Could it be detecting warden?
So that was my problem. When WOW was closed, it detected nothing. When running RKK detected the files the other person mentioned. My problem.... When I load wow it instantly hijacks my resources now (100% disk - Task Manager). WHY ME? Though, I do not know if this is related to something else as it happens when I am not playing. However, the launcher is up 7/24/365 mostly.
Warden is very invasive and does a lot of stuff. There is no way it is not spy/malware. However we all knowingly and openly sign our lives away (if ya read the fine print)
https://www.schneier.com/blog/archives/2005/10/blizzard_entert.html <---- good old article.
I wonder how the Warden has evolved? In their anti-cheat agreement which was updated not too terribly long ago, not too much before I started having endless problems. WOW openly says they will make your computer their zombie. To play that is the price you pay. I just confirmed the problem only exists when the game is running. Warden is a threat, tits if RKKrew flags it. (Tits as in "good", just clarifying - keeping it PG-13). It is one of those potentially necessary threats. Like keeping a gun when you are really drunk.
In process
•Signature checks
•Game specific checks
•Hook detection
•Pointer chain
checks
•Call stacks periodic checks
•Debug related
detections
•Out of process
•Signature based detection
•Pattern searching in all processes address space
•Scanning for game process handles
•Scanning files for signatures (offline)
•Send suspected programs to server for analysis
•Check DNS history for cheat update servers