"Suspicious behaviour" alerts

Hi, I just installed and ran the demo for a game called “Weird Worlds”, and immediately got a flurry of alerts from CPF about “suspicious behaviour”.

The demo application came from here:
http://www.shrapnelgames.com/digital_eel/Weird_worlds/6.htm

These are some of the alerts I have been receiving:

Date/Time :2006-10-25 14:06:40
Severity :High
Reporter :Application Behavior Analysis
Description: Suspicious Behaviour (svchost.exe)
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: UDP Out
Destination: 207.46.130.100:ntp(123)
Details: C:\WINDOWS\system32\RTLCPL.exe has tried to use C:\WINDOWS\system32\svchost.exe through OLE Automation, which can be used to hijack other applications.

Date/Time :2006-10-25 13:50:56
Severity :High
Reporter :Application Behavior Analysis
Description: Suspicious Behaviour (firefox.exe)
Application: C:\Program Files\Mozilla Firefox\firefox.exe
Parent: C:\WINDOWS\explorer.exe
Protocol: UDP Out
Destination: 192.168.1.1:dns(53)
Details: E:\weirdworlds_demo.exe has modified the the User interface of the Parent application C:\WINDOWS\explorer.exe by sending special Window messages…

Date/Time :2006-10-25 13:23:43
Severity :High
Reporter :Application Behavior Analysis
Description: Suspicious Behaviour (thunderbird.exe)
Application: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
Parent: C:\WINDOWS\explorer.exe
Protocol: UDP Out
Destination: 192.168.1.1:dns(53)
Details: E:\weirdworlds_demo.exe has modified the the User interface of the Parent application C:\WINDOWS\explorer.exe by sending special Window messages…

Can anyone tell me if this application is genuinely doing something suspicious, or is it perhaps innocuously using some Windows features that cause Comodo’s red flag to go up?

Thanks

G’day,

I’d contact Shrapnel Games about this. It may be a bug, it may be something else or it could be as you suggested “using some Windows features that cause Comodo’s red flag to go up?”.

Let us know what they say.

Ewen :slight_smile: