Norton Internet Security / Norton AntiVirus

[mcullet]

Hi,

I've used a popular screen capture utility called TNT (excellent for programmers).

Prior to all of the recent patches to NIS2008, the product behaved perfectly. Tonight it went belly up. I activate it by hot key comination - CTRL-Space and select the area of the screen I want to capture, click and save. However, when I pressed the hot key combination I was presented with a black screen that showed two "X" and "Y" lines plus a small 'x y' coordinate box on the top left corner. I could not exit (escape aborts the capture) and was forced to capture black images.

Originally I thought a recent update to my NVidia driver may have been the cause or perhaps SP3 (XP PRO) or a corruption in the registry.

NIS2008 identified the program as a problem and blocked it. I went into NIS security options and saw an entry in transaction protection. TNT was blocked because NIS decided the screen capture behaviour may have been a problem.

The solution is simple - unblock it and all is well again.

I noticed two other entries.

[edit: removed broken image link.]

Both ctfmon.exe and quicktime player were identified as key-loggers. Interesting result - have no clue if this is accurate or not so decided to leave things as they are until I hear otherwise.

I wonder if some of the quirky behaviour that others have reported with NIS2008 might be caused by this sort of thing.

The specific issue (TNT problem) is resolved but it would be helpful to know what others thought about NIS2008 actions for ctfmon and quicktime player. Both are safe as far as I'm aware ... still, who knows :)

Cheers,

Message Edited by Allen_K on 07-03-2008 08:49 AM

[johna]

Seems a bit strange, but NIS does have many conflict issues.

It was never meant to be this complicated :)

ps Norton 360 also identifies ctfmon.exe as a key logger.

Message Edited by johna on 07-03-2008 06:24 AM

[huwyngr Norton Fighter · Accepted solution]

AS Johna says, it sounds like a false key-logger detect. I've encountered it under different circumstances where Irfanview had its C for Capture intercepted.