Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.
By default NIS blocks Windows File Sharing for security reasons. This a standart rule that exists in NIS firewall. That's why, when you try to connect to a computer from your local network or if someone from your network tries to connect to your PC, NIS will block this connection. When I need to exchange files on my local network, I disable this rule temporarily or turn off my firewall.
I only have my pc its at home so by my way of thinking i am the only one on the network?other than when i am connected to the net.this is the part i'm trying to comprehend i only have one pc a network is a group of computers say in a work situation or if i owned 2 and wanted to connect them via "a network" is this right .thats why i'm concerned is my pc trying to share my files with someone i dont know and is this possible.a background to this is this pc was given to me.it crashed once so took it to a shop i asked them to clear it,cost me a s...t load of money they had to replace the hard drive.next about a month sfter that it wouldnt turn off,screen blank but little blue light still on.took it to another shop as first place ripped me off blind(hence i'm a bit more cautious as i know bugger all about pcs etc)for half the price they upgraded my ram and actually cleared the machine which means to me they unloaded all the stuff and reloaded it back in so when it was returned i didnt recognise it the set up of windows etc not the actual machine.they installed the norton nis 2008 as well.so when i got it home this file sharing thing would pop up ocasionally then i hadnt noticed it until i upgraded the norton just the other day .hence the post what is it and is it normal.i am trying to learn what is comming and going out of my pc.i have only been on the pc for this year doing all this sort of stuff.i know this is long winded but it may benefit me by you guys/girls giving great tips and filling in the blanks in my knowledge(LOL which would look like a massive black hole)
thanks for any more help
mo wrote:I only have my pc its at home so by my way of thinking i am the only one on the network?other than when i am connected to the net.this is the part i'm trying to comprehend i only have one pc a network is a group of computers say in a work situation or if i owned 2 and wanted to connect them via "a network" is this right .
Well, It depends from what type of internet connection you are using. I've previously used VPN connection and I had always been able to find other computers on my ISP's network. I'm currently using PPPoE connection, which does not require TCP/IP protocol, but if I turn this protocol on, I can still find computer in so called "My Netowk Places", although I have one PC at home.
Your computer cannot share files by itself, unless you manually do this, so don't be concerned about your computer's security. You have a very good firewall installed (NIS) and it decides automatically what to allow and what to block. If you want to track your firewall's activities, run ccLgView.exe and you'll find interesting information there. The application should be located here: \Program Files\Common Files\Symantec Shared\ccLgView.exe
hi vejdin
sorry you lost me a bit in the tech talk.i connect via ethernet cable to a box supplied by my provider,sorry i dont have the correct terms LOL.at the moment norton is blocking ctfmon.exe and as i've read in another thread i think its linked to the sp3 update,another thing it picked up was something to do with the updater5 of adobe(sorry going off my memory)but when i downloaded the update of NIS 2008 i lost the details in the logs,only ctfmon came back and is now sitting in the blocked section of norton.thanks for your assurences of nortons capabilities,i do like norton for the fact i can look in the logs,although i cant understand most,and work out whats happening.and i dont know how to run cclgveiw.exe.thanks again for your time.
mo
Probably you have a DSL connection. ctfmon should be a legit microsoft process unless your protection software warns you about it :) For more information about this process take a look at: Frequently asked questions about Ctfmon.exe
About ccLgView: in most cases the program should be located in "C:\Program Files\Common Files\Symantec Shared" folder.
Hi vejdin
i find in my transaction protection c:\windows\system32\ctfmon.exe behavior keylogger,last blocked today 9/1/08.Which i assume when i logged into norton community.i dont find it in the quarintine section?is that normal?
thanks mo
do you think this is a false positive?
Ok first let us know what type of box or boxes that your computer is using to connect to the internet. Is it a modem (cable, DSL, telephone, etc.) or is it a router (meaning does it have connections for more than one computer). Go ahead and give the name of the box, that will certainly help. If it is a router then your computer assumes it is on a network. Also another thought is that the repair shop probably had their internet hooked up through a network. Hence Windows is still thinking that there is a network out there. Is this computer a laptop and/or does it have wireless access? These might be triggering your messages.
Second, on your latest post you gave some more information about one of your messages. You named ctfmon.exe and behavior of a keylogger. By definition a keylogger simply records your keystrokes. This is both good and bad. On the bad side hackers and others try to place bad keylogger software onto your computer in order to grab and record your every keystroke, your log in id and passwords, bank account information, credit card numbers, etc. However some legitimate programs watch and monitor your keystrokes in order to provide better service or perform a set task to help you. Some of these programs may be part of the software for what is right in front of you. Your keyboard. If your keyboard has special buttons that make life a little easier for you, then it must watch and monitor these buttons. I have two computers and two different keyboards and Norton flags the processes that monitor the special keys. Even with Norton auto blocking, the software notices the key press and performs the task, so I let Norton keep doing its thing. Now I googled ctfmon.exe and found out it is part of Microsoft's "Office XP Alternative User Input features". So I would assume that you have this on your computer and it is ok.
Ok last of all ( and I'm NOT being rude here), please slow down when you are posting a message. This is not a time sensitive chat. We have all day. Take your time writing your posts. Remember what our english teachers tried to teach us about writing. Please use full sentences and punctuation when possible. It is somewhat of a problem trying to read run on sentences. Now if english is not a native language then let people know up front and I apologize for my statements. There is also a spelling checker button available to check your spelling. ( I try to remember to use it myself, sense I cannot spell worth two cents. Theirs is pretty good.) Also please give as much detail as possible on errors, messages, programs and others stuff. These are just some hints to getting a more positive feedback. Thanks for letting me ramble on and on.
Hi tigerandrew
no offense taken punctuation is not a strong point, but I will try to remember to use the spell check.It is a DSL,and yes when the repair shop fixed the laptop there were two different gateways(hope that's the right terminology)in the Norton log.It does have a wireless connection but I disabled that as I have read people can "borrow "your internet usage.
Thanks for giving me better insight on what ctfmon is.I recently turned off the internet/turned it back on and the file sharing "blocked " came up again so what you have said looks like it is the solution to the queston.I appreciate your advice on posting it is to easy in this day and age to be lazy with writing and just use txt and not care about the way a post looks or sounds.
cheers mo
Hello again mo!
Could you open Windows Task Manager (use Ctrl+Alt+Del) and see how many instances of ctfmon.exe process are running ? I also have this process loaded and the program is located in C:\Windows\System32\ctfmon.exe. I have currently NIS 2009 installed and It does not detect ctfmon as a threat. You can also check this file's properties, it should look like this:
hi Vejdin
looked in the task manager there is only one ctfmon its using 3620kb,and the other is as your picture shows it to be.so i take it all is normal?
thanks mo
Everything seems to be fine, memory usage is normal and the file is a legit Microsoft file. From what I understand, this is a Microsoft Office file.
A big thank you to you both Vejdin and Tiger Andrew
Thanks for walking me thru this aspect of Norton NIS 2008 by understanding what it is actually doing when it blocks a program and that there are legit answers not only virus answers to PC behavior.However now I am paranoid of people watching my spelling and punctuation.!LOL
cheers mo
MO, I read your posts and can certainly understand your worry. I too am not as savvy about all this and tend to get crazy when I see things I don't know. One thought would be to not look at the logs as they can be very confusing (I'm told this by friends and family who are paid techs). Also, be wary of what you find when you google things. there are some sites that will say everything is a possible virus just to get you worried enough to buy thier product.
That is why I like this site, they are clear and honest.
NY1986
Yes my friends and family say the same thing even the guy at nortons support chat line.Dont look in the log as you wont understand it.The way I look at it as a new PC user you have to understand what you're doing otherwise you will go around ignorant of PC's the net ,security and the whole **bleep** thing.So hence I'm here at nortons forum trying to learn the ropes thru others help and patience.I know this is not a chat site but thought I would express my opinion and maybe Norton would look at putting in a forum for people like us so we don't overrun this forum with questons that are not really related to problems that are associated with nortons products.I do use the help section that comes installed with NIS 2008 but I find it can not directly answer the questons that I need answered.
Thanks Mo
ps yes i'm learning that about google,and compared to other sites this is a good one.
Hey I didn't swear,I thought I used a socially acceptable word,any way great use of the bleep although it puts a more strong a tone than even I intended.
cheers MO