Sorry for lack of response, the site decided my username/password weren't correct and I was locked out. Didn't have free cycles to get back to this until tonight....
OK, sorry, I did forget some key details. <blush>
My system is WinXP SP3
My Firewall is ZomeAlarm Pro v9.1.008 (yes - it's older; there are no updates I require)
I have only ever downloaded AnyDVD/CloneDVD from the SlySoft site from the day I purchased them. The only time I download is when I get an email telling me there's a new version - and the link it that email is directly to the SlySoft D/L page. In short - this system has NEVER had a cracked version of the software installed as a RapidShare download would seem to suggest..
Not sure what else I can provide. I suppose I could uninstall the current version and re-install an older version to "see what happens", but not sure what that is going to prove.... I can record it with Camtasia if you want to see a video of me clicking "deny" for 3 minutes.
The workings of this firewall are not complex - when a "newly launched" process attempts to interact with another running process or monitor my keystrokes, etc the firewall alerts me and asks my approval. As I said - I have to deny 46 requests for AnyDVD to get at 46 running processes - and I've never seen an update do that before now.... Previously the installer gives a single warning that a process is being opened, and that's it.
The laptop is a major work tool - it does not see change often so I logically assumed this is wholly something inside the AnyDVD update. But I'm certainly open to suggestion if there's something I can test. Just ask!