Mini Spy

Loading...
 
  1. Warning Welcome to MalwareTips.com, a free community where people like yourself come together to discuss and learn about PC security and computers.
    As a guest, you can browse and view the various discussions in the forums, but you can not create new threads or reply to an existing one unless you are a registered member. By joining our free community you will have access to post threads, start private conversations with other members, respond to polls, upload content and access many other special features.
    Registration is fast, simple and absolutely free, so please join us today!
  2. Emsisoft  Mobile Security GiveawayEXCLUSIVE MalwareTips.com: Emsisoft Mobile Security Giveaway

    Get a free license key for Emsisoft Mobile Security to protect your Android smartphone. We are giving away Emsisoft Mobile Security license keys for our awesome members!

    Get an Emsisoft Mobile Security license key!

  3. Zemana AntiLogger Unlimited GiveawayEXCLUSIVE: Zemana AntiLogger Giveaway

    Get a free license key for Zemana AntiLogger. We are giving away 300 Zemana AntiLogger license keys for our awesome members!

    Get a Zemana AntiLogger license key!

  4.  NoVirusThanks EXE GiveawayEXCLUSIVE MalwareTips.com : NoVirusThanks EXE Radar Pro Giveaway

    Get a free license key for NoVirusThanks EXE Radar Pro. We are giving away NoVirusThanks EXE Radar Pro license keys for our awesome members!

    Get a NoVirusThanks EXE Radar Pro license key!

  5. ZoneAlarm 2015 Extreme Security GiveawayEXCLUSIVE MalwareTips.com:ZoneAlarm 2015 Extreme Security Giveaway

    Get a free license key for ZoneAlarm 2015 Extreme Security. We are giving away ZoneAlarm 2015 Extreme Security license keys for our awesome members!

    Get a ZoneAlarm 2015 Extreme Security license key!

  6. Windows XP End Of Support

    After 12 years, support for Windows XP has ended on April 8, 2014. There will be no more security updates or technical support for the Windows XP operating system. Without critical Windows XP security updates, your PC may become vulnerable to harmful viruses, spyware, and other malicious software which can steal or damage your business data and information. Many software vendors will no longer support their products running on Windows XP as they are unable to receive Windows XP updates. Most PC hardware manufacturers will stop supporting Windows XP on existing and new hardware.

  7. Tip of the Day Always keep an eye on what you click and download, including music, movies, files, browser plug-ins or add-ons
    Be wary of pop-up windows that ask you to download software or that offer to fix your computer. Often these pop-ups will claim that your computer has been infected and that their download can fix it – don’t believe them. Close the window and make sure you don’t click inside the pop-up window. Do not open files of unknown types, or if you see unfamiliar browser prompts or warnings asking you to open a file. Sometimes malware may prevent you from leaving a page if you land on it, for example by repeatedly opening a download prompt. If this happens, use your computer’s task manager or activity monitor to close your browser.

nProtect (gameguard) and Comodo D+

Discussion in 'Comodo' started by Plexx, Nov 24, 2011.

  1. Plexx

    Plexx Guest

    That's the constant problem I have with nProtect (gameguard). Any users know how to fix this? I have manually configured the gameguard and gamemon rules.
  2. Jack

    Jack Administrator Staff Member

    Joined:
    Jan 24, 2011
    Messages:
    6,750
    Likes Received:
    615
    Trophy Points:
    323
    I have splited this post so that you'll receive some proper help.
    Can you explain what's the problem with nProtect (gameguard) and Comodo?
  3. Plexx

    Plexx Guest

    Heya Jack,

    Thanks for splitting the post. Well this is how it goes:
    I launch the game and gameguard loads up (file is in trusted files in D+) but I keep getting intrusions shown on the log and sometimes the pop ups appear despite having the rules created (I saw on Comodo Forums how to add to allow memory access etc). Sometimes when all pop ups appear, the game cant be launched and I have to restart the Game.

    Happened to Asda 2 as well as Scarlet Legacy.

    Also, each time I have to allow the pop ups, CIS says I haven't perform a full scan (despite me having it the default settings including schedule scans).

    Hope this helps.
  4. iPanik

    iPanik Administrator

    Joined:
    Feb 28, 2011
    Messages:
    504
    Likes Received:
    1
    Trophy Points:
    60
    This is an older issue. The issue is that GameGuard is behaving much like a rootkit. It goes through the system looking for kernel hooks, and when it finds Comodos hooks it tries to remove them, and comodo isn't going to let that happen. The only fix is to disable comodo.

    However i am certain this has been fixed a few years ago. What version of gameguard are you running?
  5. Plexx

    Plexx Guest

    iPanik, how could I find out the version of Gameguard? I know each game has a different version since some download 10 files, some 15 etc.

    I'm looking at the folder where gameguard is and I can't find it.

    Edit: I wanted to attached a screenshot of the files on Gameguard folder for Asda 2 and opened the ver file with notepad but I don't have the option. Not sure if it is because it is disabled on this sub forum.

    Hope this helps.

    [​IMG]
  6. jamescv7

    jamescv7 Active Member

    Joined:
    Mar 15, 2011
    Messages:
    6,130
    Likes Received:
    6
    Trophy Points:
    137
    I remember before when I'm playing an online game with Gameguard patching it goes through weird thing when Comodo D+ installed before and sometimes cannot execute the game properly.

    That's the case when I used older version of Comodo before.
  7. iPanik

    iPanik Administrator

    Joined:
    Feb 28, 2011
    Messages:
    504
    Likes Received:
    1
    Trophy Points:
    60
    oh sorry, i was looking at the wrong game. GameGuard updates with the game, it cannot be done manually, sorry.

    But the issue is still the same. The only workaround i have found is to disable comodo. I had the same problem when Aion was in beta, i had to disabled Comodos protection when i wanted to play.
  8. Plexx

    Plexx Guest

    Would disabling D+ to launch game and then enable while Game is running be a work around or fully disable D+?


    Edit: Just tested and disabled D+, Launched game and once in game, enabled D+ and no problems nor disconnections.

    Thanks so far for the help!
  9. Valentin N

    Valentin N Regular Member

    Joined:
    Feb 25, 2011
    Messages:
    1,262
    Likes Received:
    0
    Trophy Points:
    80
    one way is to grant gameguard access memory (nothing I recommend but it's up to you) or you exclude CIS in gameguard. I would also add it in CAV exclusion as well as in d+ exclusion (d+ settings --> execution settings --> exlusions)

    Will this help?
  10. Plexx

    Plexx Guest

    I have manually granted GG access to memory to CIS but still doesn't resolve the issue. It was like this on the previous CIS version as well.

    GG is added to the exclusions as well.

    Perhaps I should report this to Comodo?
  11. Valentin N

    Valentin N Regular Member

    Joined:
    Feb 25, 2011
    Messages:
    1,262
    Likes Received:
    0
    Trophy Points:
    80
    you could.

    May I look at your config for a sec through teamviewer?
  12. Plexx

    Plexx Guest

    I am via TeamViewer helping a friend with her graphics issue (posted a thread already).

    Give me about an hour or so.

    I had a quick look at the custom policy and it seems I forgot to add gamemon.des to CIS...

    I need to go back to Comodo Forums and search for that guide I saw and used before.

    Will keep you posted
  13. iPanik

    iPanik Administrator

    Joined:
    Feb 28, 2011
    Messages:
    504
    Likes Received:
    1
    Trophy Points:
    60
    I don't think Comodo will do anything about it. (haven't yet)
    GameGuard is trying to unhook Comodo from the kernel, i doubt that Comodo will ever allow any third party to do that.
  14. Plexx

    Plexx Guest

    Unhook comodo? Could you explain briefly the hook/unhook?
  15. iPanik

    iPanik Administrator

    Joined:
    Feb 28, 2011
    Messages:
    504
    Likes Received:
    1
    Trophy Points:
    60
    When Defense+ listens for certain events on the system it places a so called "hook" in the kernel. A hook is a piece of code that intercepts code to and from the kernel. Rootkits and keyloggers operate this way, a rootkit intercepts traffic going to or from the kernel and modifies it to fit it's needs. Lets say you have a keylogger on your computer. Normally when you press a key on your keyboard the data passes through the kernel to the application (ex. your browser). But if you have a keylogger, the keylogger intercepts the data before it reaches the application. So the data passes through the kernel to the keylogger and then to the application.

    HIPS products rely heavily on these hooks, so when GameGuard tries to remove these hooks, it's basically incapacitating Defense+.

    Hope that made sense :D

    You can read more about hooks on wikipedia: http://en.wikipedia.org/wiki/Hooking
  16. Plexx

    Plexx Guest

    Well I just learned something new iPanik. Thanks for explaining. I think I understood now.

    I checked COMODO forums and through this link, I did what Ronny said and just launched the game to test. Although it still shows on logs the intrusions, no pop ups appear and games launches fine. Tried it 3 times.

    Guess that's my issue resolved!

    Thanks a lot guys!
  17. iPanik

    iPanik Administrator

    Joined:
    Feb 28, 2011
    Messages:
    504
    Likes Received:
    1
    Trophy Points:
    60
    Happy to help :D

    Remember, the logs can get quite big this way so it might be a good idea to delete them once in a while.
  18. Valentin N

    Valentin N Regular Member

    Joined:
    Feb 25, 2011
    Messages:
    1,262
    Likes Received:
    0
    Trophy Points:
    80
    Glad it solved. I have played Rapplez and I never had any problem. I added it in CAV exclusion and d+ exclusion and that was it

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads: nProtect (gameguard)
Forum Title Date
News Archive 80% of smartphones still unprotected from malware Oct 15, 2013
All Security Products nProtect Anti-Virus/Spyware 3.0 Sep 23, 2012
All Security Products nProtect MBR Guard Dec 23, 2011

MalwareTips.com is an independent website.All trademarks mentioned on this page are the property of their respective owners.