I have discovered a very serious problem and a possible security breach. I reported it through chat and the support person actually told me to add it to the Whitelist. That was laughable.
Most of us developers use TortoiseSVN to access source files on off-site servers.
Imagine my horrified expression when - after much testing - I found out that not only was TortoiseSVN capable of terminating the NIS2012 service, but it can actually shut down the entire program completely. Yes. Completely.
The Norton support guy who I painstakingly explained this to in online chat, including debug logs, apparently just shrugged it off as yet another incompatible program that should be uninstalled and reported to the White list group.
Basically, if TortoiseSVN is installed, after you use it, it will terminate the NIS service - including the desktop gadget and taskbar applet. Once this happens, you can download any sort of program and they will no longer be checked. In fact, for all intent and purposes - though I didn't go deep into it - your machine is left vulnerable since, well, the NIS service is terminated.
Uninstalling TSVN, resolves this issue. But that's like saying you shouldn't use a program if you are running NIS2012.
The funny thing is that Kaspersky 2012 had a similar problem with TSVN and they apparently fixed it.
Hopefully someone in the Norton support group will see this report and escalate it appropriately. The machine is running Windows 7 64-Bit with the latest TortoiseSVN 64-Bit version.
Log Name: Application
Source: Application Error
Date: 8/22/2012 4:31:09 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer:
Description:
Faulting application name: ccSvcHst.exe, version: 11.2.3.6, time stamp: 0x4fdbcf1d
Faulting module name: TortoiseSVN32.dll_unloaded, version: 0.0.0.0, time stamp: 0x502a8237
Exception code: 0xc0000005
Fault offset: 0x61009a40
Faulting process id: 0x41c
Faulting application start time: 0x01cd80a3f479dcae
Faulting application path: C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe
Faulting module path: TortoiseSVN32.dll
Report Id: 4de66656-ec98-11e1-81d8-f46d04af733e
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-08-22T20:31:09.000000000Z" />
<EventRecordID>226564</EventRecordID>
<Channel>Application</Channel>
<Computer>SERVER1</Computer>
<Security />
</System>
<EventData>
<Data>ccSvcHst.exe</Data>
<Data>11.2.3.6</Data>
<Data>4fdbcf1d</Data>
<Data>TortoiseSVN32.dll_unloaded</Data>
<Data>0.0.0.0</Data>
<Data>502a8237</Data>
<Data>c0000005</Data>
<Data>61009a40</Data>
<Data>41c</Data>
<Data>01cd80a3f479dcae</Data>
<Data>C:\Program Files (x86)\Norton Internet Security\Engine\19.8.0.14\ccSvcHst.exe</Data>
<Data>TortoiseSVN32.dll</Data>
<Data>4de66656-ec98-11e1-81d8-f46d04af733e</Data>
</EventData>
</Event>
====
Log Name: Application
Source: Windows Error Reporting
Date: 8/22/2012 4:37:29 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer:
Description:
Fault bucket , type 0
Event Name: BEX
Response: Not available
Cab Id: 0
Problem signature:
P1: ccSvcHst.exe
P2: 11.2.3.6
P3: 4fdbcf1d
P4: TortoiseSVN32.dll_unloaded
P5: 0.0.0.0
P6: 502a8237
P7: 61009a40
P8: c0000005
P9: 00000008
P10:
Attached files:
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ccSvcHst.exe_25de3d12da296f72be38559742dbcf30ba4fbb_0a508ae1
Analysis symbol:
Rechecking for solution: 0
Report Id: 30615a2f-ec99-11e1-81d8-f46d04af733e
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-08-22T20:37:29.000000000Z" />
<EventRecordID>226571</EventRecordID>
<Channel>Application</Channel>
<Computer></Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0</Data>
<Data>BEX</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>ccSvcHst.exe</Data>
<Data>11.2.3.6</Data>
<Data>4fdbcf1d</Data>
<Data>TortoiseSVN32.dll_unloaded</Data>
<Data>0.0.0.0</Data>
<Data>502a8237</Data>
<Data>61009a40</Data>
<Data>c0000005</Data>
<Data>00000008</Data>
<Data>
</Data>
<Data>
</Data>
<Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_ccSvcHst.exe_25de3d12da296f72be38559742dbcf30ba4fbb_0a508ae1</Data>
<Data>
</Data>
<Data>0</Data>
<Data>30615a2f-ec99-11e1-81d8-f46d04af733e</Data>
<Data>0</Data>
</EventData>
</Event>