- "Steam games with VAC".
- "Valve Announces New Free Game: Alien Swarm".