Curse

Baobao23 · Oct 06, 2010, 05:43 AM // 05:43

Hi, just got a view defense+ alerts from comodo with GW recently:

http://img228.imageshack.us/f/64823524.png/

Don't mind the first row, it's another program. I allowed the second row because I thought it was just related to the recent update, but I'm still puzzled at the other change in registry settings (that's why I denied the others). Can anyone care to clarify for me one what's GW is trying to do with these files?

Spiritz · Oct 06, 2010, 07:15 AM // 07:15

from what ive seen on my system an only thru regedit - gw sets its location and as far as i kno nothing else.Whats making me wonder is why gw on yours is trying to do a proxy server or even bypass a proxy server.
Only thing i can suggest is do a full malware/virus scan on your system incase there is something in there that shudnt be.If you have to uninstall gw then copy templates folder/screenshots and re-install.Also when you do a scan - use another av program as sometimes if a system is virused it can alter the current av and its often best to scan with 2 av programs incase of problems .Better to be safe than sorry.

Hells Fury · Oct 06, 2010, 10:32 AM // 10:32

Having 2 antivirus programs is not a good idea.

Spiritz · Oct 06, 2010, 11:06 AM // 11:06

When some av fail at correct positives - isnt it always best to check with 2 ? you can easily uninstall one after thats why i suggested 2 - not meaning running 2 at exact same time.Years ago msn got hit by the chicken ( aka lol ) virus which was embedded in a picture of a chicken in a bikini - sadly this virus got pretty widespread thru msn messenger and mcaffee/norton actually failed to halt it or even detect it.
When im in doubt i`ll run 2 av`s to scan and even several malware/adware scanners as well

Elder III · Oct 06, 2010, 12:46 PM // 12:46

Run Malwarebytes and it's not a bad idea to check with a second AV program either - just don't use two all the time.

*personal note, would be to ditch comodo, 'cuz it's prone to such things and overall not very good, but that's only 50% personal preference and 50% fact, so it's up to you.

Baobao23 · Oct 06, 2010, 03:40 PM // 15:40

Hi thanks for all the replies. I'm running malwarebytes as we speak. Unfortunately, I really can't ditch comodo since my OS is a Windows server 2008 R2 enterprise version (very few AVs work under this OS and Comodo is one of them).

What I really want to know is whether or not some people have experienced this using Comodo or with some other AV that lets you know if a program is trying to edit the registries.

I'll see if malwarebytes picks up anything. If it doesn't, maybe I'll try deleting the GW.exe and re-downloading it.

Riot Narita · Oct 06, 2010, 04:23 PM // 16:23

Quote:

Originally Posted by Hell Darkblight

Having 2 antivirus programs is not a good idea.

Having two or more is a GOOD idea.

What's often bad, is having more than one doing real-time protection at the same time. In which case, use one for real-time protection, and the other(s) for on-demand scanning.

some-_1 · Oct 06, 2010, 04:52 PM // 16:52

Quote:

Originally Posted by Riot Narita

Having two or more is a GOOD idea.

What's often bad, is having more than one doing real-time protection at the same time. In which case, use one for real-time protection, and the other(s) for on-demand scanning.

That's just kind of pointless, you don't need two anti-virus programs so why install them? there is no benefits which come from having two. You're not in any way getting "twice the protection", if anything they just slow down/clog up your PC effectively creating more problems than they would solve.

Back on topic: as Spirtz said, all guild wars does is makes a note of it's install path in the registry so it can find the gw.dat file.

Baobao23 · Oct 06, 2010, 04:54 PM // 16:54

O.K. I've ran my comp with malwarebytes, adaware and comodo anti-virus. No malicious devices involved.

I've downloaded a new game client from guildwars.com and still got the same results. I guess Anet must have some reason for doing this..... still why mess around with the proxy's registry?

Anyone here tech savvy enough to explain this?