GW.exe modifying some registries recently?

1 pages Page 1
B
Baobao23
Ascalonian Squire
#1
Hi, just got a view defense+ alerts from comodo with GW recently:

http://img228.imageshack.us/f/64823524.png/

Don't mind the first row, it's another program. I allowed the second row because I thought it was just related to the recent update, but I'm still puzzled at the other change in registry settings (that's why I denied the others). Can anyone care to clarify for me one what's GW is trying to do with these files?
S
Spiritz
Forge Runner
#2
from what ive seen on my system an only thru regedit - gw sets its location and as far as i kno nothing else.Whats making me wonder is why gw on yours is trying to do a proxy server or even bypass a proxy server.
Only thing i can suggest is do a full malware/virus scan on your system incase there is something in there that shudnt be.If you have to uninstall gw then copy templates folder/screenshots and re-install.Also when you do a scan - use another av program as sometimes if a system is virused it can alter the current av and its often best to scan with 2 av programs incase of problems .Better to be safe than sorry.
Hells Fury
Hells Fury
Krytan Explorer
#3
Having 2 antivirus programs is not a good idea.
S
Spiritz
Forge Runner
#4
When some av fail at correct positives - isnt it always best to check with 2 ? you can easily uninstall one after thats why i suggested 2 - not meaning running 2 at exact same time.Years ago msn got hit by the chicken ( aka lol ) virus which was embedded in a picture of a chicken in a bikini - sadly this virus got pretty widespread thru msn messenger and mcaffee/norton actually failed to halt it or even detect it.
When im in doubt i`ll run 2 av`s to scan and even several malware/adware scanners as well
Elder III
Elder III
Furnace Stoker
#5
Run Malwarebytes and it's not a bad idea to check with a second AV program either - just don't use two all the time.

*personal note, would be to ditch comodo, 'cuz it's prone to such things and overall not very good, but that's only 50% personal preference and 50% fact, so it's up to you.
B
Baobao23
Ascalonian Squire
#6
Hi thanks for all the replies. I'm running malwarebytes as we speak. Unfortunately, I really can't ditch comodo since my OS is a Windows server 2008 R2 enterprise version (very few AVs work under this OS and Comodo is one of them).

What I really want to know is whether or not some people have experienced this using Comodo or with some other AV that lets you know if a program is trying to edit the registries.

I'll see if malwarebytes picks up anything. If it doesn't, maybe I'll try deleting the GW.exe and re-downloading it.
R
Riot Narita
Desert Nomad
#7
Quote:
Originally Posted by Hell Darkblight View Post
Having 2 antivirus programs is not a good idea.
Having two or more is a GOOD idea.

What's often bad, is having more than one doing real-time protection at the same time. In which case, use one for real-time protection, and the other(s) for on-demand scanning.
some-_1
some-_1
Lion's Arch Merchant
#8
Quote:
Originally Posted by Riot Narita View Post
Having two or more is a GOOD idea.

What's often bad, is having more than one doing real-time protection at the same time. In which case, use one for real-time protection, and the other(s) for on-demand scanning.
That's just kind of pointless, you don't need two anti-virus programs so why install them? there is no benefits which come from having two. You're not in any way getting "twice the protection", if anything they just slow down/clog up your PC effectively creating more problems than they would solve.

Back on topic: as Spirtz said, all guild wars does is makes a note of it's install path in the registry so it can find the gw.dat file.
B
Baobao23
Ascalonian Squire
#9
O.K. I've ran my comp with malwarebytes, adaware and comodo anti-virus. No malicious devices involved.

I've downloaded a new game client from guildwars.com and still got the same results. I guess Anet must have some reason for doing this..... still why mess around with the proxy's registry?

Anyone here tech savvy enough to explain this?