GW.exe modifying some registries recently?

Baobao23

Ascalonian Squire

Join Date: Nov 2008

Hi, just got a view defense+ alerts from comodo with GW recently:

http://img228.imageshack.us/f/64823524.png/

Don't mind the first row, it's another program. I allowed the second row because I thought it was just related to the recent update, but I'm still puzzled at the other change in registry settings (that's why I denied the others). Can anyone care to clarify for me one what's GW is trying to do with these files?

Spiritz

Forge Runner

Join Date: Apr 2007

DMFC

from what ive seen on my system an only thru regedit - gw sets its location and as far as i kno nothing else.Whats making me wonder is why gw on yours is trying to do a proxy server or even bypass a proxy server.
Only thing i can suggest is do a full malware/virus scan on your system incase there is something in there that shudnt be.If you have to uninstall gw then copy templates folder/screenshots and re-install.Also when you do a scan - use another av program as sometimes if a system is virused it can alter the current av and its often best to scan with 2 av programs incase of problems .Better to be safe than sorry.

Hells Fury

Hells Fury

Krytan Explorer

Join Date: Aug 2009

W/D

Having 2 antivirus programs is not a good idea.

Spiritz

Forge Runner

Join Date: Apr 2007

DMFC

When some av fail at correct positives - isnt it always best to check with 2 ? you can easily uninstall one after thats why i suggested 2 - not meaning running 2 at exact same time.Years ago msn got hit by the chicken ( aka lol ) virus which was embedded in a picture of a chicken in a bikini - sadly this virus got pretty widespread thru msn messenger and mcaffee/norton actually failed to halt it or even detect it.
When im in doubt i`ll run 2 av`s to scan and even several malware/adware scanners as well

Elder III

Elder III

Furnace Stoker

Join Date: Jan 2007

Ohio

I Will Never Join Your Guild (NTY)

R/

Run Malwarebytes and it's not a bad idea to check with a second AV program either - just don't use two all the time.

*personal note, would be to ditch comodo, 'cuz it's prone to such things and overall not very good, but that's only 50% personal preference and 50% fact, so it's up to you.

Baobao23

Ascalonian Squire

Join Date: Nov 2008

Hi thanks for all the replies. I'm running malwarebytes as we speak. Unfortunately, I really can't ditch comodo since my OS is a Windows server 2008 R2 enterprise version (very few AVs work under this OS and Comodo is one of them).

What I really want to know is whether or not some people have experienced this using Comodo or with some other AV that lets you know if a program is trying to edit the registries.

I'll see if malwarebytes picks up anything. If it doesn't, maybe I'll try deleting the GW.exe and re-downloading it.

Riot Narita

Desert Nomad

Join Date: Apr 2007

Quote:
Originally Posted by Hell Darkblight View Post
Having 2 antivirus programs is not a good idea.
Having two or more is a GOOD idea.

What's often bad, is having more than one doing real-time protection at the same time. In which case, use one for real-time protection, and the other(s) for on-demand scanning.

some-_1

some-_1

Lion's Arch Merchant

Join Date: Jan 2008

Reading, England

Zaishen Masters [ZM]

R/

Quote:
Originally Posted by Riot Narita View Post
Having two or more is a GOOD idea.

What's often bad, is having more than one doing real-time protection at the same time. In which case, use one for real-time protection, and the other(s) for on-demand scanning.
That's just kind of pointless, you don't need two anti-virus programs so why install them? there is no benefits which come from having two. You're not in any way getting "twice the protection", if anything they just slow down/clog up your PC effectively creating more problems than they would solve.

Back on topic: as Spirtz said, all guild wars does is makes a note of it's install path in the registry so it can find the gw.dat file.

Baobao23

Ascalonian Squire

Join Date: Nov 2008

O.K. I've ran my comp with malwarebytes, adaware and comodo anti-virus. No malicious devices involved.

I've downloaded a new game client from guildwars.com and still got the same results. I guess Anet must have some reason for doing this..... still why mess around with the proxy's registry?

Anyone here tech savvy enough to explain this?