CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Have I got a security problem?

 
Post new topic   Reply to topic       All -> FavForums -> Symantec [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
EricG

Sergeant
Sergeant
Premium Member

Joined: Aug 15, 2004
Posts: 103

Premium

PostPosted: Sat Aug 30, 2008 1:54 pm    Post subject: Have I got a security problem?
Reply with quote

Hi

I noticed the other day that I have three entries in my Norton Internet Security 2008>Internet Options>Transaction Protection:General Settings that refer to keylogging.

I have run a full system scan, also SDpyBot S&D Version 1.6 and AdAware 2008 (all with latest definitions etc) and they found nothing. I have also run the TrendMicro Housecall Online Scan and it found one low risk tracking cookie that I deleted.

The Help file of my NIS2008 does not explain the purpose or significance of these entires.

Can anyone explain what these entries mean (screenshot attached) and whether I have a problem.

http://i.pbase.com/g3/99/140399/2/102380559.dnkcJrq4.jpg


_________________
EricG

Windows XP (Home) SP2
IE7
NIS 2008
Back to top
View users profile Send private message
Cudni

Special Response Team


Joined: Dec 10, 2002
Posts: 3718
Location: Et In Arcadia ego
MIRT MVP SRT

PostPosted: Sat Aug 30, 2008 2:27 pm    Post subject:
Reply with quote

access denied when tried to view image on the link

Cudni


_________________
Hecho en Mexico
Back to top
View users profile Send private message Visit posters website
EricG

Sergeant
Sergeant
Premium Member

Joined: Aug 15, 2004
Posts: 103

Premium

PostPosted: Sun Aug 31, 2008 8:24 am    Post subject:
Reply with quote

Hi

Try this link and click on image thumbnail

http://www.pbase.com/ericg/inbox

or this

http://www.pbase.com/ericg/image/102380559


_________________
EricG

Windows XP (Home) SP2
IE7
NIS 2008
Back to top
View users profile Send private message
Cudni

Special Response Team


Joined: Dec 10, 2002
Posts: 3718
Location: Et In Arcadia ego
MIRT MVP SRT

PostPosted: Sun Aug 31, 2008 9:19 am    Post subject:
Reply with quote

That worked. Ok, none of the progs listed need be blocked as they are all bona fide ones. There is no security risk. They have been flagged because Norton interprets incorrectly some of their actions as nefarious
if you want to reassure yourself then submit them for testing
http://virusscan.jotti.org/
you can of course submit them to Norton too

Cudni


_________________
Hecho en Mexico
Back to top
View users profile Send private message Visit posters website
EricG

Sergeant
Sergeant
Premium Member

Joined: Aug 15, 2004
Posts: 103

Premium

PostPosted: Sun Aug 31, 2008 9:38 am    Post subject:
Reply with quote

Hi

Thanks for the advice.

I did approach Norton regarding these entries and got no satisfaction - they wanted to remotely control my PC and deal with the "virus" at a cost of $69.95.

Naturally I declined their "Offer" but felt they were not being very helpful in explaining the purpose of this part of NIS2008 and how, if it is possible, to configure it. There doesn't seem to be any way of doing this other than "allowing" the programmes to run unhindered.

I know ctfmon.exe is to do with Microsoft Languages and relates to my Works package. Quichtime is a programme I have always used and need to view some DVD type tutorials I have and the itype.exe is the MS software for my keyboard. I have only ever updated these programmes from the official sites so I am happy there is not problem with these items.

Now I know these entries are there I can keep an eye on them.


_________________
EricG

Windows XP (Home) SP2
IE7
NIS 2008
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Symantec All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer