An FFXIV plug-in accused of being malware is shutting down its users PCs

GShade is drawing the blinds on users' PCs
Screenshot by Pro Game Guides

GShade, an unofficial plug-in for Final Fantasy XIV, has been accused of becoming malware after a recent update added code that forced its users’ computers to shut down. An example of the shutdown was shared on Twitter by user perchbird. In response, GShade users have taken to Twitter and Discord to accuse the program of being malware.

Recommended Videos

Gshade, a graphical enhancement modification that adds shaders and other visual elements to games, primarily used for enhancing screenshots, is a common but unauthorized plug-in for FFXIV. The shutdown code was apparently added as a measure to prevent another plug-in from utilizing GShade’s installer. 

The other plugin was designed to use Reshade’s software (another shading program) with GShade’s assets. It was developed in response to forced and frequent updates of GShade, which impacted user experience. GShade reportedly also refuses to uninstall unless it is updated.

Related: How to unlock the Lynx of Righteous Fire mount in Final Fantasy XIV

In a statement on the Gposers Discord, GShade developer Marot Satil stated that “Anti-tampering code is not unusual in proprietary software” and that it “It is impossible to trigger that code by running the GShade installer as a normal end-user in any fashion.” They explained that their decision to make PCs shut down in response to tampering was made because it “was completely harmless, but slightly more noticeable than a quick process kill.” They also compared it to what anti-cheat software does, although we can find no examples of conventional mass-market anti-cheat software shutting down user computers.

However, even users who might not use additional modifications, such as Reshade, are clearly uncomfortable with the idea of a plug-in shutting down their computer. What’s more, the modding and plug-in community likely doesn’t need more unwanted attention given the recent controversy around the TOP world first clear. Square Enix’s own guidelines warn against using plug-ins and third-party programs for the very reason that some may be malware. GShade has chosen a dangerous time to make an unpopular decision about its development.

For more Final Fantasy XIV news, guides, and info, check out FFXIV’s world first The Omega Protocol raiders are deleting their characters on Pro Game Guides.


Pro Game Guides is supported by our audience. When you purchase through links on our site, we may earn a small affiliate commission. Learn more
related content
Read Article All new FFXIV Dawntrail Jobs
Read Article Is there a Final Fantasy XIV Discord?
Read Article Final Fantasy XIV FATE Grinding Guide
Read Article How to fix ‘Unable to complete version check error’ in FFXIV
Read Article Is FFXIV down? How to check for server status
Is FFXIV down?
Related Content
Read Article All new FFXIV Dawntrail Jobs
Read Article Is there a Final Fantasy XIV Discord?
Read Article Final Fantasy XIV FATE Grinding Guide
Read Article How to fix ‘Unable to complete version check error’ in FFXIV
Read Article Is FFXIV down? How to check for server status
Is FFXIV down?
Author
Michael Hassall
Michael lives in the UK, but wishes he lived in Eorzea. A life-long gamer, Four years ago, he ditched a "real" job to write about video games for a living, and hasn't looked back. When not guiding players how to get the latest mounts, crafting recipes, and in-game goodies, he spends his time nurturing an unhealthy addiction to MMOs and gacha games.

Write A Comment

An FFXIV plug-in accused of being malware is shutting down its users PCs

Comments are on moderation and will be approved in a timely manner. Please read the following rules before commenting:

  • All comments must be on topic and add something of substance to the post
  • No swearing or inappropriate words
  • No asking or begging for anything free
  • Do not attempt to start a poll in the comments
  • Comments in all CAPS will be removed
  • We reserve the right to remove a comment for any reason
  • Do not impersonate a staff member or influencer

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.