Killing Gameguard

[Dhostar]

For anyone that is interested in getting rid of gameguard (which I HIGHLY suggest you do as its a rookit) Here are the known file locations for XP:


TIP: DO NOT DO until the patch that unlocks GG from Aion is released.

Remove the entries below after deleting the GameGuard folder in your aion install directory.

Windows XP:
%SYSTEM%\npptNT2.sys
%SYSTEM%\nppt9x.vxd

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\npggsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\npggsvc\Security]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\npggsvc\Enum]
[HKEY_CURRENT_USER\Software\INCAInternet\nProtectGa meGuard]
[HKEY_CURRENT_USER\Software\INCAInternet\nProtectGa meGuard\GameGuard]
[HKEY_CURRENT_USER\Software\INCAInternet\nProtectGa meGuard\GameGuardError]
[HKEY_CURRENT_USER\Software\INCAInternet\nProtectGa meGuard\GameMon]
[HKEY_CURRENT_USER\Software\INCAInternet\nProtectGa meGuard\Update]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_NPGGSVC]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_NPGGSVC\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\n pggsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\n pggsvc\Security]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\n pggsvc\Enum]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\ LEGACY_NPGGSVC]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\ LEGACY_NPGGSVC\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\n pggsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\n pggsvc\Security]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_NPGGSVC]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_NPGGSVC\0000]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\npggsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\npggsvc\Security]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\npggsvc\Enum]
[HKEY_USERS\.DEFAULT\Software\INCAInternet]
[HKEY_USERS\.DEFAULT\Software\INCAInternet\nProtect GameGuard]
[HKEY_USERS\.DEFAULT\Software\INCAInternet\nProtect GameGuard\GameGuardError]
[HKEY_USERS\S-1-5-18\Software\INCAInternet]
[HKEY_USERS\S-1-5-18\Software\INCAInternet\nProtectGameGuard]
[HKEY_USERS\S-1-5-18\Software\INCAInternet\nProtectGameGuard\GameGua rdError]
[HKEY_USERS\S-1-5-21-1085031214-790525478-839522115-500\Software\INCAInternet]
[HKEY_USERS\S-1-5-21-1085031214-790525478-839522115-500\Software\INCAInternet\nProtectGameGuard]
[HKEY_USERS\S-1-5-21-1085031214-790525478-839522115-500\Software\INCAInternet\nProtectGameGuard\GameGu ard]
[HKEY_USERS\S-1-5-21-1085031214-790525478-839522115-500\Software\INCAInternet\nProtectGameGuard\GameGu ardError]
[HKEY_USERS\S-1-5-21-1085031214-790525478-839522115-500\Software\INCAInternet\nProtectGameGuard\GameMo n]
[HKEY_USERS\S-1-5-21-1085031214-790525478-839522115-500\Software\INCAInternet\nProtectGameGuard\Update]

[Shelbon22]

Does game guard actually act as a rootkit? I make part of my living by removing those...how embarrasing

[Dhostar]

Does game guard actually act as a rootkit? I make part of my living by removing those...how embarrasing

Yes, infact up until recently most spyware or AV related scans would detect and try to remove gameguard, at the same time gameguard tries to crash the AV clients as it thinks they are hacking it.

Nightmare right?

So basically speaking, GameGuard is Spyware.

It's kinda like way back when the british had huge problems with Pirates, to deal with them they commisioned "Privateers" (Which were pirates paid by the government) to eliminate the Pirates.

GameGuard will link into anything and everything not run in a 64 bit process. Even MSpaint. (because everyone knows MS paint is like, the biggest hacking program out there)

[Shelbon22]

Wow well I know what I'm doing as soon as I get home from work...lol thx for the info that's very usefull to know

[Ryogen]

Yup, it is a rootkit in a way. I don't plan on removing mines yet though...if I ever do remove it.

[Dhostar]

Yup, it is a rootkit in a way. I don't plan on removing mines yet though...if I ever do remove it.

I actually recommend it, when they do release the new version of it, it may cause conflicts to have the old version installed.

[Ryogen]

You do have a point. I might do it.

[Masterknight]

well i dunno how haha i mean i found the gameguard folder but as far as anything else dunno. course im runin vista.

[Eien]

Yeah, I'm running Vista ultimate 64 until my free copy of Win7 comes in.. its buggy enough already without GG but I have no idea how to remove it from Vista (only been tinkering with vista OS for a few weeks) I miss XP.

[Frot]

Thank you for this post. Also do you know of any repairs that might need to be done for what GG might have removed/modified? I don't know for certain if anything further needs to be done however in general, cutting out the tumor doesn't always cure the disease.