Re: WinXP sp 3 contains keylogger?

NIS is NOT reliable. It's difficult to believe anything it reports.
IF ctfmon.exe was infected prior to the application of SP3, then NIS *should have been reporting* it as infected then.

Since this issue occurred after applying SP3, then I'd be willing to bet my house that it's a False Positive.

Frequently asked questions about Ctfmon.exe
http://support.microsoft.com/kb/282599

Was NIS actively monitoring the system during the download and installation of SP3 ?
Have you checked Symantec's site to see if this has been reported to them ?


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============


Edna Boxe wrote:

Since I've downloaded sp 3 Norton Internet Security says that c:\\windows\system32\ctfmon.exe has a keylogger, is this a false positive? If I remove sp 3 the keylogger also goes so I know it's nothing else.

Edna.


.

Relevant Pages